CWE-119
14,518 CVEs • Abstraction: Class • Likelihood of Exploit: High
Improper Restriction of Operations within the Bounds of a Memory Buffer
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.
CVEs (14,518)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Litespeedtech 1Openlitespeed Nov 21, 2024 Dec 3, 2018 N/A· v4 6.7 MEDIUM· v3 4.6 MEDIUM· v2 The server in LiteSpeed OpenLiteSpeed before 1.5.0 RC6 allows local users to cause a denial of service (buffer overflow) or possibly have unspecified other impact by creating a symlink through which the openlitespeed pro...Show more |
An exploitable remote code execution vulnerability exists in the HTTP header-parsing function of the TP-Link TL-R600VPN HTTP Server. A specially crafted HTTP request can cause a buffer overflow, resulting in remote code...Show more |
VT-Designer Version 2.1.7.31 is vulnerable by the program reading the contents of a file (which is already in memory) into another heap-based buffer, which may cause the program to crash or allow remote code execution. |
Buffer Overflow vulnerability in QTS 4.3.5 build 20181013, QTS 4.3.4 build 20181008, QTS 4.3.3 build 20180829, QTS 4.2.6 build 20180829 and earlier versions could have unspecified impact on the NAS. |
1Qualcomm 30Mdm9206 Firmware Mdm9607 FirmwareMdm9650 Firmware+27 moreJun 17, 2026 Nov 28, 2018 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 Possible buffer overflow in DRM Trusted application due to lack of check function return values in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU,...Show more |
1Qualcomm 14Msm8996au Firmware Sd 425 FirmwareSd 430 Firmware+11 moreJun 17, 2026 Nov 28, 2018 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 Possible buffer overflow in OEM crypto function due to improper input validation in Snapdragon Automobile, Snapdragon Mobile in versions MSM8996AU, SD 425, SD 430, SD 450, SD 625, SD 820, SD 820A, SD 835, SD 845, SD 850,...Show more |
1Qualcomm 9Msm8996au Firmware Sd 450 FirmwareSd 625 Firmware+6 moreJun 17, 2026 Nov 28, 2018 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 Potential buffer overflow in Video due to lack of input validation in input and output values in Snapdragon Automobile, Snapdragon Mobile in MSM8996AU, SD 450, SD 625, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660 |
1Qualcomm 16Mdm9206 Firmware Mdm9607 FirmwareMdm9640 Firmware+13 moreJun 17, 2026 Nov 28, 2018 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 In the device programmer target-side code for firehose, a string may not be properly NULL terminated can lead to a incorrect buffer size in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206...Show more |
1Qualcomm 3Sd 835 Firmware Sda660 FirmwareSdx24 FirmwareJun 17, 2026 Nov 28, 2018 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 While loading a service image, an untrusted pointer dereference can occur in Snapdragon Mobile in versions SD 835, SDA660, SDX24. |
1Qualcomm 19Mdm9206 Firmware Mdm9607 FirmwareMdm9650 Firmware+16 moreNov 21, 2024 Nov 28, 2018 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 Possible buffer overflow in Ontario fingerprint code due to lack of input validation for the parameters coming into TZ from HLOS in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM960...Show more |
Buffer Overflow vulnerability in NAS devices. QTS allows attackers to run arbitrary code. This issue affects: QNAP Systems Inc. QTS version 4.2.6 and prior versions on build 20180711; version 4.3.3 and prior versions on...Show more |
In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, a memory corruption can occur in kernel due to improper check in callers count parameter in display handlers. |
In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, buffer overflow occur may occur in display handlers due to lack of checking in buffer size before copying into it...Show more |
In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, there is a possible buffer overflow in display function due to lack of buffer length validation before copying. |
In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, there is a possible buffer overflow in debugfs module due to lack of check in size of input before copying into b...Show more |
In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, a partition name-check variable is not reset for every iteration which may cause improper termination in the META...Show more |
1Lenovo 1System Management Module Firmware Nov 21, 2024 Nov 27, 2018 N/A· v4 8.1 HIGH· v3 6.8 MEDIUM· v2 In System Management Module (SMM) versions prior to 1.06, an internal SMM function that retrieves configuration settings is prone to a buffer overflow. |
1Lenovo 1System Management Module Firmware Nov 21, 2024 Nov 27, 2018 N/A· v4 8.1 HIGH· v3 6.8 MEDIUM· v2 In System Management Module (SMM) versions prior to 1.06, the SMM certificate creation and parsing logic is vulnerable to several buffer overflows. |
In Cesanta Mongoose 6.13, a SIGSEGV exists in the mongoose.c mg_mqtt_add_session() function. |
A floating point exception in kodak_radc_load_raw in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundles the dcraw code. |