← Back
CWE-119

14,552 CVEs • Abstraction: Class • Likelihood of Exploit: High

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

JSON object

Loading...

CVEs (14,552)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Google
1Android
May 13, 2026
Aug 18, 2017
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow to buffer overflow vulnerability exists when loading an ELF file.
1Google
1Android
May 13, 2026
Aug 18, 2017
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in the processing of certain responses from the USIM.
1Google
1Android
May 13, 2026
Aug 18, 2017
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in GERAN where a buffer can be overflown while taking power measurements.
1Google
1Android
May 13, 2026
Aug 18, 2017
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists when processing a QMI message.
1Google
1Android
May 13, 2026
Aug 18, 2017
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists when performing WCDMA radio tuning.
1Google
1Android
May 13, 2026
Aug 18, 2017
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer over-read may occur in the processing of a downlink 3G NAS message.
1Google
1Android
May 13, 2026
Aug 18, 2017
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
In all Qualcomm products with Android releases from CAF using the Linux kernel, an incorrect length is used to clear a memory buffer resulting in adjacent memory getting corrupted.
1Google
1Android
May 13, 2026
Aug 18, 2017
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
In all Qualcomm products with Android releases from CAF using the Linux kernel, a memory buffer fails to be freed after it is no longer needed potentially resulting in memory exhaustion.
1Google
1Android
May 13, 2026
Aug 18, 2017
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
In all Qualcomm products with Android releases from CAF using the Linux kernel, a string can fail to be null-terminated in SIP leading to a buffer overflow.
1Google
1Android
May 13, 2026
Aug 18, 2017
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
In all Qualcomm products with Android releases from CAF using the Linux kernel, validation of buffer lengths is missing in malware protection.
1Google
1Android
May 13, 2026
Aug 18, 2017
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer over-read vulnerability exists in digital television/digital radio DRM.
1Google
1Android
May 13, 2026
Aug 18, 2017
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer over-read vulnerability exists in RFA-1x.
1Google
1Android
May 13, 2026
Aug 18, 2017
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in 1x call processing.
1Gnome
1Librest
May 13, 2026
Aug 18, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The OAuth implementation in librest before 0.7.93 incorrectly truncates the pointer returned by the rest_proxy_call_get_url function, which allows remote attackers to cause a denial of service (application crash) via run...Show more
The OAuth implementation in librest before 0.7.93 incorrectly truncates the pointer returned by the rest_proxy_call_get_url function, which allows remote attackers to cause a denial of service (application crash) via running the EnsureCredentials method from the org.gnome.OnlineAccounts.Account interface on an object representing a Flickr account.Show less
1Google
1Android
May 13, 2026
Aug 18, 2017
N/A· v4
7.0 HIGH· v3
7.6 HIGH· v2
In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in HSDPA.
1Google
1Android
May 13, 2026
Aug 18, 2017
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
In all Qualcomm products with Android releases from CAF using the Linux kernel, an overflow check in the USB interface was insufficient during boot.
1Google
1Android
May 13, 2026
Aug 18, 2017
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
In all Qualcomm products with Android releases from CAF using the Linux kernel, a Sample App failed to check a length potentially leading to unauthorized access to secure memory.
1Google
1Android
May 13, 2026
Aug 18, 2017
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
In all Qualcomm products with Android releases from CAF using the Linux kernel, a variable is uninitialized in a TrustZone system call potentially leading to the compromise of secure memory.
1Google
1Android
May 13, 2026
Aug 18, 2017
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a QTEE service.
1Google
1Android
May 13, 2026
Aug 18, 2017
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in PlayReady DRM.