← Back
CWE-119

14,091 CVEs • Abstraction: Class • Likelihood of Exploit: High

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

JSON object

Loading...

CVEs (14,091)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Tcpdump
1Tcpdump
May 13, 2026
Jan 28, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
The STP parser in tcpdump before 4.9.0 has a buffer overflow in print-stp.c, multiple functions.
1Tcpdump
1Tcpdump
May 13, 2026
Jan 28, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
The GRE parser in tcpdump before 4.9.0 has a buffer overflow in print-gre.c, multiple functions.
1Tcpdump
1Tcpdump
May 13, 2026
Jan 28, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
The VAT parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:vat_print().
1Tcpdump
1Tcpdump
May 13, 2026
Jan 28, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
The UDP parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:udp_print().
1Tcpdump
1Tcpdump
May 13, 2026
Jan 28, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
The RTP parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:rtp_print().
1Tcpdump
1Tcpdump
May 13, 2026
Jan 28, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
The RTCP parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:rtcp_print().
1Tcpdump
1Tcpdump
May 13, 2026
Jan 28, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
The PPP parser in tcpdump before 4.9.0 has a buffer overflow in print-ppp.c:ppp_hdlc_if_print().
1Tcpdump
1Tcpdump
May 13, 2026
Jan 28, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
The PIM parser in tcpdump before 4.9.0 has a buffer overflow in print-pim.c:pimv2_check_checksum().
1Tcpdump
1Tcpdump
May 13, 2026
Jan 28, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
The MPLS parser in tcpdump before 4.9.0 has a buffer overflow in print-mpls.c:mpls_print().
1Tcpdump
1Tcpdump
May 13, 2026
Jan 28, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
The LLC/SNAP parser in tcpdump before 4.9.0 has a buffer overflow in print-llc.c:llc_print().
1Tcpdump
1Tcpdump
May 13, 2026
Jan 28, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
The Juniper PPPoE ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-juniper.c:juniper_parse_header().
1Tcpdump
1Tcpdump
May 13, 2026
Jan 28, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
The IPComp parser in tcpdump before 4.9.0 has a buffer overflow in print-ipcomp.c:ipcomp_print().
1Tcpdump
1Tcpdump
May 13, 2026
Jan 28, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
The IEEE 802.11 parser in tcpdump before 4.9.0 has a buffer overflow in print-802_11.c:ieee802_11_radio_print().
1Tcpdump
1Tcpdump
May 13, 2026
Jan 28, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
The Ethernet parser in tcpdump before 4.9.0 has a buffer overflow in print-ether.c:ethertype_print().
1Tcpdump
1Tcpdump
May 13, 2026
Jan 28, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
The compressed SLIP parser in tcpdump before 4.9.0 has a buffer overflow in print-sl.c:sl_if_print().
1Tcpdump
1Tcpdump
May 13, 2026
Jan 28, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
The ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-atm.c:oam_print().
1Tcpdump
1Tcpdump
May 13, 2026
Jan 28, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
The ARP parser in tcpdump before 4.9.0 has a buffer overflow in print-arp.c:arp_print().
1Tcpdump
1Tcpdump
May 13, 2026
Jan 28, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
The AH parser in tcpdump before 4.9.0 has a buffer overflow in print-ah.c:ah_print().
3Debian
GstreamerRedhat
6Debian Linux
Enterprise Linux DesktopEnterprise Linux Hpc Node+3 more
May 13, 2026
Jan 27, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (applic...Show more
Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by providing a 'write count' that goes beyond the initialized buffer.Show less
3Debian
GstreamerRedhat
6Debian Linux
Enterprise Linux DesktopEnterprise Linux Hpc Node+3 more
May 13, 2026
Jan 27, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (applic...Show more
Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by providing a 'skip count' that goes beyond initialized buffer.Show less