Use of Out-of-range Pointer Offset

The product performs pointer arithmetic on a valid pointer, but it uses an offset that can point outside of the intended range of valid memory locations for the resulting pointer.

CVEs (98)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-33110 1Qualcomm 118Snapdragon 425 Mobile Platform Firmware Snapdragon 427 Mobile Platform FirmwareSnapdragon 429 Mobile Platform Firmware+115 more Jun 17, 2026 Jan 2, 2024 N/A· v4 7.0 HIGH· v3 N/A· v2 The session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may lead to race condition between event callback - PCM close and...Show more The session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may lead to race condition between event callback - PCM close and reset session index causing memory corruption.Show less
CVE-2023-33033 1Qualcomm 259315 5g Iot Modem Firmware 9205 Lte Modem Firmware9206 Lte Modem Firmware+256 more Jun 17, 2026 Jan 2, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in Audio during playback with speaker protection.
CVE-2023-6560 1Linux 1Linux Kernel Jun 17, 2026 Dec 9, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 An out-of-bounds memory access flaw was found in the io_uring SQ/CQ rings functionality in the Linux kernel. This issue could allow a local user to crash the system.
CVE-2023-33106 1Qualcomm 147Ar8035 Firmware Csra6620 FirmwareCsra6640 Firmware+144 more Jun 17, 2026 Dec 5, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.
CVE-2023-33079 1Qualcomm 143Apq5053 Aa Firmware Ar8035 FirmwareCsra6620 Firmware+140 more Jun 17, 2026 Dec 5, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in Audio while running invalid audio recording from ADSP.
CVE-2023-22388 1Qualcomm 223315 5g Iot Modem Firmware 9205 Lte Modem Firmware9206 Lte Modem Firmware+220 more Jun 17, 2026 Nov 7, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Memory Corruption in Multi-mode Call Processor while processing bit mask API.
CVE-2023-46724 1Squid Cache 1Squid Jun 17, 2026 Nov 1, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Squid is a caching proxy for the Web. Due to an Improper Validation of Specified Index bug, Squid versions 3.3.0.1 through 5.9 and 6.0 prior to 6.4 compiled using `--with-openssl` are vulnerable to a Denial of Service at...Show more Squid is a caching proxy for the Web. Due to an Improper Validation of Specified Index bug, Squid versions 3.3.0.1 through 5.9 and 6.0 prior to 6.4 compiled using `--with-openssl` are vulnerable to a Denial of Service attack against SSL Certificate validation. This problem allows a remote server to perform Denial of Service against Squid Proxy by initiating a TLS Handshake with a specially crafted SSL Certificate in a server certificate chain. This attack is limited to HTTPS and SSL-Bump. This bug is fixed in Squid version 6.4. In addition, patches addressing this problem for the stable releases can be found in Squid's patch archives. Those who you use a prepackaged version of Squid should refer to the package vendor for availability information on updated packages.Show less
CVE-2023-24855 1Qualcomm 61Ar8035 Firmware Fastconnect 6200 FirmwareFastconnect 6700 Firmware+58 more Jun 17, 2026 Oct 3, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Memory corruption in Modem while processing security related configuration before AS Security Exchange.
CVE-2023-20187 1Cisco 1Ios Xe Jun 17, 2026 Sep 27, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 A vulnerability in the Multicast Leaf Recycle Elimination (mLRE) feature of Cisco IOS XE Software for Cisco ASR 1000 Series Aggregation Services Routers could allow an unauthenticated, remote attacker to cause the affect...Show more A vulnerability in the Multicast Leaf Recycle Elimination (mLRE) feature of Cisco IOS XE Software for Cisco ASR 1000 Series Aggregation Services Routers could allow an unauthenticated, remote attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition. This vulnerability is due to incorrect handling of certain IPv6 multicast packets when they are fanned out more than seven times on an affected device. An attacker could exploit this vulnerability by sending a specific IPv6 multicast or IPv6 multicast VPN (MVPNv6) packet through the affected device. A successful exploit could allow the attacker to cause a reload of the affected device, resulting in a DoS condition.Show less
CVE-2023-28564 1Qualcomm 247Aqt1000 Firmware Ar8031 FirmwareAr9380 Firmware+244 more Jun 17, 2026 Sep 5, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in WLAN HAL while passing command parameters through WMI interfaces.
CVE-2023-28575 1Qualcomm 59205 Firmware 215 FirmwareAqt1000 Firmware+56 more Jun 17, 2026 Aug 8, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 The cam_get_device_priv function does not check the type of handle being returned (device/session/link). This would lead to invalid type usage if a wrong handle is passed to it.
CVE-2023-22387 1Qualcomm 266205 Firmware 215 Firmware315 5g Iot Firmware+263 more Jun 17, 2026 Jul 4, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Arbitrary memory overwrite when VM gets compromised in TX write leading to Memory Corruption.
CVE-2022-46378 1Weston Embedded 1Uc Ftps Jun 17, 2026 May 10, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 An out-of-bounds read vulnerability exists in the PORT command parameter extraction functionality of Weston Embedded uC-FTPs v 1.98.00. A specially-crafted set of network packets can lead to denial of service. An attacke...Show more An out-of-bounds read vulnerability exists in the PORT command parameter extraction functionality of Weston Embedded uC-FTPs v 1.98.00. A specially-crafted set of network packets can lead to denial of service. An attacker can send packets to trigger this vulnerability.This vulnerability occurs when no port argument is provided to the `PORT` command.Show less
CVE-2022-46377 1Weston Embedded 1Uc Ftps Jun 17, 2026 May 10, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 An out-of-bounds read vulnerability exists in the PORT command parameter extraction functionality of Weston Embedded uC-FTPs v 1.98.00. A specially-crafted set of network packets can lead to denial of service. An attacke...Show more An out-of-bounds read vulnerability exists in the PORT command parameter extraction functionality of Weston Embedded uC-FTPs v 1.98.00. A specially-crafted set of network packets can lead to denial of service. An attacker can send packets to trigger this vulnerability.This vulnerability occurs when no IP address argument is provided to the `PORT` command.Show less
CVE-2023-2426 1Vim 1Vim Jun 17, 2026 Apr 29, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 9.0.1499.
CVE-2022-25709 1Qualcomm 68Ar8035 Firmware Qca6174a FirmwareQca6310 Firmware+65 more Jun 17, 2026 Mar 10, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in modem due to use of out of range pointer offset while processing qmi msg
CVE-2022-25694 1Qualcomm 208Apq8009 Firmware Apq8009w FirmwareApq8017 Firmware+205 more Jun 17, 2026 Mar 10, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM
CVE-2022-33246 1Qualcomm 42Apq8096au Firmware Aqt1000 FirmwareMsm8996au Firmware+39 more Jun 17, 2026 Feb 12, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in Audio due to use of out-of-range pointer offset while Initiating a voice call session from user space with invalid session id.
CVE-2022-43665 1Estsoft 1Alyac Jun 17, 2026 Feb 2, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 A denial of service vulnerability exists in the malware scan functionality of ESTsoft Alyac 2.5.8.645. A specially-crafted PE file can lead to killing target process. An attacker can provide a malicious file to trigger t...Show more A denial of service vulnerability exists in the malware scan functionality of ESTsoft Alyac 2.5.8.645. A specially-crafted PE file can lead to killing target process. An attacker can provide a malicious file to trigger this vulnerability.Show less
CVE-2022-42264 1Nvidia 3Cloud Gaming Gpu Display DriverVirtual Gpu Jun 17, 2026 Dec 30, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user can cause the use of an out-of-range pointer offset, which may lead to data tampering, data loss,...Show more NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user can cause the use of an out-of-range pointer offset, which may lead to data tampering, data loss, information disclosure, or denial of service.Show less

Previous 1 2 345 Next