Use of Out-of-range Pointer Offset

The product performs pointer arithmetic on a valid pointer, but it uses an offset that can point outside of the intended range of valid memory locations for the resulting pointer.

CVEs (108)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-28575 1Qualcomm 59205 Firmware 215 FirmwareAqt1000 Firmware+56 more Jun 17, 2026 Aug 8, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 The cam_get_device_priv function does not check the type of handle being returned (device/session/link). This would lead to invalid type usage if a wrong handle is passed to it.
CVE-2023-22387 1Qualcomm 266205 Firmware 215 Firmware315 5g Iot Firmware+263 more Jun 17, 2026 Jul 4, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Arbitrary memory overwrite when VM gets compromised in TX write leading to Memory Corruption.
CVE-2022-46378 1Weston Embedded 1Uc Ftps Jun 17, 2026 May 10, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 An out-of-bounds read vulnerability exists in the PORT command parameter extraction functionality of Weston Embedded uC-FTPs v 1.98.00. A specially-crafted set of network packets can lead to denial of service. An attacke...Show more An out-of-bounds read vulnerability exists in the PORT command parameter extraction functionality of Weston Embedded uC-FTPs v 1.98.00. A specially-crafted set of network packets can lead to denial of service. An attacker can send packets to trigger this vulnerability.This vulnerability occurs when no port argument is provided to the `PORT` command.Show less
CVE-2022-46377 1Weston Embedded 1Uc Ftps Jun 17, 2026 May 10, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 An out-of-bounds read vulnerability exists in the PORT command parameter extraction functionality of Weston Embedded uC-FTPs v 1.98.00. A specially-crafted set of network packets can lead to denial of service. An attacke...Show more An out-of-bounds read vulnerability exists in the PORT command parameter extraction functionality of Weston Embedded uC-FTPs v 1.98.00. A specially-crafted set of network packets can lead to denial of service. An attacker can send packets to trigger this vulnerability.This vulnerability occurs when no IP address argument is provided to the `PORT` command.Show less
CVE-2023-2426 4Apple FedoraprojectNeovim+1 more 4Fedora MacosNeovim+1 more Sep 24, 2026 Apr 29, 2023 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 9.0.1499.
CVE-2022-25709 1Qualcomm 68Ar8035 Firmware Qca6174a FirmwareQca6310 Firmware+65 more Jun 17, 2026 Mar 10, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in modem due to use of out of range pointer offset while processing qmi msg
CVE-2022-25694 1Qualcomm 208Apq8009 Firmware Apq8009w FirmwareApq8017 Firmware+205 more Jun 17, 2026 Mar 10, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM
CVE-2022-33246 1Qualcomm 42Apq8096au Firmware Aqt1000 FirmwareMsm8996au Firmware+39 more Jun 17, 2026 Feb 12, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in Audio due to use of out-of-range pointer offset while Initiating a voice call session from user space with invalid session id.
CVE-2022-43665 1Estsoft 1Alyac Jun 17, 2026 Feb 2, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 A denial of service vulnerability exists in the malware scan functionality of ESTsoft Alyac 2.5.8.645. A specially-crafted PE file can lead to killing target process. An attacker can provide a malicious file to trigger t...Show more A denial of service vulnerability exists in the malware scan functionality of ESTsoft Alyac 2.5.8.645. A specially-crafted PE file can lead to killing target process. An attacker can provide a malicious file to trigger this vulnerability.Show less
CVE-2022-42264 1Nvidia 3Cloud Gaming Gpu Display DriverVirtual Gpu Jun 17, 2026 Dec 30, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user can cause the use of an out-of-range pointer offset, which may lead to data tampering, data loss,...Show more NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user can cause the use of an out-of-range pointer offset, which may lead to data tampering, data loss, information disclosure, or denial of service.Show less
CVE-2022-32142 1Codesys 2Plcwinnt Runtime Toolkit Jun 17, 2026 Jun 24, 2022 N/A· v4 8.1 HIGH· v3 5.5 MEDIUM· v2 Multiple CODESYS Products are prone to a out-of bounds read or write access. A low privileged remote attacker may craft a request with invalid offset, which can cause an out-of-bounds read or write access, resulting in d...Show more Multiple CODESYS Products are prone to a out-of bounds read or write access. A low privileged remote attacker may craft a request with invalid offset, which can cause an out-of-bounds read or write access, resulting in denial-of-service condition or local memory overwrite, which can lead to a change of local files. User interaction is not required.Show less
CVE-2022-21147 1Estsoft 1Alyac Jun 17, 2026 May 12, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 An out of bounds read vulnerability exists in the malware scan functionality of ESTsoft Alyac 2.5.7.7. A specially-crafted PE file can trigger this vulnerability to cause denial of service and termination of malware scan...Show more An out of bounds read vulnerability exists in the malware scan functionality of ESTsoft Alyac 2.5.7.7. A specially-crafted PE file can trigger this vulnerability to cause denial of service and termination of malware scan. An attacker can provide a malicious file to trigger this vulnerability.Show less
CVE-2022-1420 3Apple FedoraprojectVim 3Fedora MacosVim Jun 17, 2026 Apr 21, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4774.
CVE-2022-0729 4Apple DebianFedoraproject+1 more 4Debian Linux FedoraMacos+1 more Jun 17, 2026 Feb 23, 2022 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4440.
CVE-2022-0685 4Apple DebianFedoraproject+1 more 4Debian Linux FedoraMacos+1 more Jun 17, 2026 Feb 20, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4418.
CVE-2022-0614 1Mruby 1Mruby Jun 17, 2026 Feb 16, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Use of Out-of-range Pointer Offset in Homebrew mruby prior to 3.2.
CVE-2022-0554 4Apple DebianFedoraproject+1 more 4Debian Linux FedoraMacos+1 more Jun 17, 2026 Feb 10, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.
CVE-2021-34595 2Codesys Wago 30750 8202 Firmware 750 8203 Firmware750 8204 Firmware+27 more Jun 17, 2026 Oct 26, 2021 N/A· v4 8.1 HIGH· v3 5.5 MEDIUM· v2 A crafted request with invalid offsets may cause an out-of-bounds read or write access in CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56, resulting in a denial-of-service condition or loc...Show more A crafted request with invalid offsets may cause an out-of-bounds read or write access in CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56, resulting in a denial-of-service condition or local memory overwrite.Show less
CVE-2021-3889 1Libmobi Project 1Libmobi Jun 17, 2026 Oct 19, 2021 N/A· v4 8.1 HIGH· v3 5.8 MEDIUM· v2 libmobi is vulnerable to Use of Out-of-range Pointer Offset
CVE-2021-3888 1Libmobi Project 1Libmobi Jun 17, 2026 Oct 19, 2021 N/A· v4 8.1 HIGH· v3 5.8 MEDIUM· v2 libmobi is vulnerable to Use of Out-of-range Pointer Offset

Previous 1 2 3 456 Next