CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer (page 24)
Page 24 of 100 — CVEs classified under CWE-119, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-11959 | High | 8.8 | 2024-11-28 | A vulnerability was found in D-Link DIR-605L 2.13B01. It has been classified as critical. This affects the function formResetStatistic of the file /goform/form… |
CVE-2024-11745 | High | 8.8 | 2024-11-26 | A vulnerability was found in Tenda AC8 16.03.34.09 and classified as critical. Affected by this issue is the function route_static_check of the file /goform/Se… |
CVE-2017-11076 | Critical | 9.8 | 2024-11-26 | On some hardware revisions where VP9 decoding is hardware-accelerated, the frame size is not programmed correctly into the decoder hardware which can lead to a… |
CVE-2024-9739 | High | 7.8 | 2024-11-22 | Tungsten Automation Power PDF PDF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arb… |
CVE-2024-9738 | High | 7.8 | 2024-11-22 | Tungsten Automation Power PDF PDF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arb… |
CVE-2024-9731 | High | 7.8 | 2024-11-22 | Trimble SketchUp Viewer SKP File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary… |
CVE-2024-9730 | High | 7.8 | 2024-11-22 | Trimble SketchUp Viewer SKP File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary… |
CVE-2024-8815 | High | 7.8 | 2024-11-22 | PDF-XChange Editor U3D File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code… |
CVE-2024-11575 | High | 7.8 | 2024-11-22 | IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affec… |
CVE-2024-11574 | High | 7.8 | 2024-11-22 | IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affec… |
CVE-2024-11573 | High | 7.8 | 2024-11-22 | IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affec… |
CVE-2024-11572 | High | 7.8 | 2024-11-22 | IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affec… |
CVE-2024-11564 | High | 7.8 | 2024-11-22 | IrfanView DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affec… |
CVE-2024-11560 | High | 7.8 | 2024-11-22 | IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affec… |
CVE-2024-11558 | High | 7.8 | 2024-11-22 | IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affec… |
CVE-2024-11557 | High | 7.8 | 2024-11-22 | IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affec… |
CVE-2024-11556 | High | 7.8 | 2024-11-22 | IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affec… |
CVE-2024-11553 | High | 7.8 | 2024-11-22 | IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affec… |
CVE-2024-11552 | High | 7.8 | 2024-11-22 | IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affec… |
CVE-2024-11551 | High | 7.8 | 2024-11-22 | IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affec… |
CVE-2024-11547 | High | 7.8 | 2024-11-22 | IrfanView DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affec… |
CVE-2024-11544 | High | 7.8 | 2024-11-22 | IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affec… |
CVE-2024-11543 | High | 7.8 | 2024-11-22 | IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affec… |
CVE-2024-11542 | High | 7.8 | 2024-11-22 | IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affec… |
CVE-2024-11541 | High | 7.8 | 2024-11-22 | IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affec… |
CVE-2024-11539 | High | 7.8 | 2024-11-22 | IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affec… |
CVE-2024-11538 | High | 7.8 | 2024-11-22 | IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affec… |
CVE-2024-11530 | High | 7.8 | 2024-11-22 | IrfanView CGM File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affec… |
CVE-2024-11528 | High | 7.8 | 2024-11-22 | IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affec… |
CVE-2024-11527 | High | 7.8 | 2024-11-22 | IrfanView DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affec… |
CVE-2024-11524 | High | 7.8 | 2024-11-22 | IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affec… |
CVE-2024-11523 | High | 7.8 | 2024-11-22 | IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affec… |
CVE-2024-11522 | High | 7.8 | 2024-11-22 | IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affec… |
CVE-2024-11519 | High | 7.8 | 2024-11-22 | IrfanView RLE File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affec… |
CVE-2024-11495 | High | 7.5 | 2024-11-20 | Buffer overflow vulnerability in OllyDbg, version 1.10, which could allow a local attacker to execute arbitrary code due to lack of proper bounds checking. |
CVE-2021-1424 | Medium | 5.3 | 2024-11-18 | A vulnerability in the ipsecmgr process of Cisco ASR 5000 Series Software (StarOS) could allow an unauthenticated, remote attacker to cause a denial of se… |
CVE-2024-11262 | Medium | 5.3 | 2024-11-15 | A vulnerability has been found in SourceCodester Student Record Management System 1.0 and classified as critical. Affected by this vulnerability is the functio… |
CVE-2024-11261 | Medium | 5.3 | 2024-11-15 | A vulnerability, which was classified as critical, was found in SourceCodester Student Record Management System 1.0. Affected is an unknown function of the fil… |
CVE-2024-11248 | High | 8.8 | 2024-11-15 | A vulnerability was found in Tenda AC10 16.03.10.13 and classified as critical. Affected by this issue is the function formSetRebootTimer of the file /goform/S… |
CVE-2024-11237 | High | 7.5 | 2024-11-15 | A vulnerability, which was classified as critical, has been found in TP-Link VN020 F3v(T) TT_V6.2.1021. Affected by this issue is some unknown functionality of… |
CVE-2024-8938 | High | 8.1 | 2024-11-13 | CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause a potential arbitrary code execution aft… |
CVE-2024-8937 | Medium | 6.5 | 2024-11-13 | CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause a potential arbitrary code execution aft… |
CVE-2024-8534 | High | 8.1 | 2024-11-12 | Memory safety vulnerability leading to memory corruption and Denial of Service in NetScaler ADC and Gateway if the appliance must be configured as a Gateway (V… |
CVE-2024-42442 | High | 7.2 | 2024-11-12 | APTIOV contains a vulnerability in the BIOS where a user or attacker may cause an improper restriction of operations within the bounds of a memory buffer over… |
CVE-2024-33658 | High | 7.8 | 2024-11-12 | APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Restriction of Operations within the Bounds of a Memory Buffer by local. Succes… |
CVE-2024-11061 | High | 8.8 | 2024-11-11 | A vulnerability classified as critical was found in Tenda AC10 16.03.10.13. Affected by this vulnerability is the function FUN_0044db3c of the file /goform/fas… |
CVE-2024-11056 | High | 8.8 | 2024-11-10 | A vulnerability, which was classified as critical, was found in Tenda AC10 16.03.10.13. Affected is the function FUN_0046AC38 of the file /goform/WifiExtraSet… |
CVE-2024-11048 | High | 8.8 | 2024-11-10 | A vulnerability was found in D-Link DI-8003 16.07.16A1. It has been rated as critical. Affected by this issue is the function dbsrv_asp of the file /dbsrv.asp… |
CVE-2024-11047 | High | 8.8 | 2024-11-10 | A vulnerability was found in D-Link DI-8003 16.07.16A1. It has been declared as critical. Affected by this vulnerability is the function upgrade_filter_asp of… |
CVE-2024-50248 | High | 7.1 | 2024-11-09 | In the Linux kernel, the following vulnerability has been resolved: ntfs3: Add bounds checking to mi_enum_attr() Added bounds checking to make sure that ever… |
CVE-2024-10964 | Medium | 6.3 | 2024-11-07 | A vulnerability classified as critical has been found in emqx neuron up to 2.10.0. Affected is the function handle_add_plugin in the library cmd.library of the… |
CVE-2024-10559 | Medium | 5.3 | 2024-10-31 | A vulnerability was found in SourceCodester Airport Booking Management System 1.0 and classified as critical. Affected by this issue is the function Details. T… |
CVE-2024-9489 | High | 7.8 | 2024-10-29 | A maliciously crafted DWG file when parsed in ACAD.exe through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage thi… |
CVE-2024-8600 | High | 7.8 | 2024-10-29 | A maliciously crafted SLDPRT file when parsed in odxsw_dll.dll through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can lev… |
CVE-2024-8599 | High | 7.8 | 2024-10-29 | A maliciously crafted STP file when parsed in ACTranslators.exe through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can lev… |
CVE-2024-8598 | High | 7.8 | 2024-10-29 | A maliciously crafted STP file when parsed in ACTranslators.exe through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can lev… |
CVE-2024-8597 | High | 7.8 | 2024-10-29 | A maliciously crafted STP file when parsed in ASMDATAX230A.dll through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leve… |
CVE-2023-46586 | Critical | 9.1 | 2024-10-09 | cgi.c in weborf .0.17, 0.18, 0.19, and 0.20 (before 1.0) lacks '\0' termination of the path for CGI scripts because strncpy is misused. |
CVE-2024-47046 | High | 7.8 | 2024-10-08 | A vulnerability has been identified in Simcenter Femap V2306 (All versions), Simcenter Femap V2401 (All versions), Simcenter Femap V2406 (All versions). The af… |
CVE-2024-45475 | High | 7.8 | 2024-10-08 | A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14.3.0.12)… |
CVE-2024-45474 | High | 7.8 | 2024-10-08 | A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14.3.0.12)… |
CVE-2024-45473 | High | 7.8 | 2024-10-08 | A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14.3.0.12)… |
CVE-2024-45472 | High | 7.8 | 2024-10-08 | A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14.3.0.12)… |
CVE-2024-45468 | High | 7.8 | 2024-10-08 | A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14.3.0.12)… |
CVE-2024-45467 | High | 7.8 | 2024-10-08 | A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14.3.0.12)… |
CVE-2023-6362 | High | 7.3 | 2024-10-07 | A vulnerability has been discovered in Winhex affecting version 16.1 SR-1 and 20.4. This vulnerability consists of a buffer overflow controlling the Structured… |
CVE-2023-6361 | High | 7.3 | 2024-10-07 | A vulnerability has been discovered in Winhex affecting version 16.1 SR-1 and 20.4. This vulnerability consists of a buffer overflow controlling the Structured… |
CVE-2024-23369 | High | 7.8 | 2024-10-07 | Memory corruption when invalid length is provided from HLOS for FRS/UDS request/response buffers. |
CVE-2024-21455 | High | 7.8 | 2024-10-07 | Memory corruption when a compat IOCTL call is followed by another IOCTL call from userspace to a driver. |
CVE-2024-9403 | High | 7.3 | 2024-10-01 | Memory safety bugs present in Firefox 130. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could h… |
CVE-2024-9402 | Critical | 9.8 | 2024-10-01 | Memory safety bugs present in Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2. Some of these bugs showed evidence of memory corruption and we presume tha… |
CVE-2024-9401 | Critical | 9.8 | 2024-10-01 | Memory safety bugs present in Firefox 130, Firefox ESR 115.15, Firefox ESR 128.2, and Thunderbird 128.2. Some of these bugs showed evidence of memory corruptio… |
CVE-2024-9400 | High | 8.8 | 2024-10-01 | A potential memory corruption vulnerability could be triggered if an attacker had the ability to trigger an OOM at a specific moment during JIT compilation. Th… |
CVE-2024-9396 | High | 8.8 | 2024-10-01 | It is currently unknown if this issue is exploitable but a condition may arise where the structured clone of certain objects could lead to memory corruption. T… |
CVE-2024-22170 | | 2024-09-27 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Western Digital My Cloud ddns-start on Linux allows Overflow Buffers.T… | |
CVE-2024-38269 | Medium | 4.9 | 2024-09-24 | An improper restriction of operations within the bounds of a memory buffer in the USB file-sharing handler of the Zyxel VMG8825-T50K firmware versions through… |
CVE-2024-38268 | Medium | 4.9 | 2024-09-24 | An improper restriction of operations within the bounds of a memory buffer in the MAC address parser of the Zyxel VMG8825-T50K firmware versions through 5.50(A… |
CVE-2024-38267 | Medium | 4.9 | 2024-09-24 | An improper restriction of operations within the bounds of a memory buffer in the IPv6 address parser of the Zyxel VMG8825-T50K firmware versions through 5.50(… |
CVE-2024-38266 | Medium | 4.9 | 2024-09-24 | An improper restriction of operations within the bounds of a memory buffer in the parameter type parser of the Zyxel VMG8825-T50K firmware versions through 5.5… |
CVE-2024-7024 | Critical | 9.6 | 2024-09-23 | Inappropriate implementation in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML… |
CVE-2024-45810 | Medium | 6.5 | 2024-09-20 | Envoy is a cloud-native high-performance edge/middle/service proxy. Envoy will crash when the http async client is handling `sendLocalReply` under some circums… |
CVE-2024-45809 | Medium | 5.3 | 2024-09-20 | Envoy is a cloud-native high-performance edge/middle/service proxy. Jwt filter will lead to an Envoy crash when clear route cache with remote JWKs. In the foll… |
CVE-2024-27879 | High | 7.5 | 2024-09-17 | The issue was addressed with improved bounds checks. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18. An attacker may be able to cause un… |
CVE-2024-43756 | High | 7.8 | 2024-09-13 | Photoshop Desktop versions 24.7.4, 25.11 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution i… |
CVE-2024-39380 | High | 7.8 | 2024-09-13 | After Effects versions 23.6.6, 24.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the… |
CVE-2024-45181 | High | 7.8 | 2024-09-12 | An issue was discovered in WibuKey64.sys in WIBU-SYSTEMS WibuKey before v6.70 and fixed in v.6.70. An improper bounds check allows crafted packets to cause an… |
CVE-2024-42425 | Low | 3.8 | 2024-09-10 | Dell Precision Rack, 14G Intel BIOS versions prior to 2.22.2, contains an Access of Memory Location After End of Buffer vulnerability. A low privileged attacke… |
CVE-2024-8573 | High | 8.8 | 2024-09-08 | A vulnerability, which was classified as critical, was found in TOTOLINK AC1200 T8 and AC1200 T10 4.1.5cu.861_B20230220/4.1.8cu.5207. This affects the function… |
CVE-2024-8389 | Critical | 9.8 | 2024-09-03 | Memory safety bugs present in Firefox 129. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could h… |
CVE-2024-8387 | Critical | 9.8 | 2024-09-03 | Memory safety bugs present in Firefox 129, Firefox ESR 128.1, and Thunderbird 128.1. Some of these bugs showed evidence of memory corruption and we presume tha… |
CVE-2024-33016 | Medium | 6.8 | 2024-09-02 | memory corruption when an invalid firehose patch command is invoked. |
CVE-2024-45169 | Critical | 9.8 | 2024-08-22 | An issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12. Due to improper input validation, improper deserialization, and improper restriction… |
CVE-2022-48940 | High | 7.8 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix crash due to incorrect copy_map_value When both bpf_spin_lock and bpf_timer are… |
CVE-2024-7972 | High | 8.8 | 2024-08-21 | Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially perform out of bounds memory access via a c… |
CVE-2024-7966 | High | 8.8 | 2024-08-21 | Out of bounds memory access in Skia in Google Chrome prior to 128.0.6613.84 allowed a remote attacker who had compromised the renderer process to perform out o… |
CVE-2024-7795 | High | 8.8 | 2024-08-21 | Autel MaxiCharger AC Elite Business C50 AppAuthenExchangeRandomNum Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows n… |
CVE-2024-44067 | High | 8.4 | 2024-08-19 | The T-Head XuanTie C910 CPU in the TH1520 SoC and the T-Head XuanTie C920 CPU in the SOPHON SG2042 have instructions that allow unprivileged attackers to write… |
CVE-2022-33162 | High | 7.3 | 2024-08-16 | IBM Security Directory Integrator 7.2.0 and Security Verify Directory Integrator 10.0.0 does not perform any authentication for functionality that requires a p… |
CVE-2024-20082 | Critical | 9.8 | 2024-08-14 | In Modem, there is a possible memory corruption due to a missing bounds check. This could lead to remote code execution with no additional execution privileges… |
CVE-2024-38218 | High | 8.4 | 2024-08-12 | Microsoft Edge (HTML-based) Memory Corruption Vulnerability |