CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer (page 27)
Page 27 of 100 — CVEs classified under CWE-119, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-24937 | Medium | 6.5 | 2022-11-14 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Silicon Labs Ember ZNet allows Overflow Buffers. |
CVE-2022-0137 | High | 7.5 | 2022-11-14 | A heap buffer overflow in image_set_mask function of HTMLDOC before 1.9.15 allows an attacker to write outside the buffer boundaries. |
CVE-2022-3974 | Medium | 6.3 | 2022-11-13 | A vulnerability classified as critical was found in Axiomatic Bento4. Affected by this vulnerability is the function AP4_StdcFileByteStream::ReadPartial of the… |
CVE-2022-3965 | Medium | 4.3 | 2022-11-13 | A vulnerability classified as problematic was found in ffmpeg. This vulnerability affects the function smc_encode_stream of the file libavcodec/smcenc.c of the… |
CVE-2022-3964 | Medium | 4.3 | 2022-11-13 | A vulnerability classified as problematic has been found in ffmpeg. This affects an unknown part of the file libavcodec/rpzaenc.c of the component QuickTime RP… |
CVE-2022-32569 | High | 7.5 | 2022-11-11 | Improper buffer restrictions in BIOS firmware for some Intel(R) NUC M15 Laptop Kits before version BCTGL357.0074 may allow a privileged user to potentially ena… |
CVE-2022-29486 | Medium | 4.3 | 2022-11-11 | Improper buffer restrictions in the Hyperscan library maintained by Intel(R) all versions downloaded before 04/29/2022 may allow an unauthenticated user to pot… |
CVE-2022-26367 | Medium | 6.0 | 2022-11-11 | Improper buffer restrictions in some Intel(R) XMM(TM) 7560 Modem software before version M2_7560_R_01.2146.00 may allow a privileged user to potentially enable… |
CVE-2022-26124 | High | 7.5 | 2022-11-11 | Improper buffer restrictions in BIOS firmware for some Intel(R) NUC Boards, Intel(R) NUC 8 Boards, Intel(R) NUC 8 Rugged Boards and Intel(R) NUC 8 Rugged Kits… |
CVE-2022-26045 | Low | 3.3 | 2022-11-11 | Improper buffer restrictions in some Intel(R) XMM(TM) 7560 Modem software before version M2_7560_R_01.2146.00 may allow a privileged user to potentially enable… |
CVE-2022-39392 | Medium | 5.9 | 2022-11-10 | Wasmtime is a standalone runtime for WebAssembly. Prior to version 2.0.2, there is a bug in Wasmtime's implementation of its pooling instance allocator when th… |
CVE-2022-32588 | High | 7.8 | 2022-11-09 | An out-of-bounds write vulnerability exists in the PICT parsing pctwread_14841 functionality of Accusoft ImageGear 20.0. A specially-crafted malformed file can… |
CVE-2022-41211 | High | 7.0 | 2022-11-08 | Due to lack of proper memory management, when a victim opens manipulated file received from untrusted sources in SAP 3D Visual Enterprise Author and SAP 3D Vis… |
CVE-2022-24936 | High | 8.3 | 2022-11-02 | Out-of-Bounds error in GBL parser in Silicon Labs Gecko Bootloader version 4.0.1 and earlier allows attacker to overwrite flash Sign key and OTA decryption key… |
CVE-2022-42809 | High | 7.8 | 2022-11-01 | The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13. Processing a maliciously crafted gcx file may lead to unexpecte… |
CVE-2022-42798 | Medium | 5.5 | 2022-11-01 | The issue was addressed with improved memory handling. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, iOS 16.1… |
CVE-2022-32940 | High | 7.8 | 2022-11-01 | The issue was addressed with improved bounds checks. This issue is fixed in tvOS 16.1, iOS 16.1 and iPadOS 16, macOS Ventura 13, watchOS 9.1. An app may be abl… |
CVE-2022-32939 | High | 7.8 | 2022-11-01 | The issue was addressed with improved bounds checks. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, iOS 16.1 and iPadOS 16. An app may be able to execute… |
CVE-2022-32934 | High | 8.8 | 2022-11-01 | The issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, macOS Monterey 12.6. A remote user may be a… |
CVE-2022-32926 | Medium | 6.7 | 2022-11-01 | The issue was addressed with improved bounds checks. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, iOS 16.1 an… |
CVE-2022-3785 | Medium | 6.3 | 2022-10-31 | A vulnerability, which was classified as critical, has been found in Axiomatic Bento4. Affected by this issue is the function AP4_DataBuffer::SetDataSize of th… |
CVE-2022-3784 | Medium | 6.3 | 2022-10-31 | A vulnerability classified as critical was found in Axiomatic Bento4 5e7bb34. Affected by this vulnerability is the function AP4_Mp4AudioDsiParser::ReadBits of… |
CVE-2022-3705 | Medium | 5.0 | 2022-10-26 | A vulnerability was found in vim and classified as problematic. Affected by this issue is the function qf_update_buffer of the file quickfix.c of the component… |
CVE-2022-3670 | High | 7.3 | 2022-10-26 | A vulnerability was found in Axiomatic Bento4. It has been classified as critical. Affected is the function WriteSample of the component mp42hevc. The manipula… |
CVE-2022-3667 | High | 7.3 | 2022-10-26 | A vulnerability, which was classified as critical, was found in Axiomatic Bento4. This affects the function AP4_MemoryByteStream::WritePartial of the file Ap4B… |
CVE-2022-3666 | High | 7.3 | 2022-10-26 | A vulnerability, which was classified as critical, has been found in Axiomatic Bento4. Affected by this issue is the function AP4_LinearReader::Advance of the… |
CVE-2022-3665 | High | 7.3 | 2022-10-26 | A vulnerability classified as critical was found in Axiomatic Bento4. Affected by this vulnerability is an unknown functionality of the file AvcInfo.cpp of the… |
CVE-2022-3664 | High | 7.3 | 2022-10-26 | A vulnerability classified as critical has been found in Axiomatic Bento4. Affected is the function AP4_BitStream::WriteBytes of the file Ap4BitStream.cpp of t… |
CVE-2022-3662 | High | 7.3 | 2022-10-26 | A vulnerability was found in Axiomatic Bento4. It has been declared as critical. This vulnerability affects the function GetOffset of the file Ap4Sample.h of t… |
CVE-2022-3649 | Low | 3.1 | 2022-10-21 | A vulnerability was found in Linux Kernel. It has been classified as problematic. Affected is the function nilfs_new_inode of the file fs/nilfs2/inode.c of the… |
CVE-2022-3640 | Medium | 5.5 | 2022-10-21 | A vulnerability, which was classified as critical, was found in Linux Kernel. Affected is the function l2cap_conn_del of the file net/bluetooth/l2cap_core.c of… |
CVE-2022-3636 | Medium | 5.5 | 2022-10-21 | A vulnerability was identified in Linux Kernel 33fc42de33278b2b3ec6f3390512987bc29a62b7. This affects the function __mtk_ppe_check_skb of the file drivers/net/… |
CVE-2022-3635 | Medium | 5.5 | 2022-10-21 | A vulnerability, which was classified as critical, has been found in Linux Kernel. Affected by this issue is the function tst_timer of the file drivers/atm/idt… |
CVE-2022-3625 | Medium | 4.6 | 2022-10-21 | A vulnerability was found in Linux Kernel. It has been classified as critical. This affects the function devlink_param_set/devlink_param_get of the file net/co… |
CVE-2022-3620 | Medium | 5.6 | 2022-10-20 | A vulnerability was found in Exim and classified as problematic. This issue affects the function dmarc_dns_lookup of the file dmarc.c of the component DMARC Ha… |
CVE-2022-27625 | Critical | 10.0 | 2022-10-20 | A vulnerability regarding improper restriction of operations within the bounds of a memory buffer is found in the message processing functionality of Out-of-Ba… |
CVE-2022-27624 | Critical | 10.0 | 2022-10-20 | A vulnerability regarding improper restriction of operations within the bounds of a memory buffer is found in the packet decryption functionality of Out-of-Ban… |
CVE-2022-33210 | High | 8.4 | 2022-10-19 | Memory corruption in automotive multimedia due to use of out-of-range pointer offset while parsing command request packet with a very large type value. in Snap… |
CVE-2022-25662 | Medium | 5.3 | 2022-10-19 | Information disclosure due to untrusted pointer dereference in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT… |
CVE-2022-25661 | High | 8.4 | 2022-10-19 | Memory corruption due to untrusted pointer dereference in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Sn… |
CVE-2022-3595 | Low | 3.5 | 2022-10-18 | A vulnerability was found in Linux Kernel. It has been rated as problematic. Affected by this issue is the function sess_free_buffer of the file fs/cifs/sess.c… |
CVE-2022-3565 | Medium | 4.6 | 2022-10-17 | A vulnerability, which was classified as critical, has been found in Linux Kernel. Affected by this issue is the function del_timer of the file drivers/isdn/mI… |
CVE-2022-3564 | Medium | 5.5 | 2022-10-17 | A vulnerability classified as critical was found in Linux Kernel. Affected by this vulnerability is the function l2cap_reassemble_sdu of the file net/bluetooth… |
CVE-2022-3559 | Medium | 4.6 | 2022-10-17 | A vulnerability was found in Exim and classified as problematic. This issue affects some unknown processing of the component Regex Handler. The manipulation le… |
CVE-2022-3550 | Medium | 5.5 | 2022-10-17 | A vulnerability classified as critical was found in X.org Server. Affected by this vulnerability is the function _GetCountedString of the file xkb/xkb.c. The m… |
CVE-2022-3545 | Medium | 5.5 | 2022-10-17 | A vulnerability has been found in Linux Kernel and classified as critical. Affected by this vulnerability is the function area_cache_get of the file drivers/ne… |
CVE-2022-3541 | Medium | 5.5 | 2022-10-17 | A vulnerability classified as critical has been found in Linux Kernel. This affects the function spl2sw_nvmem_get_mac_address of the file drivers/net/ethernet/… |
CVE-2022-3534 | Medium | 5.5 | 2022-10-17 | A vulnerability has been found in Linux Kernel up to 5.10.162/5.15.85/6.0.15/6.1.1. The impacted element is the function btf_dump_name_dups of the file tools/l… |
CVE-2022-3523 | Medium | 5.3 | 2022-10-16 | A vulnerability was found in Linux Kernel. It has been classified as problematic. Affected is an unknown function of the file mm/memory.c of the component Driv… |
CVE-2022-38690 | Medium | 5.5 | 2022-10-14 | In camera driver, there is a possible memory corruption due to improper locking. This could lead to local denial of service in kernel. |
CVE-2022-34391 | High | 7.5 | 2022-10-12 | Dell Client BIOS Versions prior to the remediated version contain an improper input validation vulnerability. A local authenticated malicious user may potentia… |
CVE-2022-32491 | Medium | 4.1 | 2022-10-12 | Dell Client BIOS contains a Buffer Overflow vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by manipulating an S… |
CVE-2022-41202 | High | 7.8 | 2022-10-11 | Due to lack of proper memory management, when a victim opens a manipulated Visual Design Stream (.vds, vds.x3d) file received from untrusted sources in SAP 3D… |
CVE-2022-41201 | High | 7.8 | 2022-10-11 | Due to lack of proper memory management, when a victim opens a manipulated Right Hemisphere Binary (.rh, rh.x3d) file received from untrusted sources in SAP 3D… |
CVE-2022-41200 | High | 7.8 | 2022-10-11 | Due to lack of proper memory management, when a victim opens a manipulated Scalable Vector Graphic (.svg, svg.x3d) file received from untrusted sources in SAP… |
CVE-2022-41199 | High | 7.8 | 2022-10-11 | Due to lack of proper memory management, when a victim opens a manipulated Open Inventor File (.iv, vrml.x3d) file received from untrusted sources in SAP 3D Vi… |
CVE-2022-41198 | High | 7.8 | 2022-10-11 | Due to lack of proper memory management, when a victim opens a manipulated SketchUp (.skp, SketchUp.x3d) file received from untrusted sources in SAP 3D Visual… |
CVE-2022-41197 | High | 7.8 | 2022-10-11 | Due to lack of proper memory management, when a victim opens a manipulated VRML Worlds (.wrl, vrml.x3d) file received from untrusted sources in SAP 3D Visual E… |
CVE-2022-41196 | High | 7.8 | 2022-10-11 | Due to lack of proper memory management, when a victim opens a manipulated VRML Worlds (.wrl, vrml.x3d) file received from untrusted sources in SAP 3D Visual E… |
CVE-2022-41195 | High | 7.8 | 2022-10-11 | Due to lack of proper memory management, when a victim opens a manipulated EAAmiga Interchange File Format (.iff, 2d.x3d) file received from untrusted sources… |
CVE-2022-41194 | High | 7.8 | 2022-10-11 | Due to lack of proper memory management, when a victim opens a manipulated Encapsulated Postscript (.eps, ai.x3d) file received from untrusted sources in SAP 3… |
CVE-2022-41193 | High | 7.8 | 2022-10-11 | Due to lack of proper memory management, when a victim opens a manipulated Encapsulated Post Script (.eps, ai.x3d) file received from untrusted sources in SAP… |
CVE-2022-41192 | High | 7.8 | 2022-10-11 | Due to lack of proper memory management, when a victim opens manipulated Jupiter Tesselation (.jt, JTReader.x3d) file received from untrusted sources in SAP 3D… |
CVE-2022-41191 | High | 7.8 | 2022-10-11 | Due to lack of proper memory management, when a victim opens a manipulated Jupiter Tesselation (.jt, JTReader.x3d) file received from untrusted sources in SAP… |
CVE-2022-41190 | High | 7.8 | 2022-10-11 | Due to lack of proper memory management, when a victim opens a manipulated AutoCAD (.dxf, TeighaTranslator.exe) file received from untrusted sources in SAP 3D… |
CVE-2022-41189 | High | 7.8 | 2022-10-11 | Due to lack of proper memory management, when a victim opens a manipulated AutoCAD (.dwg, TeighaTranslator.exe) file received from untrusted sources in SAP 3D… |
CVE-2022-41188 | High | 7.8 | 2022-10-11 | Due to lack of proper memory management, when a victim opens manipulated Wavefront Object (.obj, ObjTranslator.exe) file received from untrusted sources in SAP… |
CVE-2022-41187 | High | 7.8 | 2022-10-11 | Due to lack of proper memory management, when a victim opens a manipulated Wavefront Object (.obj, ObjTranslator.exe) file received from untrusted sources in S… |
CVE-2022-41186 | High | 7.8 | 2022-10-11 | Due to lack of proper memory management, when a victim opens manipulated Computer Graphics Metafile (.cgm, CgmCore.dll) file received from untrusted sources in… |
CVE-2022-41185 | High | 7.8 | 2022-10-11 | Due to lack of proper memory management, when a victim opens a manipulated Visual Design Stream (.vds, MataiPersistence.dll) file received from untrusted sourc… |
CVE-2022-41184 | High | 7.8 | 2022-10-11 | Due to lack of proper memory management, when a victim opens a manipulated Windows Cursor File (.cur, ico.x3d) file received from untrusted sources in SAP 3D V… |
CVE-2022-41183 | Medium | 5.5 | 2022-10-11 | Due to lack of proper memory management, when a victim opens manipulated Windows Cursor File (.cur, ico.x3d) file received from untrusted sources in SAP 3D Vis… |
CVE-2022-41182 | Medium | 5.5 | 2022-10-11 | Due to lack of proper memory management, when a victim opens manipulated Parasolid Part and Assembly (.x_b, CoreCadTranslator.exe) file received from untrusted… |
CVE-2022-41181 | Medium | 5.5 | 2022-10-11 | Due to lack of proper memory management, when a victim opens manipulated Portable Document Format (.pdf, PDFPublishing.dll) file received from untrusted source… |
CVE-2022-41180 | High | 7.8 | 2022-10-11 | Due to lack of proper memory management, when a victim opens a manipulated Portable Document Format (.pdf, PDFPublishing.dll) file received from untrusted sour… |
CVE-2022-41179 | High | 7.8 | 2022-10-11 | Due to lack of proper memory management, when a victim opens a manipulated Jupiter Tesselation (.jt, JtTranslator.exe) file received from untrusted sources in… |
CVE-2022-41178 | Medium | 5.5 | 2022-10-11 | Due to lack of proper memory management, when a victim opens manipulated Iges Part and Assembly (.igs, .iges, CoreCadTranslator.exe) file received from untrust… |
CVE-2022-41177 | High | 7.8 | 2022-10-11 | Due to lack of proper memory management, when a victim opens a manipulated Iges Part and Assembly (.igs, .iges, CoreCadTranslator.exe) file received from untru… |
CVE-2022-41176 | Medium | 5.5 | 2022-10-11 | Due to lack of proper memory management, when a victim opens manipulated Enhanced Metafile (.emf, emf.x3d) file received from untrusted sources in SAP 3D Visua… |
CVE-2022-41175 | High | 7.8 | 2022-10-11 | Due to lack of proper memory management, when a victim opens a manipulated Enhanced Metafile (.emf, emf.x3d) file received from untrusted sources in SAP 3D Vis… |
CVE-2022-41174 | Medium | 5.5 | 2022-10-11 | Due to lack of proper memory management, when a victim opens manipulated Right Hemisphere Material (.rhm, rh.x3d) file received from untrusted sources in SAP 3… |
CVE-2022-41173 | Medium | 5.5 | 2022-10-11 | Due to lack of proper memory management, when a victim opens manipulated AutoCAD (.dxf, TeighaTranslator.exe) file received from untrusted sources in SAP 3D Vi… |
CVE-2022-41172 | High | 7.8 | 2022-10-11 | Due to lack of proper memory management, when a victim opens a manipulated AutoCAD (.dxf, TeighaTranslator.exe) file received from untrusted sources in SAP 3D… |
CVE-2022-41171 | Medium | 5.5 | 2022-10-11 | Due to lack of proper memory management, when a victim opens manipulated CATIA4 Part (.model, CatiaTranslator.exe) file received from untrusted sources in SAP… |
CVE-2022-41170 | High | 7.8 | 2022-10-11 | Due to lack of proper memory management, when a victim opens a manipulated CATIA4 Part (.model, CatiaTranslator.exe) file received from untrusted sources in SA… |
CVE-2022-41169 | Medium | 5.5 | 2022-10-11 | Due to lack of proper memory management, when a victim opens manipulated CATIA5 Part (.catpart, CatiaTranslator.exe) file received from untrusted sources in SA… |
CVE-2022-41168 | High | 7.8 | 2022-10-11 | Due to lack of proper memory management, when a victim opens a manipulated CATIA5 Part (.catpart, CatiaTranslator.exe) file received from untrusted sources in… |
CVE-2022-41167 | High | 7.8 | 2022-10-11 | Due to lack of proper memory management, when a victim opens a manipulated AutoCAD (.dwg, TeighaTranslator.exe) file received from untrusted sources in SAP 3D… |
CVE-2022-41166 | Medium | 5.5 | 2022-10-11 | Due to lack of proper memory management, when a victim opens manipulated Wavefront Object (.obj, ObjTranslator.exe) file received from untrusted sources in SAP… |
CVE-2022-39808 | High | 7.8 | 2022-10-11 | Due to lack of proper memory management, when a victim opens a manipulated Wavefront Object (.obj, ObjTranslator.exe) file received from untrusted sources in S… |
CVE-2022-39807 | Medium | 5.5 | 2022-10-11 | Due to lack of proper memory management, when a victim opens manipulated SolidWorks Drawing (.sldasm, CoreCadTranslator.exe) file received from untrusted sourc… |
CVE-2022-39806 | High | 7.8 | 2022-10-11 | Due to lack of proper memory management, when a victim opens a manipulated SolidWorks Drawing (.slddrw, CoreCadTranslator.exe) file received from untrusted sou… |
CVE-2022-39805 | High | 7.8 | 2022-10-11 | Due to lack of proper memory management, when a victim opens a manipulated Computer Graphics Metafile (.cgm, CgmTranslator.exe) file received from untrusted so… |
CVE-2022-39804 | High | 7.8 | 2022-10-11 | Due to lack of proper memory management, when a victim opens a manipulated SolidWorks Part (.sldprt, CoreCadTranslator.exe) file received from untrusted source… |
CVE-2022-39803 | High | 7.8 | 2022-10-11 | Due to lack of proper memory management, when a victim opens a manipulated ACIS Part and Assembly (.sat, CoreCadTranslator.exe) file received from untrusted so… |
CVE-2022-3435 | Medium | 4.3 | 2022-10-08 | A vulnerability classified as problematic has been found in Linux Kernel. This affects the function fib_nh_match of the file net/ipv4/fib_semantics.c of the co… |
CVE-2022-29503 | Critical | 9.8 | 2022-09-29 | A memory corruption vulnerability exists in the libpthread linuxthreads functionality of uClibC 0.9.33.2 and uClibC-ng 1.0.40. Thread allocation can lead to me… |
CVE-2022-1270 | High | 7.8 | 2022-09-28 | In GraphicsMagick, a heap buffer overflow was found when parsing MIFF. |
CVE-2022-3349 | Medium | 6.8 | 2022-09-28 | A vulnerability was found in Sony PS4 and PS5. It has been classified as critical. This affects the function UVFAT_readupcasetable of the component exFAT Handl… |
CVE-2022-32847 | Critical | 9.1 | 2022-09-23 | This issue was addressed with improved checks. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, macOS Monterey 12… |