CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer (page 28)
Page 28 of 100 — CVEs classified under CWE-119, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-2873 | Medium | 5.3 | 2023-05-24 | A vulnerability classified as critical was found in Twister Antivirus 8. This vulnerability affects the function 0x804f2143/0x804f217f/0x804f214b/0x80800043 in… |
CVE-2023-30775 | Medium | 5.5 | 2023-05-19 | A vulnerability was found in the libtiff library. This security flaw causes a heap buffer overflow in extractContigSamples32bits, tiffcrop.c. |
CVE-2023-30774 | Medium | 5.5 | 2023-05-19 | A vulnerability was found in the libtiff library. This flaw causes a heap buffer overflow issue via the TIFFTAG_INKNAMES and TIFFTAG_NUMBEROFINKS values. |
CVE-2023-1972 | Medium | 6.5 | 2023-05-17 | A potential heap based buffer overflow was found in _bfd_elf_slurp_version_tables() in bfd/elf.c. This may lead to loss of availability. |
CVE-2023-1729 | Medium | 6.5 | 2023-05-15 | A flaw was found in LibRaw. A heap-buffer-overflow in raw2image_ex() caused by a maliciously crafted file may lead to an application crash. |
CVE-2022-47393 | Medium | 6.5 | 2023-05-15 | An authenticated, remote attacker may use a Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple versions of multi… |
CVE-2023-28410 | High | 8.8 | 2023-05-10 | Improper restriction of operations within the bounds of a memory buffer in some Intel(R) i915 Graphics drivers for linux before kernel version 6.2.10 may allow… |
CVE-2023-25545 | High | 8.2 | 2023-05-10 | Improper buffer restrictions in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable escalation of privilege via l… |
CVE-2023-22297 | High | 8.2 | 2023-05-10 | Access of memory location after end of buffer in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable escalation o… |
CVE-2022-41808 | Low | 3.3 | 2023-05-10 | Improper buffer restriction in software for the Intel QAT Driver for Linux before version 1.7.l.4.12 may allow an authenticated user to potentially enable deni… |
CVE-2021-46760 | Critical | 9.8 | 2023-05-09 | A malicious or compromised UApp or ABL can send a malformed system call to the bootloader, which may result in an out-of-bounds memory access that may potentia… |
CVE-2023-30088 | Medium | 5.5 | 2023-05-09 | An issue found in Cesanta MJS v.1.26 allows a local attacker to cause a denial of service via the mjs_execute function in mjs.c. |
CVE-2023-30986 | High | 7.8 | 2023-05-09 | A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 3), Solid Edge SE2023 (All versions < V223.0 Update 2). Affected applica… |
CVE-2022-47488 | Medium | 4.4 | 2023-05-09 | In spipe drive, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privile… |
CVE-2023-26285 | Medium | 5.9 | 2023-05-05 | IBM MQ 9.2 CD, 9.2 LTS, 9.3 CD, and 9.3 LTS could allow a remote attacker to cause a denial of service due to an error processing invalid data. IBM X-Force ID… |
CVE-2023-29932 | Medium | 5.5 | 2023-05-05 | llvm-project commit fdbc55a5 was discovered to contain a segmentation fault via the component mlir::IROperand<mlir::OpOperand. |
CVE-2022-25713 | High | 7.8 | 2023-05-02 | Memory corruption in Automotive due to Improper Restriction of Operations within the Bounds of a Memory Buffer while exporting a shared key. |
CVE-2023-25509 | Medium | 6.0 | 2023-04-22 | NVIDIA DGX-1 SBIOS contains a vulnerability in Bds, which may lead to code execution, denial of service, and escalation of privileges. |
CVE-2023-0206 | High | 7.5 | 2023-04-22 | NVIDIA DGX A100 SBIOS contains a vulnerability where an attacker may modify arbitrary memory of SMRAM by exploiting the NVME SMM API. A successful exploit of t… |
CVE-2023-0202 | High | 7.5 | 2023-04-22 | NVIDIA DGX A100 SBIOS contains a vulnerability where an attacker may modify arbitrary memory of SMRAM by exploiting the GenericSio and LegacySmmSredir SMM APIs… |
CVE-2021-33797 | Critical | 9.8 | 2023-04-17 | Buffer-overflow in jsdtoa.c in Artifex MuJS in versions 1.0.1 to 1.1.1. An integer overflow happens when js_strtod() reads in floating point exponent, which le… |
CVE-2023-29571 | Medium | 5.5 | 2023-04-12 | Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via gc_sweep at src/mjs_gc.c. This vulnerability can lead to a Denial of Service (DoS). |
CVE-2023-29574 | Medium | 5.5 | 2023-04-12 | Bento4 v1.6.0-639 was discovered to contain an out-of-memory bug in the mp42avc component. |
CVE-2022-46396 | Low | 3.3 | 2023-04-11 | An issue was discovered in the Arm Mali Kernel Driver. A non-privileged user can make improper GPU memory processing operations to access a limited amount outs… |
CVE-2023-25755 | High | 7.8 | 2023-04-11 | Screen Creator Advance 2 Ver.0.1.1.4 Build01A and earlier is vulnerable to improper restriction of operations within the bounds of a memory buffer (CWE-119) du… |
CVE-2023-27729 | High | 7.5 | 2023-04-09 | Nginx NJS v0.7.10 was discovered to contain an illegal memcpy via the function njs_vmcode_return at src/njs_vmcode.c. |
CVE-2022-46781 | Low | 3.3 | 2023-04-06 | An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU memory processing operations to access a limited amount… |
CVE-2023-29420 | Medium | 6.5 | 2023-04-06 | An issue was discovered in libbzip3.a in bzip3 before 1.2.3. There is a crash caused by an invalid memmove in bz3_decode_block. |
CVE-2023-26974 | Medium | 5.5 | 2023-04-04 | Irfanview v4.62 allows a user-mode write access violation via a crafted JPEG 2000 file starting at JPEG2000+0x0000000000001bf0. |
CVE-2023-1579 | High | 7.8 | 2023-04-03 | Heap based buffer overflow in binutils-gdb/bfd/libbfd.c in bfd_getl64. |
CVE-2023-27286 | High | 8.4 | 2023-04-02 | IBM Aspera Cargo 4.2.5 and IBM Aspera Connect 4.2.5 are vulnerable to a buffer overflow, caused by improper bounds checking. An attacker could overflow a buffe… |
CVE-2023-27284 | High | 8.4 | 2023-04-02 | IBM Aspera Cargo 4.2.5 and IBM Aspera Connect 4.2.5 are vulnerable to a buffer overflow, caused by improper bounds checking. An attacker could overflow a buffe… |
CVE-2023-0198 | Medium | 6.6 | 2023-04-01 | NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where improper restriction of operations within the bounds of a memory b… |
CVE-2023-0191 | High | 7.1 | 2023-04-01 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer handler, where an out-of-bounds access may lead to denial of… |
CVE-2023-0188 | Medium | 5.5 | 2023-04-01 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer handler, where an unprivileged user can cause improper restri… |
CVE-2022-2848 | Critical | 9.1 | 2023-03-29 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPServerEX 6.11.718.0. Authentication is not require… |
CVE-2023-1679 | Medium | 5.3 | 2023-03-28 | A vulnerability classified as critical was found in DriverGenius 9.70.0.346. This vulnerability affects the function 0x9C406104/0x9C40A108 in the library mydri… |
CVE-2023-1678 | Medium | 5.3 | 2023-03-28 | A vulnerability classified as critical has been found in DriverGenius 9.70.0.346. This affects the function 0x9C40A0D8/0x9C40A0DC/0x9C40A0E0 in the library myd… |
CVE-2023-1676 | High | 7.8 | 2023-03-28 | A vulnerability was found in DriverGenius 9.70.0.346. It has been declared as critical. Affected by this vulnerability is the function 0x9C402088 in the librar… |
CVE-2023-28638 | High | 7.0 | 2023-03-27 | Snappier is a high performance C# implementation of the Snappy compression algorithm. This is a buffer overrun vulnerability that can affect any user of Snappi… |
CVE-2023-1073 | Medium | 6.6 | 2023-03-27 | A memory corruption flaw was found in the Linux kernel’s human interface device (HID) subsystem in how a user inserts a malicious USB device. This flaw allows… |
CVE-2023-1626 | Medium | 5.3 | 2023-03-25 | A vulnerability was found in Jianming Antivirus 16.2.2022.418. It has been declared as critical. This vulnerability affects unknown code in the library kvcore… |
CVE-2023-1629 | Medium | 5.3 | 2023-03-25 | A vulnerability classified as critical was found in JiangMin Antivirus 16.2.2022.418. Affected by this vulnerability is the function 0x222010 in the library kv… |
CVE-2023-21047 | Medium | 4.4 | 2023-03-24 | In ConvertToHalMetadata of aidl_utils.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure… |
CVE-2023-21044 | Medium | 4.4 | 2023-03-24 | In init of VendorGraphicBufferMeta, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with… |
CVE-2023-20972 | Medium | 5.5 | 2023-03-24 | In btm_vendor_specific_evt of btm_devctl.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclos… |
CVE-2021-43317 | High | 7.5 | 2023-03-24 | A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func get_le32(). The problem is essent… |
CVE-2021-43316 | High | 7.5 | 2023-03-24 | A heap-based buffer overflow was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func get_le64(). |
CVE-2021-43315 | High | 7.5 | 2023-03-24 | A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func get_le32(). The problem is essent… |
CVE-2021-43314 | High | 7.5 | 2023-03-24 | A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func get_le32(). The problem is essent… |
CVE-2021-43313 | High | 7.5 | 2023-03-24 | A heap-based buffer overflow was discovered in upx, during the variable 'bucket' points to an inaccessible address. The issue is being triggered in the functio… |
CVE-2021-43312 | High | 7.5 | 2023-03-24 | A heap-based buffer overflow was discovered in upx, during the variable 'bucket' points to an inaccessible address. The issue is being triggered in the functio… |
CVE-2021-43311 | High | 7.5 | 2023-03-24 | A heap-based buffer overflow was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func get_le32(). The problem is essenti… |
CVE-2021-3674 | High | 7.8 | 2023-03-24 | A flaw was found in rizin. The create_section_from_phdr function allocates space for ELF section data by processing the headers. Crafted values in the headers… |
CVE-2023-22882 | Medium | 6.5 | 2023-03-16 | Zoom clients before version 5.13.5 contain a STUN parsing vulnerability. A malicious actor could send specially crafted UDP traffic to a victim Zoom client to… |
CVE-2023-22881 | Medium | 6.5 | 2023-03-16 | Zoom clients before version 5.13.5 contain a STUN parsing vulnerability. A malicious actor could send specially crafted UDP traffic to a victim Zoom client to… |
CVE-2022-34423 | High | 7.5 | 2023-03-16 | Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileg… |
CVE-2022-34422 | High | 7.5 | 2023-03-16 | Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileg… |
CVE-2022-34421 | High | 7.5 | 2023-03-16 | Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileg… |
CVE-2022-34420 | High | 7.5 | 2023-03-16 | Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileg… |
CVE-2022-34419 | High | 7.5 | 2023-03-16 | Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileg… |
CVE-2022-34418 | High | 7.5 | 2023-03-16 | Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileg… |
CVE-2022-34417 | High | 7.5 | 2023-03-16 | Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileg… |
CVE-2022-34416 | High | 7.5 | 2023-03-16 | Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileg… |
CVE-2022-34415 | High | 7.5 | 2023-03-16 | Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileg… |
CVE-2022-34414 | High | 7.5 | 2023-03-16 | Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileg… |
CVE-2022-34413 | High | 7.5 | 2023-03-16 | Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileg… |
CVE-2022-34412 | High | 7.5 | 2023-03-16 | Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileg… |
CVE-2022-34411 | High | 7.5 | 2023-03-16 | Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileg… |
CVE-2022-34410 | High | 7.5 | 2023-03-16 | Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileg… |
CVE-2022-34409 | High | 7.5 | 2023-03-16 | Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileg… |
CVE-2022-34408 | High | 7.5 | 2023-03-16 | Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileg… |
CVE-2022-34407 | High | 7.5 | 2023-03-16 | Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileg… |
CVE-2022-34406 | High | 7.5 | 2023-03-16 | Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileg… |
CVE-2023-27403 | High | 7.8 | 2023-03-14 | A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains a memory corruption vulnerabi… |
CVE-2022-47453 | Medium | 5.5 | 2023-03-10 | In wcn service, there is a possible missing params check. This could lead to local denial of service in wcn service. |
CVE-2022-25709 | High | 8.4 | 2023-03-10 | Memory corruption in modem due to use of out of range pointer offset while processing qmi msg |
CVE-2022-25694 | High | 8.4 | 2023-03-10 | Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM |
CVE-2023-20049 | High | 8.6 | 2023-03-09 | A vulnerability in the bidirectional forwarding detection (BFD) hardware offload feature of Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Service… |
CVE-2019-8720 | High | 8.8 | 2023-03-06 | A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lead to arbitrary code execution. Improved… |
CVE-2023-23517 | High | 8.8 | 2023-02-27 | The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2, watchOS 9.3, macOS Big Sur 11.7.3, Saf… |
CVE-2023-23507 | High | 7.8 | 2023-02-27 | The issue was addressed with improved bounds checks. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2. An app may be able to execute arbitrary… |
CVE-2022-34841 | Medium | 5.7 | 2023-02-16 | Improper buffer restrictions in the Intel(R) Media SDK software before version 22.2.2 may allow an authenticated user to potentially enable escalation of privi… |
CVE-2021-46023 | High | 7.5 | 2023-02-14 | An Untrusted Pointer Dereference was discovered in function mrb_vm_exec in mruby before 3.1.0-rc. The vulnerability causes a segmentation fault and application… |
CVE-2023-24564 | High | 7.8 | 2023-02-14 | A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2022 (All versions), Solid Edge SE2023 (All versions < V223… |
CVE-2022-47977 | High | 7.8 | 2023-02-14 | A vulnerability has been identified in JT Open (All versions < V11.2.3.0), JT Utilities (All versions < V13.2.3.0). The affected application contains a memory… |
CVE-2022-33246 | Medium | 6.7 | 2023-02-12 | Memory corruption in Audio due to use of out-of-range pointer offset while Initiating a voice call session from user space with invalid session id. |
CVE-2022-34377 | Low | 1.9 | 2023-02-10 | Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privil… |
CVE-2022-34376 | Low | 3.9 | 2023-02-10 | Dell PowerEdge BIOS and Dell Precision BIOS contain an improper input validation vulnerability. A local authenticated malicious user may potentially exploit… |
CVE-2023-0251 | High | 7.8 | 2023-02-08 | Delta Electronics DIAScreen versions 1.2.1.23 and prior are vulnerable to a buffer overflow through improper restrictions of operations within memory, which co… |
CVE-2022-43762 | High | 7.5 | 2023-02-08 | Lack of verification in B&R APROL Tbase server versions < R 4.2-07 may lead to memory leaks when receiving messages |
CVE-2023-20605 | Medium | 4.4 | 2023-02-06 | In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution priv… |
CVE-2022-41342 | Medium | 6.0 | 2023-02-06 | Improper buffer restrictions in the Intel(R) C++ Compiler Classic before version 2021.7.1 for some Intel(R) oneAPI Toolkits before version 2022.3.1 may allow a… |
CVE-2023-0637 | Medium | 6.5 | 2023-02-02 | A vulnerability, which was classified as critical, was found in TRENDnet TEW-811DRU 1.0.10.0. This affects an unknown part of the file wan.asp of the component… |
CVE-2023-0618 | High | 7.5 | 2023-02-01 | A vulnerability was found in TRENDnet TEW-652BRP 3.04B01. It has been declared as critical. This vulnerability affects unknown code of the file cfg_op.ccp of t… |
CVE-2023-0613 | High | 7.5 | 2023-02-01 | A vulnerability has been found in TRENDnet TEW-811DRU 1.0.10.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the fi… |
CVE-2022-32512 | Medium | 5.3 | 2023-01-30 | A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause remote code execution when a command w… |
CVE-2022-42418 | High | 7.8 | 2023-01-26 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit t… |
CVE-2022-42396 | High | 7.8 | 2023-01-26 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit t… |
CVE-2022-42377 | High | 7.8 | 2023-01-26 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit t… |