CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer (page 33)
Page 33 of 100 — CVEs classified under CWE-119, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-26336 | Medium | 5.5 | 2021-11-16 | Insufficient bounds checking in System Management Unit (SMU) may cause invalid memory accesses/updates that could result in SMU hang and subsequent failure to… |
CVE-2021-41289 | Medium | 6.3 | 2021-11-15 | ASUS P453UJ contains the Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability. With a general user’s permission, local attacke… |
CVE-2021-1973 | High | 7.8 | 2021-11-12 | A FTM Diag command can allow an arbitrary write into modem OS space in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, S… |
CVE-2021-31883 | High | 7.1 | 2021-11-09 | A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303). When proc… |
CVE-2021-31882 | Medium | 6.5 | 2021-11-09 | A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303). The DHCP… |
CVE-2021-41771 | High | 7.5 | 2021-11-08 | ImportedSymbols in debug/macho (for Open or OpenFat) in Go before 1.16.10 and 1.17.x before 1.17.3 Accesses a Memory Location After the End of a Buffer, aka an… |
CVE-2021-37002 | Critical | 9.8 | 2021-10-28 | There is a Memory out-of-bounds access vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause malicious code to be executed. |
CVE-2021-40117 | High | 8.6 | 2021-10-27 | A vulnerability in SSL/TLS message handler for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow a… |
CVE-2021-34783 | High | 8.6 | 2021-10-27 | A vulnerability in the software-based SSL/TLS message handler of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software c… |
CVE-2021-34781 | High | 8.6 | 2021-10-27 | A vulnerability in the processing of SSH connections for multi-instance deployments of Cisco Firepower Threat Defense (FTD) Software could allow an unauthentic… |
CVE-2021-34595 | High | 8.1 | 2021-10-26 | A crafted request with invalid offsets may cause an out-of-bounds read or write access in CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions… |
CVE-2021-34859 | High | 8.8 | 2021-10-25 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of TeamViewer 15.16.8.0. User interaction is required to exploit… |
CVE-2021-34856 | High | 8.8 | 2021-10-25 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.3 (49160). An attacker must first obtain t… |
CVE-2021-38473 | High | 8.0 | 2021-10-22 | The affected product’s code base doesn’t properly control arguments for specific functions, which could lead to a stack overflow. |
CVE-2021-30316 | High | 8.4 | 2021-10-20 | Possible out of bound memory access due to improper boundary check while creating HSYNC fence in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer… |
CVE-2021-3746 | Medium | 6.5 | 2021-10-19 | A flaw was found in the libtpms code that may cause access beyond the boundary of internal buffers. The vulnerability is triggered by specially-crafted TPM2 co… |
CVE-2021-3889 | High | 8.1 | 2021-10-19 | libmobi is vulnerable to Use of Out-of-range Pointer Offset |
CVE-2021-3888 | High | 8.1 | 2021-10-19 | libmobi is vulnerable to Use of Out-of-range Pointer Offset |
CVE-2021-38442 | High | 7.8 | 2021-10-18 | FATEK Automation WinProladder versions 3.30 and prior lacks proper validation of user-supplied data when parsing project files, which could result in a heap-co… |
CVE-2021-38436 | High | 7.8 | 2021-10-18 | FATEK Automation WinProladder versions 3.30 and prior lacks proper validation of user-supplied data when parsing project files, which could result in a memory-… |
CVE-2021-41121 | High | 7.5 | 2021-10-06 | Vyper is a Pythonic Smart Contract Language for the EVM. In affected versions when performing a function call inside a literal struct, there is a memory corrup… |
CVE-2021-25493 | Medium | 4.0 | 2021-10-06 | Lack of boundary checking of a buffer in libSPenBase library of Samsung Notes prior to Samsung Note version 4.3.02.61 allows OOB read |
CVE-2021-40715 | High | 7.8 | 2021-09-29 | Adobe Premiere Pro version 15.4 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious .exr file, potentially r… |
CVE-2021-40710 | High | 7.8 | 2021-09-29 | Adobe Premiere Pro version 15.4 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious .svg file, potentially r… |
CVE-2021-39832 | High | 7.8 | 2021-09-29 | Adobe Framemaker versions 2019 Update 8 (and earlier) and 2020 Release Update 2 (and earlier) are affected by a memory corruption vulnerability due to insecure… |
CVE-2021-39830 | High | 7.8 | 2021-09-29 | Adobe Framemaker versions 2019 Update 8 (and earlier) and 2020 Release Update 2 (and earlier) are affected by a memory corruption vulnerability due to insecure… |
CVE-2021-40703 | High | 7.8 | 2021-09-27 | Adobe Premiere Elements version 2021.2235820 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious m4a file, p… |
CVE-2021-40702 | High | 7.8 | 2021-09-27 | Adobe Premiere Elements version 2021.2235820 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious psd file, p… |
CVE-2021-40701 | High | 7.8 | 2021-09-27 | Adobe Premiere Elements version 2021.2235820 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious m4a file, p… |
CVE-2021-40700 | High | 7.8 | 2021-09-27 | Adobe Premiere Elements version 2021.2235820 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious TIFF file… |
CVE-2021-39824 | High | 7.8 | 2021-09-27 | Adobe Premiere Elements version 2021.2235820 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious png file, p… |
CVE-2021-39819 | High | 7.8 | 2021-09-27 | Adobe InCopy version 11.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious XML file, potentially resultin… |
CVE-2021-39818 | High | 7.8 | 2021-09-27 | Adobe InCopy version 11.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious TIFF file, potentially resulti… |
CVE-2021-40157 | High | 7.8 | 2021-09-15 | A user may be tricked into opening a malicious FBX file which may exploit an Untrusted Pointer Dereference vulnerability in FBX’s Review version 1.5.0 and prio… |
CVE-2021-33737 | High | 7.5 | 2021-09-14 | A vulnerability has been identified in SIMATIC CP 343-1 (incl. SIPLUS variants) (All versions), SIMATIC CP 343-1 Advanced (incl. SIPLUS variants) (All versions… |
CVE-2021-25449 | Medium | 6.5 | 2021-09-09 | An improper input validation vulnerability in libsapeextractor library prior to SMR Sep-2021 Release 1 allows attackers to execute arbitrary code in mediaextra… |
CVE-2021-30666 | High | 8.8 | 2021-09-08 | A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 12.5.3. Processing maliciously crafted web content may lead to… |
CVE-2021-1816 | High | 7.8 | 2021-09-08 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. A malicious application… |
CVE-2021-1770 | Critical | 9.8 | 2021-09-08 | A buffer overflow may result in arbitrary code execution. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. A logic… |
CVE-2021-22789 | Medium | 6.5 | 2021-09-02 | A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability that could cause a Denial of Service on the Modicon PLC contro… |
CVE-2021-39817 | High | 7.8 | 2021-09-01 | Adobe Bridge version 11.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious Bridge file, potentially resul… |
CVE-2021-39816 | High | 7.8 | 2021-09-01 | Adobe Bridge version 11.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious Bridge file, potentially resul… |
CVE-2021-36078 | High | 7.8 | 2021-09-01 | Adobe Bridge version 11.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious Bridge file, potentially resul… |
CVE-2021-36077 | Medium | 5.5 | 2021-09-01 | Adobe Bridge version 11.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious SVG file, potentially resultin… |
CVE-2021-36076 | High | 7.8 | 2021-09-01 | Adobe Bridge version 11.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious Bridge file, potentially resul… |
CVE-2021-36070 | High | 7.8 | 2021-09-01 | Adobe Media Encoder version 15.1 (and earlier) is affected by an improper memory access vulnerability when parsing a crafted .SVG file. An attacker could lever… |
CVE-2021-36069 | High | 7.8 | 2021-09-01 | Adobe Bridge version 11.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious Bridge file, potentially resul… |
CVE-2021-36068 | High | 7.8 | 2021-09-01 | Adobe Bridge version 11.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious Bridge file, potentially resul… |
CVE-2021-36067 | High | 7.8 | 2021-09-01 | Adobe Bridge version 11.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious Bridge file, potentially resul… |
CVE-2021-36059 | High | 7.8 | 2021-09-01 | Adobe Bridge version 11.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious Bridge file, potentially resul… |
CVE-2021-40142 | High | 7.5 | 2021-08-27 | In OPC Foundation Local Discovery Server (LDS) before 1.04.402.463, remote attackers can cause a denial of service (DoS) by sending carefully crafted messages… |
CVE-2021-3605 | Medium | 5.5 | 2021-08-25 | There's a flaw in OpenEXR's rleUncompress functionality in versions prior to 3.0.5. An attacker who is able to submit a crafted file to an application linked w… |
CVE-2021-21849 | High | 8.8 | 2021-08-25 | An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A special… |
CVE-2021-21848 | High | 8.8 | 2021-08-25 | An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. The libra… |
CVE-2021-21842 | High | 8.8 | 2021-08-25 | An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A special… |
CVE-2021-21841 | High | 8.8 | 2021-08-25 | An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A special… |
CVE-2021-21840 | High | 8.8 | 2021-08-25 | An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A special… |
CVE-2021-21836 | High | 8.8 | 2021-08-25 | An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A special… |
CVE-2021-21835 | High | 8.8 | 2021-08-25 | An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A special… |
CVE-2021-21834 | High | 8.8 | 2021-08-25 | An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A special… |
CVE-2021-21862 | High | 8.8 | 2021-08-18 | Multiple exploitable integer truncation vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1… |
CVE-2021-21858 | High | 8.8 | 2021-08-18 | Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A… |
CVE-2021-21857 | High | 8.8 | 2021-08-18 | Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A… |
CVE-2021-21856 | High | 8.8 | 2021-08-18 | Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A… |
CVE-2021-21855 | High | 8.8 | 2021-08-18 | Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A… |
CVE-2021-21854 | High | 8.8 | 2021-08-18 | Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A… |
CVE-2021-21853 | High | 8.8 | 2021-08-18 | Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A… |
CVE-2021-21847 | High | 8.8 | 2021-08-18 | Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A… |
CVE-2021-21846 | High | 8.8 | 2021-08-18 | Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A… |
CVE-2021-21845 | High | 8.8 | 2021-08-18 | Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A… |
CVE-2021-21844 | High | 8.8 | 2021-08-18 | Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A… |
CVE-2021-21843 | High | 8.8 | 2021-08-18 | Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A… |
CVE-2021-21839 | High | 8.8 | 2021-08-18 | Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A… |
CVE-2021-21838 | High | 8.8 | 2021-08-18 | Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A… |
CVE-2021-3635 | Medium | 4.4 | 2021-08-13 | A flaw was found in the Linux kernel netfilter implementation in versions prior to 5.5-rc7. A user with root (CAP_SYS_ADMIN) access is able to panic the system… |
CVE-2021-1111 | Medium | 6.7 | 2021-08-11 | Bootloader contains a vulnerability in the NV3P server where any user with physical access through USB can trigger an incorrect bounds check, which may lead to… |
CVE-2021-0004 | Medium | 4.4 | 2021-08-11 | Improper buffer restrictions in the firmware of Intel(R) Ethernet Adapters 800 Series Controllers and associated adapters before version 1.5.3.0 may allow a pr… |
CVE-2021-38201 | High | 7.5 | 2021-08-08 | net/sunrpc/xdr.c in the Linux kernel before 5.13.4 allows remote attackers to cause a denial of service (xdr_set_page_base slab-out-of-bounds access) by perfor… |
CVE-2021-38190 | Critical | 9.8 | 2021-08-08 | An issue was discovered in the nalgebra crate before 0.27.1 for Rust. It allows out-of-bounds memory access because it does not ensure that the number of eleme… |
CVE-2021-36754 | High | 7.5 | 2021-07-30 | PowerDNS Authoritative Server 4.5.0 before 4.5.1 allows anybody to crash the process by sending a specific query (QTYPE 65535) that causes an out-of-bounds exc… |
CVE-2021-33478 | Medium | 6.8 | 2021-07-22 | The TrustZone implementation in certain Broadcom MediaxChange firmware could allow an unauthenticated, physically proximate attacker to achieve arbitrary code… |
CVE-2021-31979 | High | 7.8 | 2021-07-14 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2021-34306 | High | 7.8 | 2021-07-13 | A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The BMP_Loader.dll library in affected ap… |
CVE-2021-3571 | High | 7.1 | 2021-07-09 | A flaw was found in the ptp4l program of the linuxptp package. When ptp4l is operating on a little-endian architecture as a PTP transparent clock, a remote att… |
CVE-2021-3570 | High | 8.8 | 2021-07-09 | A flaw was found in the ptp4l program of the linuxptp package. A missing length check when forwarding a PTP message between ports allows a remote attacker to c… |
CVE-2021-21794 | High | 7.8 | 2021-07-08 | An out-of-bounds write vulnerability exists in the TIF bits_per_sample processing functionality of Accusoft ImageGear 19.9. A specially crafted malformed file… |
CVE-2021-32537 | Medium | 6.5 | 2021-07-07 | Realtek HAD contains a driver crashed vulnerability which allows local side attackers to send a special string to the kernel driver in a user’s mode. Due to un… |
CVE-2021-3598 | Medium | 5.5 | 2021-07-06 | There's a flaw in OpenEXR's ImfDeepScanLineInputFile functionality in versions prior to 3.0.5. An attacker who is able to submit a crafted file to an applicati… |
CVE-2021-27477 | High | 7.5 | 2021-07-01 | When JTEKT Corporation TOYOPUC PLC versions PC10G-CPU, 2PORT-EFR, Plus CPU, Plus EX, Plus EX2, Plus EFR, Plus EFR2, Plus 2P-EFR, PC10P-DP, PC10P-DP-IO, Plus BU… |
CVE-2021-34378 | High | 7.7 | 2021-06-30 | Trusty contains a vulnerability in the HDCP service TA where bounds checking in command 11 is missing. Improper restriction of operations within the bounds of… |
CVE-2021-34377 | High | 7.7 | 2021-06-30 | Trusty contains a vulnerability in the HDCP service TA where bounds checking in command 9 is missing. Improper restriction of operations within the bounds of a… |
CVE-2021-34376 | High | 7.7 | 2021-06-30 | Trusty contains a vulnerability in the HDCP service TA where bounds checking in command 5 is missing. Improper restriction of operations within the bounds of a… |
CVE-2021-32992 | Critical | 9.8 | 2021-06-29 | FATEK Automation WinProladder Versions 3.30 and prior do not properly restrict operations within the bounds of a memory buffer, which may allow an attacker to… |
CVE-2021-34550 | High | 7.5 | 2021-06-29 | An issue was discovered in Tor before 0.4.6.5, aka TROVE-2021-006. The v3 onion service descriptor parsing allows out-of-bounds memory access, and a client cra… |
CVE-2021-32493 | High | 7.8 | 2021-06-24 | A flaw was found in djvulibre-3.5.28 and earlier. A heap buffer overflow in function DJVU::GBitmap::decode() via crafted djvu file may lead to application cras… |
CVE-2021-32492 | High | 7.8 | 2021-06-24 | A flaw was found in djvulibre-3.5.28 and earlier. An out of bounds read in function DJVU::DataPool::has_data() via crafted djvu file may lead to application cr… |
CVE-2021-32490 | High | 7.8 | 2021-06-24 | A flaw was found in djvulibre-3.5.28 and earlier. An out of bounds write in function DJVU::filter_bv() via crafted djvu file may lead to application crash and… |
CVE-2021-33004 | High | 7.8 | 2021-06-24 | The affected product is vulnerable to memory corruption condition due to lack of proper validation of user supplied files, which may allow an attacker to execu… |
CVE-2021-20019 | High | 7.5 | 2021-06-23 | A vulnerability in SonicOS where the HTTP server response leaks partial memory by sending a crafted HTTP request, this can potentially lead to an internal sens… |
CVE-2021-31495 | High | 7.8 | 2021-06-15 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is requir… |