CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer (page 35)
Page 35 of 100 — CVEs classified under CWE-119, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-8577 | High | 7.8 | 2019-12-18 | An input validation issue was addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, iTunes… |
CVE-2019-8555 | High | 7.8 | 2019-12-18 | A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Mojave 10.14.4. A malicious application may be able to execute arbi… |
CVE-2019-11400 | Critical | 9.8 | 2019-12-18 | An issue was discovered on TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices. A buffer overflow occurs through the get_set.ccp ccp_… |
CVE-2019-10544 | High | 7.8 | 2019-12-18 | Improper length check on source buffer to handle userspace data received can lead to out-of-bound access in diag handlers in Snapdragon Auto, Snapdragon Comput… |
CVE-2019-14608 | High | 7.8 | 2019-12-16 | Improper buffer restrictions in firmware for Intel(R) NUC(R) may allow an authenticated user to potentially enable escalation of privilege via local access. |
CVE-2019-13942 | High | 7.5 | 2019-12-12 | A vulnerability has been identified in EN100 Ethernet module DNP3 variant (All versions), EN100 Ethernet module IEC 61850 variant (All versions < V4.37), EN100… |
CVE-2019-10618 | Medium | 5.5 | 2019-12-12 | Driver may access an invalid address while processing IO control due to lack of check of address validation in Snapdragon Connectivity in QCA6390 |
CVE-2019-19581 | Medium | 6.5 | 2019-12-11 | An issue was discovered in Xen through 4.12.x allowing 32-bit Arm guest OS users to cause a denial of service (out-of-bounds access) because certain bit iterat… |
CVE-2019-13726 | High | 8.8 | 2019-12-10 | Buffer overflow in password manager in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to execute arbitrary code via a crafted HTML page. |
CVE-2019-19602 | Medium | 6.1 | 2019-12-05 | fpregs_state_valid in arch/x86/include/asm/fpu/internal.h in the Linux kernel before 5.4.2, when GCC 9 is used, allows context-dependent attackers to cause a d… |
CVE-2019-19601 | High | 7.8 | 2019-12-05 | OpenDetex 2.8.5 has a Buffer Overflow in TexOpen in detex.l because of an incorrect sprintf. |
CVE-2019-19481 | Medium | 4.6 | 2019-12-01 | An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/card-cac1.c mishandles buffer limits for CAC certificates. |
CVE-2019-15286 | High | 7.8 | 2019-11-26 | Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an attacker to… |
CVE-2019-15284 | High | 7.8 | 2019-11-26 | Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an attacker to… |
CVE-2019-2297 | High | 7.8 | 2019-11-21 | Buffer overflow can occur while processing non-standard NAN message from user space. in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdrag… |
CVE-2019-2295 | Medium | 5.5 | 2019-11-21 | Information disclosure due to lack of address range check done on the SysDBG buffers in SDI code. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivi… |
CVE-2019-10627 | Critical | 9.8 | 2019-11-21 | Integer overflow to buffer overflow vulnerability in PostScript image handling code used by the PostScript- and PDF-compatible interpreters due to incorrect bu… |
CVE-2019-10535 | Medium | 5.5 | 2019-11-21 | Improper validation for loop variable received from firmware can lead to out of bound access in WLAN function while iterating through loop in Snapdragon Auto… |
CVE-2015-3166 | Critical | 9.8 | 2019-11-20 | The snprintf implementation in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x before 9.4.2 does not properly… |
CVE-2013-7087 | Critical | 9.8 | 2019-11-15 | ClamAV before 0.97.7 has WWPack corrupt heap memory |
CVE-2019-11113 | Medium | 4.4 | 2019-11-14 | Buffer overflow in Kernel Mode module for Intel(R) Graphics Driver before version 25.20.100.6618 (DCH) or 21.20.x.5077 (aka15.45.5077) may allow a privileged u… |
CVE-2019-0152 | Medium | 6.7 | 2019-11-14 | Insufficient memory protection in System Management Mode (SMM) and Intel(R) TXT for certain Intel(R) Xeon(R) Processors may allow a privileged user to potentia… |
CVE-2019-0151 | Medium | 6.7 | 2019-11-14 | Insufficient memory protection in Intel(R) TXT for certain Intel(R) Core Processors and Intel(R) Xeon(R) Processors may allow a privileged user to potentially… |
CVE-2019-1441 | High | 8.8 | 2019-11-12 | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka 'Win32k Graphics Remote Cod… |
CVE-2019-2324 | Critical | 9.8 | 2019-11-06 | When ADSP is compromised, the audio port index that`s returned from ADSP might be out of the valid range and leads to out of boundary access in Snapdragon Auto… |
CVE-2019-2275 | Medium | 5.5 | 2019-11-06 | While deserializing any key blob during key operations, buffer overflow could occur exposing partial key information if any key operations are invoked(Depends… |
CVE-2019-10541 | Critical | 9.8 | 2019-11-06 | Dereference on uninitialized buffer can happen when parsing FLV clip with corrupted codec specific data in Snapdragon Auto, Snapdragon Compute, Snapdragon Cons… |
CVE-2019-10502 | High | 7.8 | 2019-11-06 | Possible stack overflow when an index equal to io buffer size is accessed in camera module in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industria… |
CVE-2017-5332 | High | 7.8 | 2019-11-04 | The extract_group_icon_cursor_resource in wrestool/extract.c in icoutils before 0.31.1 can access unallocated memory, which allows local users to cause a denia… |
CVE-2013-2739 | Critical | 9.8 | 2019-11-01 | MiniDLNA has heap-based buffer overflow |
CVE-2019-13508 | Critical | 9.8 | 2019-10-31 | FreeTDS through 1.1.11 has a Buffer Overflow. |
CVE-2010-0749 | Medium | 5.3 | 2019-10-30 | Transmission before 1.92 allows attackers to prevent download of a file by corrupted data during the endgame. |
CVE-2017-5731 | High | 7.8 | 2019-10-28 | Bounds checking in Tianocompress before November 7, 2017 may allow an authenticated user to potentially enable an escalation of privilege via local access. |
CVE-2017-14742 | Critical | 9.8 | 2019-10-25 | Buffer overflow in LabF nfsAxe FTP client 3.7 allows an attacker to execute code remotely. |
CVE-2019-11933 | Critical | 9.8 | 2019-10-23 | A heap buffer overflow bug in libpl_droidsonroids_gif before 1.2.19, as used in WhatsApp for Android before version 2.19.291 could allow remote attackers to ex… |
CVE-2019-18281 | Medium | 4.3 | 2019-10-23 | An out-of-bounds memory access in the generateDirectionalRuns() function in qtextengine.cpp in Qt qtbase 5.11.x and 5.12.x before 5.12.5 allows attackers to ca… |
CVE-2019-8205 | Critical | 9.8 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-8196 | Critical | 9.8 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-8195 | Critical | 9.8 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-8174 | High | 8.8 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-15252 | High | 8.0 | 2019-10-16 | Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with… |
CVE-2019-15251 | High | 8.0 | 2019-10-16 | Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with… |
CVE-2019-15250 | High | 8.0 | 2019-10-16 | Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with… |
CVE-2019-15249 | High | 8.0 | 2019-10-16 | Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with… |
CVE-2019-15248 | High | 8.0 | 2019-10-16 | Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with… |
CVE-2019-15247 | High | 8.0 | 2019-10-16 | Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with… |
CVE-2019-15246 | High | 8.0 | 2019-10-16 | Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with… |
CVE-2019-15245 | High | 8.0 | 2019-10-16 | Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with… |
CVE-2019-15244 | High | 8.0 | 2019-10-16 | Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with… |
CVE-2019-15243 | High | 8.0 | 2019-10-16 | Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with… |
CVE-2019-15242 | High | 8.0 | 2019-10-16 | Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with… |
CVE-2019-15241 | High | 8.0 | 2019-10-16 | Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with… |
CVE-2019-15240 | High | 8.0 | 2019-10-16 | Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with… |
CVE-2018-21027 | Critical | 9.8 | 2019-10-11 | Boa through 0.94.14rc21 allows remote attackers to trigger an out-of-memory (OOM) condition because malloc is mishandled. |
CVE-2019-14569 | High | 7.8 | 2019-10-11 | Pointer corruption in system firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of privilege, denial of service and/or info… |
CVE-2019-17320 | Critical | 9.8 | 2019-10-10 | NetSarang XFTP Client 6.0149 and earlier version contains a buffer overflow vulnerability caused by improper boundary checks when copying file name from an att… |
CVE-2019-5699 | High | 7.8 | 2019-10-09 | NVIDIA Shield TV Experience prior to v8.0.1, NVIDIA Tegra bootloader contains a vulnerability where the software performs an incorrect bounds check, which may… |
CVE-2018-5732 | High | 7.5 | 2019-10-09 | Failure to properly bounds-check a buffer used for processing DHCP options allows a malicious server (or an entity masquerading as a server) to cause a buffer… |
CVE-2018-11768 | High | 7.5 | 2019-10-04 | In Apache Hadoop 3.1.0 to 3.1.1, 3.0.0-alpha1 to 3.0.3, 2.9.0 to 2.9.1, and 2.0.0-alpha to 2.8.4, the user/group information can be corrupted across storing in… |
CVE-2019-12688 | High | 8.8 | 2019-10-02 | A vulnerability in the web UI of the Cisco Firepower Management Center (FMC) could allow an authenticated, remote attacker to execute arbitrary commands on an… |
CVE-2019-12687 | High | 8.8 | 2019-10-02 | A vulnerability in the web UI of the Cisco Firepower Management Center (FMC) could allow an authenticated, remote attacker to execute arbitrary commands on an… |
CVE-2019-12673 | High | 7.5 | 2019-10-02 | A vulnerability in the FTP inspection engine of Cisco Adaptive Security (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthe… |
CVE-2019-11929 | Critical | 9.8 | 2019-10-02 | Insufficient boundary checks when formatting numbers in number_format allows read/write access to out-of-bounds memory, potentially leading to remote code exec… |
CVE-2019-2191 | Medium | 4.3 | 2019-09-27 | In LG's LAF component, there is a possible leak of information in a protected disk partition due to a missing bounds check. This could lead to local informatio… |
CVE-2019-2190 | Medium | 4.3 | 2019-09-27 | In LG's LAF component, there is a possible leak of information in a protected disk partition due to a missing bounds check. This could lead to local informatio… |
CVE-2019-10978 | High | 7.8 | 2019-09-23 | Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, allow multiple vulnerabilities to be exploited when a valid user ope… |
CVE-2019-16707 | Medium | 6.5 | 2019-09-23 | Hunspell 1.7.0 has an invalid read operation in SuggestMgr::leftcommonsubstring in suggestmgr.cxx. |
CVE-2019-1214 | High | 7.8 | 2019-09-11 | An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory, aka 'Windows Common… |
CVE-2019-11467 | High | 7.5 | 2019-09-10 | In Couchbase Server 4.6.3 and 5.5.0, secondary indexing encodes the entries to be indexed using collatejson. When index entries contain certain characters like… |
CVE-2019-11926 | Critical | 9.8 | 2019-09-06 | Insufficient boundary checks when processing M_SOFx markers from JPEG headers in the GD extension could allow access to out-of-bounds memory via a maliciously… |
CVE-2019-11925 | Critical | 9.8 | 2019-09-06 | Insufficient boundary checks when processing the JPEG APP12 block marker in the GD extension could allow access to out-of-bounds memory via a maliciously const… |
CVE-2019-16058 | High | 7.5 | 2019-09-06 | An issue was discovered in the pam_p11 component 0.2.0 and 0.3.0 for OpenSC. If a smart card creates a signature with a length longer than 256 bytes, this trig… |
CVE-2019-15946 | Medium | 6.4 | 2019-09-05 | OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Octet string in asn1_decode_entry in libopensc/asn1.c. |
CVE-2019-15945 | Medium | 6.4 | 2019-09-05 | OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Bitstring in decode_bit_string in libopensc/asn1.c. |
CVE-2019-12223 | High | 7.5 | 2019-09-05 | An issue was discovered in NVR WebViewer on Hanwah Techwin SRN-472s 1.07_190502 devices, and other SRN-x devices before 2019-05-03. A system crash and reboot c… |
CVE-2019-13522 | High | 7.8 | 2019-09-04 | An attacker could use a specially crafted project file to corrupt the memory and execute code under the privileges of the EZ PLC Editor Versions 1.8.41 and pri… |
CVE-2019-13518 | High | 7.8 | 2019-09-04 | An attacker could use a specially crafted project file to overflow the buffer and execute code under the privileges of the EZ Touch Editor Versions 2.1.0 and p… |
CVE-2019-15786 | Critical | 9.8 | 2019-08-29 | ROBOTIS Dynamixel SDK through 3.7.11 has a buffer overflow via a large rxpacket. |
CVE-2019-15785 | Critical | 9.8 | 2019-08-29 | FontForge 20190813 through 20190820 has a buffer overflow in PrefsUI_LoadPrefs in prefs.c. |
CVE-2019-15783 | Critical | 9.8 | 2019-08-29 | Lute-Tab before 2019-08-23 has a buffer overflow in pdf_print.cc. |
CVE-2017-14202 | High | 7.8 | 2019-08-29 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in the shell component of Zephyr allows a serial or telnet connected user… |
CVE-2019-9933 | Critical | 9.8 | 2019-08-28 | Various Lexmark products have a Buffer Overflow (issue 3 of 3). |
CVE-2019-9932 | Critical | 9.8 | 2019-08-28 | Various Lexmark products have a Buffer Overflow (issue 2 of 3). |
CVE-2019-13484 | Critical | 9.8 | 2019-08-27 | In Xymon through 4.3.28, a buffer overflow exists in the status-log viewer CGI because of expansion in appfeed.c. |
CVE-2019-13452 | Critical | 9.8 | 2019-08-27 | In Xymon through 4.3.28, a buffer overflow vulnerability exists in reportlog.c. |
CVE-2019-13451 | Critical | 9.8 | 2019-08-27 | In Xymon through 4.3.28, a buffer overflow vulnerability exists in history.c. |
CVE-2019-15548 | Critical | 9.8 | 2019-08-26 | An issue was discovered in the ncurses crate through 5.99.0 for Rust. There are instr and mvwinstr buffer overflows because interaction with C functions is mis… |
CVE-2018-20998 | Critical | 9.8 | 2019-08-26 | An issue was discovered in the arrayfire crate before 3.6.0 for Rust. Addition of the repr() attribute to an enum is mishandled, leading to memory corruption. |
CVE-2018-20995 | Critical | 9.8 | 2019-08-26 | An issue was discovered in the slice-deque crate before 0.1.16 for Rust. move_head_unchecked allows memory corruption because deque updates are mishandled. |
CVE-2019-14307 | High | 8.8 | 2019-08-26 | Several Ricoh printers have multiple buffer overflows parsing HTTP parameter settings for SNMP, which allow an attacker to cause a denial of service or code ex… |
CVE-2019-14305 | High | 8.8 | 2019-08-26 | Several Ricoh printers have multiple buffer overflows parsing HTTP parameter settings for Wi-Fi, mDNS, POP3, SMTP, and notification alerts, which allow an atta… |
CVE-2019-14300 | Critical | 9.8 | 2019-08-26 | Several Ricoh printers have multiple buffer overflows parsing HTTP cookie headers, which allow an attacker to cause a denial of service or code execution via c… |
CVE-2018-21000 | Critical | 9.8 | 2019-08-26 | An issue was discovered in the safe-transmute crate before 0.10.1 for Rust. A constructor's arguments are in the wrong order, causing heap memory corruption. |
CVE-2019-14308 | Critical | 9.8 | 2019-08-26 | Several Ricoh printers have multiple buffer overflows parsing LPD packets, which allow an attacker to cause a denial of service or code execution via crafted r… |
CVE-2019-1871 | High | 7.2 | 2019-08-21 | A vulnerability in the Import Cisco IMC configuration utility of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to… |
CVE-2019-3634 | Medium | 5.5 | 2019-08-21 | Buffer overflow in McAfee Data Loss Prevention (DLPe) for Windows 11.x prior to 11.3.2.8 allows local user to cause the Windows operating system to "blue scree… |
CVE-2019-3633 | Medium | 5.5 | 2019-08-21 | Buffer overflow in McAfee Data Loss Prevention (DLPe) for Windows 11.x prior to 11.3.2.8 allows local user to cause the Windows operating system to "blue scree… |
CVE-2019-15296 | High | 7.8 | 2019-08-21 | An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The faad_resetbits function in libfaad/bits.c is affected by a buffer overflow vuln… |
CVE-2019-8048 | Critical | 9.8 | 2019-08-20 | Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.3049… |
CVE-2019-8045 | Critical | 9.8 | 2019-08-20 | Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.3049… |