CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer (page 37)
Page 37 of 100 — CVEs classified under CWE-119, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2016-11038 | Critical | 9.8 | 2020-04-07 | An issue was discovered on Samsung mobile devices with software through 2016-04-05 (incorporating the Samsung Professional Audio SDK). The Jack audio service d… |
CVE-2016-11035 | Medium | 5.5 | 2020-04-07 | An issue was discovered on Samsung mobile devices with software through 2016-05-27 (Exynos AP chipsets). A local graphics user can cause a Kernel Crash via the… |
CVE-2016-11045 | High | 7.8 | 2020-04-07 | An issue was discovered on Samsung mobile devices with L(5.0/5.1) software. The Gallery library allow memory corruption via a malformed image. The Samsung ID i… |
CVE-2020-5861 | High | 7.5 | 2020-03-27 | On BIG-IP 12.1.0-12.1.5, the TMM process may produce a core file in some cases when Ram Cache incorrectly optimizes stored data resulting in memory errors. |
CVE-2019-5105 | High | 7.5 | 2020-03-26 | An exploitable memory corruption vulnerability exists in the Name Service Client functionality of 3S-Smart Software Solutions CODESYS GatewayService. A special… |
CVE-2020-3776 | High | 8.8 | 2020-03-25 | Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a buffer errors vulnerability. Successful exploitation c… |
CVE-2020-3775 | Critical | 9.8 | 2020-03-25 | Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a buffer errors vulnerability. Successful exploitation c… |
CVE-2020-3774 | High | 8.8 | 2020-03-25 | Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a buffer errors vulnerability. Successful exploitation c… |
CVE-2020-3772 | High | 8.8 | 2020-03-25 | Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a buffer errors vulnerability. Successful exploitation c… |
CVE-2020-10848 | Critical | 9.8 | 2020-03-24 | An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (Exynos 9810 chipsets) software. Arbitrary memory mapping exists in TEE. The… |
CVE-2020-3264 | High | 7.1 | 2020-03-19 | A vulnerability in Cisco SD-WAN Solution software could allow an authenticated, local attacker to cause a buffer overflow on an affected device. The vulnerabil… |
CVE-2020-5542 | Critical | 9.8 | 2020-03-16 | Buffer error vulnerability in TCP function included in the firmware of Mitsubishi Electric MELQIC IU1 series IU1-1M20-D firmware version 1.0.7 and earlier allo… |
CVE-2020-10565 | High | 7.8 | 2020-03-14 | grub2-bhyve, as used in FreeBSD bhyve before revision 525916 2020-02-12, does not validate the address provided as part of a memrw command (read_* or write_*)… |
CVE-2020-0796 | Critical | 10.0 | 2020-03-12 | A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows S… |
CVE-2020-0033 | High | 7.8 | 2020-03-10 | In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to stale pointer. This could lead to local escalation of privilege wi… |
CVE-2020-5254 | Low | 3.9 | 2020-03-10 | In NetHack before 3.6.6, some out-of-bound values for the hilite_status option can be exploited. NetHack 3.6.6 resolves this issue. |
CVE-2020-3846 | High | 8.8 | 2020-02-27 | A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchO… |
CVE-2020-3840 | High | 7.8 | 2020-02-27 | An off by one issue existed in the handling of racoon configuration files. This issue was addressed through improved bounds checking. This issue is fixed in iO… |
CVE-2015-0565 | Critical | 10.0 | 2020-02-25 | NaCl in 2015 allowed the CLFLUSH instruction, making rowhammer attacks possible. |
CVE-2016-3182 | Medium | 5.5 | 2020-02-20 | The color_esycc_to_rgb function in bin/common/color.c in OpenJPEG before 2.1.1 allows attackers to cause a denial of service (memory corruption) via a crafted… |
CVE-2020-1814 | Medium | 5.3 | 2020-02-18 | Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, V500R001C… |
CVE-2014-3208 | High | 7.5 | 2020-02-13 | A Denial of Service vulnerability exists in askpop3d 0.7.7 in free (pszQuery), |
CVE-2020-3754 | Critical | 9.8 | 2020-02-13 | Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and earlier have a buf… |
CVE-2020-3752 | Critical | 9.8 | 2020-02-13 | Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and earlier have a buf… |
CVE-2020-0020 | Medium | 5.5 | 2020-02-13 | In getAttributeRange of ExifInterface.java, there is a possible failure to redact location information from media files due to an incorrect bounds check. This… |
CVE-2019-17135 | High | 7.8 | 2020-02-08 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to… |
CVE-2014-9630 | High | 7.8 | 2020-01-24 | The rtp_packetize_xiph_config function in modules/stream_out/rtpfmt.c in VideoLAN VLC media player before 2.1.6 uses a stack-allocation approach with a size de… |
CVE-2019-20396 | Medium | 6.5 | 2020-01-22 | A segmentation fault is present in yyparse in libyang before v1.0-r1 due to a malformed pattern statement value during lys_parse_path parsing. |
CVE-2019-20392 | Medium | 6.5 | 2020-01-22 | An invalid memory access flaw is present in libyang before v1.0-r1 in the function resolve_feature_value() when an if-feature statement is used inside a list k… |
CVE-2019-20391 | Medium | 6.5 | 2020-01-22 | An invalid memory access flaw is present in libyang before v1.0-r3 in the function resolve_feature_value() when an if-feature statement is used inside a bit. A… |
CVE-2019-14006 | Critical | 9.8 | 2020-01-21 | Buffer overflow occur while playing the clip which is nonstandard due to lack of offset length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connect… |
CVE-2019-14004 | Critical | 9.8 | 2020-01-21 | Buffer overflow occurs while processing invalid MKV clip, which has invalid EBML size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdrag… |
CVE-2013-7185 | High | 7.8 | 2020-01-14 | PotPlayer 1.5.40688: .avi File Memory Corruption |
CVE-2012-4750 | Critical | 9.8 | 2020-01-13 | A Code Execution vulnerability exists in the memcpy function when processing AMF requests in Ezhometech EzServer 7.0, which could let a remote malicious user e… |
CVE-2013-5571 | Medium | 5.9 | 2020-01-07 | HMailServer 5.3.x and prior: Memory Corruption which could cause DOS |
CVE-2013-4532 | High | 7.8 | 2020-01-02 | Qemu 1.1.2+dfsg to 2.1+dfsg suffers from a buffer overrun which could potentially result in arbitrary code execution on the host with the privileges of the QEM… |
CVE-2019-20172 | High | 7.8 | 2019-12-31 | Kernel/VM/MemoryManager.cpp in SerenityOS before 2019-12-30 does not reject syscalls with pointers into the kernel-only virtual address space, which allows loc… |
CVE-2019-20053 | Medium | 5.5 | 2019-12-27 | An invalid memory address dereference was discovered in the canUnpack function in p_mach.cpp in UPX 3.95 via a crafted Mach-O file. |
CVE-2015-5290 | High | 7.5 | 2019-12-26 | A Denial of Service vulnerability exists in ircd-ratbox 3.0.9 in the MONITOR Command Handler. |
CVE-2019-18236 | High | 7.8 | 2019-12-23 | Multiple buffer overflow vulnerabilities exist when the PLC Editor Version 1.3.5_20190129 processes project files. An attacker could use a specially crafted pr… |
CVE-2019-16463 | Critical | 9.8 | 2019-12-19 | Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and… |
CVE-2019-16460 | Critical | 9.8 | 2019-12-19 | Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and… |
CVE-2019-16455 | Critical | 9.8 | 2019-12-19 | Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and… |
CVE-2019-16446 | Critical | 9.8 | 2019-12-19 | Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and… |
CVE-2019-8745 | High | 8.8 | 2019-12-18 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15, tvOS 13, iTunes for Windows 12.10.1, iCloud for Win… |
CVE-2019-8598 | Medium | 5.5 | 2019-12-18 | An input validation issue was addressed with improved input validation. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, iTunes… |
CVE-2019-8577 | High | 7.8 | 2019-12-18 | An input validation issue was addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, iTunes… |
CVE-2019-8555 | High | 7.8 | 2019-12-18 | A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Mojave 10.14.4. A malicious application may be able to execute arbi… |
CVE-2019-11400 | Critical | 9.8 | 2019-12-18 | An issue was discovered on TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices. A buffer overflow occurs through the get_set.ccp ccp_… |
CVE-2019-10544 | High | 7.8 | 2019-12-18 | Improper length check on source buffer to handle userspace data received can lead to out-of-bound access in diag handlers in Snapdragon Auto, Snapdragon Comput… |
CVE-2019-14608 | High | 7.8 | 2019-12-16 | Improper buffer restrictions in firmware for Intel(R) NUC(R) may allow an authenticated user to potentially enable escalation of privilege via local access. |
CVE-2019-13942 | High | 7.5 | 2019-12-12 | A vulnerability has been identified in EN100 Ethernet module DNP3 variant (All versions), EN100 Ethernet module IEC 61850 variant (All versions < V4.37), EN100… |
CVE-2019-10618 | Medium | 5.5 | 2019-12-12 | Driver may access an invalid address while processing IO control due to lack of check of address validation in Snapdragon Connectivity in QCA6390 |
CVE-2019-19581 | Medium | 6.5 | 2019-12-11 | An issue was discovered in Xen through 4.12.x allowing 32-bit Arm guest OS users to cause a denial of service (out-of-bounds access) because certain bit iterat… |
CVE-2019-13726 | High | 8.8 | 2019-12-10 | Buffer overflow in password manager in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to execute arbitrary code via a crafted HTML page. |
CVE-2019-19602 | Medium | 6.1 | 2019-12-05 | fpregs_state_valid in arch/x86/include/asm/fpu/internal.h in the Linux kernel before 5.4.2, when GCC 9 is used, allows context-dependent attackers to cause a d… |
CVE-2019-19601 | High | 7.8 | 2019-12-05 | OpenDetex 2.8.5 has a Buffer Overflow in TexOpen in detex.l because of an incorrect sprintf. |
CVE-2019-19481 | Medium | 4.6 | 2019-12-01 | An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/card-cac1.c mishandles buffer limits for CAC certificates. |
CVE-2019-15286 | High | 7.8 | 2019-11-26 | Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an attacker to… |
CVE-2019-15284 | High | 7.8 | 2019-11-26 | Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an attacker to… |
CVE-2019-2297 | High | 7.8 | 2019-11-21 | Buffer overflow can occur while processing non-standard NAN message from user space. in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdrag… |
CVE-2019-2295 | Medium | 5.5 | 2019-11-21 | Information disclosure due to lack of address range check done on the SysDBG buffers in SDI code. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivi… |
CVE-2019-10627 | Critical | 9.8 | 2019-11-21 | Integer overflow to buffer overflow vulnerability in PostScript image handling code used by the PostScript- and PDF-compatible interpreters due to incorrect bu… |
CVE-2019-10535 | Medium | 5.5 | 2019-11-21 | Improper validation for loop variable received from firmware can lead to out of bound access in WLAN function while iterating through loop in Snapdragon Auto… |
CVE-2015-3166 | Critical | 9.8 | 2019-11-20 | The snprintf implementation in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x before 9.4.2 does not properly… |
CVE-2013-7087 | Critical | 9.8 | 2019-11-15 | ClamAV before 0.97.7 has WWPack corrupt heap memory |
CVE-2019-11113 | Medium | 4.4 | 2019-11-14 | Buffer overflow in Kernel Mode module for Intel(R) Graphics Driver before version 25.20.100.6618 (DCH) or 21.20.x.5077 (aka15.45.5077) may allow a privileged u… |
CVE-2019-0152 | Medium | 6.7 | 2019-11-14 | Insufficient memory protection in System Management Mode (SMM) and Intel(R) TXT for certain Intel(R) Xeon(R) Processors may allow a privileged user to potentia… |
CVE-2019-0151 | Medium | 6.7 | 2019-11-14 | Insufficient memory protection in Intel(R) TXT for certain Intel(R) Core Processors and Intel(R) Xeon(R) Processors may allow a privileged user to potentially… |
CVE-2019-1441 | High | 8.8 | 2019-11-12 | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka 'Win32k Graphics Remote Cod… |
CVE-2019-2324 | Critical | 9.8 | 2019-11-06 | When ADSP is compromised, the audio port index that`s returned from ADSP might be out of the valid range and leads to out of boundary access in Snapdragon Auto… |
CVE-2019-2275 | Medium | 5.5 | 2019-11-06 | While deserializing any key blob during key operations, buffer overflow could occur exposing partial key information if any key operations are invoked(Depends… |
CVE-2019-10541 | Critical | 9.8 | 2019-11-06 | Dereference on uninitialized buffer can happen when parsing FLV clip with corrupted codec specific data in Snapdragon Auto, Snapdragon Compute, Snapdragon Cons… |
CVE-2019-10502 | High | 7.8 | 2019-11-06 | Possible stack overflow when an index equal to io buffer size is accessed in camera module in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industria… |
CVE-2017-5332 | High | 7.8 | 2019-11-04 | The extract_group_icon_cursor_resource in wrestool/extract.c in icoutils before 0.31.1 can access unallocated memory, which allows local users to cause a denia… |
CVE-2013-2739 | Critical | 9.8 | 2019-11-01 | MiniDLNA has heap-based buffer overflow |
CVE-2019-13508 | Critical | 9.8 | 2019-10-31 | FreeTDS through 1.1.11 has a Buffer Overflow. |
CVE-2010-0749 | Medium | 5.3 | 2019-10-30 | Transmission before 1.92 allows attackers to prevent download of a file by corrupted data during the endgame. |
CVE-2017-5731 | High | 7.8 | 2019-10-28 | Bounds checking in Tianocompress before November 7, 2017 may allow an authenticated user to potentially enable an escalation of privilege via local access. |
CVE-2017-14742 | Critical | 9.8 | 2019-10-25 | Buffer overflow in LabF nfsAxe FTP client 3.7 allows an attacker to execute code remotely. |
CVE-2019-11933 | Critical | 9.8 | 2019-10-23 | A heap buffer overflow bug in libpl_droidsonroids_gif before 1.2.19, as used in WhatsApp for Android before version 2.19.291 could allow remote attackers to ex… |
CVE-2019-18281 | Medium | 4.3 | 2019-10-23 | An out-of-bounds memory access in the generateDirectionalRuns() function in qtextengine.cpp in Qt qtbase 5.11.x and 5.12.x before 5.12.5 allows attackers to ca… |
CVE-2019-8205 | Critical | 9.8 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-8196 | Critical | 9.8 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-8195 | Critical | 9.8 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-8174 | High | 8.8 | 2019-10-17 | Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00… |
CVE-2019-15252 | High | 8.0 | 2019-10-16 | Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with… |
CVE-2019-15251 | High | 8.0 | 2019-10-16 | Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with… |
CVE-2019-15250 | High | 8.0 | 2019-10-16 | Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with… |
CVE-2019-15249 | High | 8.0 | 2019-10-16 | Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with… |
CVE-2019-15248 | High | 8.0 | 2019-10-16 | Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with… |
CVE-2019-15247 | High | 8.0 | 2019-10-16 | Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with… |
CVE-2019-15246 | High | 8.0 | 2019-10-16 | Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with… |
CVE-2019-15245 | High | 8.0 | 2019-10-16 | Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with… |
CVE-2019-15244 | High | 8.0 | 2019-10-16 | Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with… |
CVE-2019-15243 | High | 8.0 | 2019-10-16 | Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with… |
CVE-2019-15242 | High | 8.0 | 2019-10-16 | Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with… |
CVE-2019-15241 | High | 8.0 | 2019-10-16 | Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with… |
CVE-2019-15240 | High | 8.0 | 2019-10-16 | Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with… |
CVE-2018-21027 | Critical | 9.8 | 2019-10-11 | Boa through 0.94.14rc21 allows remote attackers to trigger an out-of-memory (OOM) condition because malloc is mishandled. |