CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer (page 43)
Page 43 of 100 — CVEs classified under CWE-119, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-14590 | High | 7.5 | 2018-07-24 | An issue has been discovered in Bento4 1.5.1-624. A SEGV can occur in AP4_Processor::ProcessFragments in Core/Ap4Processor.cpp. |
CVE-2018-14586 | High | 8.8 | 2018-07-24 | An issue has been discovered in Bento4 1.5.1-624. A SEGV can occur in AP4_Mpeg2TsAudioSampleStream::WriteSample in Core/Ap4Mpeg2Ts.cpp, a different vulnerabili… |
CVE-2017-3223 | Critical | 9.8 | 2018-07-24 | Dahua IP camera products using firmware versions prior to V2.400.0000.14.R.20170713 include a version of the Sonia web interface that may be vulnerable to a st… |
CVE-2018-1999011 | High | 8.8 | 2018-07-23 | FFmpeg before commit 2b46ebdbff1d8dec7a3d8ea280a612b91a582869 contains a Buffer Overflow vulnerability in asf_o format demuxer that can result in heap-buffer-o… |
CVE-2018-14564 | Critical | 9.8 | 2018-07-23 | An issue was discovered in libthulac.so in THULAC through 2018-02-25. A SEGV can occur in NGramFeature::find_bases in include/cb_ngram_feature.h. |
CVE-2018-14563 | Critical | 9.8 | 2018-07-23 | An issue was discovered in libthulac.so in THULAC through 2018-02-25. "operator delete" is used with "operator new[]" in the TaggingLearner class in include/cb… |
CVE-2018-14531 | Critical | 9.8 | 2018-07-23 | An issue was discovered in Bento4 1.5.1-624. There is an unspecified "heap-buffer-overflow" crash in the AP4_HvccAtom class in Core/Ap4HvccAtom.cpp. |
CVE-2018-14522 | High | 8.8 | 2018-07-23 | An issue was discovered in aubio 0.4.6. A SEGV signal can occur in aubio_pitch_set_unit in pitch/pitch.c, as demonstrated by aubionotes. |
CVE-2018-14521 | High | 8.8 | 2018-07-23 | An issue was discovered in aubio 0.4.6. A SEGV signal can occur in aubio_source_avcodec_readframe in io/source_avcodec.c, as demonstrated by aubiomfcc. |
CVE-2018-5043 | High | 8.8 | 2018-07-20 | Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Buffer Errors vulnerability. Su… |
CVE-2018-5037 | High | 8.8 | 2018-07-20 | Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Buffer Errors vulnerability. Su… |
CVE-2018-5034 | High | 8.8 | 2018-07-20 | Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Buffer Errors vulnerability. Su… |
CVE-2018-12784 | Critical | 9.8 | 2018-07-20 | Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Buffer Errors vulnerability. Su… |
CVE-2018-14443 | Medium | 6.5 | 2018-07-20 | get_first_owned_object in dwg.c in GNU LibreDWG 0.5.1036 allows remote attackers to cause a denial of service (SEGV). |
CVE-2018-0379 | High | 7.8 | 2018-07-18 | Multiple vulnerabilities exist in the Cisco Webex Network Recording Player for Advanced Recording Format (ARF) and Webex Recording Format (WRF) files. An attac… |
CVE-2018-0346 | High | 7.5 | 2018-07-18 | A vulnerability in the Zero Touch Provisioning service of the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to cause a denial of servic… |
CVE-2018-0342 | Medium | 6.7 | 2018-07-18 | A vulnerability in the configuration and monitoring service of the Cisco SD-WAN Solution could allow an authenticated, local attacker to execute arbitrary code… |
CVE-2018-7546 | Medium | 5.5 | 2018-07-18 | wpsmain.dll in Kingsoft WPS Office 2016 and Jinshan PDF 10.1.0.6621 allows remote attackers to cause a denial of service via a crafted pdf file. |
CVE-2018-14362 | Critical | 9.8 | 2018-07-17 | An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c does not forbid characters that may have unsafe interaction with message-cac… |
CVE-2018-14338 | High | 8.1 | 2018-07-17 | samples/geotag.cpp in the example code of Exiv2 0.26 misuses the realpath function on POSIX platforms (other than Apple platforms) where glibc is not used, pos… |
CVE-2016-6563 | Critical | 9.8 | 2018-07-13 | Processing malformed SOAP messages when performing the HNAP Login action causes a buffer overflow in the stack in some D-Link DIR routers. The vulnerable XML f… |
CVE-2016-6559 | Critical | 9.8 | 2018-07-13 | Improper bounds checking of the obuf variable in the link_ntoa() function in linkaddr.c of the BSD libc library may allow an attacker to read or write from mem… |
CVE-2018-10098 | Medium | 5.5 | 2018-07-13 | In MicroWorld eScan Internet Security Suite (ISS) for Business 14.0.1400.2029, the driver econceal.sys allows a non-privileged user to send a 0x830020E0 IOCTL… |
CVE-2018-10018 | High | 8.8 | 2018-07-13 | The GDASPAMLib.AntiSpam ActiveX control ASK\GDASpam.dll in G DATA Total Security 25.4.0.3 has a buffer overflow via a long IsBlackListed argument. |
CVE-2018-14047 | Medium | 5.5 | 2018-07-13 | An issue has been found in PNGwriter 0.7.0. It is a SEGV in pngwriter::readfromfile in pngwriter.cc. NOTE: there is a "Warning: PNGwriter was never designed fo… |
CVE-2018-14015 | Medium | 5.5 | 2018-07-12 | The sdb_set_internal function in sdb.c in radare2 2.7.0 allows remote attackers to cause a denial of service (invalid read and application crash) via a crafted… |
CVE-2018-13997 | High | 7.5 | 2018-07-12 | Genann through 2018-07-08 has a SEGV in genann_run in genann.c. |
CVE-2017-7467 | High | 7.0 | 2018-07-11 | A buffer overflow flaw was found in the way minicom before version 2.7.1 handled VT100 escape sequences. A malicious terminal device could potentially use this… |
CVE-2018-3629 | Medium | 6.5 | 2018-07-10 | Buffer overflow in event handler in Intel Active Management Technology in Intel Converged Security Manageability Engine Firmware 3.x, 4.x, 5.x, 6.x, 7.x, 8.x… |
CVE-2018-3628 | High | 8.8 | 2018-07-10 | Buffer overflow in HTTP handler in Intel Active Management Technology in Intel Converged Security Manageability Engine Firmware 3.x, 4.x, 5.x, 6.x, 7.x, 8.x, 9… |
CVE-2018-13869 | Critical | 9.8 | 2018-07-10 | An issue was discovered in the HDF HDF5 1.8.20 library. There is a memcpy parameter overlap in the function H5O_link_decode in H5Olink.c. |
CVE-2018-10872 | Medium | 6.5 | 2018-07-10 | A flaw was found in the way the Linux kernel handled exceptions delivered after a stack switch operation via Mov SS or Pop SS instructions. During the stack sw… |
CVE-2018-13848 | High | 7.5 | 2018-07-10 | An issue has been found in Bento4 1.5.1-624. It is a SEGV in AP4_StszAtom::GetSampleSize in Core/Ap4StszAtom.cpp. |
CVE-2018-13847 | High | 7.5 | 2018-07-10 | An issue has been found in Bento4 1.5.1-624. It is a SEGV in AP4_StcoAtom::AdjustChunkOffsets in Core/Ap4StcoAtom.cpp. |
CVE-2018-4998 | High | 8.8 | 2018-07-09 | Adobe Acrobat and Reader versions 2018.009.20050 and earlier, 2017.011.30070 and earlier, and 2015.006.30394 and earlier have a Memory corruption vulnerability… |
CVE-2018-6857 | High | 7.8 | 2018-07-09 | Sophos SafeGuard Enterprise before 8.00.5, SafeGuard Easy before 7.00.3, and SafeGuard LAN Crypt before 3.95.2 are vulnerable to Local Privilege Escalation via… |
CVE-2018-6856 | High | 7.8 | 2018-07-09 | Sophos SafeGuard Enterprise before 8.00.5, SafeGuard Easy before 7.00.3, and SafeGuard LAN Crypt before 3.95.2 are vulnerable to Local Privilege Escalation via… |
CVE-2018-6855 | High | 7.8 | 2018-07-09 | Sophos SafeGuard Enterprise before 8.00.5, SafeGuard Easy before 7.00.3, and SafeGuard LAN Crypt before 3.95.2 are vulnerable to Local Privilege Escalation via… |
CVE-2018-6854 | High | 7.8 | 2018-07-09 | Sophos SafeGuard Enterprise before 8.00.5, SafeGuard Easy before 7.00.3, and SafeGuard LAN Crypt before 3.95.2 are vulnerable to Local Privilege Escalation via… |
CVE-2018-6853 | High | 7.8 | 2018-07-09 | Sophos SafeGuard Enterprise before 8.00.5, SafeGuard Easy before 7.00.3, and SafeGuard LAN Crypt before 3.95.2 are vulnerable to Local Privilege Escalation via… |
CVE-2018-6852 | High | 7.8 | 2018-07-09 | Sophos SafeGuard Enterprise before 8.00.5, SafeGuard Easy before 7.00.3, and SafeGuard LAN Crypt before 3.95.2 are vulnerable to Local Privilege Escalation via… |
CVE-2018-6851 | High | 7.8 | 2018-07-09 | Sophos SafeGuard Enterprise before 8.00.5, SafeGuard Easy before 7.00.3, and SafeGuard LAN Crypt before 3.95.2 are vulnerable to Local Privilege Escalation via… |
CVE-2018-5872 | High | 8.0 | 2018-07-06 | While parsing over-the-air information elements in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) befo… |
CVE-2018-5862 | High | 7.8 | 2018-07-06 | In __wlan_hdd_cfg80211_vendor_scan() in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security… |
CVE-2018-5858 | High | 7.8 | 2018-07-06 | In the audio debugfs in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 201… |
CVE-2018-5893 | High | 7.8 | 2018-07-06 | While processing a message from firmware in htt_t2h_msg_handler_fast() in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM… |
CVE-2018-5889 | High | 7.8 | 2018-07-06 | While processing a compressed kernel image, a buffer overflow can occur in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MS… |
CVE-2018-5885 | Critical | 9.8 | 2018-07-06 | While loading dynamic fonts, a buffer overflow may occur if the number of segments in the font file is out of range in Snapdragon Mobile and Snapdragon Wear. |
CVE-2018-5878 | Critical | 9.8 | 2018-07-06 | While sending the response to a RIL_REQUEST_GET_SMSC_ADDRESS message, a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon We… |
CVE-2018-5876 | High | 8.8 | 2018-07-06 | While parsing an mp4 file, a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear. |
CVE-2018-5875 | High | 8.8 | 2018-07-06 | While parsing an mp4 file, an integer overflow leading to a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear. |
CVE-2018-5835 | High | 7.8 | 2018-07-06 | If the seq_len is greater then CSR_MAX_RSC_LEN, a buffer overflow in __wlan_hdd_cfg80211_add_key() may occur when copying keyRSC in Android releases from CAF u… |
CVE-2018-5834 | High | 7.8 | 2018-07-06 | In __wlan_hdd_cfg80211_vendor_scan(), a buffer overwrite can potentially occur in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS… |
CVE-2018-5830 | High | 7.8 | 2018-07-06 | While processing the HTT_T2H_MSG_TYPE_MGMT_TX_COMPL_IND message, a buffer overflow can potentially occur in Android releases from CAF using the linux kernel (A… |
CVE-2017-18158 | High | 7.8 | 2018-07-06 | Possible buffer overflows and array out of bounds accesses in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Androi… |
CVE-2018-12113 | Critical | 9.8 | 2018-07-05 | Core FTP LE version 2.2 Build 1921 is prone to a buffer overflow vulnerability that may result in a DoS or remote code execution via a PASV response. |
CVE-2018-13121 | Medium | 5.5 | 2018-07-03 | RealOne Player 2.0 Build 6.0.11.872 allows remote attackers to cause a denial of service (array out-of-bounds access and application crash) via a crafted .aiff… |
CVE-2018-7780 | Critical | 9.8 | 2018-07-03 | In Schneider Electric Pelco Sarix Professional 1st generation cameras with firmware versions prior to 3.29.69, a buffer overflow vulnerability exist in cgi pro… |
CVE-2017-17317 | Low | 3.7 | 2018-07-02 | Common Open Policy Service Protocol (COPS) module in Huawei USG6300 V100R001C10; V100R001C20; V100R001C30; V500R001C00; V500R001C20; V500R001C30; V500R001C50… |
CVE-2018-12982 | Medium | 5.5 | 2018-06-29 | Invalid memory read in the PoDoFo::PdfVariant::DelayedLoad() function in PdfVariant.h in PoDoFo 0.9.6-rc1 allows remote attackers to have denial-of-service imp… |
CVE-2018-12918 | Critical | 9.8 | 2018-06-27 | In libpbc.a in PBC through 2017-03-02, there is a Segmentation fault in _pbcB_register_fields in bootstrap.c. |
CVE-2018-12916 | Critical | 9.8 | 2018-06-27 | In libpbc.a in PBC through 2017-03-02, there is a Segmentation fault in _pbcP_message_default in proto.c. |
CVE-2018-10594 | Critical | 9.8 | 2018-06-26 | Delta Industrial Automation COMMGR from Delta Electronics versions 1.08 and prior with accompanying PLC Simulators (DVPSimulator EH2, EH3, ES2, SE, SS2 and AHS… |
CVE-2018-10664 | High | 7.5 | 2018-06-26 | An issue was discovered in the httpd process in multiple models of Axis IP Cameras. There is Memory Corruption. |
CVE-2018-10659 | High | 7.5 | 2018-06-26 | There was a Memory Corruption issue discovered in multiple models of Axis IP Cameras which allows remote attackers to cause a denial of service (crash) by send… |
CVE-2018-10658 | High | 7.5 | 2018-06-26 | There was a Memory Corruption issue discovered in multiple models of Axis IP Cameras which causes a denial of service (crash). The crash arises from code insid… |
CVE-2018-1000537 | Critical | 9.8 | 2018-06-26 | Marlin Firmware Marlin version 1.1.x and earlier contains a Buffer Overflow vulnerability in cardreader.cpp (Depending on branch/version) that can result in Ar… |
CVE-2018-0608 | Critical | 9.8 | 2018-06-26 | Buffer overflow in H2O version 2.2.4 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (DoS) via unspecified vectors. |
CVE-2018-12706 | Critical | 9.8 | 2018-06-24 | DIGISOL DG-BR4000NG devices have a Buffer Overflow via a long Authorization HTTP header. |
CVE-2018-12640 | Critical | 9.8 | 2018-06-23 | The webService binary on Insteon HD IP Camera White 2864-222 devices has a Buffer Overflow via a crafted pid, pwd, or usr key in a GET request on port 34100. |
CVE-2017-2668 | Medium | 6.5 | 2018-06-22 | 389-ds-base before versions 1.3.5.17 and 1.3.6.10 is vulnerable to an invalid pointer dereference in the way LDAP bind requests are handled. A remote unauthent… |
CVE-2018-0311 | High | 7.5 | 2018-06-21 | A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause… |
CVE-2018-0303 | High | 8.8 | 2018-06-21 | A vulnerability in the Cisco Discovery Protocol component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to… |
CVE-2018-0302 | High | 7.8 | 2018-06-21 | A vulnerability in the CLI parser of Cisco FXOS Software and Cisco UCS Fabric Interconnect Software could allow an authenticated, local attacker to cause a buf… |
CVE-2018-0298 | High | 7.5 | 2018-06-21 | A vulnerability in the web UI of Cisco FXOS and Cisco UCS Fabric Interconnect Software could allow an unauthenticated, remote attacker to cause a buffer overfl… |
CVE-2018-0314 | Critical | 9.8 | 2018-06-20 | A vulnerability in the Cisco Fabric Services (CFS) component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to… |
CVE-2018-0312 | Critical | 9.8 | 2018-06-20 | A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to execu… |
CVE-2018-0308 | Critical | 9.8 | 2018-06-20 | A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to execu… |
CVE-2018-0301 | Critical | 9.8 | 2018-06-20 | A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to craft a packet to the management interface on… |
CVE-2018-0292 | High | 8.8 | 2018-06-20 | A vulnerability in the Internet Group Management Protocol (IGMP) Snooping feature of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to… |
CVE-2018-1120 | Low | 2.8 | 2018-06-20 | A flaw was found affecting the Linux kernel before version 4.17. By mmap()ing a FUSE-backed file onto a process's memory containing command line arguments (or… |
CVE-2018-11707 | High | 7.8 | 2018-06-20 | FastStone Image Viewer 6.2 has a User Mode Read and Execute AV at 0x0057898e, triggered when the user opens a malformed JPEG file that is mishandled by FSViewe… |
CVE-2018-11706 | High | 7.8 | 2018-06-20 | FastStone Image Viewer 6.2 has a User Mode Write AV at 0x00578dd8, triggered when the user opens a malformed JPEG file that is mishandled by FSViewer.exe. Atta… |
CVE-2018-11705 | High | 7.8 | 2018-06-20 | FastStone Image Viewer 6.2 has a User Mode Write AV at 0x00578cc4, triggered when the user opens a malformed JPEG file that is mishandled by FSViewer.exe. Atta… |
CVE-2018-11704 | High | 7.8 | 2018-06-20 | FastStone Image Viewer 6.2 has a User Mode Write AV at 0x00402d7d, triggered when the user opens a malformed JPEG file that is mishandled by FSViewer.exe. Atta… |
CVE-2018-11703 | High | 7.8 | 2018-06-20 | FastStone Image Viewer 6.2 has a User Mode Write AV at 0x00402d6a, triggered when the user opens a malformed JPEG file that is mishandled by FSViewer.exe. Atta… |
CVE-2018-11702 | High | 7.8 | 2018-06-20 | FastStone Image Viewer 6.2 has a User Mode Write AV at 0x00578cb3, triggered when the user opens a malformed JPEG file that is mishandled by FSViewer.exe. Atta… |
CVE-2018-11701 | High | 7.8 | 2018-06-20 | FastStone Image Viewer 6.2 has a User Mode Write AV at 0x005cb509, triggered when the user opens a malformed JPEG file that is mishandled by FSViewer.exe. Atta… |
CVE-2018-10621 | Critical | 9.8 | 2018-06-18 | Delta Electronics Delta Industrial Automation DOPSoft version 4.00.04 and prior utilizes a fixed-length stack buffer where a value larger than the buffer can b… |
CVE-2018-10617 | Critical | 9.8 | 2018-06-18 | Delta Electronics Delta Industrial Automation DOPSoft version 4.00.04 and prior utilizes a fixed-length heap buffer where a value larger than the buffer can be… |
CVE-2018-12326 | High | 8.4 | 2018-06-17 | Buffer overflow in redis-cli of Redis before 4.0.10 and 5.x before 5.0 RC3 allows an attacker to achieve code execution and escalate to higher privileges via a… |
CVE-2018-5863 | High | 7.8 | 2018-06-15 | If userspace provides a too-large WPA RSN IE length in wlan_hdd_cfg80211_set_ie(), a buffer overflow occurs in all Android releases(Android for MSM, Firefox OS… |
CVE-2018-12422 | Critical | 9.8 | 2018-06-15 | addressbook/backends/ldap/e-book-backend-ldap.c in Evolution-Data-Server in GNOME Evolution through 3.29.2 might allow attackers to trigger a Buffer Overflow v… |
CVE-2018-7167 | High | 7.5 | 2018-06-13 | Calling Buffer.fill() or Buffer.alloc() with some parameters can lead to a hang which could result in a Denial of Service. In order to address this vulnerabili… |
CVE-2018-5851 | High | 7.8 | 2018-06-12 | Buffer over flow can occur while processing a HTT_T2H_MSG_TYPE_TX_COMPL_IND message with an out-of-range num_msdus value in all Android releases from CAF (Andr… |
CVE-2018-5848 | High | 7.8 | 2018-06-12 | In the function wmi_set_ie(), the length validation code does not handle unsigned integer overflow properly. As a result, a large value of the 'ie_len' argumen… |
CVE-2018-5843 | High | 7.8 | 2018-06-12 | In the function wma_pdev_div_info_evt_handler() in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel, the… |
CVE-2018-5842 | High | 7.8 | 2018-06-12 | An arbitrary address write can occur if a compromised WLAN firmware sends incorrect data to WLAN driver in all Android releases from CAF (Android for MSM, Fire… |
CVE-2018-3582 | High | 7.8 | 2018-06-12 | Buffer overflow can occur due to improper input validation in multiple WMA event handler functions in all Android releases from CAF (Android for MSM, Firefox O… |
CVE-2018-3581 | High | 7.8 | 2018-06-12 | In the WLAN driver in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel, a buffer overwrite can occur if… |