CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer (page 44)
Page 44 of 100 — CVEs classified under CWE-119, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-3572 | High | 7.8 | 2018-06-12 | While processing a DSP buffer in an audio driver's event handler, an index of a buffer is not checked before accessing the buffer in all Android releases from… |
CVE-2017-18070 | High | 7.8 | 2018-06-12 | In wma_ndp_end_response_event_handler(), the variable len_end_rsp is a uint32 which can be overflowed if the value of variable "event->num_ndp_end_rsp_per_ndi_… |
CVE-2017-15854 | High | 7.8 | 2018-06-12 | The value of fix_param->num_chans is received from firmware and if it is too large, an integer overflow can occur in wma_radio_chan_stats_event_handler() for t… |
CVE-2018-1151 | Critical | 9.8 | 2018-06-12 | The web server on Western Digital TV Media Player 1.03.07 and TV Live Hub 3.12.13 allow unauthenticated remote attackers to execute arbitrary code or cause den… |
CVE-2018-5718 | High | 7.1 | 2018-06-12 | Improper restriction of write operations within the bounds of a memory buffer in snscore.sys in SoftControl/SafenSoft SysWatch, SoftControl/SafenSoft TPSecure… |
CVE-2018-12233 | High | 7.8 | 2018-06-12 | In the ea_get function in fs/jfs/xattr.c in the Linux kernel through 4.17.1, a memory corruption bug in JFS can be triggered by calling setxattr twice with two… |
CVE-2018-5183 | Critical | 9.8 | 2018-06-11 | Mozilla developers backported selected changes in the Skia library. These changes correct memory corruption issues including invalid buffer reads and writes du… |
CVE-2018-5178 | High | 8.1 | 2018-06-11 | A buffer overflow was found during UTF8 to Unicode string conversion within JavaScript with extremely large amounts of data. This vulnerability requires the us… |
CVE-2018-5177 | High | 7.5 | 2018-06-11 | A vulnerability exists in XSLT during number formatting where a negative buffer size may be allocated in some instances, leading to a buffer overflow and crash… |
CVE-2018-5151 | Critical | 9.8 | 2018-06-11 | Memory safety bugs were reported in Firefox 59. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of the… |
CVE-2018-5150 | Critical | 9.8 | 2018-06-11 | Memory safety bugs were reported in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7. Some of these bugs showed evidence of memory corruption and we presume… |
CVE-2018-5145 | Critical | 9.8 | 2018-06-11 | Memory safety bugs were reported in Firefox ESR 52.6. These bugs showed evidence of memory corruption and we presume that with enough effort that some of these… |
CVE-2018-5127 | High | 8.8 | 2018-06-11 | A buffer overflow can occur when manipulating the SVG "animatedPathSegList" through script. This results in a potentially exploitable crash. This vulnerability… |
CVE-2018-5126 | Critical | 9.8 | 2018-06-11 | Memory safety bugs were reported in Firefox 58. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of the… |
CVE-2018-5125 | High | 8.8 | 2018-06-11 | Memory safety bugs were reported in Firefox 58 and Firefox ESR 52.6. Some of these bugs showed evidence of memory corruption and we presume that with enough ef… |
CVE-2018-5094 | High | 7.5 | 2018-06-11 | A heap buffer overflow vulnerability may occur in WebAssembly when "shrinkElements" is called followed by garbage collection on memory that is now uninitialize… |
CVE-2018-5093 | High | 7.5 | 2018-06-11 | A heap buffer overflow vulnerability may occur in WebAssembly during Memory/Table resizing, resulting in a potentially exploitable crash. This vulnerability af… |
CVE-2018-5090 | Critical | 9.8 | 2018-06-11 | Memory safety bugs were reported in Firefox 57. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of the… |
CVE-2018-5089 | Critical | 9.8 | 2018-06-11 | Memory safety bugs were reported in Firefox 57 and Firefox ESR 52.5. Some of these bugs showed evidence of memory corruption and we presume that with enough ef… |
CVE-2017-7845 | High | 8.8 | 2018-06-11 | A buffer overflow occurs when drawing and validating elements using Direct 3D 9 with the ANGLE graphics library, used for WebGL content. This is due to an inco… |
CVE-2017-7827 | Critical | 9.8 | 2018-06-11 | Memory safety bugs were reported in Firefox 56. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of the… |
CVE-2017-7826 | Critical | 9.8 | 2018-06-11 | Memory safety bugs were reported in Firefox 56 and Firefox ESR 52.4. Some of these bugs showed evidence of memory corruption and we presume that with enough ef… |
CVE-2017-7824 | Critical | 9.8 | 2018-06-11 | A buffer overflow occurs when drawing and validating elements with the ANGLE graphics library, used for WebGL content. This is due to an incorrect value being… |
CVE-2017-7811 | Critical | 9.8 | 2018-06-11 | Memory safety bugs were reported in Firefox 55. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of the… |
CVE-2017-7810 | Critical | 9.8 | 2018-06-11 | Memory safety bugs were reported in Firefox 55 and Firefox ESR 52.3. Some of these bugs showed evidence of memory corruption and we presume that with enough ef… |
CVE-2017-7792 | Critical | 9.8 | 2018-06-11 | A buffer overflow will occur when viewing a certificate in the certificate manager if the certificate has an extremely long object identifier (OID). This resul… |
CVE-2017-7786 | Critical | 9.8 | 2018-06-11 | A buffer overflow can occur when the image renderer attempts to paint non-displayable SVG elements. This results in a potentially exploitable crash. This vulne… |
CVE-2017-7785 | Critical | 9.8 | 2018-06-11 | A buffer overflow can occur when manipulating Accessible Rich Internet Applications (ARIA) attributes within the DOM. This results in a potentially exploitable… |
CVE-2017-7780 | Critical | 9.8 | 2018-06-11 | Memory safety bugs were reported in Firefox 54. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of the… |
CVE-2017-7779 | Critical | 9.8 | 2018-06-11 | Memory safety bugs were reported in Firefox 54, Firefox ESR 52.2, and Thunderbird 52.2. Some of these bugs showed evidence of memory corruption and we presume… |
CVE-2017-7778 | Critical | 9.8 | 2018-06-11 | A number of security vulnerabilities in the Graphite 2 library including out-of-bounds reads, buffer overflow reads and writes, and the use of uninitialized me… |
CVE-2017-5471 | Critical | 9.8 | 2018-06-11 | Memory safety bugs were reported in Firefox 53. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of the… |
CVE-2017-5470 | Critical | 9.8 | 2018-06-11 | Memory safety bugs were reported in Firefox 53 and Firefox ESR 52.1. Some of these bugs showed evidence of memory corruption and we presume that with enough ef… |
CVE-2017-5469 | Critical | 9.8 | 2018-06-11 | Fixed potential buffer overflows in generated Firefox code due to CVE-2016-6354 issue in Flex. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45… |
CVE-2017-5467 | High | 7.5 | 2018-06-11 | A potential memory corruption and crash when using Skia content when drawing content outside of the bounds of a clipping region. This vulnerability affects Thu… |
CVE-2017-5464 | Critical | 9.8 | 2018-06-11 | During DOM manipulations of the accessibility tree through script, the DOM tree can become out of sync with the accessibility tree, leading to memory corruptio… |
CVE-2017-5459 | Critical | 9.8 | 2018-06-11 | A buffer overflow in WebGL triggerable by web content, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR… |
CVE-2017-5444 | High | 7.5 | 2018-06-11 | A buffer overflow vulnerability while parsing "application/http-index-format" format content when the header contains improperly formatted data. This allows fo… |
CVE-2017-5430 | Critical | 9.8 | 2018-06-11 | Memory safety bugs were reported in Firefox 52, Firefox ESR 52, and Thunderbird 52. Some of these bugs showed evidence of memory corruption and we presume that… |
CVE-2017-5429 | Critical | 9.8 | 2018-06-11 | Memory safety bugs were reported in Firefox 52, Firefox ESR 45.8, Firefox ESR 52, and Thunderbird 52. Some of these bugs showed evidence of memory corruption a… |
CVE-2017-5413 | Critical | 9.8 | 2018-06-11 | A segmentation fault can occur during some bidirectional layout operations. This vulnerability affects Firefox < 52 and Thunderbird < 52. |
CVE-2017-5412 | High | 7.5 | 2018-06-11 | A buffer overflow read during SVG filter color value operations, resulting in data exposure. This vulnerability affects Firefox < 52 and Thunderbird < 52. |
CVE-2017-5410 | Critical | 9.8 | 2018-06-11 | Memory corruption resulting in a potentially exploitable crash during garbage collection of JavaScript due errors in how incremental sweeping is managed for me… |
CVE-2017-5406 | High | 7.5 | 2018-06-11 | A segmentation fault can occur in the Skia graphics library during some canvas operations due to issues with mask/clip intersection and empty masks. This vulne… |
CVE-2017-5400 | Critical | 9.8 | 2018-06-11 | JIT-spray targeting asm.js combined with a heap spray allows for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. This vuln… |
CVE-2017-5399 | Critical | 9.8 | 2018-06-11 | Memory safety bugs were reported in Firefox 51. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of the… |
CVE-2017-5398 | Critical | 9.8 | 2018-06-11 | Memory safety bugs were reported in Thunderbird 45.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some… |
CVE-2017-5392 | Critical | 9.8 | 2018-06-11 | Weak proxy objects have weak references on multiple threads when they should only have them on one, resulting in incorrect memory usage and corruption, which l… |
CVE-2017-5377 | Critical | 9.8 | 2018-06-11 | A memory corruption vulnerability in Skia that can occur when using transforms to make gradients, resulting in a potentially exploitable crash. This vulnerabil… |
CVE-2017-5375 | Critical | 9.8 | 2018-06-11 | JIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. This vulnerability affects Thunderbird <… |
CVE-2017-5374 | Critical | 9.8 | 2018-06-11 | Memory safety bugs were reported in Firefox 50.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of t… |
CVE-2017-5373 | Critical | 9.8 | 2018-06-11 | Memory safety bugs were reported in Firefox 50.1 and Firefox ESR 45.6. Some of these bugs showed evidence of memory corruption and we presume that with enough… |
CVE-2016-9897 | High | 7.5 | 2018-06-11 | Memory corruption resulting in a potentially exploitable crash during WebGL functions using a vector constructor with a varying array within libGLES. This vuln… |
CVE-2016-9894 | High | 7.5 | 2018-06-11 | A buffer overflow in SkiaGl caused when a GrGLBuffer is truncated during allocation. Later writers will overflow the buffer, resulting in a potentially exploit… |
CVE-2016-9893 | Critical | 9.8 | 2018-06-11 | Memory safety bugs were reported in Thunderbird 45.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some… |
CVE-2016-9080 | Critical | 9.8 | 2018-06-11 | Memory safety bugs were reported in Firefox 50.0.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of… |
CVE-2016-9066 | High | 7.5 | 2018-06-11 | A buffer overflow resulting in a potentially exploitable crash due to memory allocation issues when handling large amounts of incoming data. This vulnerability… |
CVE-2016-5296 | High | 7.5 | 2018-06-11 | A heap-buffer-overflow in Cairo when processing SVG content caused by compiler optimization, resulting in a potentially exploitable crash. This vulnerability a… |
CVE-2016-5290 | Critical | 9.8 | 2018-06-11 | Memory safety bugs were reported in Firefox 49 and Firefox ESR 45.4. Some of these bugs showed evidence of memory corruption and we presume that with enough ef… |
CVE-2016-5289 | Critical | 9.8 | 2018-06-11 | Memory safety bugs were reported in Firefox 49. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of the… |
CVE-2018-12112 | High | 7.8 | 2018-06-11 | md_build_attribute in md4c.c in md4c 0.2.6 allows remote attackers to cause a denial of service (Segmentation fault and application crash) or possibly have uns… |
CVE-2018-4243 | High | 7.8 | 2018-06-08 | An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before… |
CVE-2018-4242 | High | 7.8 | 2018-06-08 | An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Hypervisor" component. It allows attackers to exec… |
CVE-2018-4241 | High | 7.8 | 2018-06-08 | An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before… |
CVE-2018-4236 | High | 7.8 | 2018-06-08 | An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "IOGraphics" component. It allows attackers to exec… |
CVE-2018-4234 | High | 7.8 | 2018-06-08 | An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "IOHIDFamily" component. It allows attackers to exe… |
CVE-2018-4233 | High | 8.8 | 2018-06-08 | An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTu… |
CVE-2018-4215 | High | 7.8 | 2018-06-08 | An issue was discovered in certain Apple products. iOS before 11.4 is affected. The issue involves the "Bluetooth" component. It allows attackers to gain privi… |
CVE-2018-4214 | High | 8.8 | 2018-06-08 | An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTu… |
CVE-2018-4211 | High | 7.8 | 2018-06-08 | An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before… |
CVE-2018-4206 | High | 7.8 | 2018-06-08 | An issue was discovered in certain Apple products. iOS before 11.3.1 is affected. macOS before 10.13.4 Security Update 2018-001 is affected. tvOS before 11.4 i… |
CVE-2018-4204 | High | 8.8 | 2018-06-08 | An issue was discovered in certain Apple products. iOS before 11.4 is affected. iOS before 11.3.1 is affected. Safari before 11.1 is affected. iCloud before 7… |
CVE-2018-4201 | High | 8.8 | 2018-06-08 | An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTu… |
CVE-2018-4199 | High | 8.8 | 2018-06-08 | An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTu… |
CVE-2018-4193 | High | 7.8 | 2018-06-08 | An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Windows Server" component. It allows attackers to… |
CVE-2018-10505 | Medium | 6.3 | 2018-06-08 | A pool corruption privilege escalation vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a local attacker to escalate privileges on vulnerabl… |
CVE-2018-10359 | Medium | 6.3 | 2018-06-08 | A pool corruption privilege escalation vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a local attacker to escalate privileges on vulnerabl… |
CVE-2018-10358 | Medium | 6.3 | 2018-06-08 | A pool corruption privilege escalation vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a local attacker to escalate privileges on vulnerabl… |
CVE-2018-10088 | Critical | 9.8 | 2018-06-08 | Buffer overflow in XiongMai uc-httpd 1.0.0 has unspecified impact and attack vectors, a different vulnerability than CVE-2017-16725. |
CVE-2018-0315 | Critical | 9.8 | 2018-06-07 | A vulnerability in the authentication, authorization, and accounting (AAA) security services of Cisco IOS XE Software could allow an unauthenticated, remote at… |
CVE-2018-3578 | High | 7.8 | 2018-06-06 | Type mismatch for ie_len can cause the WLAN driver to allocate less memory on the heap due to implicit casting leading to a heap buffer overflow in all Android… |
CVE-2018-3565 | High | 7.8 | 2018-06-06 | While sending a probe request indication in lim_send_sme_probe_req_ind() in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) us… |
CVE-2018-3562 | Medium | 5.5 | 2018-06-06 | Buffer over -read can occur while processing a FILS authentication frame in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) us… |
CVE-2017-18154 | High | 7.8 | 2018-06-06 | A crafted binder request can cause an arbitrary unmap in MediaServer in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using… |
CVE-2016-10523 | High | 7.5 | 2018-05-31 | MQTT before 3.4.6 and 4.0.x before 4.0.5 allows specifically crafted MQTT packets to crash the application, making a DoS attack feasible with very little bandw… |
CVE-2016-10518 | High | 7.5 | 2018-05-31 | A vulnerability was found in the ping functionality of the ws module before 1.0.0 which allowed clients to allocate memory by sending a ping frame. The ping fu… |
CVE-2018-11596 | Medium | 5.5 | 2018-05-31 | Espruino before 1.99 allows attackers to cause a denial of service (application crash) with a user crafted input file via a Buffer Overflow during syntax parsi… |
CVE-2018-11595 | High | 7.8 | 2018-05-31 | Espruino before 1.99 allows attackers to cause a denial of service (application crash) and a potential Escalation of Privileges with a user crafted input file… |
CVE-2018-11594 | Medium | 5.5 | 2018-05-31 | Espruino before 1.99 allows attackers to cause a denial of service (application crash) with a user crafted input file via a Buffer Overflow during syntax parsi… |
CVE-2018-11578 | Medium | 6.5 | 2018-05-31 | GifIndexToTrueColor in ngiflib.c in MiniUPnP ngiflib 0.4 has a Segmentation fault. |
CVE-2018-11498 | High | 7.8 | 2018-05-26 | In Lizard v1.0 and LZ5 v2.0 (the prior release, before the product was renamed), there is an unchecked buffer size during a memcpy in the Lizard_decompress_LIZ… |
CVE-2018-1565 | High | 8.4 | 2018-05-25 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local user to overflow a buffer which may result in a… |
CVE-2018-1544 | High | 8.4 | 2018-05-25 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local user to overflow a buffer which may result in a… |
CVE-2018-1515 | High | 7.4 | 2018-05-25 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.5 and 11.1, under specific or unusual conditions, could allow a local user to overflow a b… |
CVE-2018-1488 | High | 8.4 | 2018-05-25 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.5 and 11.1 is vulnerable to a buffer overflow, which could allow an authenticated local at… |
CVE-2018-5678 | High | 8.8 | 2018-05-24 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader before 9.1 and PhantomPDF before 9.1. User int… |
CVE-2018-5676 | High | 8.8 | 2018-05-24 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader before 9.1 and PhantomPDF before 9.1. User int… |
CVE-2018-5674 | High | 8.8 | 2018-05-24 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader before 9.1 and PhantomPDF before 9.1. User int… |
CVE-2018-1000199 | Medium | 5.5 | 2018-05-24 | The Linux Kernel version 3.18 contains a dangerous feature vulnerability in modify_user_hw_breakpoint() that can result in crash and possibly memory corruption… |
CVE-2018-1123 | Low | 3.9 | 2018-05-23 | procps-ng before version 3.3.15 is vulnerable to a denial of service in ps via mmap buffer overflow. Inbuilt protection in ps maps a guard page at the end of t… |