CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer (page 54)
Page 54 of 100 — CVEs classified under CWE-119, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-15088 | Critical | 9.8 | 2017-11-23 | plugins/preauth/pkinit/pkinit_crypto_openssl.c in MIT Kerberos 5 (aka krb5) through 1.15.2 mishandles Distinguished Name (DN) fields, which allows remote attac… |
CVE-2017-16927 | High | 8.4 | 2017-11-23 | The scp_v0s_accept function in sesman/libscp/libscp_v0.c in the session manager in xrdp through 0.9.4 uses an untrusted integer as a write length, which allows… |
CVE-2017-8212 | High | 7.8 | 2017-11-22 | The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than Berlin-L21HNC432B360 have a b… |
CVE-2017-8211 | High | 7.8 | 2017-11-22 | The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than Berlin-L21HNC432B360 have a b… |
CVE-2017-8210 | High | 7.8 | 2017-11-22 | The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than Berlin-L21HNC432B360 have a b… |
CVE-2017-8209 | High | 7.8 | 2017-11-22 | The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than Berlin-L21HNC432B360 have a b… |
CVE-2017-8208 | High | 7.8 | 2017-11-22 | The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than Berlin-L21HNC432B360 have a b… |
CVE-2017-8207 | High | 7.8 | 2017-11-22 | The driver of honor 5C, honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than Berlin-L21HNC432B360 have a… |
CVE-2017-8204 | High | 7.8 | 2017-11-22 | The Bastet driver of Honor 9 Huawei smart phones with software of versions earlier than Stanford-AL10C00B175 has a buffer overflow vulnerability due to the lac… |
CVE-2017-8202 | Medium | 5.5 | 2017-11-22 | The CameraISP driver of some Huawei smart phones with software of versions earlier than Prague-AL00AC00B205,versions earlier than Prague-AL00BC00B205,versions… |
CVE-2017-8184 | Medium | 5.5 | 2017-11-22 | MTK platform in Huawei smart phones with software of earlier than Nice-AL00C00B160 versions, earlier than Nice-AL10C00B140 versions has a any memory access vul… |
CVE-2017-8181 | High | 7.8 | 2017-11-22 | The camera driver of MTK platform in Huawei smart phones with software of versions earlier than Nice-AL00C00B155 has a arbitrary memory write vulnerability.Due… |
CVE-2017-8180 | High | 7.8 | 2017-11-22 | The camera driver of MTK platform in Huawei smart phones with software of versions earlier than Nice-AL00C00B155 has a buffer overflow vulnerability.Due to the… |
CVE-2017-8179 | High | 7.8 | 2017-11-22 | The camera driver of MTK platform in Huawei smart phones with software of versions earlier than Nice-AL00C00B155 has a buffer overflow vulnerability.Due to the… |
CVE-2017-8170 | High | 7.8 | 2017-11-22 | Huawei smart phones with software earlier than VIE-L09C40B360 versions have a buffer overflow vulnerability due to the lack of parameter validation. An attacke… |
CVE-2017-8169 | High | 7.8 | 2017-11-22 | Huawei smart phones with software earlier than VIE-L09C40B360 versions have a buffer overflow vulnerability due to the lack of parameter validation. An attacke… |
CVE-2017-8162 | Medium | 6.5 | 2017-11-22 | AR120-S with software V200R006C10, V200R007C00, V200R008C20, V200R008C30,AR1200 with software V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02… |
CVE-2017-8150 | High | 7.8 | 2017-11-22 | The boot loaders of P10 and P10 Plus Huawei mobile phones with software the versions before Victoria-L09AC605B162, the versions before Victoria-L29AC605B162, t… |
CVE-2017-8149 | Medium | 5.5 | 2017-11-22 | The boot loaders of P10 and P10 Plus Huawei mobile phones with software the versions before Victoria-L09AC605B162, the versions before Victoria-L29AC605B162, t… |
CVE-2017-2729 | High | 7.8 | 2017-11-22 | The boot loaders in Honor 5A smart phones with software Versions earlier than CAM-TL00C01B193,Versions earlier than CAM-TL00HC00B193,Versions earlier than CAM-… |
CVE-2017-2726 | High | 8.4 | 2017-11-22 | Bastet in P10 Plus and P10 smart phones with software earlier than VKY-AL00C00B123 versions, earlier than VTR-AL00C00B123 versions have a buffer overflow vulne… |
CVE-2017-2725 | High | 7.8 | 2017-11-22 | Bastet in P10 Plus and P10 smart phones with software earlier than VKY-AL00C00B123 versions, earlier than VTR-AL00C00B123 versions have a buffer overflow vulne… |
CVE-2017-2724 | High | 8.4 | 2017-11-22 | Bastet in P10 Plus and P10 smart phones with software earlier than VKY-AL00C00B123 versions, earlier than VTR-AL00C00B123 versions have a buffer overflow vulne… |
CVE-2017-2716 | High | 7.8 | 2017-11-22 | The camerafs driver in Mate 9 Versions earlier than MHA-AL00BC00B173 has buffer overflow vulnerability. An attacker tricks a user into installing a malicious a… |
CVE-2017-2714 | High | 8.0 | 2017-11-22 | The GaussDB in FusionSphere OpenStack V100R005C10SPC705 and earlier versions has a buffer overflow vulnerability. An authenticated attacker on the LAN can expl… |
CVE-2017-2698 | High | 7.8 | 2017-11-22 | The ddr_devfreq driver in versions earlier than GRA-UL00C00B197 has buffer overflow vulnerability. An attacker with the root privilege of the Android system ca… |
CVE-2017-2697 | High | 7.8 | 2017-11-22 | The goldeneye driver in NMO-L31C432B120 and earlier versions,NEM-L21C432B100 and earlier versions,NEM-L51C432B120 and earlier versions,KNT-AL10C746B160 and ear… |
CVE-2017-2696 | High | 7.8 | 2017-11-22 | The emerg_data driver in CAM-L21C10B130 and earlier versions, CAM-L21C185B141 and earlier versions has a buffer overflow vulnerability. An attacker with the ro… |
CVE-2017-5712 | High | 7.2 | 2017-11-21 | Buffer overflow in Active Management Technology (AMT) in Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0/11.5/11.6/11.7/11.10/11.20 allows attacker with… |
CVE-2017-5711 | High | 7.8 | 2017-11-21 | Multiple buffer overflows in Active Management Technology (AMT) in Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0/11.5/11.6/11.7/11.10/11.20 allow attac… |
CVE-2017-5707 | High | 7.8 | 2017-11-21 | Multiple buffer overflows in kernel in Intel Trusted Execution Engine Firmware 3.0 allow attacker with local access to the system to execute arbitrary code. |
CVE-2017-5706 | High | 7.8 | 2017-11-21 | Multiple buffer overflows in kernel in Intel Server Platform Services Firmware 4.0 allow attacker with local access to the system to execute arbitrary code. |
CVE-2017-5705 | High | 7.8 | 2017-11-21 | Multiple buffer overflows in kernel in Intel Manageability Engine Firmware 11.0/11.5/11.6/11.7/11.10/11.20 allow attacker with local access to the system to ex… |
CVE-2017-16902 | High | 7.5 | 2017-11-20 | On the Vonage VDV-23 115 3.2.11-0.9.40 home router, sending a long string of characters in the loginPassword and/or loginUsername field to goform/login causes… |
CVE-2017-16898 | Medium | 5.5 | 2017-11-20 | The printMP3Headers function in util/listmp3.c in libming v0.4.8 or earlier is vulnerable to a global buffer overflow, which may allow attackers to cause a den… |
CVE-2017-1000127 | Medium | 5.5 | 2017-11-17 | Exiv2 0.26 contains a heap buffer overflow in tiff parser |
CVE-2017-1000206 | Critical | 9.8 | 2017-11-17 | samtools htslib library version 1.4.0 and earlier is vulnerable to buffer overflow in the CRAM rANS codec resulting in potential arbitrary code execution |
CVE-2017-4934 | High | 8.8 | 2017-11-17 | VMware Workstation (12.x before 12.5.8) and Fusion (8.x before 8.5.9) contain a heap buffer-overflow vulnerability in VMNAT device. This issue may allow a gues… |
CVE-2017-16872 | Critical | 9.8 | 2017-11-17 | An issue was discovered in Teluu pjproject (pjlib and pjlib-util) in PJSIP before 2.7.1. Parsing the numeric header fields in a SIP message (like cseq, ttl, po… |
CVE-2017-16869 | High | 7.8 | 2017-11-17 | p_mach.cpp in UPX 3.94 allows remote attackers to cause a denial of service (invalid memory access and application crash) or possibly have unspecified other im… |
CVE-2017-1000198 | High | 7.5 | 2017-11-17 | tcmu-runner daemon version 0.9.0 to 1.2.0 is vulnerable to invalid memory references in the handler_glfs.so handler resulting in denial of service |
CVE-2017-1000210 | Critical | 9.8 | 2017-11-17 | picoTCP (versions 1.7.0 - 1.5.0) is vulnerable to stack buffer overflow resulting in code execution or denial of service attack |
CVE-2017-1000187 | High | 7.8 | 2017-11-17 | In SWFTools, an address access exception was found in pdf2swf. FoFiTrueType::writeTTF() |
CVE-2017-1000186 | Medium | 5.5 | 2017-11-17 | In SWFTools, a stack overflow was found in pdf2swf. |
CVE-2017-1000185 | Medium | 5.5 | 2017-11-17 | In SWFTools, a memcpy buffer overflow was found in gif2swf. |
CVE-2017-1000176 | Medium | 5.5 | 2017-11-17 | In SWFTools, a memcpy buffer overflow was found in swfc. |
CVE-2017-1000174 | Medium | 5.5 | 2017-11-17 | In SWFTools, an address access exception was found in swfdump swf_GetBits(). |
CVE-2017-1000218 | Critical | 9.8 | 2017-11-17 | LightFTP version 1.1 is vulnerable to a buffer overflow in the "writelogentry" function resulting a denial of services or a remote code execution. |
CVE-2017-0842 | High | 7.8 | 2017-11-16 | An elevation of privilege vulnerability in the Android system (bluetooth). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-375025… |
CVE-2017-9721 | High | 7.8 | 2017-11-16 | In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the boot loader, a buffer overflow can occur… |
CVE-2017-9719 | High | 7.8 | 2017-11-16 | In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the kernel driver MDSS, a buffer overflow ca… |
CVE-2017-9696 | High | 7.5 | 2017-11-16 | In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, buffer over-read is possible in camera driver f… |
CVE-2017-11085 | High | 7.8 | 2017-11-16 | In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, an integer overflow leading to a buffer overflo… |
CVE-2017-11029 | High | 7.8 | 2017-11-16 | In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, camera application triggers "user-memory-access… |
CVE-2017-11018 | High | 7.8 | 2017-11-16 | In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, array access out of bounds may occur in the cam… |
CVE-2017-11017 | High | 7.8 | 2017-11-16 | In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while flashing a specially crafted UBI image, i… |
CVE-2017-0866 | High | 7.8 | 2017-11-16 | An elevation of privilege vulnerability in the Direct rendering infrastructure of the NVIDIA Tegra X1 where an unchecked input from userspace is passed as a po… |
CVE-2017-16844 | Critical | 9.8 | 2017-11-16 | Heap-based buffer overflow in the loadbuf function in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service (application c… |
CVE-2017-8807 | Critical | 9.1 | 2017-11-16 | vbf_stp_error in bin/varnishd/cache/cache_fetch.c in Varnish HTTP Cache 4.1.x before 4.1.9 and 5.x before 5.2.1 allows remote attackers to obtain sensitive inf… |
CVE-2017-16827 | High | 7.8 | 2017-11-15 | The aout_get_external_symbols function in aoutx.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, allows remot… |
CVE-2017-16826 | High | 7.8 | 2017-11-15 | The coff_slurp_line_table function in coffcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, allows remote… |
CVE-2017-11884 | High | 7.8 | 2017-11-15 | Microsoft Excel 2016 Click-to-Run (C2R) allows an attacker to run arbitrary code in the context of the current user by failing to properly handle objects in me… |
CVE-2017-11882 | High | 7.8 | 2017-11-15 | Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Microsoft Office 2016 allow an attacker t… |
CVE-2017-11878 | High | 7.8 | 2017-11-15 | Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, Microsof… |
CVE-2017-11873 | High | 7.5 | 2017-11-15 | ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same us… |
CVE-2017-11871 | High | 7.5 | 2017-11-15 | ChakraCore and Microsoft Edge in Windows 10 1703, 1709, and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, d… |
CVE-2017-11870 | High | 7.5 | 2017-11-15 | ChakraCore and Microsoft Edge in Windows 10 1703, 1709, and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, d… |
CVE-2017-11869 | High | 7.5 | 2017-11-15 | Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511… |
CVE-2017-11866 | High | 7.5 | 2017-11-15 | ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the s… |
CVE-2017-11862 | High | 7.5 | 2017-11-15 | ChakraCore and Microsoft Edge in Windows 10 1709 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to h… |
CVE-2017-11861 | High | 7.5 | 2017-11-15 | Microsoft Edge in Windows 10 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the curr… |
CVE-2017-11858 | High | 7.5 | 2017-11-15 | ChakraCore and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Mi… |
CVE-2017-11856 | High | 7.5 | 2017-11-15 | Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, Windows 10 Gold, 1511… |
CVE-2017-11855 | High | 7.5 | 2017-11-15 | Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold… |
CVE-2017-11854 | High | 8.8 | 2017-11-15 | Microsoft Word 2007 Service Pack 3, Microsoft Word 2010 Service Pack 2, Microsoft Office 2010 Service Pack 2, and Microsoft Office Compatibility Pack Service P… |
CVE-2017-11846 | High | 7.5 | 2017-11-15 | ChakraCore and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Mi… |
CVE-2017-11845 | High | 7.5 | 2017-11-15 | Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to how Microsoft Edge handles… |
CVE-2017-11843 | High | 7.5 | 2017-11-15 | ChakraCore and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, and Micros… |
CVE-2017-11841 | High | 7.5 | 2017-11-15 | ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the s… |
CVE-2017-11840 | High | 7.5 | 2017-11-15 | ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the s… |
CVE-2017-11839 | High | 7.5 | 2017-11-15 | Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to take control of an affect… |
CVE-2017-11838 | High | 7.5 | 2017-11-15 | ChakraCore and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, and Microsoft… |
CVE-2017-11837 | High | 7.5 | 2017-11-15 | ChakraCore and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, and Microsoft… |
CVE-2017-11836 | High | 7.5 | 2017-11-15 | ChakraCore, and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to… |
CVE-2017-11827 | High | 7.5 | 2017-11-15 | Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Microsoft Edge and In… |
CVE-2017-3893 | Low | 1.9 | 2017-11-14 | In BlackBerry QNX Software Development Platform (SDP) 6.6.0, the default configuration of the QNX SDP system did not in all circumstances prevent attackers fro… |
CVE-2017-6274 | Critical | 9.8 | 2017-11-14 | An elevation of Privilege vulnerability exists in the Thermal Driver, where a missing bounds checks in the thermal throttle driver can cause an out-of-bounds w… |
CVE-2017-14024 | Critical | 9.8 | 2017-11-13 | A Stack-based Buffer Overflow issue was discovered in Schneider Electric InduSoft Web Studio v8.0 SP2 Patch 1 and prior versions, and InTouch Machine Edition v… |
CVE-2017-16803 | High | 7.5 | 2017-11-13 | In Libav through 11.11 and 12.x through 12.1, the smacker_decode_tree function in libavcodec/smacker.c does not properly restrict tree recursion, which allows… |
CVE-2017-10875 | High | 7.5 | 2017-11-13 | I-O DATA DEVICE LAN DISK Connect Ver2.02 and earlier allows an attacker to cause a denial of service in the application via unspecified vectors. |
CVE-2017-10871 | Critical | 9.8 | 2017-11-13 | Buffer overflow in NTT DOCOMO Wi-Fi STATION L-02F Software version L02F-MDM9625-V10h-JUN-23-2017-DCM-JP and earlier allows an attacker to execute arbitrary cod… |
CVE-2017-13843 | High | 7.8 | 2017-11-13 | An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" component. It allows attackers to execute… |
CVE-2017-13838 | High | 7.8 | 2017-11-13 | An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Sandbox" component. It allows attackers to execute… |
CVE-2017-13834 | High | 7.8 | 2017-11-13 | An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" component. It allows remote attackers to c… |
CVE-2017-13833 | High | 7.8 | 2017-11-13 | An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "CFNetwork" component. It allows attackers to execu… |
CVE-2017-13830 | High | 7.8 | 2017-11-13 | An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "HFS" component. It allows attackers to execute arb… |
CVE-2017-13829 | High | 7.8 | 2017-11-13 | An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "CFNetwork" component. It allows attackers to execu… |
CVE-2017-13824 | High | 7.8 | 2017-11-13 | An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Open Scripting Architecture" component. It allows… |
CVE-2017-13820 | High | 7.1 | 2017-11-13 | An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "ATS" component. It allows remote attackers to obta… |
CVE-2017-13816 | High | 7.8 | 2017-11-13 | An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "libarchive" component. It allows remote attackers… |