CVE-2026-72642 | High | 8.8 | 2026-08-13 | The native inference process that Elasticsearch uses to evaluate uploaded machine learning models accepts a model operation that computes a memory address from… |
CVE-2026-49746 | High | 7.1 | 2026-08-07 | Software installed and run as a non-privileged user may conduct improper GPU system calls to cause OOB read kernel memory access and in certain cases cause GPU… |
CVE-2026-49745 | High | 7.8 | 2026-07-24 | Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a write of data outside the Guest's virtualis… |
CVE-2026-49744 | High | 7.8 | 2026-07-24 | Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a write of data outside the Guest's virtualis… |
CVE-2026-21734 | High | 7.7 | 2026-06-26 | A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can trigger a write out-of-bounds write crash in the GPU shader co… |
CVE-2026-12290 | High | 8.1 | 2026-06-16 | Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 1… |
CVE-2026-46244 | Critical | 9.1 | 2026-06-03 | In the Linux kernel, the following vulnerability has been resolved:
netfilter: nft_inner: Fix IPv6 inner_thoff desync
In nft_inner_parse_l2l3(), when process… |
CVE-2026-34193 | Medium | 4.3 | 2026-06-01 | Kernel software installed and running inside a Guest/Host VM may post improper commands to the GPU Firmware to trigger a write of data outside the intended GPU… |
CVE-2026-28764 | High | 7.8 | 2026-05-21 | MediaArea MediaInfoLib LXF element parsing heap-based buffer overflow vulnerability |
CVE-2026-42946 | Medium | 6.5 | 2026-05-13 | A vulnerability exists in the ngx_http_scgi_module and ngx_http_uwsgi_module modules that may result in excessive memory allocation or an over-read of data. Wh… |
CVE-2026-41907 | High | 7.5 | 2026-04-24 | uuid is for the creation of RFC9562 (formerly RFC4122) UUIDs. Prior to 14.0.0, v3, v5, and v6 accept external output buffers but do not reject out-of-range wri… |
CVE-2025-33215 | Medium | 6.8 | 2026-03-24 | NVIDIA SNAP-4 Container contains a vulnerability in the VIRTIO-BLK component where a malicious guest VM may cause use of out-of-range pointer offset by sending… |
CVE-2026-4693 | High | 7.5 | 2026-03-24 | Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thund… |
CVE-2026-21732 | Critical | 9.6 | 2026-03-20 | A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can trigger a write out-of-bounds write crash in the GPU shader co… |
CVE-2026-32829 | High | 7.5 | 2026-03-20 | lz4_flex is a pure Rust implementation of LZ4 compression/decompression. In versions 0.11.5 and below, and 0.12.0, decompressing invalid LZ4 data can leak sen… |
CVE-2026-20022 | Medium | 6.1 | 2026-03-04 | A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, adjacent attacker to c… |
CVE-2025-54152 | Medium | 6.5 | 2026-02-11 | A use of out-of-range pointer offset vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit… |
CVE-2026-23764 | | | 2026-01-22 | VB-Audio Voicemeeter, Voicemeeter Banana, and Voicemeeter Potato (versions ending in 1.1.1.9, 2.1.1.9, and 3.1.1.9 and earlier, respectively), as well as VB-Au… |
CVE-2026-21487 | Medium | 6.1 | 2026-01-06 | iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1.1 and below have an Out-of-bounds Read, Use of Out-… |
CVE-2017-20211 | | | 2025-11-12 | UCanCode E-XD++ Visualization Enterprise Suite contains an untrusted pointer dereference vulnerability via the TKDRAWCAD.TKDrawCADCtrl.1 ActiveX control. This… |
CVE-2025-11232 | High | 7.5 | 2025-10-29 | To trigger the issue, three configuration parameters must have specific settings: "hostname-char-set" must be left at the default setting, which is "[^A-Za-z0-… |
CVE-2025-47349 | High | 7.8 | 2025-10-09 | Memory corruption while processing an escape call. |
CVE-2025-27059 | High | 8.8 | 2025-10-09 | Memory corruption while performing SCM call. |
CVE-2025-25180 | High | 7.8 | 2025-07-14 | Software installed and run as a non-privileged user may conduct improper GPU system calls to subvert GPU HW to write to arbitrary physical memory pages.
Under… |
CVE-2024-53017 | Medium | 6.6 | 2025-06-03 | Memory corruption while handling test pattern generator IOCTL command. |
CVE-2025-46806 | | | 2025-06-02 | A Use of Out-of-range Pointer Offset vulnerability in sslh leads to denial of service on some architectures.This issue affects sslh before 2.2.4. |
CVE-2024-47893 | Medium | 6.5 | 2025-05-17 | Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to read and/or write data outside the Guest's virtualis… |
CVE-2024-45570 | Medium | 6.6 | 2025-05-06 | Memory corruption may occur during IO configuration processing when the IO port count is invalid. |
CVE-2025-0467 | High | 8.2 | 2025-04-18 | Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's virtualised GPU memor… |
CVE-2024-45557 | High | 7.8 | 2025-04-07 | Memory corruption can occur when TME processes addresses from TZ and MPSS requests without proper validation. |
CVE-2024-43060 | High | 7.8 | 2025-03-03 | Memory corruption during voice activation, when sound model parameters are loaded from HLOS to ADSP. |
CVE-2024-52939 | High | 7.8 | 2025-02-22 | Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a write data outside the Guest's virtualised… |
CVE-2024-47896 | Low | 3.3 | 2025-02-22 | Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's virtualised GPU memor… |
CVE-2024-12577 | High | 7.3 | 2025-02-22 | Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's virtualised GPU memor… |
CVE-2024-49840 | High | 7.8 | 2025-02-03 | Memory corruption while Invoking IOCTL calls from user-space to validate FIPS encryption or decryption functionality. |
CVE-2024-45573 | High | 7.8 | 2025-02-03 | Memory corruption may occour while generating test pattern due to negative indexing of display ID. |
CVE-2024-47900 | High | 7.8 | 2025-01-31 | Software installed and run as a non-privileged user may conduct improper GPU system calls to access OOB kernel memory. |
CVE-2024-52938 | High | 7.8 | 2025-01-13 | Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to subvert reconstruction activities to trigger a write… |
CVE-2024-52937 | Medium | 6.7 | 2025-01-13 | Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's virtualised GPU memor… |
CVE-2024-52936 | Medium | 4.4 | 2025-01-13 | Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to write data outside the Guest's virtualised GPU memory. |
CVE-2024-52935 | Medium | 4.1 | 2025-01-13 | Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's virtualised GPU memor… |
CVE-2024-47895 | High | 7.1 | 2025-01-13 | Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to read data outside the Guest's virtualised GPU memory. |
CVE-2024-47894 | High | 7.1 | 2025-01-13 | Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to read data outside the Guest's virtualised GPU memory. |
CVE-2024-33041 | Medium | 6.7 | 2025-01-06 | Memory corruption when input parameter validation for number of fences is missing for fence frame IOCTL calls, |
CVE-2024-33036 | Medium | 6.7 | 2024-12-02 | Memory corruption while parsing sensor packets in camera driver, user-space variable is used while allocating memory in kernel and parsing which can lead to hu… |
CVE-2017-11076 | Critical | 9.8 | 2024-11-26 | On some hardware revisions where VP9 decoding is hardware-accelerated, the frame size is not programmed correctly into the decoder hardware which can lead to a… |
CVE-2024-42391 | Medium | 4.3 | 2024-11-18 | Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and force the applica… |
CVE-2024-42390 | Medium | 4.3 | 2024-11-18 | Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and force the applica… |
CVE-2024-42389 | Medium | 5.3 | 2024-11-18 | Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and force the applica… |
CVE-2024-42388 | Medium | 5.3 | 2024-11-18 | Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and force the applica… |
CVE-2024-42387 | Medium | 5.3 | 2024-11-18 | Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and force the applica… |
CVE-2024-42386 | High | 8.2 | 2024-11-18 | Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and produce a segment… |
CVE-2024-42383 | Medium | 4.2 | 2024-11-18 | Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows to write a NULL byte value beyond the memory space dedicated for t… |
CVE-2024-23377 | Medium | 6.7 | 2024-11-04 | Memory corruption while invoking IOCTL command from user-space, when a user modifies the original packet size of the command after system properties have been… |
CVE-2024-42416 | High | 8.8 | 2024-09-05 | The ctl_report_supported_opcodes function did not sufficiently validate a field provided by userspace, allowing an arbitrary write to a limited amount of kerne… |
CVE-2024-6603 | High | 7.4 | 2024-07-09 | In an out-of-memory scenario an allocation could fail but free would have been called on the pointer afterwards leading to memory corruption. This vulnerabilit… |
CVE-2024-21475 | High | 7.8 | 2024-05-06 | Memory corruption when the payload received from firmware is not as per the expected protocol size. |
CVE-2024-1013 | High | 7.8 | 2024-03-18 | An out-of-bounds stack write flaw was found in unixODBC on 64-bit architectures where the caller has 4 bytes and callee writes 8 bytes. This issue may go unnot… |
CVE-2023-43553 | Critical | 9.8 | 2024-03-04 | Memory corruption while parsing beacon/probe response frame when AP sends more supported links in MLIE. |
CVE-2023-33066 | High | 8.4 | 2024-03-04 | Memory corruption in Audio while processing RT proxy port register driver. |
CVE-2023-43534 | High | 8.6 | 2024-02-06 | Memory corruption while validating the TID to Link Mapping action request frame, when a station connects to an access point. |
CVE-2023-43516 | High | 7.8 | 2024-02-06 | Memory corruption when malformed message payload is received from firmware. |
CVE-2023-43513 | High | 7.8 | 2024-02-06 | Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to addr… |
CVE-2023-33067 | Medium | 6.7 | 2024-02-06 | Memory corruption in Audio while calling START command on host voice PCM multiple times for the same RX or TX tap points. |
CVE-2023-33110 | High | 7.8 | 2024-01-02 | The session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may… |
CVE-2023-33033 | High | 8.4 | 2024-01-02 | Memory corruption in Audio during playback with speaker protection. |
CVE-2023-6560 | Medium | 5.5 | 2023-12-09 | An out-of-bounds memory access flaw was found in the io_uring SQ/CQ rings functionality in the Linux kernel. This issue could allow a local user to crash the s… |
CVE-2023-33106 | High | 8.4 | 2023-12-05 | Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND. |
CVE-2023-33079 | High | 7.8 | 2023-12-05 | Memory corruption in Audio while running invalid audio recording from ADSP. |
CVE-2023-22388 | Critical | 9.8 | 2023-11-07 | Memory Corruption in Multi-mode Call Processor while processing bit mask API. |
CVE-2023-46724 | High | 8.6 | 2023-11-01 | Squid is a caching proxy for the Web. Due to an Improper Validation of Specified Index bug, Squid versions 3.3.0.1 through 5.9 and 6.0 prior to 6.4 compiled us… |
CVE-2023-24855 | Critical | 9.8 | 2023-10-03 | Memory corruption in Modem while processing security related configuration before AS Security Exchange. |
CVE-2023-20187 | High | 8.6 | 2023-09-27 | A vulnerability in the Multicast Leaf Recycle Elimination (mLRE) feature of Cisco IOS XE Software for Cisco ASR 1000 Series Aggregation Services Routers could… |
CVE-2023-28564 | High | 7.8 | 2023-09-05 | Memory corruption in WLAN HAL while passing command parameters through WMI interfaces. |
CVE-2023-28575 | Medium | 6.7 | 2023-08-08 | The cam_get_device_priv function does not check the type of handle being returned (device/session/link). This would lead to invalid type usage if a wrong handl… |
CVE-2023-22387 | High | 7.8 | 2023-07-04 | Arbitrary memory overwrite when VM gets compromised in TX write leading to Memory Corruption. |
CVE-2022-46378 | Medium | 6.5 | 2023-05-10 | An out-of-bounds read vulnerability exists in the PORT command parameter extraction functionality of Weston Embedded uC-FTPs v 1.98.00. A specially-crafted set… |
CVE-2022-46377 | Medium | 6.5 | 2023-05-10 | An out-of-bounds read vulnerability exists in the PORT command parameter extraction functionality of Weston Embedded uC-FTPs v 1.98.00. A specially-crafted set… |
CVE-2023-2426 | Medium | 5.5 | 2023-04-29 | Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 9.0.1499. |
CVE-2022-25709 | High | 8.4 | 2023-03-10 | Memory corruption in modem due to use of out of range pointer offset while processing qmi msg |
CVE-2022-25694 | High | 8.4 | 2023-03-10 | Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM |
CVE-2022-33246 | Medium | 6.7 | 2023-02-12 | Memory corruption in Audio due to use of out-of-range pointer offset while Initiating a voice call session from user space with invalid session id. |
CVE-2022-43665 | Medium | 5.5 | 2023-02-02 | A denial of service vulnerability exists in the malware scan functionality of ESTsoft Alyac 2.5.8.645. A specially-crafted PE file can lead to killing target p… |
CVE-2022-42264 | High | 7.1 | 2022-12-30 | NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user can cause the use of an out-of-range… |
CVE-2022-32142 | High | 8.1 | 2022-06-24 | Multiple CODESYS Products are prone to a out-of bounds read or write access. A low privileged remote attacker may craft a request with invalid offset, which ca… |
CVE-2022-21147 | Medium | 5.5 | 2022-05-12 | An out of bounds read vulnerability exists in the malware scan functionality of ESTsoft Alyac 2.5.7.7. A specially-crafted PE file can trigger this vulnerabili… |
CVE-2022-1420 | Medium | 5.5 | 2022-04-21 | Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4774. |
CVE-2022-0729 | High | 8.8 | 2022-02-23 | Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4440. |
CVE-2022-0685 | High | 7.8 | 2022-02-20 | Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4418. |
CVE-2022-0614 | Medium | 5.5 | 2022-02-16 | Use of Out-of-range Pointer Offset in Homebrew mruby prior to 3.2. |
CVE-2022-0554 | High | 7.8 | 2022-02-10 | Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2. |
CVE-2021-34595 | High | 8.1 | 2021-10-26 | A crafted request with invalid offsets may cause an out-of-bounds read or write access in CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions… |
CVE-2021-3889 | High | 8.1 | 2021-10-19 | libmobi is vulnerable to Use of Out-of-range Pointer Offset |
CVE-2021-3888 | High | 8.1 | 2021-10-19 | libmobi is vulnerable to Use of Out-of-range Pointer Offset |
CVE-2021-22550 | Medium | 6.5 | 2021-06-08 | An attacker can modify the pointers in enclave memory to overwrite arbitrary memory addresses within the secure enclave. It is recommended to update past 0.6.3… |
CVE-2021-22549 | Medium | 6.5 | 2021-06-08 | An attacker can modify the address to point to trusted memory to overwrite arbitrary trusted memory. It is recommended to update past 0.6.2 or git commit https… |
CVE-2020-27009 | High | 8.1 | 2021-04-22 | A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.20), APOGEE P… |
CVE-2021-1352 | High | 7.4 | 2021-03-24 | A vulnerability in the DECnet Phase IV and DECnet/OSI protocol processing of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a… |
CVE-2020-13573 | High | 7.5 | 2021-01-07 | A denial-of-service vulnerability exists in the Ethernet/IP server functionality of Rockwell Automation RSLinx Classic 2.57.00.14 CPR 9 SR 3. A specially craft… |
CVE-2020-6112 | High | 7.8 | 2020-09-17 | An exploitable code execution vulnerability exists in the JPEG2000 Stripe Decoding functionality of Nitro Software, Inc.’s Nitro Pro 13.13.2.242 when decoding… |