CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
Description
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.
Hierarchy (View 1000)
Related attack patterns (CAPEC)
CAPEC-10 · CAPEC-100 · CAPEC-123 · CAPEC-14 · CAPEC-24 · CAPEC-42 · CAPEC-44 · CAPEC-45 · CAPEC-46 · CAPEC-47 · CAPEC-8 · CAPEC-9
CVEs mapped to this weakness (14,447)
page 366 of 723| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2023-7104 | Med | 0.36 | 5.5 | 0.01 | Dec 29, 2023 | A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical. This issue affects the function sessionReadRecord of the file ext/session/sqlite3session.c of the component make alltest Handler. The manipulation leads to heap-based buffer overflow. It is… | ||
| CVE-2023-6560 | Med | 0.36 | 5.5 | 0.00 | Dec 9, 2023 | An out-of-bounds memory access flaw was found in the io_uring SQ/CQ rings functionality in the Linux kernel. This issue could allow a local user to crash the system. | ||
| CVE-2021-46748 | Med | 0.36 | 5.5 | 0.00 | Nov 14, 2023 | Insufficient bounds checking in the ASP (AMD Secure Processor) may allow an attacker to access memory outside the bounds of what is permissible to a TA (Trusted Application) resulting in a potential denial of service. | ||
| CVE-2023-40449 | Med | 0.36 | 5.5 | 0.00 | Oct 25, 2023 | The issue was addressed with improved memory handling. This issue is fixed in iOS 17.1 and iPadOS 17.1, macOS Monterey 12.7.1, iOS 16.7.2 and iPadOS 16.7.2, macOS Ventura 13.6.1, macOS Sonoma 14.1. An app may be able to cause a denial-of-service. | ||
| CVE-2023-3576 | Med | 0.36 | 5.5 | 0.00 | Oct 4, 2023 | A memory leak flaw was found in Libtiff's tiffcrop utility. This issue occurs when tiffcrop operates on a TIFF image file, allowing an attacker to pass a crafted TIFF image file to tiffcrop utility, which causes this memory leak issue, resulting an application crash, eventually… | ||
| CVE-2023-27506 | Med | 0.36 | 5.5 | 0.00 | Aug 11, 2023 | Improper buffer restrictions in the Intel(R) Optimization for Tensorflow software before version 2.12 may allow an authenticated user to potentially enable escalation of privilege via local access. | ||
| CVE-2023-21167 | Med | 0.36 | 5.5 | 0.00 | Jun 28, 2023 | In setProfileName of DevicePolicyManagerService.java, there is a possible way to crash the SystemUI menu due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for… | ||
| CVE-2023-30775 | Med | 0.36 | 5.5 | 0.00 | May 19, 2023 | A vulnerability was found in the libtiff library. This security flaw causes a heap buffer overflow in extractContigSamples32bits, tiffcrop.c. | ||
| CVE-2023-30774 | Med | 0.36 | 5.5 | 0.01 | May 19, 2023 | A vulnerability was found in the libtiff library. This flaw causes a heap buffer overflow issue via the TIFFTAG_INKNAMES and TIFFTAG_NUMBEROFINKS values. | ||
| CVE-2023-30088 | Med | 0.36 | 5.5 | 0.00 | May 9, 2023 | An issue found in Cesanta MJS v.1.26 allows a local attacker to cause a denial of service via the mjs_execute function in mjs.c. | ||
| CVE-2023-29932 | Med | 0.36 | 5.5 | 0.00 | May 5, 2023 | llvm-project commit fdbc55a5 was discovered to contain a segmentation fault via the component mlir::IROperand<mlir::OpOperand. | ||
| CVE-2023-29571 | Med | 0.36 | 5.5 | 0.00 | Apr 12, 2023 | Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via gc_sweep at src/mjs_gc.c. This vulnerability can lead to a Denial of Service (DoS). | ||
| CVE-2023-29574 | Med | 0.36 | 5.5 | 0.00 | Apr 12, 2023 | Bento4 v1.6.0-639 was discovered to contain an out-of-memory bug in the mp42avc component. | ||
| CVE-2023-26974 | Med | 0.36 | 5.5 | 0.01 | Apr 4, 2023 | Irfanview v4.62 allows a user-mode write access violation via a crafted JPEG 2000 file starting at JPEG2000+0x0000000000001bf0. | ||
| CVE-2023-0188 | Med | 0.36 | 5.5 | 0.00 | Apr 1, 2023 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer handler, where an unprivileged user can cause improper restriction of operations within the bounds of a memory buffer cause an out-of-bounds read, which may lead to denial of… | ||
| CVE-2023-20972 | Med | 0.36 | 5.5 | 0.00 | Mar 24, 2023 | In btm_vendor_specific_evt of btm_devctl.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:… | ||
| CVE-2022-47453 | Med | 0.36 | 5.5 | 0.00 | Mar 10, 2023 | In wcn service, there is a possible missing params check. This could lead to local denial of service in wcn service. | ||
| CVE-2022-20570 | Med | 0.36 | 5.5 | 0.00 | Dec 16, 2022 | Product: AndroidVersions: Android kernelAndroid ID: A-230660904References: N/A | ||
| CVE-2022-42846 | Med | 0.36 | 5.5 | 0.00 | Dec 15, 2022 | The issue was addressed with improved memory handling. This issue is fixed in iOS 16.2 and iPadOS 16.2, iOS 15.7.2 and iPadOS 15.7.2. Parsing a maliciously crafted video file may lead to unexpected system termination. | ||
| CVE-2022-42775 | Med | 0.36 | 5.5 | 0.00 | Dec 6, 2022 | In camera driver, there is a possible memory corruption due to improper locking. This could lead to local denial of service in kernel. |
- risk 0.36cvss 5.5epss 0.01
A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical. This issue affects the function sessionReadRecord of the file ext/session/sqlite3session.c of the component make alltest Handler. The manipulation leads to heap-based buffer overflow. It is…
- risk 0.36cvss 5.5epss 0.00
An out-of-bounds memory access flaw was found in the io_uring SQ/CQ rings functionality in the Linux kernel. This issue could allow a local user to crash the system.
- risk 0.36cvss 5.5epss 0.00
Insufficient bounds checking in the ASP (AMD Secure Processor) may allow an attacker to access memory outside the bounds of what is permissible to a TA (Trusted Application) resulting in a potential denial of service.
- risk 0.36cvss 5.5epss 0.00
The issue was addressed with improved memory handling. This issue is fixed in iOS 17.1 and iPadOS 17.1, macOS Monterey 12.7.1, iOS 16.7.2 and iPadOS 16.7.2, macOS Ventura 13.6.1, macOS Sonoma 14.1. An app may be able to cause a denial-of-service.
- risk 0.36cvss 5.5epss 0.00
A memory leak flaw was found in Libtiff's tiffcrop utility. This issue occurs when tiffcrop operates on a TIFF image file, allowing an attacker to pass a crafted TIFF image file to tiffcrop utility, which causes this memory leak issue, resulting an application crash, eventually…
- risk 0.36cvss 5.5epss 0.00
Improper buffer restrictions in the Intel(R) Optimization for Tensorflow software before version 2.12 may allow an authenticated user to potentially enable escalation of privilege via local access.
- risk 0.36cvss 5.5epss 0.00
In setProfileName of DevicePolicyManagerService.java, there is a possible way to crash the SystemUI menu due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for…
- risk 0.36cvss 5.5epss 0.00
A vulnerability was found in the libtiff library. This security flaw causes a heap buffer overflow in extractContigSamples32bits, tiffcrop.c.
- risk 0.36cvss 5.5epss 0.01
A vulnerability was found in the libtiff library. This flaw causes a heap buffer overflow issue via the TIFFTAG_INKNAMES and TIFFTAG_NUMBEROFINKS values.
- risk 0.36cvss 5.5epss 0.00
An issue found in Cesanta MJS v.1.26 allows a local attacker to cause a denial of service via the mjs_execute function in mjs.c.
- risk 0.36cvss 5.5epss 0.00
llvm-project commit fdbc55a5 was discovered to contain a segmentation fault via the component mlir::IROperand<mlir::OpOperand.
- risk 0.36cvss 5.5epss 0.00
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via gc_sweep at src/mjs_gc.c. This vulnerability can lead to a Denial of Service (DoS).
- risk 0.36cvss 5.5epss 0.00
Bento4 v1.6.0-639 was discovered to contain an out-of-memory bug in the mp42avc component.
- risk 0.36cvss 5.5epss 0.01
Irfanview v4.62 allows a user-mode write access violation via a crafted JPEG 2000 file starting at JPEG2000+0x0000000000001bf0.
- risk 0.36cvss 5.5epss 0.00
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer handler, where an unprivileged user can cause improper restriction of operations within the bounds of a memory buffer cause an out-of-bounds read, which may lead to denial of…
- risk 0.36cvss 5.5epss 0.00
In btm_vendor_specific_evt of btm_devctl.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:…
- risk 0.36cvss 5.5epss 0.00
In wcn service, there is a possible missing params check. This could lead to local denial of service in wcn service.
- risk 0.36cvss 5.5epss 0.00
Product: AndroidVersions: Android kernelAndroid ID: A-230660904References: N/A
- risk 0.36cvss 5.5epss 0.00
The issue was addressed with improved memory handling. This issue is fixed in iOS 16.2 and iPadOS 16.2, iOS 15.7.2 and iPadOS 15.7.2. Parsing a maliciously crafted video file may lead to unexpected system termination.
- risk 0.36cvss 5.5epss 0.00
In camera driver, there is a possible memory corruption due to improper locking. This could lead to local denial of service in kernel.