CWE-788
Access of Memory Location After End of Buffer
Description
The product reads or writes to a buffer using an index or pointer that references a memory location after the end of the buffer.
Hierarchy (View 1000)
CVEs mapped to this weakness (147)
page 8 of 8| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2024-0173 | Low | 0.25 | 3.8 | 0.00 | Mar 13, 2024 | Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper parameter initialization vulnerability. A local low privileged attacker could potentially exploit this vulnerability to read the contents of non-SMM stack memory. | ||
| CVE-2024-0154 | Low | 0.25 | 3.8 | 0.00 | Mar 13, 2024 | Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper parameter initialization vulnerability. A local low privileged attacker could potentially exploit this vulnerability to read the contents of non-SMM stack memory. | ||
| CVE-2021-3588 | Low | 0.21 | 3.3 | 0.00 | Jun 10, 2021 | The cli_feat_read_cb() function in src/gatt-database.c does not perform bounds checks on the 'offset' variable before using it as an index into an array for reading. | ||
| CVE-2026-25584 | Hig | 0.00 | 7.8 | 0.00 | Feb 4, 2026 | iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.3, there is a stack-buffer-overflow vulnerability in CIccTagFloatNum<>::GetValues(). This is triggered when… | ||
| CVE-2022-1451 | Hig | 0.00 | 7.1 | 0.01 | Apr 24, 2022 | Out-of-bounds Read in r_bin_java_constant_value_attr_new function in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end 2f the intented buffer. Typically, this can allow attackers to read sensitive information from other memory… | ||
| CVE-2022-0521 | Hig | 0.00 | 7.1 | 0.01 | Feb 8, 2022 | Access of Memory Location After End of Buffer in GitHub repository radareorg/radare2 prior to 5.6.2. | ||
| CVE-2021-22548 | Med | 0.00 | 6.5 | 0.00 | Jun 8, 2021 | An attacker can change the pointer to untrusted memory to point to trusted memory region which causes copying trusted memory to trusted memory, if the latter is later copied out, it allows for reading of memory regions from the trusted region. It is recommended to update past… |
- risk 0.25cvss 3.8epss 0.00
Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper parameter initialization vulnerability. A local low privileged attacker could potentially exploit this vulnerability to read the contents of non-SMM stack memory.
- risk 0.25cvss 3.8epss 0.00
Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper parameter initialization vulnerability. A local low privileged attacker could potentially exploit this vulnerability to read the contents of non-SMM stack memory.
- risk 0.21cvss 3.3epss 0.00
The cli_feat_read_cb() function in src/gatt-database.c does not perform bounds checks on the 'offset' variable before using it as an index into an array for reading.
- risk 0.00cvss 7.8epss 0.00
iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.3, there is a stack-buffer-overflow vulnerability in CIccTagFloatNum<>::GetValues(). This is triggered when…
- risk 0.00cvss 7.1epss 0.01
Out-of-bounds Read in r_bin_java_constant_value_attr_new function in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end 2f the intented buffer. Typically, this can allow attackers to read sensitive information from other memory…
- risk 0.00cvss 7.1epss 0.01
Access of Memory Location After End of Buffer in GitHub repository radareorg/radare2 prior to 5.6.2.
- risk 0.00cvss 6.5epss 0.00
An attacker can change the pointer to untrusted memory to point to trusted memory region which causes copying trusted memory to trusted memory, if the latter is later copied out, it allows for reading of memory regions from the trusted region. It is recommended to update past…