CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer, page 55
Filter
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.
What the weakness is: CWE-119 at MITRE
Ask an AI about CWE-119
ChatGPTClaudePerplexityGoogle AI Mode
Show the prompt
Explain CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/119.html and https://cve.bz/cve/cwe/119?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 9.8CVE-2024-8389EPSS 0.5%
Memory safety bugs present in Firefox 129. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 1…
- 9.8CVE-2024-8387EPSS 0.6%
Memory safety bugs present in Firefox 129, Firefox ESR 128.1, and Thunderbird 128.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary co…
- 6.8CVE-2024-33016EPSS 0.2%
memory corruption when an invalid firehose patch command is invoked.
- 9.8CVE-2024-45169EPSS 1.4%
An issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12. Due to improper input validation, improper deserialization, and improper restriction of operations within the bounds of a memory buffer, IDOL2 is vulnerable to Deni…
- 5.5CVE-2022-48940EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix crash due to incorrect copy_map_value When both bpf_spin_lock and bpf_timer are present in a BPF map value, copy_map_value needs to skirt both objects when copy…
- 8.8CVE-2024-7972EPSS 0.6%
Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium)
- 8.8CVE-2024-7966EPSS 0.7%
Out of bounds memory access in Skia in Google Chrome prior to 128.0.6613.84 allowed a remote attacker who had compromised the renderer process to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Hig…
- 8.8CVE-2024-7795EPSS 0.5%
Autel MaxiCharger AC Elite Business C50 AppAuthenExchangeRandomNum Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of…
- 8.4CVE-2024-44067EPSS 0.2%
The T-Head XuanTie C910 CPU in the TH1520 SoC and the T-Head XuanTie C920 CPU in the SOPHON SG2042 have instructions that allow unprivileged attackers to write to arbitrary physical memory locations, aka GhostWrite.
- 9.8CVE-2022-33162EPSS 0.4%
IBM Security Directory Integrator 7.2.0 and Security Verify Directory Integrator 10.0.0 does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources, at the priv…
- 9.8CVE-2024-20082EPSS 1.4%
In Modem, there is a possible memory corruption due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01182594…
- 7.8CVE-2024-38218EPSS 0.6%
Microsoft Edge (HTML-based) Memory Corruption Vulnerability
- 7.9CVE-2024-21980EPSS 0.4%
Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to potentially overwrite a guest's memory or UMC seed resulting in loss of confidentiality and integrity.
- 6.0CVE-2023-31355EPSS 0.4%
Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to overwrite a guest's UMC seed potentially allowing reading of memory from a decommissioned guest.
- 7.8CVE-2024-23356EPSS 0.1%
Memory corruption during session sign renewal request calls in HLOS.
- 7.8CVE-2024-23355EPSS 0.1%
Memory corruption when keymaster operation imports a shared key.
- 8.4CVE-2024-21481EPSS 0.1%
Memory corruption when preparing a shared memory notification for a memparcel in Resource Manager.
- 8.7CVE-2024-7441EPSS 8.1%Unsupported when assigned
A vulnerability was found in Vivotek SD9364 VVTK-0103f. It has been declared as critical. This vulnerability affects the function read of the component httpd. The manipulation of the argument Content-Length leads to stack-based buffer over…
- 8.7CVE-2024-7439EPSS 1.0%Unsupported when assigned
A vulnerability was found in Vivotek CC8160 VVTK-0100d and classified as critical. Affected by this issue is the function read of the component httpd. The manipulation of the argument Content-Length leads to stack-based buffer overflow. Th…
- 7.5CVE-2024-36434EPSS 0.2%
An SMM callout vulnerability was discovered in Supermicro X11DPH-T, X11DPH-Tq, and X11DPH-i motherboards with BIOS firmware before 4.4.
- 7.5CVE-2024-36433EPSS 0.2%
An arbitrary memory write vulnerability was discovered in Supermicro X11DPH-T, X11DPH-Tq, and X11DPH-i motherboards with BIOS firmware before 4.4.
- 5.5CVE-2024-40988EPSS 0.3%
In the Linux kernel, the following vulnerability has been resolved: drm/radeon: fix UBSAN warning in kv_dpm.c Adds bounds check for sumo_vid_mapping_entry.
- 7.1CVE-2024-6236EPSS 0.7%
Denial of Service in NetScaler Console (formerly NetScaler ADM), NetScaler Agent, and NetScaler SDX
- 8.8CVE-2024-38104EPSS 1.8%
Windows Fax Service Remote Code Execution Vulnerability
- 7.8CVE-2024-21482EPSS 0.1%
Memory corruption during the secure boot process, when the `bootm` command is used, it bypasses the authentication of the kernel/rootfs image.
- 7.8CVE-2023-43554EPSS 0.1%
Memory corruption while processing IOCTL handler in FastRPC.
- 7.8CVE-2024-0153EPSS 0.2%
Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Arm Ltd Valhall GPU Firmware, Arm Ltd Arm 5th Gen GPU Architecture Firmware allows a local non-privileged user to make improper GPU processing operati…
- 7.5CVE-2024-20077EPSS 0.7%
In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01297807…
- 7.5CVE-2024-20076EPSS 0.7%
In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01297806…
- 8.4CVE-2024-37676EPSS 0.2%
An issue in htop-dev htop v.2.20 allows a local attacker to cause an out-of-bounds access in the Header_populateFromSettings function.
- 7.0CVE-2024-30090EPSS 2.0%
Microsoft Streaming Service Elevation of Privilege Vulnerability
- 7.8CVE-2024-27857EPSS 1.8%
An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS 1.2. A remote attacker may be able to cause unexpected app termination or ar…
- 8.8CVE-2024-27851EPSS 0.8%
The issue was addressed with improved bounds checks. This issue is fixed in Safari 17.5, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS 1.2, watchOS 10.5. Processing maliciously crafted web content may lead to arbitrary c…
- 8.8CVE-2024-27820EPSS 1.0%
The issue was addressed with improved memory handling. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS 1.2, watchOS 10.5. Processing web content may lead to…
- 7.8CVE-2024-5306EPSS 0.4%
Kofax Power PDF PDF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to expl…
- 7.5CVE-2024-36129EPSS 1.2%
The OpenTelemetry Collector offers a vendor-agnostic implementation on how to receive, process and export telemetry data. An unsafe decompression vulnerability allows unauthenticated attackers to crash the collector via excessive memory co…
- 7.8CVE-2023-52548EPSS 0.1%
Huawei Matebook D16(Model: CREM-WXX9, BIOS: v2.26) Arbitrary Memory Corruption in SMI Handler of ThisiServicesSmm SMM module. This can be leveraged by a malicious OS attacker to corrupt arbitrary SMRAM memory and, in turn, lead to code exe…
- 8.8CVE-2022-48681EPSS 0.2%
Some Huawei smart speakers have a memory overflow vulnerability. Successful exploitation of this vulnerability may cause certain functions to fail.
- 5.5CVE-2021-47367EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: virtio-net: fix pages leaking when building skb in big mode We try to use build_skb() if we had sufficient tailroom. But we forget to release the unused pages chained vi…
- 9.1CVE-2021-47348EPSS 1.0%
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Avoid HDCP over-read and corruption Instead of reading the desired 5 bytes of the actual target field, the code was reading 8. This could result in a co…
- 8.8CVE-2024-35814EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: swiotlb: Fix double-allocation of slots due to broken alignment handling Commit bbb73a103fbb ("swiotlb: fix a braino in the alignment check fix"), which was a fix for co…
- 7.5CVE-2024-23980EPSS 0.2%
Improper buffer restrictions in PlatformPfrDxe driver in UEFI firmware for some Intel(R) Server D50FCP Family products may allow a privileged user to enable escalation of privilege via local access.
- 5.5CVE-2023-48368EPSS 0.2%
Improper input validation in Intel(R) Media SDK software all versions may allow an authenticated user to potentially enable denial of service via local access.
- 5.5CVE-2023-47169EPSS 0.3%
Improper buffer restrictions in Intel(R) Media SDK software all versions may allow an authenticated user to potentially enable denial of service via local access.
- 7.8CVE-2023-45221EPSS 0.3%
Improper buffer restrictions in Intel(R) Media SDK all versions may allow an authenticated user to potentially enable escalation of privilege via local access.
- 6.1CVE-2023-28383EPSS 0.2%
Improper conditions check in some Intel(R) BIOS PPAM firmware may allow a privileged user to potentially enable escalation of privilege via local access.
- 7.3CVE-2024-32058EPSS 0.4%
A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected application is vulnerable to memory corruption while parsing specially crafted IGS files. This could allow an attacker to execute code in the conte…
- 8.1CVE-2024-0088EPSS 19%
NVIDIA Triton Inference Server for Linux contains a vulnerability in shared memory APIs, where a user can cause an improper memory access issue by a network API. A successful exploit of this vulnerability might lead to denial of service an…
- 6.5CVE-2024-32761EPSS 0.5%
Under certain conditions, a data leak may occur in the Traffic Management Microkernels (TMMs) of BIG-IP tenants running on VELOS and rSeries platforms. This leak occurs randomly and cannot be deliberately triggered. If it occurs, it may le…
- 4.4CVE-2024-4162EPSS 0.2%
A buffer error in Panasonic KW Watcher versions 1.00 through 2.83 may allow attackers malicious read access to memory.