cve.bz

CWE-466: Return of Pointer Value Outside of Expected Range

Filter

A function can return a pointer to memory that is outside of the buffer that the pointer is expected to reference.

What the weakness is: CWE-466 at MITRE. All weaknesses

Ask an AI about CWE-466

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-466: Return of Pointer Value Outside of Expected Range and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/466.html and https://cve.bz/cve/cwe/466?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 6.8CVE-2026-57025EPSS 0.1%

    A Return of Pointer Value Outside of Expected Range vulnerability in the fileio library of Juniper Networks Junos OS and Junos OS Evolved allows a local, low-privilged attacker to cause a Denial-of-Service (DoS). On EX Series, QFX Series …

  2. 6.9CVE-2018-25234EPSS 0.2%

    SmartFTP Client 9.0.2615.0 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Host field. Attackers can paste a buffer of 300 repeated characters i…

  3. 6.9CVE-2018-25227EPSS 0.2%

    Valentina Studio 9.0.4 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Host field. Attackers can trigger the crash by pasting a 256-byte buffer …

  4. 6.9CVE-2019-25599EPSS 0.1%

    Backup Key Recovery 2.2.4 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Name field. Attackers can paste a buffer of 300 or more characters int…

  5. 6.9CVE-2019-25586EPSS 0.2%

    Deluge 1.3.15 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the URL field. Attackers can paste a buffer of 5000 characters into the 'From URL' fie…

  6. 6.9CVE-2019-25548EPSS 0.2%

    BlueStacks 4.80.0.1060 contains a denial of service vulnerability that allows local attackers to crash the application by submitting oversized input to the search field. Attackers can paste a buffer of 100,000 'A' characters into the searc…

  7. 7.4CVE-2024-33602EPSS 0.4%

    nscd: netgroup cache assumes NSS callback uses in-buffer strings The Name Service Cache Daemon's (nscd) netgroup cache can corrupt memory when the NSS callback does not store all strings in the provided buffer. The flaw was introduced in …

  8. 7.5CVE-2024-21849EPSS 0.5%

    When an Advanced WAF/ASM security policy and a Websockets profile are configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) process to terminate.  Note: Software versions which have reached …