cve.bz

CWE-805: Buffer Access with Incorrect Length Value, page 2

Filter

The product uses a sequential operation to read or write a buffer, but it uses an incorrect length value that causes it to access memory that is outside of the bounds of the buffer.

What the weakness is: CWE-805 at MITRE

Ask an AI about CWE-805

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-805: Buffer Access with Incorrect Length Value and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/805.html and https://cve.bz/cve/cwe/805?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.5CVE-2023-52557EPSS 0.6%

    In OpenBSD 7.3 before errata 016, npppd(8) could crash by a l2tp message which has an AVP (Attribute-Value Pair) with wrong length.

  2. 6.6CVE-2024-20294EPSS 0.3%

    A vulnerability in the Link Layer Discovery Protocol (LLDP) feature of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. Th…

  3. 7.5CVE-2022-47375EPSS 0.7%

    A vulnerability has been identified in SIMATIC PC-Station Plus (All versions), SIMATIC S7-400 CPU 412-2 PN V7 (All versions), SIMATIC S7-400 CPU 414-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 414F-3 PN/DP V7 (All versions), SIMATIC S7-4…

  4. 7.5CVE-2023-20049EPSS 1.0%

    A vulnerability in the bidirectional forwarding detection (BFD) hardware offload feature of Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers, ASR 9902 Compact High-Performance Routers, and ASR 9903 Compact High-…

  5. 2.3CVE-2022-34399EPSS 0.2%

    Dell Alienware m17 R5 BIOS version prior to 1.2.2 contain a buffer access vulnerability. A malicious user with admin privileges could potentially exploit this vulnerability by sending input larger than expected in order to leak certain sec…

  6. 7.1CVE-2022-0519EPSS 1.0%

    Buffer Access with Incorrect Length Value in GitHub repository radareorg/radare2 prior to 5.6.2.

  7. 7.5CVE-2021-31885EPSS 1.2%

    A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BA…

  8. 8.8CVE-2021-3581EPSS 0.3%

    Buffer Access with Incorrect Length Value in zephyr. Zephyr versions >= >=2.5.0 contain Buffer Access with Incorrect Length Value (CWE-805). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-8q…

  9. 5.5CVE-2020-10774EPSS 0.3%

    A memory disclosure flaw was found in the Linux kernel's versions before 4.18.0-193.el8 in the sysctl subsystem when reading the /proc/sys/kernel/rh_features file. This flaw allows a local user to read uninitialized values from the kernel …

  10. 9.8CVE-2020-14509EPSS 2.1%

    Multiple memory corruption vulnerabilities exist in CodeMeter (All versions prior to 7.10) where the packet parser mechanism does not verify length fields. An attacker could send specially crafted packets to exploit these vulnerabilities.

  11. 7.5CVE-2020-16101EPSS 1.0%

    It is possible for an unauthenticated remote DCOM websocket connection to crash the Command Centre service due to an out-of-bounds buffer access. Affected versions are v8.20 prior to v8.20.1166(MR3), v8.10 prior to v8.10.1211(MR5), v8.00 p…

  12. 6.5CVE-2019-19339EPSS 0.3%

    It was found that the Red Hat Enterprise Linux 8 kpatch update did not include the complete fix for CVE-2018-12207. A flaw was found in the way Intel CPUs handle inconsistency between, virtual to physical memory address translations in CPU…