CWE-823: Use of Out-of-range Pointer Offset, page 2
Filter
The product performs pointer arithmetic on a valid pointer, but it uses an offset that can point outside of the intended range of valid memory locations for the resulting pointer.
What the weakness is: CWE-823 at MITRE. All weaknesses
Related attack patterns (CAPEC): 1
- CAPEC-129 Pointer Manipulation Severity: Medium
The attack patterns MITRE's CAPEC relates to CWE-823, as MITRE names them. Credits.
Ask an AI about CWE-823
Show the prompt
Explain CWE-823: Use of Out-of-range Pointer Offset and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/823.html and https://cve.bz/cve/cwe/823?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 7.1CVE-2024-47895EPSS 0.2%
Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to read data outside the Guest's virtualised GPU memory.
- 7.1CVE-2024-47894EPSS 0.2%
Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to read data outside the Guest's virtualised GPU memory.
- 7.8CVE-2024-33041EPSS 0.1%
Memory corruption when input parameter validation for number of fences is missing for fence frame IOCTL calls,
- 6.7CVE-2024-33036EPSS 0.1%
Memory corruption while parsing sensor packets in camera driver, user-space variable is used while allocating memory in kernel and parsing which can lead to huge allocation or invalid memory access.
- 9.8CVE-2017-11076EPSS 0.4%
On some hardware revisions where VP9 decoding is hardware-accelerated, the frame size is not programmed correctly into the decoder hardware which can lead to an invalid memory access by the decoder.
- 5.3CVE-2024-42391EPSS 0.3%
Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and force the application to read unintended heap memory space.
- 5.3CVE-2024-42390EPSS 0.3%
Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and force the application to read unintended heap memory space.
- 5.3CVE-2024-42389EPSS 0.3%
Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and force the application to read unintended heap memory space.
- 5.3CVE-2024-42388EPSS 0.3%
Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and force the application to read unintended heap memory space.
- 5.3CVE-2024-42387EPSS 0.3%
Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and force the application to read unintended heap memory space.
- 7.5CVE-2024-42386EPSS 0.4%
Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and produce a segmentation fault on the application.
- 9.8CVE-2024-42383EPSS 0.3%
Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows to write a NULL byte value beyond the memory space dedicated for the hostname field.
- 6.7CVE-2024-23377EPSS 0.1%
Memory corruption while invoking IOCTL command from user-space, when a user modifies the original packet size of the command after system properties have been already sent to the EVA driver.
- 8.8CVE-2024-42416EPSS 0.4%
The ctl_report_supported_opcodes function did not sufficiently validate a field provided by userspace, allowing an arbitrary write to a limited amount of kernel help memory. Malicious software running in a guest VM that exposes virtio_scs…
- 7.4CVE-2024-6603EPSS 0.5%
In an out-of-memory scenario an allocation could fail but free would have been called on the pointer afterwards leading to memory corruption. This vulnerability affects Firefox < 128, Firefox ESR < 115.13, Thunderbird < 115.13, and Thunder…
- 7.8CVE-2024-21475EPSS 0.1%
Memory corruption when the payload received from firmware is not as per the expected protocol size.
- 7.8CVE-2024-1013EPSS 0.3%
An out-of-bounds stack write flaw was found in unixODBC on 64-bit architectures where the caller has 4 bytes and callee writes 8 bytes. This issue may go unnoticed on little-endian architectures, while big-endian architectures can be broke…
- 9.8CVE-2023-43553EPSS 0.4%
Memory corruption while parsing beacon/probe response frame when AP sends more supported links in MLIE.
- 7.8CVE-2023-33066EPSS 0.1%
Memory corruption in Audio while processing RT proxy port register driver.
- 9.8CVE-2023-43534EPSS 0.3%
Memory corruption while validating the TID to Link Mapping action request frame, when a station connects to an access point.
- 7.8CVE-2023-43516EPSS 0.1%
Memory corruption when malformed message payload is received from firmware.
- 7.8CVE-2023-43513EPSS 0.1%
Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element.
- 7.8CVE-2023-33067EPSS 0.1%
Memory corruption in Audio while calling START command on host voice PCM multiple times for the same RX or TX tap points.
- 7.0CVE-2023-33110EPSS 0.08%
The session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may lead to race condition between event callback - PCM close and reset session inde…
- 7.8CVE-2023-33033EPSS 0.1%
Memory corruption in Audio during playback with speaker protection.
- 5.5CVE-2023-6560EPSS 0.3%
An out-of-bounds memory access flaw was found in the io_uring SQ/CQ rings functionality in the Linux kernel. This issue could allow a local user to crash the system.
- 7.8CVE-2023-33106KEVEPSS 0.8%
Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.
- 7.8CVE-2023-33079EPSS 0.2%
Memory corruption in Audio while running invalid audio recording from ADSP.
- 9.8CVE-2023-22388EPSS 0.4%
Memory Corruption in Multi-mode Call Processor while processing bit mask API.
- 7.5CVE-2023-46724EPSS 2.8%
Squid is a caching proxy for the Web. Due to an Improper Validation of Specified Index bug, Squid versions 3.3.0.1 through 5.9 and 6.0 prior to 6.4 compiled using `--with-openssl` are vulnerable to a Denial of Service attack against SSL Ce…
- 9.8CVE-2023-24855EPSS 0.5%
Memory corruption in Modem while processing security related configuration before AS Security Exchange.
- 7.5CVE-2023-20187EPSS 0.9%
A vulnerability in the Multicast Leaf Recycle Elimination (mLRE) feature of Cisco IOS XE Software for Cisco ASR 1000 Series Aggregation Services Routers could allow an unauthenticated, remote attacker to cause the affected device to reload…
- 7.8CVE-2023-28564EPSS 0.1%
Memory corruption in WLAN HAL while passing command parameters through WMI interfaces.
- 7.8CVE-2023-28575EPSS 0.1%
The cam_get_device_priv function does not check the type of handle being returned (device/session/link). This would lead to invalid type usage if a wrong handle is passed to it.
- 7.8CVE-2023-22387EPSS 0.1%
Arbitrary memory overwrite when VM gets compromised in TX write leading to Memory Corruption.
- 7.5CVE-2022-46378EPSS 1.4%
An out-of-bounds read vulnerability exists in the PORT command parameter extraction functionality of Weston Embedded uC-FTPs v 1.98.00. A specially-crafted set of network packets can lead to denial of service. An attacker can send packets …
- 7.5CVE-2022-46377EPSS 1.5%
An out-of-bounds read vulnerability exists in the PORT command parameter extraction functionality of Weston Embedded uC-FTPs v 1.98.00. A specially-crafted set of network packets can lead to denial of service. An attacker can send packets …
- 5.3CVE-2023-2426EPSS 0.4%
Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 9.0.1499.
- 7.8CVE-2022-25709EPSS 0.1%
Memory corruption in modem due to use of out of range pointer offset while processing qmi msg
- 7.8CVE-2022-25694EPSS 0.1%
Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM
- 7.8CVE-2022-33246EPSS 0.1%
Memory corruption in Audio due to use of out-of-range pointer offset while Initiating a voice call session from user space with invalid session id.
- 5.5CVE-2022-43665EPSS 0.3%
A denial of service vulnerability exists in the malware scan functionality of ESTsoft Alyac 2.5.8.645. A specially-crafted PE file can lead to killing target process. An attacker can provide a malicious file to trigger this vulnerability.
- 7.8CVE-2022-42264EPSS 0.3%
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user can cause the use of an out-of-range pointer offset, which may lead to data tampering, data loss, information disclos…
- 8.1CVE-2022-32142EPSS 1.1%
Multiple CODESYS Products are prone to a out-of bounds read or write access. A low privileged remote attacker may craft a request with invalid offset, which can cause an out-of-bounds read or write access, resulting in denial-of-service co…
- 5.5CVE-2022-21147EPSS 0.7%
An out of bounds read vulnerability exists in the malware scan functionality of ESTsoft Alyac 2.5.7.7. A specially-crafted PE file can trigger this vulnerability to cause denial of service and termination of malware scan. An attacker can p…
- 5.5CVE-2022-1420EPSS 1.5%
Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4774.
- 8.8CVE-2022-0729EPSS 1.6%
Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4440.
- 7.8CVE-2022-0685EPSS 1.7%
Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4418.
- 5.5CVE-2022-0614EPSS 0.9%
Use of Out-of-range Pointer Offset in Homebrew mruby prior to 3.2.
- 7.8CVE-2022-0554EPSS 1.7%
Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.