cve.bz

CWE-823: Use of Out-of-range Pointer Offset, page 3

Filter

The product performs pointer arithmetic on a valid pointer, but it uses an offset that can point outside of the intended range of valid memory locations for the resulting pointer.

What the weakness is: CWE-823 at MITRE. All weaknesses

Related attack patterns (CAPEC): 1
  • CAPEC-129 Pointer Manipulation Severity: Medium

The attack patterns MITRE's CAPEC relates to CWE-823, as MITRE names them. Credits.

Ask an AI about CWE-823

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-823: Use of Out-of-range Pointer Offset and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/823.html and https://cve.bz/cve/cwe/823?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 8.1CVE-2021-34595EPSS 0.9%

    A crafted request with invalid offsets may cause an out-of-bounds read or write access in CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56, resulting in a denial-of-service condition or local memory overwrite.

  2. 8.1CVE-2021-3889EPSS 1.3%

    libmobi is vulnerable to Use of Out-of-range Pointer Offset

  3. 8.1CVE-2021-3888EPSS 1.3%

    libmobi is vulnerable to Use of Out-of-range Pointer Offset

  4. 7.8CVE-2021-22550EPSS 0.1%

    An attacker can modify the pointers in enclave memory to overwrite arbitrary memory addresses within the secure enclave. It is recommended to update past 0.6.3 or git commit https://github.com/google/asylo/commit/a47ef55db2337d29de19c50cd2…

  5. 7.8CVE-2021-22549EPSS 0.1%

    An attacker can modify the address to point to trusted memory to overwrite arbitrary trusted memory. It is recommended to update past 0.6.2 or git commit https://github.com/google/asylo/commit/53ed5d8fd8118ced1466e509606dd2f473707a5c

  6. 8.1CVE-2020-27009EPSS 7.2%

    A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.20), APOGEE PXC Modular (BACnet) (All versions < V3.5.5), APOGEE PXC Modular (P2 Ethernet) (A…

  7. 6.5CVE-2021-1352EPSS 0.4%

    A vulnerability in the DECnet Phase IV and DECnet/OSI protocol processing of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is d…

  8. 7.5CVE-2020-13573EPSS 4.1%

    A denial-of-service vulnerability exists in the Ethernet/IP server functionality of Rockwell Automation RSLinx Classic 2.57.00.14 CPR 9 SR 3. A specially crafted network request can lead to a denial of service. An attacker can send a seque…

  9. 7.8CVE-2020-6112EPSS 17%

    An exploitable code execution vulnerability exists in the JPEG2000 Stripe Decoding functionality of Nitro Software, Inc.’s Nitro Pro 13.13.2.242 when decoding sub-samples. While initializing tiles with sub-sample data, the application can …

  10. 9.6CVE-2020-8904EPSS 0.2%

    An arbitrary memory overwrite vulnerability in the trusted memory of Asylo exists in versions prior to 0.6.0. As the ecall_restore function fails to validate the range of the output_len pointer, an attacker can manipulate the tmp_output_le…

  11. 7.5CVE-2016-2161EPSS 21%

    In Apache HTTP Server versions 2.4.0 to 2.4.23, malicious input to mod_auth_digest can cause the server to crash, and each instance continues to crash even for subsequently valid requests.