Vulnerabilities (CVE)

Filtered by CWE-119
Total 11925 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-26126 2 Fedoraproject, Frrouting 2 Fedora, Frrouting 2024-04-28 6.8 MEDIUM 7.8 HIGH
Buffer overflow vulnerabilities exist in FRRouting through 8.1.0 due to the use of strdup with a non-zero-terminated binary string in isis_nb_notifications.c.
CVE-2013-6381 1 Linux 1 Linux Kernel 2024-04-26 6.9 MEDIUM N/A
Buffer overflow in the qeth_snmp_command function in drivers/s390/net/qeth_core_main.c in the Linux kernel through 3.12.1 allows local users to cause a denial of service or possibly have unspecified other impact via an SNMP ioctl call with a length value that is incompatible with the command-buffer size.
CVE-2024-3159 1 Google 1 Chrome 2024-04-26 N/A 8.8 HIGH
Out of bounds memory access in V8 in Google Chrome prior to 123.0.6312.105 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High)
CVE-2021-38201 2 Linux, Netapp 7 Linux Kernel, Element Software, Hci Bootstrap Os and 4 more 2024-04-23 5.0 MEDIUM 7.5 HIGH
net/sunrpc/xdr.c in the Linux kernel before 5.13.4 allows remote attackers to cause a denial of service (xdr_set_page_base slab-out-of-bounds access) by performing many NFS 4.2 READ_PLUS operations.
CVE-2023-23457 2 Fedoraproject, Upx Project 2 Fedora, Upx 2024-04-19 N/A 5.5 MEDIUM
A Segmentation fault was found in UPX in PackLinuxElf64::invert_pt_dynamic() in p_lx_elf.cpp. An attacker with a crafted input file allows invalid memory address access that could lead to a denial of service.
CVE-2023-4235 2024-04-18 N/A 8.1 HIGH
A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the decode_deliver_report() function during the SMS decoding. It is assumed that the attack scenario is accessible from a compromised modem, a malicious base station, or just SMS. There is a bound check for this memcpy length in decode_submit(), but it was forgotten in decode_deliver_report().
CVE-2023-4232 2024-04-18 N/A 8.1 HIGH
A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the decode_status_report() function during the SMS decoding. It is assumed that the attack scenario is accessible from a compromised modem, a malicious base station, or just SMS. There is a bound check for this memcpy length in decode_submit(), but it was forgotten in decode_status_report().
CVE-2024-26599 1 Linux 1 Linux Kernel 2024-04-17 N/A 7.8 HIGH
In the Linux kernel, the following vulnerability has been resolved: pwm: Fix out-of-bounds access in of_pwm_single_xlate() With args->args_count == 2 args->args[2] is not defined. Actually the flags are contained in args->args[1].
CVE-2024-30253 2024-04-17 N/A 7.5 HIGH
@solana/web3.js is the Solana JavaScript SDK. Using particular inputs with `@solana/web3.js` will result in memory exhaustion (OOM). If you have a server, client, mobile, or desktop product that accepts untrusted input for use with `@solana/web3.js`, your application/service may crash, resulting in a loss of availability. This vulnerability is fixed in 1.0.1, 1.10.2, 1.11.1, 1.12.1, 1.1.2, 1.13.1, 1.14.1, 1.15.1, 1.16.2, 1.17.1, 1.18.1, 1.19.1, 1.20.3, 1.21.1, 1.22.1, 1.23.1, 1.24.3, 1.25.1, 1.26.1, 1.27.1, 1.28.1, 1.2.8, 1.29.4, 1.30.3, 1.31.1, 1.3.1, 1.32.3, 1.33.1, 1.34.1, 1.35.2, 1.36.1, 1.37.3, 1.38.1, 1.39.2, 1.40.2, 1.41.11, 1.4.1, 1.42.1, 1.43.7, 1.44.4, 1.45.1, 1.46.1, 1.47.5, 1.48.1, 1.49.1, 1.50.2, 1.51.1, 1.5.1, 1.52.1, 1.53.1, 1.54.2, 1.55.1, 1.56.3, 1.57.1, 1.58.1, 1.59.2, 1.60.1, 1.61.2, 1.6.1, 1.62.2, 1.63.2, 1.64.1, 1.65.1, 1.66.6, 1.67.3, 1.68.2, 1.69.1, 1.70.4, 1.71.1, 1.72.1, 1.7.2, 1.73.5, 1.74.1, 1.75.1, 1.76.1, 1.77.4, 1.78.8, 1.79.1, 1.80.1, 1.81.1, 1.8.1, 1.82.1, 1.83.1, 1.84.1, 1.85.1, 1.86.1, 1.87.7, 1.88.1, 1.89.2, 1.90.2, 1.9.2, and 1.91.3.
CVE-2023-28581 1 Qualcomm 52 Fastconnect 6800, Fastconnect 6800 Firmware, Fastconnect 6900 and 49 more 2024-04-12 N/A 9.8 CRITICAL
Memory corruption in WLAN Firmware while parsing receieved GTK Keys in GTK KDE.
CVE-2023-28549 1 Qualcomm 450 315 5g Iot Modem, 315 5g Iot Modem Firmware, Aqt1000 and 447 more 2024-04-12 N/A 7.8 HIGH
Memory corruption in WLAN HAL while parsing Rx buffer in processing TLV payload.
CVE-2023-28545 1 Qualcomm 408 315 5g Iot Modem, 315 5g Iot Modem Firmware, 9205 Lte Modem and 405 more 2024-04-12 N/A 7.8 HIGH
Memory corruption in TZ Secure OS while loading an app ELF.
CVE-2023-21663 1 Qualcomm 76 Aqt1000, Aqt1000 Firmware, Qca6420 and 73 more 2024-04-12 N/A 7.8 HIGH
Memory Corruption while accessing metadata in Display.
CVE-2023-21654 1 Qualcomm 112 Apq8096au, Apq8096au Firmware, Aqt1000 and 109 more 2024-04-12 N/A 7.8 HIGH
Memory corruption in Audio during playback session with audio effects enabled.
CVE-2023-21637 1 Qualcomm 110 Aqt1000, Aqt1000 Firmware, Fastconnect 6200 and 107 more 2024-04-12 N/A 7.8 HIGH
Memory corruption in Linux while calling system configuration APIs.
CVE-2023-21633 1 Qualcomm 194 Apq8064au, Apq8064au Firmware, Aqt1000 and 191 more 2024-04-12 N/A 7.8 HIGH
Memory Corruption in Linux while processing QcRilRequestImsRegisterMultiIdentityMessage request.
CVE-2023-21628 1 Qualcomm 566 Apq8017, Apq8017 Firmware, Apq8064au and 563 more 2024-04-12 N/A 7.8 HIGH
Memory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command.
CVE-2022-40533 1 Qualcomm 220 Csra6620, Csra6620 Firmware, Csra6640 and 217 more 2024-04-12 N/A 5.5 MEDIUM
Transient DOS due to untrusted Pointer Dereference in core while sending USB QMI request.
CVE-2022-33267 1 Qualcomm 106 Aqt1000, Aqt1000 Firmware, Qca6390 and 103 more 2024-04-12 N/A 7.8 HIGH
Memory corruption in Linux while sending DRM request.
CVE-2022-25713 1 Qualcomm 110 Ar8035, Ar8035 Firmware, Qam8295p and 107 more 2024-04-12 N/A 7.8 HIGH
Memory corruption in Automotive due to Improper Restriction of Operations within the Bounds of a Memory Buffer while exporting a shared key.