CyberSecBulletin

Return of Pointer Value Outside of Expected Range

CWE-466

A function can return a pointer to memory that is outside of the buffer that the pointer is expected to reference.

We track 2 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 7.5.

Latest Return of Pointer Value Outside of Expected Range vulnerabilities

  • 7.4 High severity

    glibc: Return of Pointer Value Outside of Expected Range

    CVE-2024-33602The GNU C Library

    nscd: netgroup cache assumes NSS callback uses in-buffer strings The Name Service Cache Daemon's (nscd) netgroup cache can corrupt memory when the NSS callback does not store all strings in the provided buffer. The flaw was introduced in glibc 2.15 when the ca

  • 7.5 High severity

    BIG-IP: Return of Pointer Value Outside of Expected Range

    CVE-2024-21849F5

    When an Advanced WAF/ASM security policy and a Websockets profile are configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) process to terminate. Note: Software versions which have reached End of Technical Suppo