Access of Memory Location After End of Buffer
CWE-788
The product reads or writes to a buffer using an index or pointer that references a memory location after the end of the buffer.
We track 14 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 7.7.
Latest Access of Memory Location After End of Buffer vulnerabilities
- 7.8 High severity
iccDEV: Improper Restriction of Operations within the Bounds of a Memory Buffer
iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.3, there is a stack-buffer-overflow vulnerability in CIccTagFloatNum<>::GetValues(). This is tri
- 8.6 High severity
Cisco Adaptive Security Appliance (ASA) Software: Access of Memory Location After End of Buffer
A vulnerability in the SSL VPN feature for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a den
- 7.5 High severity
Cisco Firepower Threat Defense Software: Access of Memory Location After End of Buffer
A vulnerability in the Snort 2 and Snort 3 TCP and UDP detection engine of Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 2100 Series Appliances could allow an unauthenticated, remote attacker to cause memory corruption, which could cause th
- 7.0 High severity
Firefox: Access of Memory Location Before Start of Buffer
Memory safety bugs present in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerabil
- 7.8 High severity
iOS and iPadOS: Access of Memory Location Before Start of Buffer
The issue was addressed with improved memory handling. This issue is fixed in iOS 17.5 and iPadOS 17.5, tvOS 17.5, visionOS 1.2, watchOS 10.5. An app may be able to execute arbitrary code with kernel privileges.
- 7.8 High severity
macOS: Access of Memory Location After End of Buffer
The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.5. Processing a file may lead to unexpected app termination or arbitrary code execution.
- 7.1 High severity
GPU Display driver, vGPU driver, Cloud Gaming…: Access of Memory Location After End of Buffer
NVIDIA GPU Display Driver for Linux contains a vulnerability where an attacker may access a memory location after the end of the buffer. A successful exploit of this vulnerability may lead to denial of service and data tampering.
- 7.8 High severity
Intel Unison software: Access of Memory Location After End of Buffer
Access of memory location after end of buffer for some Intel Unison software may allow an authenticated user to potentially enable escalation of privilege via local access.
- 7.4 High severity
A vulnerability in the Intermediate System-to-Intermediate System (IS-IS) protocol of Cisco…
A vulnerability in the Intermediate System-to-Intermediate System (IS-IS) protocol of Cisco NX-OS Software for the Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an unauthenticated, adjacent attacker
- 7.8 High severity
Intel(R) Server Board BMC firmware: Improper Restriction of Operations within the Bounds of a Memory Buffer
Access of memory location after end of buffer in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable escalation of privilege via local access.
- 8.2 High severity
NVIDIA DGX servers: Out-of-bounds Write
NVIDIA DGX-1 contains a vulnerability in Ofbd in AMI SBIOS, where a preconditioned heap can allow a user with elevated privileges to cause an access beyond the end of a buffer, which may lead to code execution, escalation of privileges, denial of service and i
- 7.5 High severity
XBC-DN32U: Access of Memory Location After End of Buffer
If an attacker were to access memory locations of LS ELECTRIC XBC-DN32U with operating system version 01.80 that are outside of the communication buffer, the device stops operating. This could allow an attacker to cause a denial-of-service condition.
- 8.8 High severity
esp-idf: Out-of-bounds Write
ESP-IDF is the official development framework for Espressif SoCs. In Espressif’s Bluetooth Mesh SDK (`ESP-BLE-MESH`), a memory corruption vulnerability can be triggered during provisioning, because there is no check for the `SegN` field of the Transaction Star
- 7.1 High severity
radareorg/radare2: Out-of-bounds Read
Out-of-bounds Read in r_bin_java_constant_value_attr_new function in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end 2f the intented buffer. Typically, this can allow attackers to read sensitive informatio