CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

13,962 vulnerabilities with CWE-119
CVE-2025-5793 HIGH
TOTOLINK EX1200T 4.1.2cu.5232_B20210713 - Buffer Overflow via service_type Parameter
CVSS 8.8
CVE-2025-5792 HIGH
TOTOLINK EX1200T 4.1.2cu.5232_B20210713 - Buffer Overflow via HTTP POST Request Handler
CVSS 8.8
CVE-2025-5790 HIGH
TOTOLINK X15 1.0.0-B20230714.1105 - Buffer Overflow via HTTP POST Request Handler
CVSS 8.8
CVE-2025-5789 HIGH
TOTOLINK X15 1.0.0-B20230714.1105 - Buffer Overflow via HTTP POST Request Handler
CVSS 8.8
CVE-2025-5788 HIGH
TOTOLINK X15 1.0.0-B20230714.1105 - Buffer Overflow via submit-url Parameter
CVSS 8.8
CVE-2025-5787 HIGH
TOTOLINK X15 1.0.0-B20230714.1105 - Buffer Overflow via HTTP POST Request Handler
CVSS 8.8
CVE-2025-5786 HIGH
TOTOLINK X15 1.0.0-B20230714.1105 - Buffer Overflow via HTTP POST Request Handler
CVSS 8.8
CVE-2025-5785 HIGH
TOTOLINK X15 1.0.0-B20230714.1105 - Buffer Overflow via HTTP POST Request Handler
CVSS 8.8
CVE-2025-5739 HIGH
TOTOLINK X15 1.0.0-B20230714.1105 - Buffer Overflow via HTTP POST Request Handler
CVSS 8.8
CVE-2025-5738 HIGH
TOTOLINK X15 1.0.0-B20230714.1105 - Buffer Overflow via HTTP POST Request Handler
CVSS 8.8
CVE-2025-5737 HIGH
TOTOLINK X15 1.0.0-B20230714.1105 - Buffer Overflow via HTTP POST Request Handler
CVSS 8.8
CVE-2025-5736 HIGH
TOTOLINK X15 1.0.0-B20230714.1105 - Buffer Overflow via NTP Form POST Request
CVSS 8.8
CVE-2025-5735 HIGH
TOTOLINK X15 1.0.0-B20230714.1105 - Buffer Overflow via HTTP POST Request Handler
CVSS 8.8
CVE-2025-5734 HIGH
TOTOLINK X15 1.0.0-B20230714.1105 - Buffer Overflow via Redirect-URL Parameter
CVSS 8.8
CVE-2025-5685 HIGH
Tenda CH22 1.0.0.1 - Stack-based Buffer Overflow via Natlimit Page Parameter
CVSS 8.8
CVE-2025-5672 HIGH
TOTOLINK N302R Plus < 3.4.0-b20201028 - Buffer Overflow via HTTP POST Request Handler
CVSS 8.8
CVE-2025-5671 HIGH
TOTOLINK N302R Plus < 3.4.0-b20201028 - Buffer Overflow via service_type Parameter
CVSS 8.8
CVE-2025-5667 HIGH
FreeFloat FTP Server 1.0 - Buffer Overflow in REIN Command Handler
CVSS 7.3
CVE-2025-5666 HIGH
FreeFloat FTP Server 1.0 - Buffer Overflow via XMKD Command Handler
CVSS 7.3
CVE-2025-5665 HIGH
FreeFloat FTP Server 1.0 - Buffer Overflow via XCWD Command Handler
CVSS 7.3
CVE-2025-5664 HIGH
FreeFloat FTP Server 1.0 - Buffer Overflow via RESTART Command Handler
CVSS 7.3
CVE-2025-5648 LOW
Radare2 5.9.9 - Memory Corruption in r_cons_pal_init via -T Argument
CVSS 2.5
CVE-2025-5647 LOW
Radare2 5.9.9 - Memory Corruption in radiff2 via -T Argument
CVSS 2.5
CVE-2025-5646 LOW
Radare2 5.9.9 - Memory Corruption in r_cons_rainbow_free via -T Argument
CVSS 2.5
CVE-2025-5645 LOW
Radare2 5.9.9 - Memory Corruption in radiff2 via -T Argument
CVSS 2.5
Details
Vulnerabilities 13,962
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits