CWE-131
High likelihoodIncorrect Calculation of Buffer Size
Parent: CWE-682 - Incorrect Calculation
The product does not correctly calculate the size to be used when allocating a buffer, which could lead to a buffer overflow.
182 vulnerabilities with CWE-131
CVE-2019-19282
HIGH
Siemens SIMATIC Encrypted Communication - Denial of Service
CVSS 7.5
CVE-2019-10500
CRITICAL
Qualcomm APQ8009 Firmware - Buffer Overflow via MT Secondary PDP Request
CVSS 9.8
CVE-2019-10627
CRITICAL
Qualcomm IPS < 2019.2 - Integer Overflow to Buffer Overflow in PostScript Image Handling
CVSS 9.8
CVE-2019-5696
MEDIUM
NVIDIA Virtual GPU Manager - Denial of Service via Incorrectly Sized Buffer
CVSS 5.5
CVE-2019-15161
MEDIUM
libpcap < 1.9.1 - Buffer Overflow via rpcapd/daemon.c Length Mishandling
CVSS 5.3
CVE-2019-5435
LOW
curl 7.62.0-7.64.1 - Integer Overflow Buffer Overflow in URL API
CVSS 3.7
CVE-2019-3560
HIGH
Facebook Fizz < 2019.03.04.00 - Denial of Service via PlaintextRecordLayer Buffer Length Calculation
CVSS 7.5
CVE-2018-4038
HIGH
Atlantis Word Processor <3.2.7.2 - Code Injection
CVSS 7.8
CVE-2018-14618
HIGH
libcurl < 7.61.1 - Heap Buffer Overflow via NTLM Authentication Password Length
CVSS 7.5
CVE-2018-1000224
HIGH
Godot Engine < 2.1.5 and 3.0 < 3.0.6 - Denial of Service via Malformed Network Packet
CVSS 7.5
CVE-2017-13315
HIGH
Android - Elevation of Privileges via DcParamObject Parcel Size Mismatch
CVSS 7.8
CVE-2017-13289
HIGH
Android <8.1 - Privilege Escalation
CVSS 7.8
CVE-2017-14934
MEDIUM
GNU Binutils 2.29 - Denial of Service via Crafted ELF File with Negative CU Size
CVSS 5.5
CVE-2017-0715
HIGH
Android 6.0 6.0.1 7.0 7.1.1 7.1.2 - Remote Code Execution in libavc
CVSS 7.8
CVE-2017-0620
HIGH
Android Kernel <3.18 - Privilege Escalation
CVSS 7.0
CVE-2017-0166
HIGH
Windows LDAP - Elevation of Privilege via Improper Buffer Length Calculation
CVSS 8.1
CVE-2017-0569
HIGH
Android Kernel <3.18 - Privilege Escalation
CVSS 7.0
CVE-2014-3468
GNU Libtasn1 < 3.6 - Out-of-Bounds Access via Negative Bit Length in ASN.1 Data
CVE-2008-0599
CRITICAL
PHP < 5.2.6 - Remote Code Execution via PATH_TRANSLATED Buffer Overflow
CVSS 9.8
CVE-2005-3120
CRITICAL
lynx < 2.8.6 - Remote Code Execution via HTrjis Asian Character Handling
CVSS 9.8
CVE-2005-2103
CRITICAL
Gaim < 1.5.0 - Buffer Overflow via AIM/ICQ Away Message Substitution Strings
CVSS 9.8
CVE-2005-0490
HIGH
curl 7.12.1 - Remote Code Execution via Base64 Decoding Buffer Overflow
CVSS 8.8
CVE-2004-0940
HIGH
HP-UX - Buffer Overflow in mod_include get_tag Function
CVSS 7.8
CVE-2004-0747
HIGH
Apache HTTP Server 2.0.35-2.0.50 - Local Privilege Escalation via .htaccess Environment Variable Expansion
CVSS 7.8
CVE-2004-1363
CRITICAL
Oracle Application Server - Buffer Overflow via Extproc Library Name Environment Variable Expansion
CVSS 9.8
Details
Vulnerabilities
182
Exploit Likelihood
High