CWE-823

Use of Out-of-range Pointer Offset

Parent: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs pointer arithmetic on a valid pointer, but it uses an offset that can point outside of the intended range of valid memory locations for the resulting pointer.

100 vulnerabilities with CWE-823
CVE-2024-42416 HIGH
FreeBSD 13.0-13.2 - Use-After-Free in ctl_report_supported_opcodes
CVSS 8.8
CVE-2024-6603 HIGH
Firefox < 128 and ESR < 115.13 - Use-After-Free via Out-of-Memory Allocation Failure
CVSS 7.4
CVE-2024-21475 HIGH
Firmware <expected protocol size - Memory Corruption
CVSS 7.8
CVE-2024-1013 HIGH
unixODBC - Use-After-Free via Stack Write Mismatch on 64-bit Architectures
CVSS 7.8
CVE-2023-43553 CRITICAL
Qualcomm Wi-Fi Firmware - Memory Corruption via MLIE Parsing
CVSS 9.8
CVE-2023-33066 HIGH
Qualcomm Modem and Networking Firmware - Memory Corruption in Audio RT Proxy Port Register Driver
CVSS 8.4
CVE-2023-43534 HIGH
Qualcomm TID to Link Mapping Firmware - Memory Corruption
CVSS 8.6
CVE-2023-43516 HIGH
Qualcomm FastConnect and Snapdragon Firmware - Memory Corruption
CVSS 7.8
CVE-2023-43513 HIGH
Qualcomm Modem and Networking Firmware - Memory Corruption
CVSS 7.8
CVE-2023-33067 MEDIUM
Qualcomm 9206 LTE Modem Firmware - Memory Corruption in Audio via START Command
CVSS 6.7
CVE-2023-33110 HIGH
PCM host voice audio driver - Memory Corruption
CVSS 7.8
CVE-2023-33033 HIGH
Qualcomm 315 5G IoT Modem Firmware - Memory Corruption in Audio Playback with Speaker Protection
CVSS 8.4
CVE-2023-6560 MEDIUM
Linux Kernel < 6.6 - Out-of-Bounds Memory Access in io_uring SQ/CQ Rings
CVSS 5.5
CVE-2023-33106 HIGH KEV
Qualcomm AR8035 and related firmware - Memory Corruption via IOCTL_KGSL_GPU_AUX_COMMAND AUX Sync Points
CVSS 8.4
CVE-2023-33079 HIGH
Qualcomm AR8035 and related firmware - Memory Corruption in Audio ADSP Recording
CVSS 7.8
CVE-2023-22388 CRITICAL
Qualcomm Modem Firmware - Memory Corruption in Multi-mode Call Processor
CVSS 9.8
CVE-2023-46724 HIGH
Squid 3.3.0.1-5.9 and < 6.4 - Denial of Service via Crafted SSL Certificate in TLS Handshake
CVSS 8.6
CVE-2023-24855 CRITICAL
Modem <AS Security Exchange - Memory Corruption
CVSS 9.8
CVE-2023-20187 HIGH
Cisco IOS XE - Denial of Service via IPv6 Multicast Packet Handling
CVSS 8.6
CVE-2023-28564 HIGH
Qualcomm WLAN HAL - Memory Corruption
CVSS 7.8
CVE-2023-28575 MEDIUM
Qualcomm Firmware - Type Confusion in cam_get_device_priv
CVSS 6.7
CVE-2023-22387 HIGH
Qualcomm VM Compromise Firmware - Memory Corruption
CVSS 7.8
CVE-2023-2426 MEDIUM
vim/vim <9.0.1499 - Memory Corruption
CVSS 5.5
CVE-2022-46378 MEDIUM
Weston Embedded uC-FTPs <1.98.00 - DoS
CVSS 6.5
CVE-2022-46377 MEDIUM
Weston Embedded uC-FTPs < 1.98.00 - DoS
CVSS 6.5
Details
Vulnerabilities 100
Links
MITRE CWE Entry Search this CWE With Exploits