ByteOS

cpe:2.3:a:novell:groupwise:*:*:*:*:*:*:*:*

>>groupwise>>Versions up to 8.0.2(inclusive)

cpe:2.3:a:novell:groupwise:4.1:*:*:*:*:*:*:*

>>groupwise>>4.1

cpe:2.3:a:novell:groupwise:4.1a:*:*:*:*:*:*:*

>>groupwise>>4.1a

cpe:2.3:a:novell:groupwise:5.0:*:*:*:*:*:*:*

>>groupwise>>5.0

cpe:2.3:a:novell:groupwise:5.1:*:*:*:*:*:*:*

>>groupwise>>5.1

cpe:2.3:a:novell:groupwise:5.2:*:*:*:*:*:*:*

>>groupwise>>5.2

cpe:2.3:a:novell:groupwise:5.5:*:*:*:*:*:*:*

>>groupwise>>5.5

cpe:2.3:a:novell:groupwise:5.5:*:enhancement_pack:*:*:*:*:*

>>groupwise>>5.5

cpe:2.3:a:novell:groupwise:5.57e:*:*:*:*:*:*:*

>>groupwise>>5.57e

cpe:2.3:a:novell:groupwise:6.0:*:*:*:*:*:*:*

>>groupwise>>6.0

cpe:2.3:a:novell:groupwise:6.0:sp1:*:*:*:*:*:*

>>groupwise>>6.0

cpe:2.3:a:novell:groupwise:6.0:sp5:*:*:*:*:*:*

>>groupwise>>6.0

cpe:2.3:a:novell:groupwise:6.0.1:sp1:*:*:*:*:*:*

>>groupwise>>6.0.1

cpe:2.3:a:novell:groupwise:6.5:*:*:*:*:*:*:*

>>groupwise>>6.5

cpe:2.3:a:novell:groupwise:6.5:sp1:*:*:*:*:*:*

>>groupwise>>6.5

cpe:2.3:a:novell:groupwise:6.5:sp2:*:*:*:*:*:*

>>groupwise>>6.5

cpe:2.3:a:novell:groupwise:6.5:sp3:*:*:*:*:*:*

>>groupwise>>6.5

cpe:2.3:a:novell:groupwise:6.5:sp4:*:*:*:*:*:*

>>groupwise>>6.5

cpe:2.3:a:novell:groupwise:6.5:sp5:*:*:*:*:*:*

>>groupwise>>6.5

cpe:2.3:a:novell:groupwise:6.5:sp6:*:*:*:*:*:*

>>groupwise>>6.5

cpe:2.3:a:novell:groupwise:6.5.2:*:*:*:*:*:*:*

>>groupwise>>6.5.2

cpe:2.3:a:novell:groupwise:6.5.3:*:*:*:*:*:*:*

>>groupwise>>6.5.3

cpe:2.3:a:novell:groupwise:6.5.4:*:*:*:*:*:*:*

>>groupwise>>6.5.4

cpe:2.3:a:novell:groupwise:6.5.6:*:*:*:*:*:*:*

>>groupwise>>6.5.6

cpe:2.3:a:novell:groupwise:6.5.7:*:*:*:*:*:*:*

>>groupwise>>6.5.7

cpe:2.3:a:novell:groupwise:7.0:*:*:*:*:*:*:*

>>groupwise>>7.0

cpe:2.3:a:novell:groupwise:7.0.1:*:*:*:*:*:*:*

>>groupwise>>7.0.1

cpe:2.3:a:novell:groupwise:7.0.2:*:*:*:*:*:*:*

>>groupwise>>7.0.2

cpe:2.3:a:novell:groupwise:7.0.3:*:*:*:*:*:*:*

>>groupwise>>7.0.3

cpe:2.3:a:novell:groupwise:7.0.4:*:*:*:*:*:*:*

>>groupwise>>7.0.4

cpe:2.3:a:novell:groupwise:8.0:*:*:*:*:*:*:*

>>groupwise>>8.0

cpe:2.3:a:novell:groupwise:8.0.1:*:*:*:*:*:*:*

>>groupwise>>8.0.1

Weaknesses

CWE ID	Type	Source
CWE-119	Primary	nvd@nist.gov

CWE ID: CWE-119

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://www.facebook.com/note.php?note_id=477865030928	cve@mitre.org	N/A
http://www.novell.com/support/viewContent.do?externalId=7007155&sliceId=1	cve@mitre.org	Vendor Advisory
http://www.securityfocus.com/bid/45994	cve@mitre.org	N/A
http://www.vupen.com/english/advisories/2011/0219	cve@mitre.org	Vendor Advisory
http://www.zerodayinitiative.com/advisories/ZDI-11-025/	cve@mitre.org	N/A
http://zerodayinitiative.com/advisories/ZDI-10-239/	cve@mitre.org	N/A
http://zerodayinitiative.com/advisories/ZDI-10-240/	cve@mitre.org	N/A
http://zerodayinitiative.com/advisories/ZDI-10-243/	cve@mitre.org	N/A
https://bugzilla.novell.com/show_bug.cgi?id=642339	cve@mitre.org	N/A
https://bugzilla.novell.com/show_bug.cgi?id=642340	cve@mitre.org	N/A
https://bugzilla.novell.com/show_bug.cgi?id=642345	cve@mitre.org	N/A
https://bugzilla.novell.com/show_bug.cgi?id=642349	cve@mitre.org	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/64929	cve@mitre.org	N/A
http://www.facebook.com/note.php?note_id=477865030928	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.novell.com/support/viewContent.do?externalId=7007155&sliceId=1	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://www.securityfocus.com/bid/45994	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.vupen.com/english/advisories/2011/0219	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://www.zerodayinitiative.com/advisories/ZDI-11-025/	af854a3a-2127-422b-91ae-364da2661108	N/A
http://zerodayinitiative.com/advisories/ZDI-10-239/	af854a3a-2127-422b-91ae-364da2661108	N/A
http://zerodayinitiative.com/advisories/ZDI-10-240/	af854a3a-2127-422b-91ae-364da2661108	N/A
http://zerodayinitiative.com/advisories/ZDI-10-243/	af854a3a-2127-422b-91ae-364da2661108	N/A
https://bugzilla.novell.com/show_bug.cgi?id=642339	af854a3a-2127-422b-91ae-364da2661108	N/A
https://bugzilla.novell.com/show_bug.cgi?id=642340	af854a3a-2127-422b-91ae-364da2661108	N/A
https://bugzilla.novell.com/show_bug.cgi?id=642345	af854a3a-2127-422b-91ae-364da2661108	N/A
https://bugzilla.novell.com/show_bug.cgi?id=642349	af854a3a-2127-422b-91ae-364da2661108	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/64929	af854a3a-2127-422b-91ae-364da2661108	N/A

Hyperlink: http://www.facebook.com/note.php?note_id=477865030928

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.novell.com/support/viewContent.do?externalId=7007155&sliceId=1

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: http://www.securityfocus.com/bid/45994

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2011/0219

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: http://www.zerodayinitiative.com/advisories/ZDI-11-025/

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://zerodayinitiative.com/advisories/ZDI-10-239/

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://zerodayinitiative.com/advisories/ZDI-10-240/

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://zerodayinitiative.com/advisories/ZDI-10-243/

Source: cve@mitre.org

Resource: N/A

Hyperlink: https://bugzilla.novell.com/show_bug.cgi?id=642339

Source: cve@mitre.org

Resource: N/A

Hyperlink: https://bugzilla.novell.com/show_bug.cgi?id=642340

Source: cve@mitre.org

Resource: N/A

Hyperlink: https://bugzilla.novell.com/show_bug.cgi?id=642345

Source: cve@mitre.org

Resource: N/A

Hyperlink: https://bugzilla.novell.com/show_bug.cgi?id=642349

Source: cve@mitre.org

Resource: N/A

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/64929

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.facebook.com/note.php?note_id=477865030928

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.novell.com/support/viewContent.do?externalId=7007155&sliceId=1

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

Hyperlink: http://www.securityfocus.com/bid/45994

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2011/0219

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

Hyperlink: http://www.zerodayinitiative.com/advisories/ZDI-11-025/

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://zerodayinitiative.com/advisories/ZDI-10-239/

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://zerodayinitiative.com/advisories/ZDI-10-240/

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://zerodayinitiative.com/advisories/ZDI-10-243/

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://bugzilla.novell.com/show_bug.cgi?id=642339

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://bugzilla.novell.com/show_bug.cgi?id=642340

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://bugzilla.novell.com/show_bug.cgi?id=642345

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://bugzilla.novell.com/show_bug.cgi?id=642349

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/64929

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Similar CVEs

1757Records found

CVE-2010-3110

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-7.2||HIGH

EPSS-0.04% / 12.17%

7 Day CHG~0.00%

Published-12 Oct, 2010 | 19:00

Updated-11 Apr, 2025 | 00:51

Multiple buffer overflows in the Novell Client novfs module for the Linux kernel in SUSE Linux Enterprise 11 SP1 and openSUSE 11.3 allow local users to gain privileges via unspecified vectors.

Vendor-n/a Novell openSUSE

Product-suse_linux opensuse n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2003-1592

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-5||MEDIUM

EPSS-1.44% / 79.89%

7 Day CHG-0.01%

Published-05 Apr, 2010 | 15:15

Updated-11 Apr, 2025 | 00:51

Multiple buffer overflows in NWFTPD.nlm in the FTP server in Novell NetWare 6.0 before SP4 and 6.5 before SP1 allow remote attackers to cause a denial of service (abend) via a long (1) username or (2) password.

Vendor-n/a Novell

Product-netware netware_ftp_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-3109

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-7.53% / 91.42%

7 Day CHG~0.00%

Published-23 Aug, 2010 | 20:00

Updated-11 Apr, 2025 | 00:51

Stack-based buffer overflow in the browser plugin in Novell iPrint Client before 5.42 allows remote attackers to execute arbitrary code via a long operation parameter.

Vendor-n/a Novell

Product-iprint n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2001-1587

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-5||MEDIUM

EPSS-1.32% / 79.03%

7 Day CHG-0.03%

Published-05 Apr, 2010 | 15:15

Updated-11 Apr, 2025 | 00:51

NWFTPD.nlm before 5.01w in the FTP server in Novell NetWare allows remote attackers to cause a denial of service (abend) via an anonymous STOU command.

Vendor-n/a Novell

Product-netware n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-4191

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-7.5||HIGH

EPSS-15.10% / 94.32%

7 Day CHG~0.00%

Published-30 Nov, 2011 | 02:00

Updated-11 Apr, 2025 | 00:51

Stack-based buffer overflow in the xdrDecodeString function in XNFS.NLM in Novell NetWare 6.5 SP8 allows remote attackers to execute arbitrary code or cause a denial of service (abend or NFS outage) via long packets.

Vendor-n/a Novell

Product-netware n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-4186

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-19.61% / 95.20%

7 Day CHG~0.00%

Published-20 Feb, 2012 | 21:00

Updated-11 Apr, 2025 | 00:51

Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.78 on Windows allows remote attackers to execute arbitrary code via a crafted client-file-name parameter in a printer-url, a different vulnerability than CVE-2011-1705.

Vendor-n/a Novell Microsoft Corporation

Product-windows iprint n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2017-14492

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-9.8||CRITICAL

EPSS-92.64% / 99.73%

7 Day CHG~0.00%

Published-02 Oct, 2017 | 21:00

Updated-20 Apr, 2025 | 01:37

Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted IPv6 router advertisement request.

Vendor-thekelleys n/a Debian GNU/Linux Canonical Ltd.Red Hat, Inc.Novell

Product-enterprise_linux_desktop enterprise_linux_workstation dnsmasq leap debian_linux enterprise_linux_server ubuntu_linux n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2008-5073

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-4.84% / 89.12%

7 Day CHG~0.00%

Published-14 Nov, 2008 | 16:00

Updated-07 Aug, 2024 | 10:40

Heap-based buffer overflow in an ActiveX control in Novell ZENworks Desktop Management 6.5 allows remote attackers to execute arbitrary code via a long argument to the CanUninstall method.

Vendor-n/a Novell

Product-zenworks_desktop_management n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2017-1000366

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-7.8||HIGH

EPSS-7.28% / 91.28%

7 Day CHG~0.00%

Published-19 Jun, 2017 | 16:00

Updated-20 Apr, 2025 | 01:37

glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate the heap/stack, causing them to alias, potentially resulting in arbitrary code execution. Please note that additional hardening changes have been made to glibc to prevent manipulation of stack and heap memory but these issues are not directly exploitable, as such they have not been given a CVE. This affects glibc 2.25 and earlier.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-1953

Matching Score-6

Assigner-Mozilla Corporation

Matching Score-6

Assigner-Mozilla Corporation

CVSS Score-8.8||HIGH

EPSS-1.23% / 78.33%

7 Day CHG~0.00%

Published-13 Mar, 2016 | 18:00

Updated-12 Apr, 2025 | 10:46

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 45.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to js/src/jit/arm/Assembler-arm.cpp, and unknown other vectors.

Vendor-n/a Mozilla Corporation Novell openSUSE

Product-leap firefox opensuse suse_package_hub_for_suse_linux_enterprise thunderbird n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-1952

Matching Score-6

Assigner-Mozilla Corporation

Matching Score-6

Assigner-Mozilla Corporation

CVSS Score-8.8||HIGH

EPSS-0.61% / 68.83%

7 Day CHG~0.00%

Published-13 Mar, 2016 | 18:00

Updated-12 Apr, 2025 | 10:46

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

Vendor-n/a Mozilla Corporation Oracle Corporation openSUSE Novell

Product-leap opensuse firefox suse_package_hub_for_suse_linux_enterprise thunderbird linux n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-1583

Matching Score-6

Assigner-Canonical Ltd.

Product-suse_linux_enterprise_workstation_extension debian_linux suse_linux_enterprise_debuginfo linux_kernel suse_linux_enterprise_live_patching ubuntu_linux suse_linux_enterprise_server suse_linux_enterprise_desktop suse_linux_enterprise_module_for_public_cloud suse_linux_enterprise_software_development_kit n/a

Matching Score-6

Assigner-Canonical Ltd.

CVSS Score-7.8||HIGH

EPSS-0.30% / 52.58%

7 Day CHG~0.00%

Published-27 Jun, 2016 | 10:00

Updated-12 Apr, 2025 | 10:46

The ecryptfs_privileged_open function in fs/ecryptfs/kthread.c in the Linux kernel before 4.6.3 allows local users to gain privileges or cause a denial of service (stack memory consumption) via vectors involving crafted mmap calls for /proc pathnames, leading to recursive pagefault handling.

Vendor-n/a Linux Kernel Organization, Inc Debian GNU/Linux Novell Canonical Ltd.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-3174

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-6.8||MEDIUM

EPSS-20.27% / 95.30%

7 Day CHG~0.00%

Published-26 Jul, 2012 | 22:00

Updated-11 Apr, 2025 | 00:51

Buffer overflow in the DoFindReplace function in the ISGrid.Grid2.1 ActiveX control in InstallShield/ISGrid2.dll in AdminStudio in Novell ZENworks Configuration Management (ZCM) 10.2, 10.3, and 11 SP1 allows remote attackers to execute arbitrary code via a long bstrReplaceText parameter.

Vendor-n/a Novell

Product-zenworks_configuration_management n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-3173

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-7.5||HIGH

EPSS-14.13% / 94.11%

7 Day CHG~0.00%

Published-30 Nov, 2011 | 02:00

Updated-11 Apr, 2025 | 00:51

Stack-based buffer overflow in the GetDriverSettings function in nipplib.dll in the iPrint client in Novell Open Enterprise Server 2 (aka OES2) SP3 allows remote attackers to execute arbitrary code via a long (1) hostname or (2) port field.

Vendor-n/a Novell

Product-iprint_open_enterprise_server_2 n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-3827

Matching Score-6

Assigner-Flexera Software LLC

Matching Score-6

Assigner-Flexera Software LLC

CVSS Score-4.3||MEDIUM

EPSS-3.65% / 87.39%

7 Day CHG~0.00%

Published-19 Sep, 2012 | 10:00

Updated-11 Apr, 2025 | 00:51

The iCalendar component in gwwww1.dll in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before Support Pack 3 allows remote attackers to cause a denial of service (out-of-bounds read and daemon crash) via a crafted date-time string in a .ics attachment.

Vendor-n/a Novell

Product-groupwise n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-1563

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-58.37% / 98.11%

7 Day CHG~0.00%

Published-05 Apr, 2011 | 15:00

Updated-11 Apr, 2025 | 00:51

Multiple stack-based buffer overflows in the HMI application in DATAC RealFlex RealWin 2.1 (Build 6.1.10.10) and earlier allow remote attackers to execute arbitrary code via (1) a long username in an On_FC_CONNECT_FCS_LOGIN packet, and crafted (2) On_FC_CTAGLIST_FCS_CADDTAG, (3) On_FC_CTAGLIST_FCS_CDELTAG, (4) On_FC_CTAGLIST_FCS_ADDTAGMS, (5) On_FC_RFUSER_FCS_LOGIN, (6) unspecified "On_FC_BINFILE_FCS_*FILE", (7) On_FC_CGETTAG_FCS_GETTELEMETRY, (8) On_FC_CGETTAG_FCS_GETCHANNELTELEMETRY, (9) On_FC_CGETTAG_FCS_SETTELEMETRY, (10) On_FC_CGETTAG_FCS_SETCHANNELTELEMETRY, and (11) On_FC_SCRIPT_FCS_STARTPROG packets to port 910.

Vendor-realflex n/a

Product-realwin n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-0216

Matching Score-4

Assigner-IBM Corporation

Matching Score-4

Assigner-IBM Corporation

CVSS Score-9.8||CRITICAL

EPSS-3.23% / 86.59%

7 Day CHG~0.00%

Published-29 Feb, 2016 | 11:00

Updated-12 Apr, 2025 | 10:46

Stack-based buffer overflow in IBM Tivoli Storage Manager FastBack 5.5 and 6.1.x through 6.1.11.1 allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors, a different vulnerability than CVE-2016-0212 and CVE-2016-0213.

Vendor-n/a IBM Corporation

Product-tivoli_storage_manager_fastback n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0918

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-10.61% / 92.98%

7 Day CHG~0.00%

Published-08 Feb, 2011 | 21:00

Updated-11 Apr, 2025 | 00:51

Stack-based buffer overflow in the NRouter (aka Router) service in IBM Lotus Domino allows remote attackers to execute arbitrary code via long filenames associated with Content-ID and ATTACH:CID headers in attachments in malformed calendar-request e-mail messages, aka SPR KLYH87LKRE.

Vendor-n/a IBM Corporation

Product-lotus_domino n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-0213

Matching Score-4

Assigner-IBM Corporation

Matching Score-4

Assigner-IBM Corporation

CVSS Score-9.8||CRITICAL

EPSS-3.23% / 86.59%

7 Day CHG~0.00%

Published-29 Feb, 2016 | 11:00

Updated-12 Apr, 2025 | 10:46

Vendor-n/a IBM Corporation

Product-tivoli_storage_manager_fastback n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-0942

Matching Score-4

Matching Score-4

CVSS Score-9.8||CRITICAL

EPSS-2.59% / 85.01%

7 Day CHG~0.00%

Published-14 Jan, 2016 | 02:00

Updated-12 Apr, 2025 | 10:46

Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0931, CVE-2016-0933, CVE-2016-0936, CVE-2016-0938, CVE-2016-0939, CVE-2016-0944, CVE-2016-0945, and CVE-2016-0946.

Vendor-n/a Apple Inc.Adobe Inc.Microsoft Corporation

Product-acrobat_reader_dc acrobat_reader acrobat_dc windows acrobat mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-0954

Matching Score-4

Matching Score-4

CVSS Score-9.8||CRITICAL

EPSS-33.66% / 96.80%

7 Day CHG~0.00%

Published-09 Mar, 2016 | 11:00

Updated-12 Apr, 2025 | 10:46

Adobe Digital Editions before 4.5.1 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

Vendor-n/a Adobe Inc.

Product-digital_editions n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-0803

Matching Score-4

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-4

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-9.8||CRITICAL

EPSS-1.21% / 78.20%

7 Day CHG~0.00%

Published-07 Feb, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

libstagefright in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file that triggers a large memory allocation in the (1) SoftMPEG4Encoder or (2) SoftVPXEncoder component, aka internal bug 25812794.

Vendor-n/a Google LLC

Product-android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-0842

Matching Score-4

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-4

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-8.4||HIGH

EPSS-0.79% / 72.97%

7 Day CHG~0.00%

Published-18 Apr, 2016 | 00:00

Updated-12 Apr, 2025 | 10:46

The H.264 decoder in libstagefright in Android 6.x before 2016-04-01 mishandles Memory Management Control Operation (MMCO) data, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 25818142.

Vendor-n/a Google LLC

Product-android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0975

Matching Score-4

Assigner-MITRE Corporation

Product-performance_analysis_for_servers performance_predictor_for_servers performance_analyzer_for_servers performance_assurance_for_servers capacity_management_essentials performance_assurance_for_virtual_servers n/a

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-25.99% / 96.07%

7 Day CHG~0.00%

Published-10 Feb, 2011 | 17:00

Updated-11 Apr, 2025 | 00:51

Stack-based buffer overflow in BMC PATROL Agent Service Daemon for in Performance Analysis for Servers, Performance Assurance for Servers, and Performance Assurance for Virtual Servers 7.4.00 through 7.5.10; Performance Analyzer and Performance Predictor for Servers 7.4.00 through 7.5.10; and Capacity Management Essentials 1.2.00 (7.4.15) allows remote attackers to execute arbitrary code via a crafted length value in a BGS_MULTIPLE_READS command to TCP port 6768.

Vendor-bmc n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-0839

Matching Score-4

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-4

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-9.8||CRITICAL

EPSS-1.21% / 78.20%

7 Day CHG~0.00%

Published-18 Apr, 2016 | 00:00

Updated-12 Apr, 2025 | 10:46

post_proc/volume_listener.c in mediaserver in Android 6.x before 2016-04-01 mishandles deleted effect context, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 25753245.

Vendor-n/a Google LLC

Product-android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-7625

Matching Score-4

Matching Score-4

CVSS Score-10||HIGH

EPSS-11.15% / 93.21%

7 Day CHG~0.00%

Published-14 Oct, 2015 | 23:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-7626, CVE-2015-7627, CVE-2015-7630, CVE-2015-7633, and CVE-2015-7634.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-0804

Matching Score-4

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-4

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-9.8||CRITICAL

EPSS-1.21% / 78.20%

7 Day CHG~0.00%

Published-07 Feb, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

The NuPlayer::GenericSource::notifyPreparedAndCleanup function in media/libmediaplayerservice/nuplayer/GenericSource.cpp in mediaserver in Android 5.x before 5.1.1 LMY49G and 6.x before 2016-02-01 improperly manages mDrmManagerClient objects, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 25070434.

Vendor-n/a Google LLC

Product-android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0916

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-10.61% / 92.98%

7 Day CHG~0.00%

Published-08 Feb, 2011 | 21:00

Updated-11 Apr, 2025 | 00:51

Stack-based buffer overflow in the SMTP service in IBM Lotus Domino allows remote attackers to execute arbitrary code via long arguments in a filename parameter in a malformed MIME e-mail message, aka SPR KLYH889M8H.

Vendor-n/a IBM Corporation

Product-lotus_domino n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0915

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-15.36% / 94.37%

7 Day CHG~0.00%

Published-08 Feb, 2011 | 21:00

Updated-11 Apr, 2025 | 00:51

Stack-based buffer overflow in nrouter.exe in IBM Lotus Domino before 8.5.3 allows remote attackers to execute arbitrary code via a long name parameter in a Content-Type header in a malformed Notes calendar (aka iCalendar or iCal) meeting request, aka SPR KLYH87LL23.

Vendor-n/a IBM Corporation

Product-lotus_domino n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-0841

Matching Score-4

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-4

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-9.8||CRITICAL

EPSS-1.21% / 78.20%

7 Day CHG~0.00%

Published-18 Apr, 2016 | 00:00

Updated-12 Apr, 2025 | 10:46

media/libmedia/mediametadataretriever.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 mishandles cleared service binders, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 26040840.

Vendor-n/a Google LLC

Product-android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-0840

Matching Score-4

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-4

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-8.4||HIGH

EPSS-0.79% / 72.97%

7 Day CHG~0.00%

Published-18 Apr, 2016 | 00:00

Updated-12 Apr, 2025 | 10:46

Multiple stack-based buffer underflows in decoder/ih264d_parse_cavlc.c in mediaserver in Android 6.x before 2016-04-01 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 26399350.

Vendor-n/a Google LLC

Product-android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-0799

Matching Score-4

Assigner-Red Hat, Inc.

Matching Score-4

Assigner-Red Hat, Inc.

CVSS Score-9.8||CRITICAL

EPSS-53.85% / 97.91%

7 Day CHG~0.00%

Published-03 Mar, 2016 | 00:00

Updated-12 Apr, 2025 | 10:46

The fmtstr function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g improperly calculates string lengths, which allows remote attackers to cause a denial of service (overflow and out-of-bounds read) or possibly have unspecified other impact via a long string, as demonstrated by a large amount of ASN.1 data, a different vulnerability than CVE-2016-2842.

Vendor-n/a Pulse Secure OpenSSL

Product-steel_belted_radius openssl client n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-0946

Matching Score-4

Matching Score-4

CVSS Score-9.8||CRITICAL

EPSS-2.59% / 85.01%

7 Day CHG~0.00%

Published-14 Jan, 2016 | 02:00

Updated-12 Apr, 2025 | 10:46

Vendor-n/a Apple Inc.Adobe Inc.Microsoft Corporation

Product-acrobat_reader_dc acrobat_reader acrobat_dc windows acrobat mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0919

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-12.40% / 93.64%

7 Day CHG~0.00%

Published-08 Feb, 2011 | 21:00

Updated-11 Apr, 2025 | 00:51

Multiple stack-based buffer overflows in the (1) POP3 and (2) IMAP services in IBM Lotus Domino allow remote attackers to execute arbitrary code via non-printable characters in an envelope sender address, aka SPR KLYH87LLVJ.

Vendor-n/a IBM Corporation

Product-lotus_domino n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-9188

Matching Score-4

Assigner-Qualcomm, Inc.

Matching Score-4

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.22% / 44.34%

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-17 Sep, 2024 | 02:32

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 600, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, and SD 850, in Secure DEMUX command handler, when parameter validation fails, an error code is written into a response buffer without checking that response buffer length, passed from HLOS, which may result in memory corruption.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-9182

Matching Score-4

Assigner-Qualcomm, Inc.

Matching Score-4

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.22% / 44.34%

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-16 Sep, 2024 | 23:32

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, and SD 850, lack of input validation in OEMCrypto_GenerateSignature() can cause buffer over read.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-20

Improper Input Validation

CVE-2015-9118

Matching Score-4

Assigner-Qualcomm, Inc.

Matching Score-4

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.38% / 58.59%

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-17 Sep, 2024 | 03:23

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9615, MDM9625, MDM9635M, SD 400, SD 410/12, SD 615/16/SD 415, SD 800, SD 808, and SD 810, in ADSP's QDI Root-PD driver, untrusted arguments from User PD may cause integer overflow resulting in buffer overflow.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0654

Matching Score-4

Assigner-Microsoft Corporation

Matching Score-4

Assigner-Microsoft Corporation

CVSS Score-10||HIGH

EPSS-81.01% / 99.11%

7 Day CHG~0.00%

Published-16 Feb, 2011 | 00:00

Updated-11 Apr, 2025 | 00:51

Integer underflow in the BowserWriteErrorLogEntry function in the Common Internet File System (CIFS) browser service in Mrxsmb.sys or bowser.sys in Active Directory in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code or cause a denial of service (system crash) via a malformed BROWSER ELECTION message, leading to a heap-based buffer overflow, aka "Browser Pool Corruption Vulnerability." NOTE: some of these details are obtained from third party information.

Vendor-n/a Microsoft Corporation

Product-windows_server_2003 windows_2003_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-8480

Matching Score-4

Assigner-Chrome

Matching Score-4

Assigner-Chrome

CVSS Score-10||HIGH

EPSS-0.79% / 72.93%

7 Day CHG~0.00%

Published-06 Dec, 2015 | 01:00

Updated-12 Apr, 2025 | 10:46

The VideoFramePool::PoolImpl::CreateFrame function in media/base/video_frame_pool.cc in Google Chrome before 47.0.2526.73 does not initialize memory for a video-frame data structure, which might allow remote attackers to cause a denial of service (out-of-bounds memory access) or possibly have unspecified other impact by leveraging improper interaction with the vp3_h_loop_filter_c function in libavcodec/vp3dsp.c in FFmpeg.

Vendor-n/a Google LLC

Product-chrome n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-9066

Matching Score-4

Assigner-Qualcomm, Inc.

Matching Score-4

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.25% / 47.79%

7 Day CHG~0.00%

Published-18 Aug, 2017 | 18:00

Updated-20 Apr, 2025 | 01:37

In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in an Inter-RAT procedure.

Product-android Snapdragon Mobile

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-9171

Matching Score-4

Assigner-Qualcomm, Inc.

Matching Score-4

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.22% / 44.34%

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-16 Sep, 2024 | 23:21

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, and SD 850, if OEMCrypto_Dash_InstallEncapKeybox() is called with keyBoxLength set to a value higher than TZ_WV_MAX_DATA_LEN (20k), a buffer over-read occurs.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-9053

Matching Score-4

Assigner-Qualcomm, Inc.

Matching Score-4

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.15% / 36.06%

7 Day CHG~0.00%

Published-18 Aug, 2017 | 18:00

Updated-20 Apr, 2025 | 01:37

In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in the processing of certain responses from the USIM.

Product-android All Qualcomm products

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-8419

Matching Score-4

Matching Score-4

CVSS Score-10||HIGH

EPSS-11.15% / 93.21%

7 Day CHG~0.00%

Published-10 Dec, 2015 | 02:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-8045, CVE-2015-8047, CVE-2015-8060, CVE-2015-8408, CVE-2015-8416, CVE-2015-8417, CVE-2015-8418, CVE-2015-8443, CVE-2015-8444, CVE-2015-8451, and CVE-2015-8455.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows iphone_os mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-9202

Matching Score-4

Assigner-Qualcomm, Inc.

Matching Score-4

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.22% / 44.34%

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-16 Sep, 2024 | 22:15

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, and SD 850, while processing the content headers in the Playready module, a buffer overread may occur if the header count exceeds the expected value.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-9170

Matching Score-4

Assigner-Qualcomm, Inc.

Matching Score-4

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.22% / 44.34%

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-17 Sep, 2024 | 02:05

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, and SD 850, incorrect offset check in wv_dash_core_refresh_keys() may lead to a buffer overread.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-9136

Matching Score-4

Assigner-Qualcomm, Inc.

Matching Score-4

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.23% / 46.20%

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-17 Sep, 2024 | 00:06

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9640, MDM9650, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 600, SD 625, SD 650/52, SD 808, SD 810, SD 820, SD 835, and SDX20, in pre-auth request, Host driver uses FT IEs sent by the supplicant. A buffer overflow may occur if FT IEs sent by the supplicant are larger than the expected value.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-9070

Matching Score-4

Assigner-Qualcomm, Inc.

Matching Score-4

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.15% / 36.52%

7 Day CHG~0.00%

Published-18 Aug, 2017 | 18:00

Updated-20 Apr, 2025 | 01:37

In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer over-read vulnerability exists in a TrustZone syscall.

Product-android All Qualcomm products

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0342

Matching Score-4

Assigner-Flexera Software LLC

Matching Score-4

Assigner-Flexera Software LLC

CVSS Score-10||HIGH

EPSS-9.34% / 92.44%

7 Day CHG~0.00%

Published-02 Sep, 2011 | 16:00

Updated-11 Apr, 2025 | 00:51

Multiple buffer overflows in the InduSoft ISSymbol ActiveX control in ISSymbol.ocx 301.1104.601.0 in InduSoft Web Studio 7.0B2 hotfix 7.0.01.04 allow remote attackers to execute arbitrary code via a long parameter to the (1) Open, (2) Close, or (3) SetCurrentLanguage method.

Vendor-indusoft n/a

Product-web_studio n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-9224

Matching Score-4

Assigner-Qualcomm, Inc.

Product-sd_850 mdm9635m_firmware mdm9640_firmware sd_820a mdm9650 sd_615_firmware msm8909w_firmware sd_820 mdm9645 sd_650 sd_450_firmware sd_845_firmware sd_410 sd_820a_firmware mdm9206 sd_652 sd_425_firmware sd_800_firmware sd_625_firmware sd_450 mdm9635m mdm9615 sd_845 mdm9206_firmware mdm9640 sd_835_firmware mdm9650_firmware sd_835 sd_210_firmware sd_415_firmware sd_652_firmware sd_600 msm8909w sd_616_firmware sd_205_firmware sd_415 sd_650_firmware sd_212 fsm9055 sd_412 sd_808_firmware sd_400 sdx20 sd_616 sd_425 sd_430_firmware mdm9607_firmware sd_615 mdm9655_firmware sd_625 sd_210 mdm9607 sd_820_firmware mdm9645_firmware mdm9625_firmware sd_808 sd_800 fsm9055_firmware sd_617 sd_400_firmware sd_212_firmware sd_850_firmware mdm9655 sd_412_firmware mdm9625 sd_430 sd_810 mdm9615_firmware sdx20_firmware sd_410_firmware sd_600_firmware sd_205 sd_810_firmware sd_617_firmware Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear, Small Cell SoC

Matching Score-4

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.23% / 46.20%

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-16 Sep, 2024 | 16:28

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear, and Small Cell SoC FSM9055, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 600, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, and SDX20, lack of input Validation in QURTK_write() can cause potential buffer overflow.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-9034

Matching Score-4

Assigner-Qualcomm, Inc.

Matching Score-4

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.19% / 40.92%

7 Day CHG~0.00%

Published-18 Aug, 2017 | 18:00

Updated-20 Apr, 2025 | 01:37

In all Qualcomm products with Android releases from CAF using the Linux kernel, a string can fail to be null-terminated in SIP leading to a buffer overflow.