ByteOS

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-6.1||MEDIUM

EPSS-0.91% / 75.87%

7 Day CHG~0.00%

Published-11 Mar, 2014 | 01:00

Updated-06 May, 2026 | 22:30

The ip6_route_add function in net/ipv6/route.c in the Linux kernel through 3.13.6 does not properly count the addition of routes, which allows remote attackers to cause a denial of service (memory consumption) via a flood of ICMPv6 Router Advertisement packets.

Vendor-n/a openSUSE Linux Kernel Organization, Inc SUSE

Product-linux_enterprise_server linux_kernel opensuse n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-7027

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-6.1||MEDIUM

EPSS-0.34% / 56.50%

7 Day CHG~0.00%

Published-09 Dec, 2013 | 18:00

Updated-29 Apr, 2026 | 01:13

The ieee80211_radiotap_iterator_init function in net/wireless/radiotap.c in the Linux kernel before 3.11.7 does not check whether a frame contains any data outside of the header, which might allow attackers to cause a denial of service (buffer over-read) via a crafted header.

Product-linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-4387

Matching Score-10

Assigner-Red Hat, Inc.

Matching Score-10

Assigner-Red Hat, Inc.

CVSS Score-6.1||MEDIUM

EPSS-0.62% / 70.13%

7 Day CHG~0.00%

Published-10 Oct, 2013 | 10:00

Updated-29 Apr, 2026 | 01:13

net/ipv6/ip6_output.c in the Linux kernel through 3.11.4 does not properly determine the need for UDP Fragmentation Offload (UFO) processing of small packets after the UFO queueing of a large packet, which allows remote attackers to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact via network traffic that triggers a large response packet.

Product-linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2017-1000407

Matching Score-8

Assigner-MITRE Corporation

Product-enterprise_linux_desktop enterprise_linux_server_tus enterprise_linux_workstation virtualization_host linux_kernel enterprise_linux_server_eus enterprise_linux_server debian_linux ubuntu_linux enterprise_linux_server_aus n/a

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-7.4||HIGH

EPSS-0.46% / 64.08%

7 Day CHG~0.00%

Published-11 Dec, 2017 | 21:00

Updated-20 Apr, 2025 | 01:37

The Linux Kernel 2.6.32 and later are affected by a denial of service, by flooding the diagnostic port 0x80 an exception can be triggered leading to a kernel panic.

Vendor-n/a Debian GNU/Linux Canonical Ltd.Linux Kernel Organization, Inc Red Hat, Inc.

CWE ID-CWE-754

Improper Check for Unusual or Exceptional Conditions

CVE-2011-3363

Matching Score-8

Assigner-Red Hat, Inc.

Matching Score-8

Assigner-Red Hat, Inc.

CVSS Score-6.5||MEDIUM

EPSS-0.12% / 30.88%

7 Day CHG~0.00%

Published-24 May, 2012 | 23:00

Updated-29 Apr, 2026 | 01:13

The setup_cifs_sb function in fs/cifs/connect.c in the Linux kernel before 2.6.39 does not properly handle DFS referrals, which allows remote CIFS servers to cause a denial of service (system crash) by placing a referral at the root of a share.

Vendor-n/a Linux Kernel Organization, Inc Red Hat, Inc.

Product-linux_kernel enterprise_linux n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2007-2876

Matching Score-8

Assigner-Red Hat, Inc.

Matching Score-8

Assigner-Red Hat, Inc.

CVSS Score-6.1||MEDIUM

EPSS-2.67% / 85.91%

7 Day CHG~0.00%

Published-11 Jun, 2007 | 23:00

Updated-23 Apr, 2026 | 00:35

The sctp_new function in (1) ip_conntrack_proto_sctp.c and (2) nf_conntrack_proto_sctp.c in Netfilter in Linux kernel 2.6 before 2.6.20.13, and 2.6.21.x before 2.6.21.4, allows remote attackers to cause a denial of service by causing certain invalid states that trigger a NULL pointer dereference.

Product-linux_kernel n/a

CVE-2015-5549

Matching Score-6

Matching Score-6

CVSS Score-10||HIGH

EPSS-46.08% / 97.66%

7 Day CHG~0.00%

Published-14 Aug, 2015 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5544, CVE-2015-5545, CVE-2015-5546, CVE-2015-5547, CVE-2015-5548, CVE-2015-5552, and CVE-2015-5553.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x air_sdk_\&_compiler windows flash_player air_sdk air linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-5567

Matching Score-6

Matching Score-6

CVSS Score-10||HIGH

EPSS-3.27% / 87.23%

7 Day CHG~0.00%

Published-22 Sep, 2015 | 10:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allow attackers to execute arbitrary code or cause a denial of service (stack memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5579.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x air windows flash_player air_sdk android linux_kernel air_sdk_\&_compiler n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-5575

Matching Score-6

Matching Score-6

CVSS Score-10||HIGH

EPSS-4.30% / 88.93%

7 Day CHG~0.00%

Published-22 Sep, 2015 | 10:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5577, CVE-2015-5578, CVE-2015-5580, CVE-2015-5582, CVE-2015-5588, and CVE-2015-6677.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x air_sdk_\&_compiler windows flash_player air_sdk android air linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-5578

Matching Score-6

Matching Score-6

CVSS Score-10||HIGH

EPSS-4.30% / 88.93%

7 Day CHG~0.00%

Published-22 Sep, 2015 | 10:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5575, CVE-2015-5577, CVE-2015-5580, CVE-2015-5582, CVE-2015-5588, and CVE-2015-6677.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x air_sdk_\&_compiler windows flash_player air_sdk android air linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-5580

Matching Score-6

Matching Score-6

CVSS Score-10||HIGH

EPSS-4.30% / 88.93%

7 Day CHG~0.00%

Published-22 Sep, 2015 | 10:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5575, CVE-2015-5577, CVE-2015-5578, CVE-2015-5582, CVE-2015-5588, and CVE-2015-6677.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-linux_kernel mac_os_x windows flash_player air_sdk android air air_sdk_\&_compiler n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2019-19602

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-6.1||MEDIUM

EPSS-0.03% / 10.07%

7 Day CHG~0.00%

Published-05 Dec, 2019 | 13:21

Updated-05 Aug, 2024 | 02:25

fpregs_state_valid in arch/x86/include/asm/fpu/internal.h in the Linux kernel before 5.4.2, when GCC 9 is used, allows context-dependent attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact because of incorrect fpu_fpregs_owner_ctx caching, as demonstrated by mishandling of signal-based non-cooperative preemption in Go 1.14 prereleases on amd64, aka CID-59c4bd853abc.

Vendor-n/a Linux Kernel Organization, Inc Canonical Ltd.

Product-ubuntu_linux linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2026-7346

Matching Score-6

Assigner-Chrome

Matching Score-6

Assigner-Chrome

CVSS Score-8.1||HIGH

EPSS-0.03% / 8.61%

7 Day CHG~0.00%

Published-28 Apr, 2026 | 22:36

Updated-30 Apr, 2026 | 18:28

Inappropriate implementation in Tint in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

Vendor-Apple Inc.Microsoft Corporation Google LLC Linux Kernel Organization, Inc

Product-chrome windows linux_kernel macos Chrome

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-5582

Matching Score-6

Matching Score-6

CVSS Score-10||HIGH

EPSS-4.30% / 88.93%

7 Day CHG~0.00%

Published-22 Sep, 2015 | 10:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5575, CVE-2015-5577, CVE-2015-5578, CVE-2015-5580, CVE-2015-5588, and CVE-2015-6677.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x air_sdk_\&_compiler windows flash_player air_sdk android air linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-5545

Matching Score-6

Matching Score-6

CVSS Score-10||HIGH

EPSS-46.08% / 97.66%

7 Day CHG~0.00%

Published-14 Aug, 2015 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5544, CVE-2015-5546, CVE-2015-5547, CVE-2015-5548, CVE-2015-5549, CVE-2015-5552, and CVE-2015-5553.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x air windows flash_player air_sdk linux_kernel air_sdk_\&_compiler n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-5283

Matching Score-6

Assigner-Red Hat, Inc.

Matching Score-6

Assigner-Red Hat, Inc.

CVSS Score-4.7||MEDIUM

EPSS-0.10% / 27.69%

7 Day CHG~0.00%

Published-19 Oct, 2015 | 10:00

Updated-06 May, 2026 | 22:30

The sctp_init function in net/sctp/protocol.c in the Linux kernel before 4.2.3 has an incorrect sequence of protocol-initialization steps, which allows local users to cause a denial of service (panic or memory corruption) by creating SCTP sockets before all of the steps have finished.

Product-linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2023-52441

Matching Score-6

Assigner-kernel.org

Matching Score-6

Assigner-kernel.org

CVSS Score-7.8||HIGH

EPSS-0.02% / 6.52%

7 Day CHG~0.00%

Published-21 Feb, 2024 | 07:21

Updated-04 May, 2025 | 07:36

ksmbd: fix out of bounds in init_smb2_rsp_hdr()

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out of bounds in init_smb2_rsp_hdr() If client send smb2 negotiate request and then send smb1 negotiate request, init_smb2_rsp_hdr is called for smb1 negotiate request since need_neg is set to false. This patch ignore smb1 packets after ->need_neg is set to false.

Vendor-Linux Kernel Organization, Inc

Product-linux_kernel Linux

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2023-52434

Matching Score-6

Assigner-kernel.org

Matching Score-6

Assigner-kernel.org

CVSS Score-8||HIGH

EPSS-0.09% / 25.98%

7 Day CHG~0.00%

Published-20 Feb, 2024 | 18:04

Updated-05 Jan, 2026 | 10:16

smb: client: fix potential OOBs in smb2_parse_contexts()

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential OOBs in smb2_parse_contexts() Validate offsets and lengths before dereferencing create contexts in smb2_parse_contexts(). This fixes following oops when accessing invalid create contexts from server: BUG: unable to handle page fault for address: ffff8881178d8cc3 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 4a01067 P4D 4a01067 PUD 0 Oops: 0000 [#1] PREEMPT SMP NOPTI CPU: 3 PID: 1736 Comm: mount.cifs Not tainted 6.7.0-rc4 #1 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.16.2-3-gd478f380-rebuilt.opensuse.org 04/01/2014 RIP: 0010:smb2_parse_contexts+0xa0/0x3a0 [cifs] Code: f8 10 75 13 48 b8 93 ad 25 50 9c b4 11 e7 49 39 06 0f 84 d2 00 00 00 8b 45 00 85 c0 74 61 41 29 c5 48 01 c5 41 83 fd 0f 76 55 <0f> b7 7d 04 0f b7 45 06 4c 8d 74 3d 00 66 83 f8 04 75 bc ba 04 00 RSP: 0018:ffffc900007939e0 EFLAGS: 00010216 RAX: ffffc90000793c78 RBX: ffff8880180cc000 RCX: ffffc90000793c90 RDX: ffffc90000793cc0 RSI: ffff8880178d8cc0 RDI: ffff8880180cc000 RBP: ffff8881178d8cbf R08: ffffc90000793c22 R09: 0000000000000000 R10: ffff8880180cc000 R11: 0000000000000024 R12: 0000000000000000 R13: 0000000000000020 R14: 0000000000000000 R15: ffffc90000793c22 FS: 00007f873753cbc0(0000) GS:ffff88806bc00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffff8881178d8cc3 CR3: 00000000181ca000 CR4: 0000000000750ef0 PKRU: 55555554 Call Trace: <TASK> ? __die+0x23/0x70 ? page_fault_oops+0x181/0x480 ? search_module_extables+0x19/0x60 ? srso_alias_return_thunk+0x5/0xfbef5 ? exc_page_fault+0x1b6/0x1c0 ? asm_exc_page_fault+0x26/0x30 ? smb2_parse_contexts+0xa0/0x3a0 [cifs] SMB2_open+0x38d/0x5f0 [cifs] ? smb2_is_path_accessible+0x138/0x260 [cifs] smb2_is_path_accessible+0x138/0x260 [cifs] cifs_is_path_remote+0x8d/0x230 [cifs] cifs_mount+0x7e/0x350 [cifs] cifs_smb3_do_mount+0x128/0x780 [cifs] smb3_get_tree+0xd9/0x290 [cifs] vfs_get_tree+0x2c/0x100 ? capable+0x37/0x70 path_mount+0x2d7/0xb80 ? srso_alias_return_thunk+0x5/0xfbef5 ? _raw_spin_unlock_irqrestore+0x44/0x60 __x64_sys_mount+0x11a/0x150 do_syscall_64+0x47/0xf0 entry_SYSCALL_64_after_hwframe+0x6f/0x77 RIP: 0033:0x7f8737657b1e

Vendor-Debian GNU/Linux Linux Kernel Organization, Inc

Product-debian_linux linux_kernel Linux

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2021-4157

Matching Score-6

Assigner-Red Hat, Inc.

Matching Score-6

Assigner-Red Hat, Inc.

CVSS Score-8||HIGH

EPSS-0.06% / 16.99%

7 Day CHG~0.00%

Published-25 Mar, 2022 | 18:02

Updated-03 Aug, 2024 | 17:16

An out of memory bounds write flaw (1 or 2 bytes of memory) in the Linux kernel NFS subsystem was found in the way users use mirroring (replication of files with NFS). A user, having access to the NFS mount, could potentially use this flaw to crash the system or escalate privileges on the system.

Vendor-n/a NetApp, Inc.Fedora Project Linux Kernel Organization, Inc Oracle Corporation

Product-h300e h500s h300s_firmware h410s h300s h300e_firmware linux_kernel h500e h410s_firmware fedora h500s_firmware h500e_firmware h700s_firmware communications_cloud_native_core_binding_support_function h700e h700e_firmware h700s kernel

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-5552

Matching Score-6

Matching Score-6

CVSS Score-10||HIGH

EPSS-4.25% / 88.85%

7 Day CHG~0.00%

Published-14 Aug, 2015 | 01:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-linux_kernel mac_os_x windows flash_player air_sdk air air_sdk_\&_compiler n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-5541

Matching Score-6

Matching Score-6

CVSS Score-10||HIGH

EPSS-9.52% / 92.88%

7 Day CHG~0.00%

Published-14 Aug, 2015 | 01:00

Updated-06 May, 2026 | 22:30

Heap-based buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5129.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-linux_kernel mac_os_x windows flash_player air_sdk air air_sdk_\&_compiler n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2023-52444

Matching Score-6

Assigner-kernel.org

Matching Score-6

Assigner-kernel.org

CVSS Score-7.8||HIGH

EPSS-0.01% / 1.21%

7 Day CHG~0.00%

Published-22 Feb, 2024 | 16:21

Updated-04 May, 2025 | 07:36

f2fs: fix to avoid dirent corruption

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid dirent corruption As Al reported in link[1]: f2fs_rename() ... if (old_dir != new_dir && !whiteout) f2fs_set_link(old_inode, old_dir_entry, old_dir_page, new_dir); else f2fs_put_page(old_dir_page, 0); You want correct inumber in the ".." link. And cross-directory rename does move the source to new parent, even if you'd been asked to leave a whiteout in the old place. [1] https://lore.kernel.org/all/20231017055040.GN800259@ZenIV/ With below testcase, it may cause dirent corruption, due to it missed to call f2fs_set_link() to update ".." link to new directory. - mkdir -p dir/foo - renameat2 -w dir/foo bar [ASSERT] (__chk_dots_dentries:1421) --> Bad inode number[0x4] for '..', parent parent ino is [0x3] [FSCK] other corrupted bugs [Fail]

Vendor-Linux Kernel Organization, Inc

Product-linux_kernel Linux

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2018-10940

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-5.5||MEDIUM

EPSS-0.06% / 17.19%

7 Day CHG~0.00%

Published-09 May, 2018 | 17:00

Updated-05 Aug, 2024 | 07:54

The cdrom_ioctl_media_changed function in drivers/cdrom/cdrom.c in the Linux kernel before 4.16.6 allows local attackers to use a incorrect bounds check in the CDROM driver CDROM_MEDIA_CHANGED ioctl to read out kernel memory.

Vendor-n/a Linux Kernel Organization, Inc Debian GNU/Linux

Product-debian_linux linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-5548

Matching Score-6

Matching Score-6

CVSS Score-10||HIGH

EPSS-46.08% / 97.66%

7 Day CHG~0.00%

Published-14 Aug, 2015 | 01:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x air_sdk_\&_compiler windows flash_player air_sdk air linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-5588

Matching Score-6

Matching Score-6

CVSS Score-10||HIGH

EPSS-4.30% / 88.93%

7 Day CHG~0.00%

Published-22 Sep, 2015 | 10:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5575, CVE-2015-5577, CVE-2015-5578, CVE-2015-5580, CVE-2015-5582, and CVE-2015-6677.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x air_sdk_\&_compiler windows flash_player air_sdk android air linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-5577

Matching Score-6

Matching Score-6

CVSS Score-10||HIGH

EPSS-4.30% / 88.93%

7 Day CHG~0.00%

Published-22 Sep, 2015 | 10:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5575, CVE-2015-5578, CVE-2015-5580, CVE-2015-5582, CVE-2015-5588, and CVE-2015-6677.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-linux_kernel mac_os_x windows flash_player air_sdk android air air_sdk_\&_compiler n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2021-4204

Matching Score-6

Assigner-Red Hat, Inc.

Matching Score-6

Assigner-Red Hat, Inc.

CVSS Score-7.1||HIGH

EPSS-0.77% / 73.57%

7 Day CHG~0.00%

Published-24 Aug, 2022 | 00:00

Updated-03 Aug, 2024 | 17:16

An out-of-bounds (OOB) memory access flaw was found in the Linux kernel's eBPF due to an Improper Input Validation. This flaw allows a local attacker with a special privilege to crash the system or leak internal information.

Vendor-n/a Linux Kernel Organization, Inc NetApp, Inc.Debian GNU/Linux Red Hat, Inc.

Product-debian_linux linux_kernel h500s h410s_firmware enterprise_linux h300s_firmware h500s_firmware h700s_firmware h410c_firmware h410s h410c h300s h700s kernel

CWE ID-CWE-20

Improper Input Validation

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2007-4938

Matching Score-6

Assigner-MITRE Corporation

Vendor-windriver mplayer santa_cruz_operation n/a Apple Inc.Mandriva (Mandrakesoft)IBM Corporation Sun Microsystems (Oracle Corporation)Linux Kernel Organization, Inc Silicon Graphics, Inc.HP Inc.Microsoft Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-7.6||HIGH

EPSS-10.33% / 93.24%

7 Day CHG+0.36%

Published-18 Sep, 2007 | 19:00

Updated-23 Apr, 2026 | 00:35

Heap-based buffer overflow in libmpdemux/aviheader.c in MPlayer 1.0rc1 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a .avi file with certain large "indx truck size" and nEntriesInuse values, and a certain wLongsPerEntry value.

Product-windows_me mac_os_x irix mplayer sco_unix linux_kernel windows_98 os2 tru64 bsdos hp-ux windows_nt mandrake_linux windows_xp solaris aix windows_2000 windows_2003_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-5546

Matching Score-6

Matching Score-6

CVSS Score-10||HIGH

EPSS-46.08% / 97.66%

7 Day CHG~0.00%

Published-14 Aug, 2015 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5544, CVE-2015-5545, CVE-2015-5547, CVE-2015-5548, CVE-2015-5549, CVE-2015-5552, and CVE-2015-5553.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x air windows flash_player air_sdk linux_kernel air_sdk_\&_compiler n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-5544

Matching Score-6

Matching Score-6

CVSS Score-10||HIGH

EPSS-46.08% / 97.66%

7 Day CHG~0.00%

Published-14 Aug, 2015 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5545, CVE-2015-5546, CVE-2015-5547, CVE-2015-5548, CVE-2015-5549, CVE-2015-5552, and CVE-2015-5553.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x air windows flash_player air_sdk linux_kernel air_sdk_\&_compiler n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-5132

Matching Score-6

Matching Score-6

CVSS Score-10||HIGH

EPSS-71.45% / 98.74%

7 Day CHG~0.00%

Published-14 Aug, 2015 | 01:00

Updated-06 May, 2026 | 22:30

Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5131 and CVE-2015-5133.

Vendor-n/a Apple Inc.openSUSE Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-evergreen linux_kernel mac_os_x windows flash_player air_sdk air air_sdk_\&_compiler n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2023-4234

Matching Score-6

Assigner-Fedora Project

Matching Score-6

Assigner-Fedora Project

CVSS Score-8.1||HIGH

EPSS-0.14% / 34.43%

7 Day CHG~0.00%

Published-17 Apr, 2024 | 22:53

Updated-04 Nov, 2025 | 19:16

Ofono: sms decoder stack-based buffer overflow remote code execution vulnerability within the decode_submit_report() function

A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the decode_submit_report() function during the SMS decoding. It is assumed that the attack scenario is accessible from a compromised modem, a malicious base station, or just SMS. There is a bound check for this memcpy length in decode_submit(), but it was forgotten in decode_submit_report().

Vendor-ofono_project n/a Fedora Project Linux Kernel Organization, Inc

Product-fedora ofono ofono Fedora ofono

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-4432

Matching Score-6

Matching Score-6

CVSS Score-10||HIGH

EPSS-62.73% / 98.39%

7 Day CHG~0.00%

Published-09 Jul, 2015 | 16:00

Updated-06 May, 2026 | 22:30

Heap-based buffer overflow in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3135 and CVE-2015-5118.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x air windows flash_player air_sdk linux_kernel air_sdk_\&_compiler n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2021-38201

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-7.5||HIGH

EPSS-1.28% / 79.73%

7 Day CHG~0.00%

Published-08 Aug, 2021 | 19:26

Updated-04 Aug, 2024 | 01:37

net/sunrpc/xdr.c in the Linux kernel before 5.13.4 allows remote attackers to cause a denial of service (xdr_set_page_base slab-out-of-bounds access) by performing many NFS 4.2 READ_PLUS operations.

Vendor-n/a NetApp, Inc.Linux Kernel Organization, Inc

Product-linux_kernel hci_storage_node hci_management_node hci_bootstrap_os hci_compute_node element_software solidfire n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2021-3635

Matching Score-6

Assigner-Red Hat, Inc.

Matching Score-6

Assigner-Red Hat, Inc.

CVSS Score-4.4||MEDIUM

EPSS-0.14% / 34.50%

7 Day CHG~0.00%

Published-13 Aug, 2021 | 13:22

Updated-03 Aug, 2024 | 17:01

A flaw was found in the Linux kernel netfilter implementation in versions prior to 5.5-rc7. A user with root (CAP_SYS_ADMIN) access is able to panic the system when issuing netfilter netflow commands.

Vendor-n/a Fedora Project Linux Kernel Organization, Inc Red Hat, Inc.

Product-enterprise_linux linux_kernel fedora kernel

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-5131

Matching Score-6

Matching Score-6

CVSS Score-10||HIGH

EPSS-71.45% / 98.74%

7 Day CHG~0.00%

Published-14 Aug, 2015 | 01:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.openSUSE Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-linux_kernel evergreen mac_os_x windows flash_player air_sdk air air_sdk_\&_compiler n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-4002

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-9||HIGH

EPSS-3.72% / 88.04%

7 Day CHG~0.00%

Published-07 Jun, 2015 | 23:00

Updated-06 May, 2026 | 22:30

drivers/staging/ozwpan/ozusbsvc1.c in the OZWPAN driver in the Linux kernel through 4.0.5 does not ensure that certain length values are sufficiently large, which allows remote attackers to cause a denial of service (system crash or large loop) or possibly execute arbitrary code via a crafted packet, related to the (1) oz_usb_rx and (2) oz_usb_handle_ep_data functions.

Vendor-n/a Canonical Ltd.openSUSE Linux Kernel Organization, Inc

Product-ubuntu_linux linux_kernel opensuse n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2018-1565

Matching Score-6

Assigner-IBM Corporation

Matching Score-6

Assigner-IBM Corporation

CVSS Score-8.4||HIGH

EPSS-0.06% / 18.78%

7 Day CHG~0.00%

Published-25 May, 2018 | 14:00

Updated-17 Sep, 2024 | 02:31

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local user to overflow a buffer which may result in a privilege escalation to the DB2 instance owner. IBM X-Force ID: 143022.

Vendor-IBM Corporation Linux Kernel Organization, Inc Microsoft Corporation

Product-windows db2 linux_kernel DB2 for Linux, UNIX and Windows

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-5129

Matching Score-6

Matching Score-6

CVSS Score-10||HIGH

EPSS-2.82% / 86.24%

7 Day CHG~0.00%

Published-14 Aug, 2015 | 01:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.openSUSE Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-linux_kernel evergreen mac_os_x windows flash_player air_sdk air air_sdk_\&_compiler n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2018-1488

Matching Score-6

Assigner-IBM Corporation

Matching Score-6

Assigner-IBM Corporation

CVSS Score-8.4||HIGH

EPSS-0.07% / 20.37%

7 Day CHG~0.00%

Published-25 May, 2018 | 14:00

Updated-17 Sep, 2024 | 03:55

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.5 and 11.1 is vulnerable to a buffer overflow, which could allow an authenticated local attacker to execute arbitrary code on the system as root. IBM X-Force ID: 140973.

Vendor-IBM Corporation Linux Kernel Organization, Inc Microsoft Corporation

Product-windows db2 linux_kernel DB2 for Linux, UNIX and Windows

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2018-1544

Matching Score-6

Assigner-IBM Corporation

Matching Score-6

Assigner-IBM Corporation

CVSS Score-8.4||HIGH

EPSS-0.06% / 18.78%

7 Day CHG~0.00%

Published-25 May, 2018 | 14:00

Updated-17 Sep, 2024 | 03:18

Vendor-IBM Corporation Linux Kernel Organization, Inc Microsoft Corporation

Product-windows db2 linux_kernel DB2 for Linux, UNIX and Windows

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2023-32331

Matching Score-6

Assigner-IBM Corporation

Matching Score-6

Assigner-IBM Corporation

CVSS Score-7.5||HIGH

EPSS-0.09% / 24.91%

7 Day CHG~0.00%

Published-04 Mar, 2024 | 18:38

Updated-31 Jan, 2025 | 16:27

IBM Connect:Express for UNIX denial of service

IBM Connect:Express for UNIX 1.5.0 is vulnerable to a buffer overflow that could allow a remote attacker to cause a denial of service through its browser UI. IBM X-Force ID: 254979.

Vendor-IBM Corporation Linux Kernel Organization, Inc Oracle Corporation

Product-aix sterling_connect\linux_kernel solaris Sterling Connect:Express for UNIX

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2015-4512

Matching Score-6

Assigner-Mozilla Corporation

Matching Score-6

Assigner-Mozilla Corporation

CVSS Score-6.4||MEDIUM

EPSS-2.01% / 83.80%

7 Day CHG~0.00%

Published-24 Sep, 2015 | 01:00

Updated-06 May, 2026 | 22:30

gfx/2d/DataSurfaceHelpers.cpp in Mozilla Firefox before 41.0 on Linux improperly attempts to use the Cairo library with 32-bit color-depth surface creation followed by 16-bit color-depth surface display, which allows remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) by using a CANVAS element to trigger 2D rendering.

Vendor-n/a Mozilla Corporation Linux Kernel Organization, Inc

Product-firefox linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2018-1427

Matching Score-6

Assigner-IBM Corporation

Matching Score-6

Assigner-IBM Corporation

CVSS Score-6.2||MEDIUM

EPSS-0.07% / 20.41%

7 Day CHG~0.00%

Published-22 Mar, 2018 | 12:00

Updated-16 Sep, 2024 | 17:43

IBM GSKit (IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1) contains several environment variables that a local attacker could overflow and cause a denial of service. IBM X-Force ID: 139072.

Vendor-IBM Corporation Linux Kernel Organization, Inc Microsoft Corporation

Product-windows db2 linux_kernel DB2 for Linux, UNIX and Windows

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2023-30431

Matching Score-6

Assigner-IBM Corporation

Vendor-Microsoft Corporation HP Inc.IBM Corporation Linux Kernel Organization, Inc Oracle Corporation

Matching Score-6

Assigner-IBM Corporation

CVSS Score-8.4||HIGH

EPSS-0.04% / 10.63%

7 Day CHG~0.00%

Published-09 Jul, 2023 | 23:58

Updated-13 Feb, 2025 | 16:49

IBM Db2 buffer overflow

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 db2set is vulnerable to a buffer overflow, caused by improper bounds checking. An attacker could overflow the buffer and execute arbitrary code. IBM X-Force ID: 252184.

Product-solaris linux_kernel db2 hp-ux windows aix Db2 for Linux, UNIX and Windows db2_for_linux_unix_and_windows

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-4431

Matching Score-6

Matching Score-6

CVSS Score-10||HIGH

EPSS-5.54% / 90.32%

7 Day CHG~0.00%

Published-09 Jul, 2015 | 16:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3117, CVE-2015-3123, CVE-2015-3130, CVE-2015-3133, and CVE-2015-3134.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-linux_kernel mac_os_x windows flash_player air_sdk air air_sdk_\&_compiler n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-5124

Matching Score-6

Matching Score-6

CVSS Score-10||HIGH

EPSS-11.43% / 93.63%

7 Day CHG~0.00%

Published-20 Jul, 2015 | 23:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.openSUSE Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-evergreen linux_kernel mac_os_x windows flash_player air_sdk air air_sdk_\&_compiler n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-5118

Matching Score-6

Matching Score-6

CVSS Score-10||HIGH

EPSS-62.73% / 98.39%

7 Day CHG~0.00%

Published-09 Jul, 2015 | 16:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x air_sdk_\&_compiler windows flash_player air_sdk air linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2018-10881

Matching Score-6

Assigner-Red Hat, Inc.

Vendor-[UNKNOWN]Linux Kernel Organization, Inc Debian GNU/Linux Canonical Ltd.Red Hat, Inc.

Matching Score-6

Assigner-Red Hat, Inc.

CVSS Score-4.2||MEDIUM

EPSS-0.05% / 14.97%

7 Day CHG~0.00%

Published-26 Jul, 2018 | 18:00

Updated-05 Aug, 2024 | 07:54

A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause an out-of-bound access in ext4_get_group_info function, a denial of service, and a system crash by mounting and operating on a crafted ext4 filesystem image.

Product-enterprise_linux_server ubuntu_linux debian_linux linux_kernel enterprise_linux_workstation enterprise_linux_for_real_time_for_nfv enterprise_linux_desktop enterprise_linux_for_real_time kernel

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-4036

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-7.2||HIGH

EPSS-0.10% / 27.95%

7 Day CHG~0.00%

Published-31 Aug, 2015 | 20:00

Updated-06 May, 2026 | 22:30

Array index error in the tcm_vhost_make_tpg function in drivers/vhost/scsi.c in the Linux kernel before 4.0 might allow guest OS users to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted VHOST_SCSI_SET_ENDPOINT ioctl call. NOTE: the affected function was renamed to vhost_scsi_make_tpg before the vulnerability was announced.