Skip to content
BackEsc
Sign in

CWE-131 · weakness in Memory Corruption

Incorrect Calculation of Buffer Size

201 CVEs · 1 exploited

Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

exploited in the wild
1
likely to be exploited
9

Every one of the 201 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. Windows Kernel Local Elevation of Privilege VulnerabilityCVE-2020-17087Microsoft · CVSS 7.8 · 5.4% likely

    Microsoft

  2. An issue was discovered in Squid before 4.10. Due to incorrect buffer management, a remote client can cause a buffer overflow in a Squid instance acting as a reverse proxy.CVE-2020-845072% likely
  3. Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbitrary code via certain article headers containing Asian char…CVE-2005-312023% likely
  4. Buffer overflow in defang in libhttpd.c for thttpd 2.21 to 2.23b1 allows remote attackers to execute arbitrary code via requests that contain '<' or '>' characters, which trigger…CVE-2003-089922% likely
  5. Heap overflow in FTP daemon in Solaris 8 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the LIST command, which uses glob to generat…CVE-2001-024920% likely
  6. Buffer overflow in the AIM and ICQ module in Gaim before 1.5.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an…CVE-2005-2103CVSS 9.8 · 16% likely
  7. FTP service in IIS 5.0 and earlier allows remote attackers to cause a denial of service via a wildcard sequence that generates a long string when it is expanded.CVE-2001-033415% likely
  8. Buffer overflow in FTP server in HPUX 11 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the STAT command, which uses glob to generat…CVE-2001-024811% likely
  9. The init_request_info function in sapi/cgi/cgi_main.c in PHP before 5.2.6 does not properly consider operator precedence when calculating the length of PATH_TRANSLATED, which migh…CVE-2008-059911% likely
  10. curl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The internal function Curl_ntlm_core_mk_nt_hash multiplies the length of the password…CVE-2018-14618curl · CVSS 7.5 · 11% likely
  11. Buffer overflow in extproc in Oracle 10g allows remote attackers to execute arbitrary code via environment variables in the library name, which are expanded after the length check…CVE-2004-13639.1% likely
  12. An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This is…CVE-2017-0569Google Inc. · 7.7% likely

    Google

  13. k5admind (kadmind) for Heimdal allows remote attackers to execute arbitrary code via a Kerberos 4 compatibility administration request whose framing length is less than 2, which l…CVE-2004-04347.2% likely
  14. Multiple buffer overflows in Cyrus SASL library 2.1.9 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) long inputs durin…CVE-2002-13477.1% likely
  15. An elevation of privilege vulnerability exists in Windows when LDAP request buffer lengths are improperly calculated. In a remote attack scenario, an attacker could exploit this v…CVE-2017-0166Microsoft Corporation · 6.4% likely

    Microsoft

  16. Multiple stack-based buffer overflows in libcURL and cURL 7.12.1, and possibly other versions, allow remote malicious web servers to execute arbitrary code via base64 encoded repl…CVE-2005-04905.7% likely
  17. An integer overflow in curl's URL API results in a buffer overflow in libcurl 7.62.0 to and including 7.64.1.CVE-2019-5435curl · 5.7% likely

    The Curl Project

  18. The Linux kernel NFSD implementation prior to versions 5.19.17 and 6.0.2 are vulnerable to buffer overflow. NFSD tracks the number of pages held by each NFSD thread by combining t…CVE-2022-43945linux · CVSS 7.5 · 5.5% likely

    Linux

  19. Buffer overflow in the get_tag function in mod_include for Apache 1.3.x to 1.3.32 allows local users who can create SSI documents to execute arbitrary code as the apache user via…CVE-2004-09404.8% likely
  20. The asn1_get_bit_der function in GNU Libtasn1 before 3.6 does not properly report an error when a negative bit length is identified, which allows context-dependent attackers to ca…CVE-2014-34683.8% likely
  21. Godot Engine version All versions prior to 2.1.5, all 3.0 versions prior to 3.0.6. contains a Signed/unsigned comparison, wrong buffer size chackes, integer overflow, missing padd…CVE-2018-10002243.8% likely
  22. rpcapd/daemon.c in libpcap before 1.9.1 mishandles certain length values because of reuse of a variable. This may open up an attack vector involving extra data at the end of a req…CVE-2019-151612.8% likely
  23. Glibc: integer overflow in __vsyslog_internal()CVE-2023-6780Gnu · CVSS 5.3 · 2.7% likely

    GNU

  24. Junos OS: Remote code execution vulnerability in overlayd serviceCVE-2021-0254Juniper Networks · CVSS 9.8 · 2.7% likely

    Juniper Networks

  25. An exploitable code execution vulnerability exists in the fsck_chk_orphan_node functionality of F2fs-Tools F2fs.Fsck 1.13. A specially crafted f2fs filesystem can cause a heap buf…CVE-2020-6108F2fs-Tools · CVSS 8.2 · 2.2% likely
  26. An out-of-bounds write vulnerability exists in the PSD Header processing functionality of Accusoft ImageGear 19.8. A specially crafted malformed file can lead to code execution. A…CVE-2020-13585Accusoft · CVSS 9.8 · 1.9% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

CyberSIXTSignal over noise
Updated AboutDevelopersSign in