Skip to content

CWE-823 · weakness in Memory Corruption

Use of Out-of-range Pointer Offset

102 CVEs · 1 exploited

Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

exploited in the wild
1
likely to be exploited
2

Every one of the 102 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. Use of Out-of-range Pointer Offset in GraphicsCVE-2023-33106Qualcomm, Inc. · CVSS 8.4 · 0.8% likely

    Qualcomm, Inc.

  2. In Apache HTTP Server versions 2.4.0 to 2.4.23, malicious input to mod_auth_digest can cause the server to crash, and each instance continues to crash even for subsequently valid…CVE-2016-2161Apache Software Foundation · 21% likely

    Apache

  3. An exploitable code execution vulnerability exists in the JPEG2000 Stripe Decoding functionality of Nitro Software, Inc.’s Nitro Pro 13.13.2.242 when decoding sub-samples. While i…CVE-2020-6112Nitro Pro · CVSS 8.8 · 17% likely
  4. A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.20), APOGEE PXC Modular (BACnet)…CVE-2020-27009Siemens · CVSS 8.1 · 7.2% likely

    Siemens

  5. A denial-of-service vulnerability exists in the Ethernet/IP server functionality of Rockwell Automation RSLinx Classic 2.57.00.14 CPR 9 SR 3. A specially crafted network request c…CVE-2020-13573Rockwell Automation · CVSS 7.5 · 5.6% likely
  6. Use of Out-of-range Pointer Offset in vim/vimCVE-2022-0685vim · CVSS 8.4 · 1.7% likely

    Vim

  7. Use of Out-of-range Pointer Offset in vim/vimCVE-2022-0554vim · CVSS 8.4 · 1.7% likely

    Vim

  8. Use of Out-of-range Pointer Offset in vim/vimCVE-2022-0729vim · CVSS 7.8 · 1.6% likely

    Vim

  9. An out-of-bounds read vulnerability exists in the PORT command parameter extraction functionality of Weston Embedded uC-FTPs v 1.98.00. A specially-crafted set of network packets…CVE-2022-46377Weston Embedded · CVSS 6.5 · 1.5% likely
  10. Use of Out-of-range Pointer Offset in vim/vimCVE-2022-1420vim · CVSS 6.8 · 1.5% likely

    Vim

  11. An out-of-bounds read vulnerability exists in the PORT command parameter extraction functionality of Weston Embedded uC-FTPs v 1.98.00. A specially-crafted set of network packets…CVE-2022-46378Weston Embedded · CVSS 6.5 · 1.4% likely
  12. Use of Out-of-range Pointer Offset in bfabiszewski/libmobiCVE-2021-3889bfabiszewski · CVSS 7.1 · 1.3% likely

    Bfabiszewski

  13. Use of Out-of-range Pointer Offset in bfabiszewski/libmobiCVE-2021-3888bfabiszewski · CVSS 7.1 · 1.3% likely

    Bfabiszewski

  14. CODESYS runtime system prone to denial of service due to use of out of range pointerCVE-2022-32142CODESYS · CVSS 8.1 · 1.1% likely

    CODESYS

  15. Use of Out-of-range Pointer Offset in mruby/mrubyCVE-2022-0614mruby · CVSS 8.4 · 0.9% likely

    Mruby

  16. A vulnerability in the Multicast Leaf Recycle Elimination (mLRE) feature of Cisco IOS XE Software for Cisco ASR 1000 Series Aggregation Services Routers could allow an unauthentic…CVE-2023-20187Cisco · CVSS 8.6 · 0.9% likely

    Cisco

  17. CODESYS V2 runtime: out-of-bounds read or write access may result in denial-of-serviceCVE-2021-34595CODESYS · CVSS 8.1 · 0.9% likely

    CODESYS

  18. UCanCode E-XD++ Visualization Enterprise Suite Untrusted Pointer Dereference RCECVE-2017-20211UCanCode.Net Software · CVSS 8.6 · 0.8% likely
  19. An out of bounds read vulnerability exists in the malware scan functionality of ESTsoft Alyac 2.5.7.7. A specially-crafted PE file can trigger this vulnerability to cause denial o…CVE-2022-21147ESTsoft · CVSS 5 · 0.7% likely

    ESTsoft

  20. Use of Out-of-range Pointer Offset in the Elasticsearch Machine Learning Native Inference ProcessCVE-2026-72642Elastic · CVSS 8.8 · 0.6% likely

    Elastic

  21. Use of Out-of-range Pointer Offset in ModemCVE-2023-24855Qualcomm, Inc. · CVSS 9.8 · 0.5% likely

    Qualcomm, Inc.

  22. Memory corruption in thread creationCVE-2024-6603Mozilla · CVSS 7.4 · 0.5% likely

    Mozilla

  23. Misaligned Memory Accesses in `is_openvpn_protocol()`CVE-2025-46806https://github.com/yrutschle/sslh/releases/tag/v2.2.4 · CVSS 6.9 · 0.5% likely
  24. Use of Out-of-range Pointer Offset in Multi-mode Call ProcessorCVE-2023-22388Qualcomm, Inc. · CVSS 9.8 · 0.4% likely

    Qualcomm, Inc.

  25. Invalid characters cause assertCVE-2025-11232ISC · CVSS 7.5 · 0.4% likely

    ISC

  26. netfilter: nft_inner: Fix IPv6 inner_thoff desyncCVE-2026-46244Linux · CVSS 9.1 · 0.4% likely

    Linux

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

Updated AboutDevelopersSign in