CWE-131 · Memory Corruption
Incorrect Calculation of Buffer Size
201CVEs
SortMost likely exploited
201 CVEs with CWE-131 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2020-17087In CISA KEVExploitedWindows Kernel Local Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1803 · CVSS 7.8 · 2020-11-11 | 7.8 | 5.4% | 2020-11-11 |
| CVE-2020-8450An issue was discovered in Squid before 4.10. Due to incorrect buffer management, a remote client can cause a buffer overflow in a Squid instance acting as a reverse proxy.Squid-Cache · Squid · 2020-02-04 | – | 72% | 2020-02-04 |
| CVE-2005-3120Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbitrary code via certain article headers containing Asian char…Invisible-Island · Lynx · 2005-10-17 | – | 23% | 2005-10-17 |
| CVE-2003-0899Buffer overflow in defang in libhttpd.c for thttpd 2.21 to 2.23b1 allows remote attackers to execute arbitrary code via requests that contain '<' or '>' characters, which trigger…Acme · Thttpd · 2003-10-30 | – | 22% | 2003-10-30 |
| CVE-2001-0249Heap overflow in FTP daemon in Solaris 8 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the LIST command, which uses glob to generat…Oracle · Solaris · 2001-05-24 | – | 20% | 2001-05-24 |
| CVE-2005-2103Buffer overflow in the AIM and ICQ module in Gaim before 1.5.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an…Gaim Project · Gaim · CVSS 9.8 · 2005-08-16 | 9.8 | 16% | 2005-08-16 |
| CVE-2001-0334FTP service in IIS 5.0 and earlier allows remote attackers to cause a denial of service via a wildcard sequence that generates a long string when it is expanded.Microsoft · Internet Information Server · 2001-09-18 | – | 15% | 2001-09-18 |
| CVE-2001-0248Buffer overflow in FTP server in HPUX 11 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the STAT command, which uses glob to generat…Sgi · Irix · 2001-05-24 | – | 11% | 2001-05-24 |
| CVE-2008-0599The init_request_info function in sapi/cgi/cgi_main.c in PHP before 5.2.6 does not properly consider operator precedence when calculating the length of PATH_TRANSLATED, which migh…Php · Php · 2008-05-05 | – | 11% | 2008-05-05 |
| CVE-2018-14618curl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The internal function Curl_ntlm_core_mk_nt_hash multiplies the length of the password…Haxx · curl · CVSS 7.5 · 2018-09-05 | 7.5 | 11% | 2018-09-05 |
| CVE-2004-1363Buffer overflow in extproc in Oracle 10g allows remote attackers to execute arbitrary code via environment variables in the library name, which are expanded after the length check…Oracle · Application Server · 2005-01-19 | – | 9.1% | 2005-01-19 |
| CVE-2017-0569An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This is…Google Inc. · Android · 2017-04-07 | – | 7.7% | 2017-04-07 |
| CVE-2004-0434k5admind (kadmind) for Heimdal allows remote attackers to execute arbitrary code via a Kerberos 4 compatibility administration request whose framing length is less than 2, which l…Heimdal Project · Heimdal · 2004-05-12 | – | 7.2% | 2004-05-12 |
| CVE-2002-1347Multiple buffer overflows in Cyrus SASL library 2.1.9 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) long inputs durin…Cyrusimap · Cyrus Sasl · 2002-12-11 | – | 7.1% | 2002-12-11 |
| CVE-2017-0166An elevation of privilege vulnerability exists in Windows when LDAP request buffer lengths are improperly calculated. In a remote attack scenario, an attacker could exploit this v…Microsoft Corporation · LDAP · 2017-04-12 | – | 6.4% | 2017-04-12 |
| CVE-2005-0490Multiple stack-based buffer overflows in libcURL and cURL 7.12.1, and possibly other versions, allow remote malicious web servers to execute arbitrary code via base64 encoded repl…Haxx · Curl · 2005-02-21 | – | 5.7% | 2005-02-21 |
| CVE-2019-5435An integer overflow in curl's URL API results in a buffer overflow in libcurl 7.62.0 to and including 7.64.1.curl · curl · 2019-05-28 | – | 5.7% | 2019-05-28 |
| CVE-2022-43945The Linux kernel NFSD implementation prior to versions 5.19.17 and 6.0.2 are vulnerable to buffer overflow. NFSD tracks the number of pages held by each NFSD thread by combining t…linux · linux_kernel · CVSS 7.5 · 2022-11-04 | 7.5 | 5.5% | 2022-11-04 |
| CVE-2004-0940Buffer overflow in the get_tag function in mod_include for Apache 1.3.x to 1.3.32 allows local users who can create SSI documents to execute arbitrary code as the apache user via…Apache · Http Server · 2004-10-26 | – | 4.8% | 2004-10-26 |
| CVE-2014-3468The asn1_get_bit_der function in GNU Libtasn1 before 3.6 does not properly report an error when a negative bit length is identified, which allows context-dependent attackers to ca…Gnu · Libtasn1 · 2014-06-05 | – | 3.8% | 2014-06-05 |
| CVE-2018-1000224Godot Engine version All versions prior to 2.1.5, all 3.0 versions prior to 3.0.6. contains a Signed/unsigned comparison, wrong buffer size chackes, integer overflow, missing padd…Godotengine · Godot · 2018-08-20 | – | 3.8% | 2018-08-20 |
| CVE-2019-15161rpcapd/daemon.c in libpcap before 1.9.1 mishandles certain length values because of reuse of a variable. This may open up an attack vector involving extra data at the end of a req…Tcpdump · Libpcap · 2019-10-03 | – | 2.8% | 2019-10-03 |
| CVE-2023-6780Glibc: integer overflow in __vsyslog_internal()Gnu · glibc · CVSS 5.3 · 2024-01-31 | 5.3 | 2.7% | 2024-01-31 |
| CVE-2021-0254Junos OS: Remote code execution vulnerability in overlayd serviceJuniper Networks · Junos OS · CVSS 9.8 · 2021-04-22 | 9.8 | 2.7% | 2021-04-22 |
| CVE-2020-6108An exploitable code execution vulnerability exists in the fsck_chk_orphan_node functionality of F2fs-Tools F2fs.Fsck 1.13. A specially crafted f2fs filesystem can cause a heap buf…F2fs-Tools Project · F2fs-Tools · CVSS 8.2 · 2020-10-15 | 8.2 | 2.2% | 2020-10-15 |
| CVE-2020-13585An out-of-bounds write vulnerability exists in the PSD Header processing functionality of Accusoft ImageGear 19.8. A specially crafted malformed file can lead to code execution. A…Accusoft · Accusoft · CVSS 9.8 · 2021-02-10 | 9.8 | 1.9% | 2021-02-10 |
| CVE-2020-36475An issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.18 LTS). The calculations performed by mbedtls_mpi_exp_mod are not limited; thus, supplying…Arm · Mbed Tls · 2021-08-23 | – | 1.9% | 2021-08-23 |
| CVE-2024-23622IBM Merge Healthcare eFilm Workstation License Server CopySLS_Request3 Buffer OverflowIBM Merge Healthcare · eFilm Workstation · CVSS 10 · 2024-01-25 | 10.0 | 1.9% | 2024-01-25 |
| CVE-2024-23621IBM Merge Healthcare eFilm Workstation License Server Buffer OverflowIBM Merge Healthcare · eFilm Workstation · CVSS 10 · 2024-01-25 | 10.0 | 1.9% | 2024-01-25 |
| CVE-2020-6070An exploitable code execution vulnerability exists in the file system checking functionality of fsck.f2fs 1.12.0. A specially crafted f2fs file can cause a logic flaw and out-of-b…F2fs-Tools Project · F2fs-tools · CVSS 6.7 · 2020-08-10 | 6.7 | 1.7% | 2020-08-10 |
| CVE-2024-23606An out-of-bounds write vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111). A specially crafted .famos fi…The Biosig Project · libbiosig · CVSS 9.8 · 2024-02-20 | 9.8 | 1.7% | 2024-02-20 |
| CVE-2021-44510An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, attackers can cause a calculation of the size of calls to memset in o…Fisglobal · Gt.m · 2022-04-15 | – | 1.7% | 2022-04-15 |
| CVE-2004-0747Buffer overflow in Apache 2.0.50 and earlier allows local users to gain apache privileges via a .htaccess file that causes the overflow during expansion of environment variables.Apache · Http Server · CVSS 7.8 · 2004-09-17 | 7.8 | 1.6% | 2004-09-17 |
| CVE-2022-31630OOB read due to insufficient input validation in imageloadfont()PHP Group · PHP · CVSS 6.5 · 2022-11-14 | 6.5 | 1.5% | 2022-11-14 |
| CVE-2020-6106An exploitable information disclosure vulnerability exists in the init_node_manager functionality of F2fs-Tools F2fs.Fsck 1.12 and 1.13. A specially crafted filesystem can be used…F2fs-Tools Project · F2fs-Tools · CVSS 4.4 · 2020-10-15 | 4.4 | 1.5% | 2020-10-15 |
| CVE-2021-38435RTI Connext DDS Professional and Connext DDS Secure Incorrect Calculation of Buffer SizeRTI · Connext DDS Professional · CVSS 6.6 · 2022-05-05 | 6.6 | 1.4% | 2022-05-05 |
| CVE-2021-21776An out-of-bounds write vulnerability exists in the SGI Format Buffer Size Processing functionality of Accusoft ImageGear 19.8. A specially crafted malformed file can lead to memor…Accusoft · Accusoft · CVSS 9.8 · 2021-03-31 | 9.8 | 1.4% | 2021-03-31 |
| CVE-2022-39377sysstat Incorrect Buffer Size calculation on 32-bit systems results in RCE via buffer overflowsysstat · sysstat · CVSS 7 · 2022-11-08 | 7.0 | 1.4% | 2022-11-08 |
| CVE-2019-19282A vulnerability has been identified in OpenPCS 7 V8.1 (All versions), OpenPCS 7 V8.2 (All versions), OpenPCS 7 V9.0 (All versions < V9.0 Upd3), SIMATIC BATCH V8.1 (All versions),…Siemens · OpenPCS 7 V8.1 · CVSS 7.5 · 2020-03-10 | 7.5 | 1.3% | 2020-03-10 |
| CVE-2020-1680Junos OS: MX Series: MS-MPC/MIC might crash when processing malformed IPv6 packet in NAT64 configuration.Juniper Networks · Junos OS · CVSS 5.3 · 2020-10-16 | 5.3 | 1.3% | 2020-10-16 |
| CVE-2021-21782An out-of-bounds write vulnerability exists in the SGI format buffer size processing functionality of Accusoft ImageGear 19.8. A specially crafted malformed file can lead to memor…Accusoft · Accusoft · CVSS 9.8 · 2021-03-31 | 9.8 | 1.3% | 2021-03-31 |
| CVE-2021-38423GurumDDS Heap-based Incorrect Calculation of Buffer SizeGurumNetworks · GurumDDS · CVSS 6.6 · 2022-05-05 | 6.6 | 1.3% | 2022-05-05 |
| CVE-2018-4038An exploitable arbitrary write vulnerability exists in the open document format parser of the Atlantis Word Processor, version 3.2.7.2, while trying to null-terminate a string. A…Talos · Atlantis Word Processor · CVSS 8.8 · 2018-12-01 | 8.8 | 1.3% | 2018-12-01 |
| CVE-2022-2520A flaw was found in libtiff 4.4.0rc1. There is a sysmalloc assertion fail in rotateImage() at tiffcrop.c:8621 that can cause program crash when reading a crafted input.Libtiff · libtiff · 2022-08-31 | – | 1.3% | 2022-08-31 |
| CVE-2021-27378An issue was discovered in the rand_core crate before 0.6.2 for Rust. Because read_u32_into and read_u64_into mishandle certain buffer-length checks, a random number generator may…Rand Core Project · Rand Core · 2021-02-18 | – | 1.3% | 2021-02-18 |
| CVE-2023-0568Array overrun in common path resolve codePHP Group · PHP · CVSS 7.5 · 2023-02-16 | 7.5 | 1.2% | 2023-02-16 |
| CVE-2017-14934process_debug_info in dwarf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (…Gnu · Binutils · 2017-09-29 | – | 1.2% | 2017-09-29 |
| CVE-2021-21824An out-of-bounds write vulnerability exists in the JPG Handle_JPEG420 functionality of Accusoft ImageGear 19.9. A specially crafted malformed file can lead to memory corruption. A…Accusoft · Accusoft · CVSS 8.1 · 2021-06-11 | 8.1 | 1.2% | 2021-06-11 |
| CVE-2002-0184Sudo before 1.6.6 contains an off-by-one error that can result in a heap-based buffer overflow that may allow local users to gain root privileges via special characters in the -p…Sudo Project · Sudo · 2003-04-02 | – | 1.2% | 2003-04-02 |
| CVE-2022-22137A memory corruption vulnerability exists in the ioca_mys_rgb_allocate functionality of Accusoft ImageGear 19.10. A specially-crafted malformed file can lead to an arbitrary free.…Accusoft · ImageGear · CVSS 9.8 · 2022-05-03 | 9.8 | 1.1% | 2022-05-03 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.