CWE-805 · Memory Corruption
Buffer Access with Incorrect Length Value
56CVEs
SortMost likely exploited
56 CVEs with CWE-805 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2020-14509Multiple memory corruption vulnerabilities exist in CodeMeter (All versions prior to 7.10) where the packet parser mechanism does not verify length fields. An attacker could send…Wibu · CodeMeter · 2020-09-16 | – | 2.1% | 2020-09-16 |
| CVE-2025-23319NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker could cause an out-of-bounds write by sending a request. A s…NVIDIA · Triton Inference Server · CVSS 8.1 · 2025-08-06 | 8.1 | 1.6% | 2025-08-06 |
| CVE-2024-24851A heap-based buffer overflow vulnerability exists in the Programming Software Connection FiBurn functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted network pac…AutomationDirect · P3-550E · CVSS 7.5 · 2024-05-28 | 7.5 | 1.4% | 2024-05-28 |
| CVE-2021-31885A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE ME…Siemens · APOGEE MBC (PPC) (BACnet) · 2021-11-09 | – | 1.2% | 2021-11-09 |
| CVE-2023-20049Cisco IOS XR Software for ASR 9000 Series Routers Bidirectional Forwarding Detection Denial of Service VulnerabilityCisco · Cisco IOS XR Software · CVSS 8.6 · 2023-03-09 | 8.6 | 1.0% | 2023-03-09 |
| CVE-2020-16101It is possible for an unauthenticated remote DCOM websocket connection to crash the Command Centre service due to an out-of-bounds buffer access. Affected versions are v8.20 prior…Gallagher · Command Centre · CVSS 7.5 · 2020-09-15 | 7.5 | 1.0% | 2020-09-15 |
| CVE-2022-0519Buffer Access with Incorrect Length Value in radareorg/radare2radareorg · radareorg/radare2 · CVSS 6.3 · 2022-02-08 | 6.3 | 1.0% | 2022-02-08 |
| CVE-2025-23318NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker could cause an out-of-bounds write. A successful exploit of…NVIDIA · Triton Inference Server · CVSS 8.1 · 2025-08-06 | 8.1 | 0.8% | 2025-08-06 |
| CVE-2025-20170A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device.…Cisco · IOS · CVSS 7.7 · 2025-02-05 | 7.7 | 0.8% | 2025-02-05 |
| CVE-2025-20169A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device.…Cisco · IOS · CVSS 7.7 · 2025-02-05 | 7.7 | 0.8% | 2025-02-05 |
| CVE-2025-20175A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device.…Cisco · IOS · CVSS 7.7 · 2025-02-05 | 7.7 | 0.8% | 2025-02-05 |
| CVE-2025-20174A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device.…Cisco · IOS · CVSS 7.7 · 2025-02-05 | 7.7 | 0.8% | 2025-02-05 |
| CVE-2022-47375A vulnerability has been identified in SIMATIC PC-Station Plus (All versions), SIMATIC S7-400 CPU 412-2 PN V7 (All versions), SIMATIC S7-400 CPU 414-3 PN/DP V7 (All versions), SIM…Siemens · SIMATIC PC-Station Plus · CVSS 7.5 · 2023-12-12 | 7.5 | 0.7% | 2023-12-12 |
| CVE-2023-5396Server receiving a malformed message creates connection for a hostname that may cause a stack overflow resulting in possible remote code execution. See Honeywell Security Notifica…Honeywell · Experion Server · CVSS 7.4 · 2024-04-17 | 7.4 | 0.7% | 2024-04-17 |
| CVE-2026-20011Multiple Cisco Products Snort 3 SMTP MIME Denial of Service VulnerabilityCisco · Cisco Open Source Snort3 · CVSS 5.8 · 2026-10-21 | 5.8 | 0.5% | 2026-10-21 |
| CVE-2026-53877Heap buffer over-read in GDALRasterdjangoproject · Django · CVSS 4.8 · 2026-07-07 | 4.8 | 0.5% | 2026-07-07 |
| CVE-2024-34476Open5GS before 2.7.1 is vulnerable to a reachable assertion that can cause an AMF crash via NAS messages from a UE: ogs_nas_encrypt in lib/nas/common/security.c for pkbuf->len.Open5gs · Open5gs · CVSS 5.3 · 2024-05-04 | 5.3 | 0.5% | 2024-05-04 |
| CVE-2026-34002Xorg: xwayland: x.org x server: information disclosure or denial of service via out-of-bounds read in xkb modifier map handlingRed Hat · Red Hat Enterprise Linux 10.0 Extended Update Support · CVSS 6.1 · 2026-05-05 | 6.1 | 0.5% | 2026-05-05 |
| CVE-2026-119756Tasmota 16.0.0 Heap Out-of-Bounds Write via Device Groups UDParendst · Tasmota · CVSS 9.8 · 2026-11-09 | 9.8 | 0.5% | 2026-11-09 |
| CVE-2025-20315A vulnerability in the Network-Based Application Recognition (NBAR) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to…Cisco · Cisco IOS XE Software · CVSS 8.6 · 2025-09-24 | 8.6 | 0.5% | 2025-09-24 |
| CVE-2025-30651Junos OS and Junos OS Evolved: Receipt of a specific ICMPv6 packet causes a memory overrun leading to an rpd crashJuniper Networks · Junos OS · CVSS 7.5 · 2025-04-09 | 7.5 | 0.4% | 2025-04-09 |
| CVE-2026-0716Libsoup: out-of-bounds read in libsoup websocket frame processingRed Hat · Red Hat Enterprise Linux 10 · CVSS 4.8 · 2026-01-13 | 4.8 | 0.4% | 2026-01-13 |
| CVE-2025-20360Multiple Cisco Products Snort 3 MIME Denial of Service VulnerabilityCisco · Cisco Cyber Vision · CVSS 5.8 · 2025-10-15 | 5.8 | 0.4% | 2025-10-15 |
| CVE-2025-63547An issue in Eprosima Micro-XREC-DDS Agent v.3.0.1 allows a remote attacker to cause a denial of service via a crafted packet to the MTU length fieldNo vendor recorded · CVSS 7.5 · 2026-05-01 | 7.5 | 0.4% | 2026-05-01 |
| CVE-2026-12549Libsoup: incomplete fix for cve-2026-2443: range suffix overflow in libsoup soupserverRed Hat · Red Hat Enterprise Linux 10 · CVSS 4.8 · 2026-06-22 | 4.8 | 0.4% | 2026-06-22 |
| CVE-2021-3581Buffer Access with Incorrect Length Value in zephyrzephyrproject-rtos · zephyr · CVSS 7 · 2021-10-05 | 7.0 | 0.3% | 2021-10-05 |
| CVE-2025-21591Junos OS: An unauthenticated adjacent attacker sending a malformed DHCP packet causes jdhcpd to crashJuniper Networks · Junos OS · CVSS 7.4 · 2025-04-09 | 7.4 | 0.3% | 2025-04-09 |
| CVE-2026-6695Gimp: gimp: remote code execution via crafted paa fileRed Hat · Red Hat Enterprise Linux 6 · CVSS 5.5 · 2026-08-03 | 5.5 | 0.3% | 2026-08-03 |
| CVE-2026-1837libjxl: Out-of-bounds write in grayscale color transformation when using LCMS2Google · libjxl · CVSS 8.8 · 2026-02-11 | 8.8 | 0.3% | 2026-02-11 |
| CVE-2024-20294A vulnerability in the Link Layer Discovery Protocol (LLDP) feature of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a de…Cisco · Cisco NX-OS Software · CVSS 6.6 · 2024-02-28 | 6.6 | 0.3% | 2024-02-28 |
| CVE-2026-31607usbip: validate number_of_packets in usbip_pack_ret_submit()Linux · Linux · CVSS 9.8 · 2026-04-24 | 9.8 | 0.3% | 2026-04-24 |
| CVE-2026-20290Cisco Secure Firewall Threat Defense Software Snort 2 SSL/TLS Denial of Service VulnerabilityCisco · Cisco Secure Firewall Threat Defense (FTD) Software · CVSS 5.8 · 2026-09-16 | 5.8 | 0.3% | 2026-09-16 |
| CVE-2019-19339It was found that the Red Hat Enterprise Linux 8 kpatch update did not include the complete fix for CVE-2018-12207. A flaw was found in the way Intel CPUs handle inconsistency bet…Red Hat · kpatch: · CVSS 6.5 · 2020-01-17 | 6.5 | 0.3% | 2020-01-17 |
| CVE-2020-10774A memory disclosure flaw was found in the Linux kernel's versions before 4.18.0-193.el8 in the sysctl subsystem when reading the /proc/sys/kernel/rh_features file. This flaw allow…Linux · kernel · 2021-05-27 | – | 0.3% | 2021-05-27 |
| CVE-2021-48019Vyper before 0.2.9 Incorrect RETURNDATASIZE in create_forwarder_to Proxiesvyperlang · vyper · CVSS 4.8 · 2026-10-21 | 4.8 | 0.2% | 2026-10-21 |
| CVE-2026-1767Localsearch: tracker-miners: gnome localsearch mp3 extractor: heap buffer overflow leading to denial of service or information disclosure via malformed mp3 id3 tagsRed Hat · Red Hat Enterprise Linux 10 · CVSS 5.6 · 2026-06-16 | 5.6 | 0.2% | 2026-06-16 |
| CVE-2025-20191Multiple Cisco Products Denial of Service VulnerabilityCisco · Cisco NX-OS Software · CVSS 7.4 · 2025-05-07 | 7.4 | 0.2% | 2025-05-07 |
| CVE-2025-20202A vulnerability in Cisco IOS XE Wireless Controller Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device.…Cisco · Cisco IOS XE Software · CVSS 7.4 · 2025-05-07 | 7.4 | 0.2% | 2025-05-07 |
| CVE-2024-3933Eclipse Open J9 With -Xgc:concurrentScavenge on IBM Z, could write/read outside of a bufferEclipse Foundation · Open J9 · CVSS 5.3 · 2024-05-27 | 5.3 | 0.2% | 2024-05-27 |
| CVE-2026-15028Libarchive: heap overflow oob read while parsing a tar archive contains a pax extended headerRed Hat · Red Hat Enterprise Linux 10 · CVSS 3.9 · 2026-07-10 | 3.9 | 0.2% | 2026-07-10 |
| CVE-2024-0131NVIDIA GPU kernel driver for Windows and Linux contains a vulnerability where a potential user-mode attacker could read a buffer with an incorrect length. A successful exploit of…NVIDIA · NVIDIA GPU Display Driver, vGPU software · CVSS 4.4 · 2025-02-02 | 4.4 | 0.2% | 2025-02-02 |
| CVE-2022-34399Dell Alienware m17 R5 BIOS version prior to 1.2.2 contain a buffer access vulnerability. A malicious user with admin privileges could potentially exploit this vulnerability by sen…Dell · CPG BIOS · CVSS 5.1 · 2023-01-18 | 5.1 | 0.2% | 2023-01-18 |
| CVE-2026-20010Cisco Nexus 3000 and 9000 Series Switches Link Layer Discovery Protocol Denial of Service VulnerabilityCisco · Cisco NX-OS Software · CVSS 7.4 · 2026-02-25 | 7.4 | 0.2% | 2026-02-25 |
| CVE-2025-7048On affected platforms running Arista EOS with MACsec configuration, a specially crafted packet can cause the MACsec process to terminate unexpectedly. Continuous receipt of these…Arista Networks · EOS · CVSS 4.3 · 2026-01-06 | 4.3 | 0.2% | 2026-01-06 |
| CVE-2026-20033Cisco NX-OS Software Denial of Service VulnerabilityCisco · Cisco NX-OS System Software in ACI Mode · CVSS 7.4 · 2026-02-25 | 7.4 | 0.2% | 2026-02-25 |
| CVE-2025-36463Dell ControlVault3 ControlVault WBDI Driver Broadcom Storage Adapter out-of-bounds write vulnerabilityBroadcom · BCM5820X · CVSS 7.3 · 2025-11-17 | 7.3 | 0.2% | 2025-11-17 |
| CVE-2025-36460Dell ControlVault3 ControlVault WBDI Driver Broadcom Storage Adapter out-of-bounds write vulnerabilityBroadcom · BCM5820X · CVSS 7.3 · 2025-11-17 | 7.3 | 0.2% | 2025-11-17 |
| CVE-2026-6245Sssd: out-of-bounds read in the sssdRed Hat · Red Hat Enterprise Linux 10 · CVSS 5.5 · 2026-04-15 | 5.5 | 0.2% | 2026-04-15 |
| CVE-2025-38743Dell iDRAC Service Module (iSM), versions prior to 6.0.3.0, contains a Buffer Access with Incorrect Length Value vulnerability. A low privileged attacker with local access could p…Dell · iDRAC Service Module (iSM) · CVSS 7.8 · 2025-08-21 | 7.8 | 0.2% | 2025-08-21 |
| CVE-2026-1766Localsearch: tracker-miners: gnome localsearch mp3 extractor: denial of service and information disclosure via malformed mp3 files.Red Hat · Red Hat Enterprise Linux 10 · CVSS 5.6 · 2026-06-16 | 5.6 | 0.2% | 2026-06-16 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.