CWE-823 · Memory Corruption
Use of Out-of-range Pointer Offset
102CVEs
SortMost likely exploited
102 CVEs with CWE-823 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2023-33106In CISA KEVExploitedUse of Out-of-range Pointer Offset in GraphicsQualcomm, Inc. · Snapdragon · CVSS 8.4 · 2023-12-05 | 8.4 | 0.8% | 2023-12-05 |
| CVE-2016-2161In Apache HTTP Server versions 2.4.0 to 2.4.23, malicious input to mod_auth_digest can cause the server to crash, and each instance continues to crash even for subsequently valid…Apache Software Foundation · Apache HTTP Server · 2017-07-27 | – | 21% | 2017-07-27 |
| CVE-2020-6112An exploitable code execution vulnerability exists in the JPEG2000 Stripe Decoding functionality of Nitro Software, Inc.’s Nitro Pro 13.13.2.242 when decoding sub-samples. While i…Gonitro · Nitro Pro · CVSS 8.8 · 2020-09-17 | 8.8 | 17% | 2020-09-17 |
| CVE-2020-27009A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.20), APOGEE PXC Modular (BACnet)…Siemens · APOGEE PXC Compact (BACnet) · CVSS 8.1 · 2021-04-22 | 8.1 | 7.2% | 2021-04-22 |
| CVE-2020-13573A denial-of-service vulnerability exists in the Ethernet/IP server functionality of Rockwell Automation RSLinx Classic 2.57.00.14 CPR 9 SR 3. A specially crafted network request c…Rockwellautomation · Rockwell Automation · CVSS 7.5 · 2021-01-07 | 7.5 | 5.6% | 2021-01-07 |
| CVE-2022-0685Use of Out-of-range Pointer Offset in vim/vimvim · vim/vim · CVSS 8.4 · 2022-02-20 | 8.4 | 1.7% | 2022-02-20 |
| CVE-2022-0554Use of Out-of-range Pointer Offset in vim/vimvim · vim/vim · CVSS 8.4 · 2022-02-10 | 8.4 | 1.7% | 2022-02-10 |
| CVE-2022-0729Use of Out-of-range Pointer Offset in vim/vimvim · vim/vim · CVSS 7.8 · 2022-02-23 | 7.8 | 1.6% | 2022-02-23 |
| CVE-2022-46377An out-of-bounds read vulnerability exists in the PORT command parameter extraction functionality of Weston Embedded uC-FTPs v 1.98.00. A specially-crafted set of network packets…Weston Embedded · uC-FTPs · CVSS 6.5 · 2023-05-10 | 6.5 | 1.5% | 2023-05-10 |
| CVE-2022-1420Use of Out-of-range Pointer Offset in vim/vimvim · vim/vim · CVSS 6.8 · 2022-04-21 | 6.8 | 1.5% | 2022-04-21 |
| CVE-2022-46378An out-of-bounds read vulnerability exists in the PORT command parameter extraction functionality of Weston Embedded uC-FTPs v 1.98.00. A specially-crafted set of network packets…Weston Embedded · uC-FTPs · CVSS 6.5 · 2023-05-10 | 6.5 | 1.4% | 2023-05-10 |
| CVE-2021-3889Use of Out-of-range Pointer Offset in bfabiszewski/libmobibfabiszewski · bfabiszewski/libmobi · CVSS 7.1 · 2021-10-19 | 7.1 | 1.3% | 2021-10-19 |
| CVE-2021-3888Use of Out-of-range Pointer Offset in bfabiszewski/libmobibfabiszewski · bfabiszewski/libmobi · CVSS 7.1 · 2021-10-19 | 7.1 | 1.3% | 2021-10-19 |
| CVE-2022-32142CODESYS runtime system prone to denial of service due to use of out of range pointerCODESYS · Runtime Toolkit · CVSS 8.1 · 2022-06-24 | 8.1 | 1.1% | 2022-06-24 |
| CVE-2022-0614Use of Out-of-range Pointer Offset in mruby/mrubymruby · mruby/mruby · CVSS 8.4 · 2022-02-16 | 8.4 | 0.9% | 2022-02-16 |
| CVE-2023-20187A vulnerability in the Multicast Leaf Recycle Elimination (mLRE) feature of Cisco IOS XE Software for Cisco ASR 1000 Series Aggregation Services Routers could allow an unauthentic…Cisco · Cisco IOS XE Software · CVSS 8.6 · 2023-09-27 | 8.6 | 0.9% | 2023-09-27 |
| CVE-2021-34595CODESYS V2 runtime: out-of-bounds read or write access may result in denial-of-serviceCODESYS · CODESYS V2 · CVSS 8.1 · 2021-10-26 | 8.1 | 0.9% | 2021-10-26 |
| CVE-2017-20211UCanCode E-XD++ Visualization Enterprise Suite Untrusted Pointer Dereference RCEUCanCode.Net Software · E-XD++ Visualization Enterprise Suite · CVSS 8.6 · 2025-11-12 | 8.6 | 0.8% | 2025-11-12 |
| CVE-2022-21147An out of bounds read vulnerability exists in the malware scan functionality of ESTsoft Alyac 2.5.7.7. A specially-crafted PE file can trigger this vulnerability to cause denial o…ESTsoft · Alyac · CVSS 5 · 2022-05-12 | 5.0 | 0.7% | 2022-05-12 |
| CVE-2026-72642Use of Out-of-range Pointer Offset in the Elasticsearch Machine Learning Native Inference ProcessElastic · Elasticsearch · CVSS 8.8 · 2026-08-13 | 8.8 | 0.6% | 2026-08-13 |
| CVE-2023-24855Use of Out-of-range Pointer Offset in ModemQualcomm, Inc. · Snapdragon · CVSS 9.8 · 2023-10-03 | 9.8 | 0.5% | 2023-10-03 |
| CVE-2024-6603Memory corruption in thread creationMozilla · Firefox · CVSS 7.4 · 2024-07-09 | 7.4 | 0.5% | 2024-07-09 |
| CVE-2025-46806Misaligned Memory Accesses in `is_openvpn_protocol()`https://github.com/yrutschle/sslh/releases/tag/v2.2.4 · sslh · CVSS 6.9 · 2025-06-02 | 6.9 | 0.5% | 2025-06-02 |
| CVE-2023-22388Use of Out-of-range Pointer Offset in Multi-mode Call ProcessorQualcomm, Inc. · Snapdragon · CVSS 9.8 · 2023-11-07 | 9.8 | 0.4% | 2023-11-07 |
| CVE-2025-11232Invalid characters cause assertISC · Kea · CVSS 7.5 · 2025-10-29 | 7.5 | 0.4% | 2025-10-29 |
| CVE-2026-46244netfilter: nft_inner: Fix IPv6 inner_thoff desyncLinux · Linux · CVSS 9.1 · 2026-06-03 | 9.1 | 0.4% | 2026-06-03 |
| CVE-2021-1352Cisco IOS XE Software DECnet Phase IV/OSI Denial of Service VulnerabilityCisco · Cisco IOS XE Software · CVSS 7.4 · 2021-03-24 | 7.4 | 0.4% | 2021-03-24 |
| CVE-2025-54152Qsync CentralQNAP Systems Inc. · Qsync Central · CVSS 1.3 · 2026-02-11 | 1.3 | 0.4% | 2026-02-11 |
| CVE-2023-2426Use of Out-of-range Pointer Offset in vim/vimvim · vim/vim · CVSS 6.8 · 2023-04-29 | 6.8 | 0.4% | 2023-04-29 |
| CVE-2024-42386Use of Out-of-range Pointer Offset in Mongoose Web Server libraryCesanta · Mongoose Web Server · CVSS 8.2 · 2024-11-18 | 8.2 | 0.4% | 2024-11-18 |
| CVE-2023-43553Use of Out-of-range Pointer Offset in WLAN HOSTQualcomm, Inc. · Snapdragon · CVSS 9.8 · 2024-03-04 | 9.8 | 0.4% | 2024-03-04 |
| CVE-2026-41907uuid: Missing buffer bounds check in `v3`/`v5`/`v6` when `buf` is provideduuidjs · uuid · CVSS 8.1 · 2026-04-24 | 8.1 | 0.4% | 2026-04-24 |
| CVE-2017-11076Use of Out-of-range Pointer Offset in VideoQualcomm, Inc. · Snapdragon · CVSS 8.8 · 2024-11-26 | 8.8 | 0.4% | 2024-11-26 |
| CVE-2026-105541Windows Audio Service Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1607 · CVSS 7.8 · 2026-11-10 | 7.8 | 0.3% | 2026-11-10 |
| CVE-2022-43665A denial of service vulnerability exists in the malware scan functionality of ESTsoft Alyac 2.5.8.645. A specially-crafted PE file can lead to killing target process. An attacker…ESTsoft · Alyac · CVSS 5 · 2023-02-02 | 5.0 | 0.3% | 2023-02-02 |
| CVE-2024-42389Use of Out-of-range Pointer Offset in Mongoose Web Server libraryCesanta · Mongoose Web Server · CVSS 5.3 · 2024-11-18 | 5.3 | 0.3% | 2024-11-18 |
| CVE-2024-42388Use of Out-of-range Pointer Offset in Mongoose Web Server libraryCesanta · Mongoose Web Server · CVSS 5.3 · 2024-11-18 | 5.3 | 0.3% | 2024-11-18 |
| CVE-2024-42387Use of Out-of-range Pointer Offset in Mongoose Web Server libraryCesanta · Mongoose Web Server · CVSS 5.3 · 2024-11-18 | 5.3 | 0.3% | 2024-11-18 |
| CVE-2026-21732GPU DDK - libusc OOB write at ConvertSwitchToArrayLookupBP during WebGPU shader compilationImagination Technologies · Graphics DDK · CVSS 9.6 · 2026-03-20 | 9.6 | 0.3% | 2026-03-20 |
| CVE-2024-42391Use of Out-of-range Pointer Offset in Mongoose Web Server libraryCesanta · Mongoose Web Server · CVSS 4.3 · 2024-11-18 | 4.3 | 0.3% | 2024-11-18 |
| CVE-2024-42390Use of Out-of-range Pointer Offset in Mongoose Web Server libraryCesanta · Mongoose Web Server · CVSS 4.3 · 2024-11-18 | 4.3 | 0.3% | 2024-11-18 |
| CVE-2026-104944Unauthenticated TDP Function Pointer Dispatch Denial of Service in TP-Link Tapo C500TP-Link Systems Inc. · Tapo C500 v2.0 · CVSS 7.1 · 2026-10-06 | 7.1 | 0.3% | 2026-10-06 |
| CVE-2026-74912GPU DDK - Fix for CVE-2026-49746 prevents the mapping of graphics buffers > 4GBImagination Technologies · Graphics DDK · CVSS 9.8 · 2026-10-30 | 9.8 | 0.3% | 2026-10-30 |
| CVE-2024-42383Use of Out-of-range Pointer Offset in Mongoose Web Server libraryCesanta · Mongoose Web Server · CVSS 4.2 · 2024-11-18 | 4.2 | 0.3% | 2024-11-18 |
| CVE-2023-43534Use of Out-of-range Pointer Offset in WLAN HOSTQualcomm, Inc. · Snapdragon · CVSS 8.6 · 2024-02-06 | 8.6 | 0.3% | 2024-02-06 |
| CVE-2024-1013Unixodbc: out of bounds stack write due to pointer-to-integer types conversionRed Hat · Red Hat Enterprise Linux 6 · CVSS 7.8 · 2024-03-18 | 7.8 | 0.3% | 2024-03-18 |
| CVE-2023-6560Kernel: io_uring out of boundary memory access in __io_uaddr_map()Linux · kernel · CVSS 5.5 · 2023-12-08 | 5.5 | 0.3% | 2023-12-08 |
| CVE-2024-47893GPU DDK - OOB read and write of the shared KMD/FW memory heap (VZ/TEE setups)Imagination Technologies · Graphics DDK · CVSS 6.5 · 2025-05-17 | 6.5 | 0.3% | 2025-05-17 |
| CVE-2022-42264NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user can cause the use of an out-of-range pointer offset, whic…NVIDIA · vGPU software (guest driver) - Linux, vGPU software (Virtual GPU Manager), NVID… · CVSS 7.1 · 2022-12-30 | 7.1 | 0.3% | 2022-12-30 |
| CVE-2026-74915GPU DDK - OOB write in UntwiddlePOTSquare64bppImagination Technologies · Graphics DDK · CVSS 8.8 · 2026-10-30 | 8.8 | 0.3% | 2026-10-30 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.