Vulnerabilities > Improper Restriction of Operations within the Bounds of a Memory Buffer

DATE CVE VULNERABILITY TITLE RISK
2024-09-10 CVE-2024-42425 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Dell 7920 XL Firmware and Precision 7920 Firmware
Dell Precision Rack, 14G Intel BIOS versions prior to 2.22.2, contains an Access of Memory Location After End of Buffer vulnerability.
local
low complexity
dell CWE-119
5.5
2024-08-22 CVE-2022-48940 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Linux Kernel
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix crash due to incorrect copy_map_value When both bpf_spin_lock and bpf_timer are present in a BPF map value, copy_map_value needs to skirt both objects when copying a value into and out of the map.
local
low complexity
linux CWE-119
5.5
2024-08-21 CVE-2024-7966 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Google Chrome
Out of bounds memory access in Skia in Google Chrome prior to 128.0.6613.84 allowed a remote attacker who had compromised the renderer process to perform out of bounds memory access via a crafted HTML page.
network
low complexity
google CWE-119
8.8
2024-08-21 CVE-2024-7795 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Autel Maxicharger AC Elite Business C50 Firmware
Autel MaxiCharger AC Elite Business C50 AppAuthenExchangeRandomNum Stack-Based Buffer Overflow Remote Code Execution Vulnerability.
low complexity
autel CWE-119
8.8
2024-08-03 CVE-2024-7441 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Vivotek Sd9364 Firmware
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Vivotek SD9364 VVTK-0103f.
network
low complexity
vivotek CWE-119
critical
9.8
2024-08-03 CVE-2024-7439 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Vivotek Cc8160 Firmware
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Vivotek CC8160 VVTK-0100d and classified as critical.
network
low complexity
vivotek CWE-119
critical
9.8
2024-07-01 CVE-2024-21482 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Qualcomm products
Memory corruption during the secure boot process, when the `bootm` command is used, it bypasses the authentication of the kernel/rootfs image.
local
low complexity
qualcomm CWE-119
7.8
2024-06-10 CVE-2024-27851 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Apple products
The issue was addressed with improved bounds checks.
network
low complexity
apple CWE-119
8.8
2024-06-10 CVE-2024-27857 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Apple products
An out-of-bounds access issue was addressed with improved bounds checking.
local
low complexity
apple CWE-119
7.8
2024-06-06 CVE-2024-5306 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Tungstenautomation Kofax Power PDF 5.0.0.57
Kofax Power PDF PDF File Parsing Memory Corruption Remote Code Execution Vulnerability.
local
low complexity
tungstenautomation CWE-119
7.8