Vulnerabilities > Improper Restriction of Operations within the Bounds of a Memory Buffer

DATE CVE VULNERABILITY TITLE RISK
2021-05-07 CVE-2020-11288 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Qualcomm products
Out of bound write can occur in playready while processing command due to lack of input validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music
local
low complexity
qualcomm CWE-119
7.8
2021-05-07 CVE-2020-11289 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Qualcomm products
Out of bound write can occur in TZ command handler due to lack of validation of command ID in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
local
low complexity
qualcomm CWE-119
7.8
2021-05-03 CVE-2021-32020 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Amazon Freertos
The kernel in Amazon Web Services FreeRTOS before 10.4.3 has insufficient bounds checking during management of heap memory.
network
low complexity
amazon CWE-119
critical
9.8
2021-04-22 CVE-2020-27738 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Siemens products
A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.20), APOGEE PXC Modular (BACnet) (All versions < V3.5.5), APOGEE PXC Modular (P2 Ethernet) (All versions < V2.8.20), Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions < V2017.02.3), Nucleus ReadyStart V4 (All versions < V4.1.0), Nucleus Source Code (Versions including affected DNS modules), SIMOTICS CONNECT 400 (All versions < V0.5.0.0), TALON TC Compact (BACnet) (All versions < V3.5.5), TALON TC Modular (BACnet) (All versions < V3.5.5).
network
high complexity
siemens CWE-119
7.4
2021-04-19 CVE-2021-31261 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Gpac 1.0.1
The gf_hinter_track_new function in GPAC 1.0.1 allows attackers to read memory via a crafted file in the MP4Box command.
local
low complexity
gpac CWE-119
5.5
2021-04-11 CVE-2021-28878 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products
In the standard library in Rust before 1.52.0, the Zip implementation calls __iterator_get_unchecked() more than once for the same index (under certain conditions) when next_back() and next() are used together.
network
low complexity
rust-lang fedoraproject CWE-119
7.5
2021-04-11 CVE-2021-28877 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Rust-Lang Rust
In the standard library in Rust before 1.51.0, the Zip implementation calls __iterator_get_unchecked() for the same index more than once when nested.
network
low complexity
rust-lang CWE-119
7.5
2021-04-11 CVE-2015-20001 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Rust-Lang Rust
In the standard library in Rust before 1.2.0, BinaryHeap is not panic-safe.
network
low complexity
rust-lang CWE-119
7.5
2021-04-08 CVE-2021-1479 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Cisco Catalyst Sd-Wan Manager and Sd-Wan Vmanage
Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or allow an authenticated, local attacker to gain escalated privileges on an affected system.
network
low complexity
cisco CWE-119
critical
9.8
2021-04-07 CVE-2021-30454 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Outer CGI Project Outer CGI 0.2.0
An issue was discovered in the outer_cgi crate before 0.2.1 for Rust.
network
low complexity
outer-cgi-project CWE-119
critical
9.8