CWE-1285.

Processing a malformed RRC message leads to an out-of-bounds read, resulting in a denial-of-service condition.

• Samsung Semiconductor Exynos 1280
• Samsung Semiconductor Exynos 1330
• CWE-1285

Out-of-bounds read in Z-Wave NCP SPI Handler

• Silicon Labs Z-Wave SDK
• CWE-1285

Out-of-bounds Read via Check-after-use in the USBX HID Report Descriptor Parser

• Eclipse Foundation Eclipse ThreadX - USBX
• Memory corruption
• CWE-1285

Luksmeta: missing slot-range validation permits out-of-gap device i/o

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• CWE-1285

godotengine Godot Engine: Godot Engine through 4.7.2 has an out-of-bounds read in the optimized translation loader…

• godotengine Godot Engine
• CWE-1285

MariaDB: insufficient validation of binary frm data when opening a table

• MariaDB server
• CWE-1285

In apu, there is a possible memory corruption due to improper input validation.

• MediaTek, Inc. MediaTek chipset
• CWE-1285

OOBR in libpcap before 1.10.7

• The Tcpdump Group libpcap
• Memory corruption
• CWE-823

Denial of Service in Autodesk Installer IPC Channel

• Autodesk Installer
• CWE-1285

Local Privilege Escalation in NI-PAL

• NI-PAL
• CWE-1285

ratex-parser panics on `\verb` with a multibyte delimiter (UTF-8 byte-boundary slice)

• Denial of service
• CWE-248

<0.1.11 · fixed in 0.1.11

Go-Attestation: Hash injection into trusted measurement list via unskipped SignatureHeaderSize vendor bytes in parseEfiSignatureList()

• CWE-20
• CWE-1285

<0.6.1 · fixed in 0.6.1

Local privilege escalation in NI-PAL

• NI-PAL
• CWE-1285

cpp-httplib DoS: Negative chunk-size in chunked Transfer-Encoding

• yhirose cpp-httplib
• Denial of service
• CWE-20

Heap memory out of bounds read and crash in C Driver legacy GridFS file reader

• MongoDB, Inc. C Driver
• CWE-1285

vm2 Sandbox Access to Host Buffer.alloc Allows timeout Bypass Resulting in Memory Exhaustion

• Denial of service
• CWE-1285

<3.11.0 · fixed in 3.11.0

Apache Thrift has a Memory Allocation with Excessive Size Value Vulnerability

• Denial of service
• CWE-1285

<0.23.0 · fixed in 0.23.0

Argo Workflows: Unchecked annotation parsing in pod informer crashes Argo Workflows Controller

• CWE-129
• CWE-1285

>=3.6.5, <=3.6.19 || >=3.7.0, <3.7.14 · fixed in 3.7.14

uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided

• Memory corruption
• CWE-670

<11.1.1 || >=12.0.0, <12.0.1 || >=13.0.0, <13.0.1 · fixed in 11.1.1, 12.0.1, 13.0.1

Apache Kafka does not validate JWT tokens in its OAUTHBEARER authentication implementation

• Authentication bypass
• CWE-1285

>=4.1.0, <4.1.2 · fixed in 4.1.2

Softros LAN Messenger 9.2 Denial of Service via Log Files Location

• Softros LAN Messenger
• CWE-1285

libcrux: Panic in Signature Hint Decoding During Verification

• Memory corruption
• CWE-1285

<0.0.8 · fixed in 0.0.8

Blob Studio 2.17 Denial of Service via Malformed Input

• Pixarra Blob Studio
• CWE-1285

Paint Studio 2.17 Denial of Service via Malformed Input

• Pixarra Paint Studio
• CWE-1285

jetCast Server 2.0 Denial of Service via Log Directory

• Jetaudio jetCast Server
• CWE-1285

Denial of service in github.com/jackc/pgproto3/v2

• CWE-129
• CWE-1285

>=2.0.0, <=2.3.3 · no fixed version yet

github.com/buger/jsonparser has a denial of service vulnerability

• Memory corruption
• CWE-129

<1.1.2 · fixed in 1.1.2

Denial of Service (DoS) Vulnerability in Mitsubishi Electric CNC Series

• Mitsubishi Electric Corporation Mitsubishi Electric CNC M800V Series M800VW
• Mitsubishi Electric Corporation Mitsubishi Electric CNC M800V Series M800VS
• CWE-1285

In MAE, there is a possible out of bounds write due to a missing bounds check.

• MediaTek, Inc. MediaTek chipset
• CWE-1285

PostgreSQL missing validation of multibyte character length executes arbitrary code

• PostgreSQL
• CWE-129
• CWE-1285

In imgsys, there is a possible out of bounds write due to a missing bounds check.

• MediaTek, Inc. MediaTek chipset
• CWE-1285

In imgsys, there is a possible out of bounds write due to improper input validation.

• MediaTek, Inc. MediaTek chipset
• CWE-1285

gpsd before commit dc966aa contains a heap-based out-of-bounds write vulnerability in the drivers/driver_nmea2000.c file.

• Memory corruption
• CWE-1285

Improper input validation within AMD uprof can allow a local attacker to write to an arbitrary physical address, potentially resulting in crash or denial of service.

• AMD μProf
• CWE-1285

Improper input validation within AMD uprof can allow a local attacker to overwrite MSR registers, potentially resulting in crash or denial of service.

• AMD μProf
• CWE-1285

Out-of-bounds read in Eclipse Foundation NextX Duo

• Eclipse Foundation NextX Duo
• Memory corruption
• CWE-1285

Out-of-bounds read in Eclipse Foundation NextX Duo

• Eclipse Foundation NextX Duo
• Memory corruption
• CWE-1285

ZIP64 End of Central Directory (EOCD) Locator record offset not checked

• Python Software Foundation CPython
• CWE-1285

Improper input validation in the GPU driver could allow an attacker to exploit a heap overflow potentially resulting in arbitrary code execution.

• AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
• AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics
• CWE-1285

Out Of Bounds Write in displ2.dll when parsing a DSB file with Digilent DASYLab

• Digilent DASYLab
• CWE-1285

Heap-based Buffer Overflow when parsing a DSB file with Digilent DASYLab

• Digilent DASYLab
• CWE-1285

Out Of Bounds Write to invalid source address when parsing a DSB file with Digilent DASYLab

• Digilent DASYLab
• CWE-1285

Out Of Bounds Write to invalid address when parsing a DSB file with Digilent DASYLab

• Digilent DASYLab
• CWE-1285

Out Of Bounds Write of invalid data when parsing a DSB file with Digilent DASYLab

• Digilent DASYLab
• CWE-1285

Out Of Bounds Write when parsing a DSB file with Digilent DASYLab

• Digilent DASYLab
• measX DASYLab
• CWE-1285

Memory Corruption Issue in NI LabVIEW due to improper error handling

• NI LabVIEW
• CWE-1285

Missing input check in lvpict.cpp used in NI LabVIEW

• NI LabVIEW
• CWE-1285

Out of Bounds Read Vulnerability in NI LabVIEW when building font map

• NI LabVIEW
• CWE-1285

Out of Bounds Read Vulnerability in NI LabVIEW when loading fonts

• NI LabVIEW
• CWE-1285

Information Disclosure and Denial-of-Service(DoS) Vulnerability in MELSEC iQ-F Series CPU module

• Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-32MT/ES
• Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-32MT/DS
• CWE-1285

IBM Tivoli Monitoring code execution

• IBM Tivoli Monitoring
• CWE-1285

Formwork improperly validates input of User role preventing site and panel availability

• CWE-248
• CWE-1285

>=2.0.0-beta.1, <2.0.0-beta.4 · fixed in 2.0.0-beta.4

Out of bounds read in BuildFontMap in fontmgr.cpp in NI LabVIEW

• NI LabVIEW
• CWE-1285

Out of bounds read when loading the font table in fontmgr.cpp in NI LabVIEW

• NI LabVIEW
• CWE-1285

Out of bounds read in HeapObjMapImpl.cpp in NI LabVIEW

• NI LabVIEW
• CWE-1285

bhyve(8) NVMe driver to guest-induced infinite loops.

• FreeBSD
• CWE-1285

bhyve(8) infinite loop in the hda audio driver

• FreeBSD
• CWE-1285

NVIDIA CUDA Toolkit: NVIDIA CUDA toolkit for Windows and Linux contains a vulnerability in the nvdisasm…

• NVIDIA CUDA Toolkit
• CWE-1285

bhyve(8) privileged guest escape via TPM device passthrough

• FreeBSD
• Memory corruption
• CWE-1285

Improper Error Handling Issue in LabVIEW

• NI LabVIEW
• CWE-1285