# CWE-823.

Every Advisory and CVE whose sources give the weakness CWE-823, newest first.

## Records, newest first (an older page)

- [Use of Out-of-range Pointer Offset in Mongoose Web Server library](https://agentprime.io/advisories/CVE-2024-42386.md)
  `CVE-2024-42386` · CVE record: Cesanta Mongoose Web Server · CVSS 8.2 High · Not analysed yet · Published 18 Nov 2024 · Tags: CWE-823
- [Use of Out-of-range Pointer Offset in Mongoose Web Server library](https://agentprime.io/advisories/CVE-2024-42383.md)
  `CVE-2024-42383` · CVE record: Cesanta Mongoose Web Server · CVSS 4.2 Medium · Not analysed yet · Published 18 Nov 2024 · Tags: CWE-823
- [Use of Out-of-range Pointer Offset in ComputerVision](https://agentprime.io/advisories/CVE-2024-23377.md)
  `CVE-2024-23377` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 6.7 Medium · Not analysed yet · Published 4 Nov 2024 · Tags: CWE-823
- [Multiple issues in ctl(4) CAM Target Layer](https://agentprime.io/advisories/CVE-2024-42416.md)
  `CVE-2024-42416` · CVE record: FreeBSD FreeBSD · CVSS 8.4 High · Not analysed yet · Published 5 Sept 2024 · Tags: CWE-790, CWE-823
- [Memory corruption in thread creation](https://agentprime.io/advisories/CVE-2024-6603.md)
  `CVE-2024-6603` · CVE record: Mozilla Firefox and 2 more · CVSS 7.4 High · Not analysed yet · Published 9 Jul 2024 · Tags: CWE-823
- [Use of Out-of-range Pointer Offset in Video](https://agentprime.io/advisories/CVE-2024-21475.md)
  `CVE-2024-21475` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 6 May 2024 · Tags: CWE-823
- [Unixodbc: out of bounds stack write due to pointer-to-integer types conversion](https://agentprime.io/advisories/CVE-2024-1013.md)
  `CVE-2024-1013` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 7.8 High · Not analysed yet · Published 18 Mar 2024 · Tags: CWE-823
- [Use of Out-of-range Pointer Offset in WLAN HOST](https://agentprime.io/advisories/CVE-2023-43553.md)
  `CVE-2023-43553` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Mar 2024 · Tags: CWE-823
- [Use of Out-of-range Pointer Offset in Audio](https://agentprime.io/advisories/CVE-2023-33066.md)
  `CVE-2023-33066` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 8.4 High · Not analysed yet · Published 4 Mar 2024 · Tags: CWE-823
- [Use of Out-of-range Pointer Offset in WLAN HOST](https://agentprime.io/advisories/CVE-2023-43534.md)
  `CVE-2023-43534` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 8.6 High · Not analysed yet · Published 6 Feb 2024 · Tags: CWE-823
- [Use of out-of-range pointer offset in Video](https://agentprime.io/advisories/CVE-2023-43516.md)
  `CVE-2023-43516` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 6 Feb 2024 · Tags: CWE-823
- [Use of Out-of-range Pointer Offset in PCIe](https://agentprime.io/advisories/CVE-2023-43513.md)
  `CVE-2023-43513` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 6 Feb 2024 · Tags: CWE-823
- [Use of Out-of-range Pointer Offset in Audio](https://agentprime.io/advisories/CVE-2023-33067.md)
  `CVE-2023-33067` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 6.7 Medium · Not analysed yet · Published 6 Feb 2024 · Tags: CWE-823
- [Use of Out-of-range Pointer Offset in Audio](https://agentprime.io/advisories/CVE-2023-33110.md)
  `CVE-2023-33110` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 2 Jan 2024 · Tags: CWE-823
- [Use of Out-of-range Pointer Offset in Audio](https://agentprime.io/advisories/CVE-2023-33033.md)
  `CVE-2023-33033` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 8.4 High · Not analysed yet · Published 2 Jan 2024 · Tags: CWE-823
- [Kernel: io_uring out of boundary memory access in \_\_io_uaddr_map()](https://agentprime.io/advisories/CVE-2023-6560.md)
  `CVE-2023-6560` · CVE record: kernel and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 8 Dec 2023 · Tags: CWE-823
- [Use of Out-of-range Pointer Offset in Graphics](https://agentprime.io/advisories/CVE-2023-33106.md)
  `CVE-2023-33106` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 8.4 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 5 Dec 2023 · Tags: CWE-823
- [Use of Out-of-range Pointer Offset in Audio](https://agentprime.io/advisories/CVE-2023-33079.md)
  `CVE-2023-33079` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 5 Dec 2023 · Tags: CWE-823
- [Use of Out-of-range Pointer Offset in Multi-mode Call Processor](https://agentprime.io/advisories/CVE-2023-22388.md)
  `CVE-2023-22388` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 Nov 2023 · Tags: CWE-823
- [SQUID-2023:4 Denial of Service in SSL Certificate validation](https://agentprime.io/advisories/CVE-2023-46724.md)
  `CVE-2023-46724` · CVE record: squid-cache squid · CVSS 8.6 High · Not analysed yet · Published 1 Nov 2023 · Tags: Memory corruption, CWE-129, CWE-786, CWE-823
- [Use of Out-of-range Pointer Offset in Modem](https://agentprime.io/advisories/CVE-2023-24855.md)
  `CVE-2023-24855` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Oct 2023 · Tags: CWE-823
- [Cisco IOS XE Software: A vulnerability in the Multicast Leaf Recycle Elimination (mLRE) feature of Cisco IOS XE…](https://agentprime.io/advisories/CVE-2023-20187.md)
  `CVE-2023-20187` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.6 High · Not analysed yet · Published 27 Sept 2023 · Tags: CWE-823
- [Use of Out-of-range Pointer Offset in WLAN HAL](https://agentprime.io/advisories/CVE-2023-28564.md)
  `CVE-2023-28564` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 5 Sept 2023 · Tags: CWE-823
- [Multiple Type Confusion Vulnerability](https://agentprime.io/advisories/CVE-2023-28575.md)
  `CVE-2023-28575` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 6.7 Medium · Not analysed yet · Published 8 Aug 2023 · Tags: CWE-823
- [Use of Out-of-range Pointer Offset in Qualcomm IPC](https://agentprime.io/advisories/CVE-2023-22387.md)
  `CVE-2023-22387` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 4 Jul 2023 · Tags: CWE-823
- [Weston Embedded uC-FTPs: An out-of-bounds read vulnerability exists in the PORT command parameter extraction…](https://agentprime.io/advisories/CVE-2022-46378.md)
  `CVE-2022-46378` · CVE record: Weston Embedded uC-FTPs · CVSS 6.5 Medium · Not analysed yet · Published 10 May 2023 · Tags: CWE-823
- [Weston Embedded uC-FTPs: An out-of-bounds read vulnerability exists in the PORT command parameter extraction…](https://agentprime.io/advisories/CVE-2022-46377.md)
  `CVE-2022-46377` · CVE record: Weston Embedded uC-FTPs · CVSS 6.5 Medium · Not analysed yet · Published 10 May 2023 · Tags: CWE-823
- [Use of Out-of-range Pointer Offset in vim/vim](https://agentprime.io/advisories/CVE-2023-2426.md)
  `CVE-2023-2426` · CVE record: vim vim/vim · CVSS 6.8 Medium · Not analysed yet · Published 29 Apr 2023 · Tags: CWE-823
- [Use of Out-of-range Pointer Offset in Data Modem](https://agentprime.io/advisories/CVE-2022-25709.md)
  `CVE-2022-25709` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 8.4 High · Not analysed yet · Published 7 Mar 2023 · Tags: CWE-823
- [Use of Out-of-range Pointer Offset in MODEM](https://agentprime.io/advisories/CVE-2022-25694.md)
  `CVE-2022-25694` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 8.4 High · Not analysed yet · Published 7 Mar 2023 · Tags: CWE-823
- [Use of out-of-range pointer offset in Audio](https://agentprime.io/advisories/CVE-2022-33246.md)
  `CVE-2022-33246` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 6.7 Medium · Not analysed yet · Published 9 Feb 2023 · Tags: CWE-823
- [ESTsoft Alyac: A denial of service vulnerability exists in the malware scan functionality of ESTsoft…](https://agentprime.io/advisories/CVE-2022-43665.md)
  `CVE-2022-43665` · CVE record: ESTsoft Alyac · CVSS 5.0 Medium · Not analysed yet · Published 2 Feb 2023 · Tags: CWE-823
- [NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user can cause the use of an out-of-range pointer offset, which may lead to data t…](https://agentprime.io/advisories/CVE-2022-42264.md)
  `CVE-2022-42264` · CVE record: NVIDIA vGPU software (guest driver) - Linux, vGPU software (Virtual GPU Manager), NVIDIA Cloud Gaming (guest driver), NVIDIA Cloud Gaming (Virtual GPU Manager) · CVSS 7.1 High · Not analysed yet · Published 30 Dec 2022 · Tags: CWE-823
- [CODESYS runtime system prone to denial of service due to use of out of range pointer](https://agentprime.io/advisories/CVE-2022-32142.md)
  `CVE-2022-32142` · CVE record: CODESYS Runtime Toolkit and 1 more · CVSS 8.1 High · Not analysed yet · Published 24 Jun 2022 · Tags: CWE-823
- [ESTsoft Alyac: An out of bounds read vulnerability exists in the malware scan functionality of ESTsoft…](https://agentprime.io/advisories/CVE-2022-21147.md)
  `CVE-2022-21147` · CVE record: ESTsoft Alyac · CVSS 5.0 Medium · Not analysed yet · Published 12 May 2022 · Tags: CWE-823
- [Use of Out-of-range Pointer Offset in vim/vim](https://agentprime.io/advisories/CVE-2022-1420.md)
  `CVE-2022-1420` · CVE record: vim vim/vim · CVSS 6.8 Medium · Not analysed yet · Published 21 Apr 2022 · Tags: CWE-823
- [Use of Out-of-range Pointer Offset in vim/vim](https://agentprime.io/advisories/CVE-2022-0729.md)
  `CVE-2022-0729` · CVE record: vim vim/vim · CVSS 7.8 High · Not analysed yet · Published 23 Feb 2022 · Tags: CWE-823
- [Use of Out-of-range Pointer Offset in vim/vim](https://agentprime.io/advisories/CVE-2022-0685.md)
  `CVE-2022-0685` · CVE record: vim vim/vim · CVSS 8.4 High · Not analysed yet · Published 20 Feb 2022 · Tags: CWE-823
- [Use of Out-of-range Pointer Offset in mruby/mruby](https://agentprime.io/advisories/CVE-2022-0614.md)
  `CVE-2022-0614` · CVE record: mruby mruby/mruby · CVSS 8.4 High · Not analysed yet · Published 16 Feb 2022 · Tags: CWE-823
- [Use of Out-of-range Pointer Offset in vim/vim](https://agentprime.io/advisories/CVE-2022-0554.md)
  `CVE-2022-0554` · CVE record: vim vim/vim · CVSS 8.4 High · Not analysed yet · Published 10 Feb 2022 · Tags: CWE-823
- [CODESYS V2 runtime: out-of-bounds read or write access may result in denial-of-service](https://agentprime.io/advisories/CVE-2021-34595.md)
  `CVE-2021-34595` · CVE record: CODESYS CODESYS V2 · CVSS 8.1 High · Not analysed yet · Published 26 Oct 2021 · Tags: CWE-823
- [Use of Out-of-range Pointer Offset in bfabiszewski/libmobi](https://agentprime.io/advisories/CVE-2021-3889.md)
  `CVE-2021-3889` · CVE record: bfabiszewski bfabiszewski/libmobi · CVSS 7.1 High · Not analysed yet · Published 19 Oct 2021 · Tags: CWE-823
- [Use of Out-of-range Pointer Offset in bfabiszewski/libmobi](https://agentprime.io/advisories/CVE-2021-3888.md)
  `CVE-2021-3888` · CVE record: bfabiszewski bfabiszewski/libmobi · CVSS 7.1 High · Not analysed yet · Published 19 Oct 2021 · Tags: CWE-823
- [Enclave memory overwrite/overread vulnerability in Asylo UntrustedCacheMalloc::GetBuffer](https://agentprime.io/advisories/CVE-2021-22550.md)
  `CVE-2021-22550` · CVE record: Google LLC Asylo · CVSS 6.5 Medium · Not analysed yet · Published 8 Jun 2021 · Tags: CWE-823
- [Arbitrary enclave memory overwrite vulnerability in Asylo TrustedPrimitives::UntrustedCall](https://agentprime.io/advisories/CVE-2021-22549.md)
  `CVE-2021-22549` · CVE record: Google LLC Asylo · CVSS 6.5 Medium · Not analysed yet · Published 8 Jun 2021 · Tags: CWE-823
- [Siemens APOGEE PXC Compact (BACnet): A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions <…](https://agentprime.io/advisories/CVE-2020-27009.md)
  `CVE-2020-27009` · CVE record: Siemens APOGEE PXC Compact (BACnet) and 4 more · CVSS 8.1 High · Not analysed yet · Published 22 Apr 2021 · Tags: CWE-823
- [Cisco IOS XE Software DECnet Phase IV/OSI Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2021-1352.md)
  `CVE-2021-1352` · CVE record: Cisco Cisco IOS XE Software · CVSS 7.4 High · Not analysed yet · Published 24 Mar 2021 · Tags: CWE-823
- [Rockwell Automation: A denial-of-service vulnerability exists in the Ethernet/IP server functionality of…](https://agentprime.io/advisories/CVE-2020-13573.md)
  `CVE-2020-13573` · CVE record: Rockwell Automation · CVSS 7.5 High · Not analysed yet · Published 7 Jan 2021 · Tags: CWE-823
- [Nitro Pro: An exploitable code execution vulnerability exists in the JPEG2000 Stripe Decoding…](https://agentprime.io/advisories/CVE-2020-6112.md)
  `CVE-2020-6112` · CVE record: Nitro Pro · CVSS 8.8 High · Critical (CVSS 7+ and EPSS) · EPSS 0.17 · Not analysed yet · Published 17 Sept 2020 · Tags: CWE-823
- [Arbitrary trusted memory overwrite vulnerability in Asylo](https://agentprime.io/advisories/CVE-2020-8904.md)
  `CVE-2020-8904` · CVE record: Google LLC Asylo · CVSS 6.4 Medium · Not analysed yet · Published 12 Aug 2020 · Tags: CWE-823
- [Apache Software Foundation Apache HTTP Server: In Apache HTTP Server versions 2.4.0 to 2.4.23…](https://agentprime.io/advisories/CVE-2016-2161.md)
  `CVE-2016-2161` · CVE record: Apache Software Foundation Apache HTTP Server · No CVSS score · EPSS 0.21 · Not analysed yet · Published 27 Jul 2017 · Tags: CWE-823

Newest: <https://agentprime.io/advisories/tag/cwe-823.md>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-823&cursor=WyIyMDI0LTExLTE4VDA5OjA2OjM2LjYyMDAwMFoiLCJDVkUtMjAyNC00MjM4NyJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-823/?cursor=WyIyMDI0LTExLTE4VDA5OjA2OjM2LjYyMDAwMFoiLCJDVkUtMjAyNC00MjM4NyJd>. Everything for agents: <https://agentprime.io/llms.txt>.