Advisories · Weakness
CWE-823.
Every Advisory and CVE whose sources give the weakness CWE-823, newest first.
- CVSS 8.8 High
GPU DDK - OOB write in UntwiddlePOTSquare64bpp
- Imagination Technologies Graphics DDK
- CWE-823
- CVSS 9.8 CriticalCritical · CVSS 9+
GPU DDK - Fix for CVE-2026-49746 prevents the mapping of graphics buffers > 4GB
- Imagination Technologies Graphics DDK
- CWE-823
- CVSS 7.2 High
Fireware OS Out-of-Bounds Read in FireCluster Sync Allows Denial of Service
- WatchGuard Fireware OS
- Memory corruption
- CWE-129
- CVSS 2.5 Low
Use of Out-of-range Pointer Offset in mutt
- mutt
- CWE-823
- CVSS 7.1 High
Unauthenticated TDP Function Pointer Dispatch Denial of Service in TP-Link Tapo C500
- TP-Link Systems Inc. Tapo C500 v2.0
- CWE-823
- CVSS 8.5 High
Out-of-bounds read in Eclipse Foundation ThreadX
- Eclipse Foundation ThreadX
- Memory corruption
- CWE-823
- CVSS 7.7 High
OpenSlide: Arbitrary memory write with crafted Ventana BIF file
- openslide
- CWE-123
- CWE-823
- CVSS 5.5 Medium
OOBR in libpcap before 1.10.7
- The Tcpdump Group libpcap
- Memory corruption
- CWE-823
- CVSS 7.8 High
GPU DDK - rgxfw_to_ptr() does not reject FW private data pointers
- Imagination Technologies Graphics DDK
- CWE-823
- CVSS 8.8 High
Use of Out-of-range Pointer Offset in the Elasticsearch Machine Learning Native Inference Process
- Elasticsearch
- CWE-823
- CVSS 7.1 High
GPU DDK - Dimension Mismatch and Integer Truncation in PMRDevPhysAddrOSMem
- Imagination Technologies Graphics DDK
- CWE-823
- CVSS 7.8 High
GPU DDK - Unvalidated sHWPerfCtlDMABuf GPU-VA, DMA-write into FW privdata via MMU ctx 0
- Imagination Technologies Graphics DDK
- CWE-823
- CVSS 7.8 High
GPU DDK - Unchecked ui32TracePointer in rgxfw_log_ex()
- Imagination Technologies Graphics DDK
- CWE-823
- CVSS 7.7 High
GPU DDK - libusc OOB write at TreeRemove during WebGPU shader compilation
- Imagination Technologies Graphics DDK
- CWE-823
- CVSS 8.1 High
Memory safety bug fixed in Thunderbird 152
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
- CWE-823
- CVSS 9.1 CriticalCritical · CVSS 9+
netfilter: nft_inner: Fix IPv6 inner_thoff desync
- Linux kernel
- CWE-682
- CWE-823
- CVSS 4.3 Medium
GPU DDK - Arbitrary write via UFO updates due insufficient pointer validation in rgxfw_to_ptr()
- Imagination Technologies Graphics DDK
- CWE-823
- CVSS 7.8 High
MediaArea MediaInfoLib: A heap-based buffer overflow vulnerability exists in the LXF element parsing…
- MediaArea MediaInfoLib
- CWE-823
- CVSS 8.3 High
NGINX ngx_http_scgi_module and ngx_http_uwsgi_module vulnerability
- F5 NGINX Plus
- F5 NGINX Open Source
- Denial of service
- CWE-823
- CVSS 8.1 High
uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided
- Memory corruption
- CWE-670
<11.1.1 || >=12.0.0, <12.0.1 || >=13.0.0, <13.0.1 · fixed in 11.1.1, 12.0.1, 13.0.1
GHSA-w5hq-g745-h8pq · CVE-2026-41907 - CVSS 6.8 Medium
NVIDIA SNAP-4 Container: NVIDIA SNAP-4 Container contains a vulnerability in the VIRTIO-BLK component where a…
- NVIDIA SNAP-4 Container
- CWE-823
- CVSS 7.5 High
Incorrect boundary conditions in the Audio/Video: Playback component
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-754
- CWE-823
- CVSS 9.6 CriticalCritical · CVSS 9+
GPU DDK - libusc OOB write at ConvertSwitchToArrayLookupBP during WebGPU shader compilation
- Imagination Technologies Graphics DDK
- CWE-823
- CVSS 8.2 High
lz4_flex's decompression can leak information from uninitialized memory or reused output buffer
- Information disclosure
- CWE-823
<0.11.6 || >=0.12.0, <0.12.1 · fixed in 0.11.6, 0.12.1
GHSA-vvp9-7p8x-rfvv · CVE-2026-32829 - CVSS 6.1 Medium
A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, adjacent attacker to cause an affected device to reload unexpe…
- Cisco Secure Firewall Adaptive Security Appliance (ASA) Software
- Cisco Secure Firewall Threat Defense (FTD) Software
- CWE-823
- CVSS 1.3 Low
Qsync Central
- QNAP Systems Inc. Qsync Central
- CWE-823
- CVSS 6.8 Medium
VB-Audio Voicemeeter & Matrix Drivers DoS via Corrupted IoAllocateMdl Length
- VB-Audio Software Voicemeeter (Standard)
- VB-Audio Software Voicemeeter Banana
- CWE-823
- CVSS 6.1 Medium
iccDEV has Out-of-bounds Read, Use of Out-of-range Pointer Offset and Improper Input Validation
- InternationalColorConsortium iccDEV
- Memory corruption
- CWE-20
- CVSS 8.6 High
UCanCode E-XD++ Visualization Enterprise Suite Untrusted Pointer Dereference RCE
- UCanCode.Net Software E-XD++ Visualization Enterprise Suite
- CWE-823
- CVSS 7.5 High
Invalid characters cause assert
- ISC Kea
- CWE-823
- CVSS 7.8 High
Use of Out-of-range Pointer Offset in DSP Service
- Qualcomm, Inc. Snapdragon
- CWE-823
- CVSS 8.8 High
Use of Out-of-range Pointer Offset in TZ Firmware
- Qualcomm, Inc. Snapdragon
- CWE-823
- CVSS 7.8 High
GPU DDK - Insufficient validation in RGXCREATEFREELIST creates corrupt freelist
- Imagination Technologies Graphics DDK
- CWE-823
- CVSS 6.6 Medium
Use of Out-of-range Pointer Offset in Camera Driver
- Qualcomm, Inc. Snapdragon
- CWE-823
- CVSS 6.9 Medium
Misaligned Memory Accesses in `is_openvpn_protocol()`
- sslh
- CWE-823
- CVSS 6.5 Medium
GPU DDK - OOB read and write of the shared KMD/FW memory heap (VZ/TEE setups)
- Imagination Technologies Graphics DDK
- CWE-823
- CVSS 6.6 Medium
Use of Out-of-range Pointer Offset in Camera Driver
- Qualcomm, Inc. Snapdragon
- CWE-823
- CVSS 8.2 High
GPU DDK - rgxfw_hwperf_get_packet_buffer OOB write
- Imagination Technologies Graphics DDK
- CWE-823
- CVSS 7.8 High
Use of Out-of-range Pointer Offset in Trust Management Engine
- Qualcomm, Inc. Snapdragon
- CWE-823
- CVSS 7.8 High
Use of Out-of-range Pointer Offset in Automotive Audio
- Qualcomm, Inc. Snapdragon
- CWE-823
- CVSS 7.3 High
GPU DDK - rgxfw_pcset_ungrab OOB write via psFWMemContext->uiPageCatBaseRegSet
- Imagination Technologies Graphics DDK
- CWE-823
- CVSS 7.8 High
GPU DDK - RGXFWIF_HWPERF_CTL_BLK.uiNumCounters OOB write
- Imagination Technologies Graphics DDK
- CWE-823
- CVSS 3.3 Low
GPU DDK - rgxfw_hwr_log_info OOB write via psHWRInfoBuf->ui32WriteIndex
- Imagination Technologies Graphics DDK
- CWE-823
- CVSS 7.8 High
Use of Out-of-range Pointer Offset in WLAN Windows Host
- Qualcomm, Inc. Snapdragon
- CWE-823
- CVSS 7.8 High
Use of Out-of-range Pointer Offset in Display
- Qualcomm, Inc. Snapdragon
- CWE-823
- CVSS 7.8 High
GPU DDK - Multiple integer overflow in DmaTransfer PMR_DevPhysAddr functions leading to OOB writes
- Imagination Technologies Graphics DDK
- CWE-823
- CVSS 7.8 High
GPU DDK - rgxfw_pm_add_freelist_for_reconstruction OOB write
- Imagination Technologies Graphics DDK
- CWE-823
- CVSS 6.7 Medium
GPU DDK - rgxfw_kernel_CMD_DISABLE_ZSSTORE OOB write via ui32WriteOffsetOfDisableZSStore
- Imagination Technologies Graphics DDK
- CWE-823
- CVSS 4.4 Medium
GPU DDK - rgxfw_hwperf_config OOB read & write
- Imagination Technologies Graphics DDK
- CWE-823
- CVSS 4.1 Medium
GPU DDK - psContext->eDM gives OOB write
- Imagination Technologies Graphics DDK
- CWE-823
- CVSS 7.1 High
GPU DDK - OOB read into fwlog due to unchecked block count
- Imagination Technologies Graphics DDK
- CWE-823
- CVSS 7.1 High
GPU DDK - Out of bounds read into fwlog due to unchecked loop bounds
- Imagination Technologies Graphics DDK
- CWE-823
- CVSS 6.7 Medium
Use of Out-of-range Pointer Offset in Computer Vision
- Qualcomm, Inc. Snapdragon
- CWE-823
- CVSS 6.7 Medium
Use of Out-of-range Pointer Offset in Camera Driver
- Qualcomm, Inc. Snapdragon
- CWE-823
- CVSS 8.8 High
Use of Out-of-range Pointer Offset in Video
- Qualcomm, Inc. Snapdragon
- CWE-823
- CVSS 4.3 Medium
Use of Out-of-range Pointer Offset in Mongoose Web Server library
- Cesanta Mongoose Web Server
- CWE-823
- CVSS 4.3 Medium
Use of Out-of-range Pointer Offset in Mongoose Web Server library
- Cesanta Mongoose Web Server
- CWE-823
- CVSS 5.3 Medium
Use of Out-of-range Pointer Offset in Mongoose Web Server library
- Cesanta Mongoose Web Server
- CWE-823
- CVSS 5.3 Medium
Use of Out-of-range Pointer Offset in Mongoose Web Server library
- Cesanta Mongoose Web Server
- CWE-823
- CVSS 5.3 Medium
Use of Out-of-range Pointer Offset in Mongoose Web Server library
- Cesanta Mongoose Web Server
- CWE-823