Vulnerabilities (CVE)

Filtered by CWE-119
Total 13659 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-26126 2 Fedoraproject, Frrouting 2 Fedora, Frrouting 2026-06-17 6.8 MEDIUM 7.8 HIGH
Buffer overflow vulnerabilities exist in FRRouting through 8.1.0 due to the use of strdup with a non-zero-terminated binary string in isis_nb_notifications.c.
CVE-2022-26124 1 Intel 8 Nuc 8 Rugged Board Nuc8cchbn, Nuc 8 Rugged Board Nuc8cchbn Firmware, Nuc 8 Rugged Kit Nuc8cchkr and 5 more 2026-06-17 N/A 7.5 HIGH
Improper buffer restrictions in BIOS firmware for some Intel(R) NUC Boards, Intel(R) NUC 8 Boards, Intel(R) NUC 8 Rugged Boards and Intel(R) NUC 8 Rugged Kits before version CHAPLCEL.0059 may allow a privileged user to potentially enable escalation of privilege via local access.
CVE-2022-26045 1 Intel 2 Xmm 7560, Xmm 7560 Firmware 2026-06-17 N/A 3.3 LOW
Improper buffer restrictions in some Intel(R) XMM(TM) 7560 Modem software before version M2_7560_R_01.2146.00 may allow a privileged user to potentially enable escalation of privilege via physical access.
CVE-2022-25818 1 Google 1 Android 2026-06-17 7.5 HIGH 6.5 MEDIUM
Improper boundary check in UWB stack prior to SMR Mar-2022 Release 1 allows arbitrary code execution.
CVE-2022-25713 1 Qualcomm 110 Ar8035, Ar8035 Firmware, Qam8295p and 107 more 2026-06-17 N/A 7.8 HIGH
Memory corruption in Automotive due to Improper Restriction of Operations within the Bounds of a Memory Buffer while exporting a shared key.
CVE-2022-25709 1 Qualcomm 136 Ar8035, Ar8035 Firmware, Qca6174a and 133 more 2026-06-17 N/A 8.4 HIGH
Memory corruption in modem due to use of out of range pointer offset while processing qmi msg
CVE-2022-25694 1 Qualcomm 416 Apq8009, Apq8009 Firmware, Apq8009w and 413 more 2026-06-17 N/A 8.4 HIGH
Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM
CVE-2022-25682 1 Qualcomm 408 Apq8009, Apq8009 Firmware, Apq8009w and 405 more 2026-06-17 N/A 8.4 HIGH
Memory corruption in MODEM UIM due to usage of out of range pointer offset while decoding command from card in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2022-25681 1 Qualcomm 196 Aqt1000, Aqt1000 Firmware, Ar8035 and 193 more 2026-06-17 N/A 8.4 HIGH
Possible memory corruption in kernel while performing memory access due to hypervisor not correctly invalidated the processor translation caches in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2022-25662 1 Qualcomm 156 Apq8096au, Apq8096au Firmware, Msm8996au and 153 more 2026-06-17 N/A 5.3 MEDIUM
Information disclosure due to untrusted pointer dereference in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVE-2022-25661 1 Qualcomm 196 Aqt1000, Aqt1000 Firmware, Ar8035 and 193 more 2026-06-17 N/A 8.4 HIGH
Memory corruption due to untrusted pointer dereference in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2022-25658 1 Qualcomm 289 Apq8009, Apq8009 Firmware, Apq8009w and 286 more 2026-06-17 N/A 7.3 HIGH
Memory corruption due to incorrect pointer arithmetic when attempting to change the endianness in video parser function in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2022-24937 1 Silabs 1 Emberznet 2026-06-17 N/A 6.5 MEDIUM
Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Silicon Labs Ember ZNet allows Overflow Buffers.
CVE-2022-24788 1 Vyperlang 1 Vyper 2026-06-17 7.5 HIGH 7.1 HIGH
Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. Versions of vyper prior to 0.3.2 suffer from a potential buffer overrun. Importing a function from a JSON interface which returns `bytes` generates bytecode which does not clamp bytes length, potentially resulting in a buffer overrun. Users are advised to upgrade. There are no known workarounds for this issue.
CVE-2022-24421 1 Dell 92 Alienware 13 R3, Alienware 13 R3 Firmware, Alienware 15 R3 and 89 more 2026-06-17 7.2 HIGH 8.2 HIGH
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM.
CVE-2022-24420 1 Dell 92 Alienware 13 R3, Alienware 13 R3 Firmware, Alienware 15 R3 and 89 more 2026-06-17 7.2 HIGH 8.2 HIGH
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM.
CVE-2022-24419 1 Dell 92 Alienware 13 R3, Alienware 13 R3 Firmware, Alienware 15 R3 and 89 more 2026-06-17 7.2 HIGH 8.2 HIGH
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM.
CVE-2022-24416 1 Dell 92 Alienware 13 R3, Alienware 13 R3 Firmware, Alienware 15 R3 and 89 more 2026-06-17 7.2 HIGH 8.2 HIGH
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM.
CVE-2022-24415 1 Dell 92 Alienware 13 R3, Alienware 13 R3 Firmware, Alienware 15 R3 and 89 more 2026-06-17 7.2 HIGH 8.2 HIGH
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM.
CVE-2022-24322 1 Schneider-electric 1 Ecostruxure Control Expert 2026-06-17 4.3 MEDIUM 5.3 MEDIUM
A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause a disruption of communication between the Modicon controller and the engineering software when an attacker is able to intercept and manipulate specific Modbus response data. Affected Product: EcoStruxure Control Expert (V15.0 SP1 and prior)