Vulnerabilities (CVE)

Filtered by CWE-823
Total 63 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-42390 1 Cesanta 1 Mongoose 2026-06-17 N/A 4.3 MEDIUM
Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and force the application to read unintended heap memory space.
CVE-2024-42389 1 Cesanta 1 Mongoose 2026-06-17 N/A 5.3 MEDIUM
Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and force the application to read unintended heap memory space.
CVE-2024-42388 1 Cesanta 1 Mongoose 2026-06-17 N/A 5.3 MEDIUM
Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and force the application to read unintended heap memory space.
CVE-2024-42387 1 Cesanta 1 Mongoose 2026-06-17 N/A 5.3 MEDIUM
Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and force the application to read unintended heap memory space.
CVE-2024-42386 1 Cesanta 1 Mongoose 2026-06-17 N/A 8.2 HIGH
Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and produce a segmentation fault on the application.
CVE-2024-42383 1 Cesanta 1 Mongoose 2026-06-17 N/A 4.2 MEDIUM
Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows to write a NULL byte value beyond the memory space dedicated for the hostname field.
CVE-2024-33041 1 Qualcomm 70 Fastconnect 6900, Fastconnect 6900 Firmware, Fastconnect 7800 and 67 more 2026-06-17 N/A 6.7 MEDIUM
Memory corruption when input parameter validation for number of fences is missing for fence frame IOCTL calls,
CVE-2024-33036 1 Qualcomm 104 C-v2x 9150, C-v2x 9150 Firmware, Fastconnect 6800 and 101 more 2026-06-17 N/A 6.7 MEDIUM
Memory corruption while parsing sensor packets in camera driver, user-space variable is used while allocating memory in kernel and parsing which can lead to huge allocation or invalid memory access.
CVE-2024-23377 1 Qualcomm 78 Fastconnect 6900, Fastconnect 6900 Firmware, Fastconnect 7800 and 75 more 2026-06-17 N/A 6.7 MEDIUM
Memory corruption while invoking IOCTL command from user-space, when a user modifies the original packet size of the command after system properties have been already sent to the EVA driver.
CVE-2024-21475 1 Qualcomm 472 215 Mobile, 215 Mobile Firmware, 315 5g Iot Modem and 469 more 2026-06-17 N/A 7.8 HIGH
Memory corruption when the payload received from firmware is not as per the expected protocol size.
CVE-2024-1013 1 Unixodbc 1 Unixodbc 2026-06-17 N/A 7.8 HIGH
An out-of-bounds stack write flaw was found in unixODBC on 64-bit architectures where the caller has 4 bytes and callee writes 8 bytes. This issue may go unnoticed on little-endian architectures, while big-endian architectures can be broken.
CVE-2024-12577 2026-06-17 N/A 7.3 HIGH
Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's virtualised GPU memory.
CVE-2023-43553 1 Qualcomm 262 Ar8035, Ar8035 Firmware, Csr8811 and 259 more 2026-06-17 N/A 9.8 CRITICAL
Memory corruption while parsing beacon/probe response frame when AP sends more supported links in MLIE.
CVE-2023-33106 1 Qualcomm 306 Ar8035, Ar8035 Firmware, Csra6620 and 303 more 2026-06-17 N/A 8.4 HIGH
Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.
CVE-2023-33066 1 Qualcomm 626 205 Mobile, 205 Mobile Firmware, 215 Mobile and 623 more 2026-06-17 N/A 8.4 HIGH
Memory corruption in Audio while processing RT proxy port register driver.
CVE-2023-2426 1 Vim 1 Vim 2026-06-17 N/A 5.5 MEDIUM
Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 9.0.1499.
CVE-2022-32142 1 Codesys 2 Plcwinnt, Runtime Toolkit 2026-06-17 5.5 MEDIUM 8.1 HIGH
Multiple CODESYS Products are prone to a out-of bounds read or write access. A low privileged remote attacker may craft a request with invalid offset, which can cause an out-of-bounds read or write access, resulting in denial-of-service condition or local memory overwrite, which can lead to a change of local files. User interaction is not required.
CVE-2022-1420 3 Apple, Fedoraproject, Vim 3 Macos, Fedora, Vim 2026-06-17 4.3 MEDIUM 5.5 MEDIUM
Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4774.
CVE-2022-0729 4 Apple, Debian, Fedoraproject and 1 more 4 Macos, Debian Linux, Fedora and 1 more 2026-06-17 6.5 MEDIUM 8.8 HIGH
Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4440.
CVE-2022-0685 4 Apple, Debian, Fedoraproject and 1 more 4 Macos, Debian Linux, Fedora and 1 more 2026-06-17 6.8 MEDIUM 7.8 HIGH
Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4418.