Skip to content
Noroxi

CWE-131 · 189 records

Incorrect Calculation of Buffer Size

CVEs in this class

189 records

  • CVE-2020-17087
    63This week

    Windows Kernel Local Elevation of Privilege Vulnerability

    HighCVSS 7.8KEVWeaponizedEPSS 5%

    microsoft · windows 10 1507Nov 11, 2020

  • CVE-2020-8450
    51Plan

    An issue was discovered in Squid before 4.10.

    HighCVSS 7.3No exploitEPSS 71%

    squid-cache · squidFeb 4, 2020

  • CVE-2005-3120
    46Plan

    Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbitrary code via certai

    CriticalCVSS 9.8Proof of conceptEPSS 23%

    invisible-island · lynxOct 17, 2005

  • CVE-2003-0899
    46Plan

    Buffer overflow in defang in libhttpd.c for thttpd 2.21 to 2.23b1 allows remote attackers to execute arbitrary code via requests that contai

    CriticalCVSS 9.8Proof of conceptEPSS 22%

    acme · thttpdNov 3, 2003

  • CVE-2001-0249
    45Plan

    Heap overflow in FTP daemon in Solaris 8 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the L

    CriticalCVSS 9.8No exploitEPSS 19%

    hp · hp-uxJun 18, 2001

  • CVE-2005-2103
    44Plan

    Buffer overflow in the AIM and ICQ module in Gaim before 1.5.0 allows remote attackers to cause a denial of service (application crash) and

    CriticalCVSS 9.8Proof of conceptEPSS 16%

    gaim project · gaimAug 16, 2005

  • CVE-2001-0248
    42Plan

    Buffer overflow in FTP server in HPUX 11 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the S

    CriticalCVSS 9.8No exploitEPSS 11%

    hp · hp-uxJun 18, 2001

  • CVE-2008-0599
    42Plan

    The init_request_info function in sapi/cgi/cgi_main.c in PHP before 5.2.6 does not properly consider operator precedence when calculating th

    CriticalCVSS 9.8No exploitEPSS 10%

    php · phpMay 5, 2008

  • CVE-2004-1363
    42Plan

    Buffer overflow in extproc in Oracle 10g allows remote attackers to execute arbitrary code via environment variables in the library name, wh

    CriticalCVSS 9.8No exploitEPSS 9%

    oracle · application serverAug 4, 2004

  • CVE-2004-0434
    41Plan

    k5admind (kadmind) for Heimdal allows remote attackers to execute arbitrary code via a Kerberos 4 compatibility administration request whose

    CriticalCVSS 9.8No exploitEPSS 7%

    heimdal project · heimdalJul 7, 2004

  • CVE-2002-1347
    41Plan

    Multiple buffer overflows in Cyrus SASL library 2.1.9 and earlier allow remote attackers to cause a denial of service and possibly execute a

    CriticalCVSS 9.8No exploitEPSS 7%

    cyrusimap · cyrus saslDec 18, 2002

  • CVE-2021-0254
    40Plan

    Junos OS: Remote code execution vulnerability in overlayd service

    CriticalCVSS 9.8No exploitEPSS 2%

    juniper · junosApr 22, 2021

  • CVE-2024-23622
    40Plan

    IBM Merge Healthcare eFilm Workstation License Server CopySLS_Request3 Buffer Overflow

    CriticalCVSS 9.8No exploitEPSS 1%

    ibm · merge efilm workstationJan 25, 2024

  • CVE-2024-23621
    40Plan

    IBM Merge Healthcare eFilm Workstation License Server Buffer Overflow

    CriticalCVSS 9.8No exploitEPSS 1%

    ibm · merge efilm workstationJan 25, 2024

  • CVE-2024-23606
    40Plan

    An out-of-bounds write vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (a

    CriticalCVSS 9.8No exploitEPSS 1%

    libbiosig project · libbiosigFeb 20, 2024

  • CVE-2021-38435
    39Monitor

    RTI Connext DDS Professional and Connext DDS Secure Incorrect Calculation of Buffer Size

    CriticalCVSS 9.8No exploitEPSS 1%

    rti · connext professionalMay 5, 2022

  • CVE-2021-38423
    39Monitor

    GurumDDS Heap-based Incorrect Calculation of Buffer Size

    CriticalCVSS 9.8No exploitEPSS 1%

    gurum · gurumddsMay 5, 2022

  • CVE-2021-27378
    39Monitor

    An issue was discovered in the rand_core crate before 0.6.2 for Rust.

    CriticalCVSS 9.8No exploitEPSS 1%

    rand core project · rand coreFeb 18, 2021

  • CVE-2021-21824
    39Monitor

    An out-of-bounds write vulnerability exists in the JPG Handle_JPEG420 functionality of Accusoft ImageGear 19.9.

    CriticalCVSS 9.8No exploitEPSS 1%

    accusoft · imagegearJun 11, 2021

  • CVE-2023-5941
    39Monitor

    libc stdio buffer overflow

    CriticalCVSS 9.8No exploitEPSS 1%

    freebsd · freebsdNov 8, 2023

  • CVE-2023-24819
    39Monitor

    RIOT-OS vulnerable to Buffer Overflow during IPHC receive

    CriticalCVSS 9.8No exploitEPSS 0%

    riot-os · riotApr 24, 2023

  • CVE-2019-10500
    39Monitor

    While processing MT Secondary PDP request, Buffer overflow will happen due to incorrect calculation of buffer size in Snapdragon Auto, Snapd

    CriticalCVSS 9.8No exploitEPSS 0%

    qualcomm · apq8009 firmwareDec 18, 2019

  • CVE-2026-31478
    39Monitor

    ksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len()

    CriticalCVSS 9.8No exploitEPSS 0%

    linux · linux kernelApr 22, 2026

  • CVE-2026-20911
    39Monitor

    A heap-based buffer overflow vulnerability exists in the HuffTable::initval functionality of LibRaw Commit 0b56545 and Commit d20315b.

    CriticalCVSS 9.8No exploitEPSS 0%

    libraw · librawApr 7, 2026

  • CVE-2026-1949
    39Monitor

    Incorrect calculation of buffer size on the stack in AS320T

    CriticalCVSS 9.8No exploitEPSS 0%

    deltaww · as320t firmwareApr 24, 2026

All vulnerability classes