Skip to content
Noroxi

CWE-805 · 50 records

Buffer Access with Incorrect Length Value

CVEs in this class

50 records

  • CVE-2020-14509
    40Plan

    Multiple memory corruption vulnerabilities exist in CodeMeter (All versions prior to 7.10) where the packet parser mechanism does not verify

    CriticalCVSS 9.8No exploitEPSS 2%

    wibu · codemeterSep 16, 2020

  • CVE-2025-23319
    39Monitor

    NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker could cause an out-of

    CriticalCVSS 9.8No exploitEPSS 1%

    nvidia · triton inference serverAug 6, 2025

  • CVE-2025-23318
    39Monitor

    NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker could cause an out-of

    CriticalCVSS 9.8No exploitEPSS 0%

    nvidia · triton inference serverAug 6, 2025

  • CVE-2026-34002
    36Monitor

    Xorg: xwayland: x.org x server: information disclosure or denial of service via out-of-bounds read in xkb modifier map handling

    CriticalCVSS 9.1No exploitEPSS 0%

    x.org · x serverMay 5, 2026

  • CVE-2021-3581
    35Monitor

    Buffer Access with Incorrect Length Value in zephyr

    HighCVSS 8.8No exploitEPSS 0%

    zephyrproject · zephyrOct 5, 2021

  • CVE-2025-20315
    34Monitor

    A vulnerability in the Network-Based Application Recognition (NBAR) feature of Cisco IOS XE Software could allow an unauthenticated, remote

    HighCVSS 8.6No exploitEPSS 0%

    cisco · ios xeSep 24, 2025

  • CVE-2025-30651
    34Monitor

    Junos OS and Junos OS Evolved: Receipt of a specific ICMPv6 packet causes a memory overrun leading to an rpd crash

    HighCVSS 8.7No exploitEPSS 0%

    juniper · junosApr 9, 2025

  • CVE-2026-1837
    34Monitor

    libjxl: Out-of-bounds write in grayscale color transformation when using LCMS2

    HighCVSS 8.7No exploitEPSS 0%

    libjxl project · libjxlFeb 11, 2026

  • CVE-2025-58774
    33Monitor

    UEFI OOB Write and Buffer Overflow Vulnerabilities

    HighCVSS 8.3No exploitEPSS 0%

    ami · aptiovOct 13, 2026

  • CVE-2026-1767
    32Monitor

    Localsearch: tracker-miners: gnome localsearch mp3 extractor: heap buffer overflow leading to denial of service or information disclosure via malformed mp3 id3

    HighCVSS 8.1No exploitEPSS 0%

    gnome · localsearchJun 15, 2026

  • CVE-2025-38743
    31Monitor

    Dell iDRAC Service Module (iSM), versions prior to 6.0.3.0, contains a Buffer Access with Incorrect Length Value vulnerability.

    HighCVSS 7.8No exploitEPSS 0%

    dell · emc idrac service moduleAug 21, 2025

  • CVE-2024-24851
    30Monitor

    A heap-based buffer overflow vulnerability exists in the Programming Software Connection FiBurn functionality of AutomationDirect P3-550E 1.

    HighCVSS 7.5No exploitEPSS 1%

    automationdirect · p3-550e firmwareMay 28, 2024

  • CVE-2021-31885
    30Monitor

    A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (

    HighCVSS 7.5No exploitEPSS 1%

    siemens · capital vstarNov 9, 2021

  • CVE-2023-20049
    30Monitor

    Cisco IOS XR Software for ASR 9000 Series Routers Bidirectional Forwarding Detection Denial of Service Vulnerability

    HighCVSS 7.5No exploitEPSS 1%

    cisco · ios xrMar 9, 2023

  • CVE-2020-16101
    30Monitor

    It is possible for an unauthenticated remote DCOM websocket connection to crash the Command Centre service due to an out-of-bounds buffer ac

    HighCVSS 7.5No exploitEPSS 1%

    gallagher · command centreSep 15, 2020

  • CVE-2025-20169
    30Monitor

    A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause

    HighCVSS 7.7No exploitEPSS 0%

    cisco · iosFeb 5, 2025

  • CVE-2025-20170
    30Monitor

    A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause

    HighCVSS 7.7No exploitEPSS 0%

    cisco · iosFeb 5, 2025

  • CVE-2025-20174
    30Monitor

    A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause

    HighCVSS 7.7No exploitEPSS 0%

    cisco · iosFeb 5, 2025

  • CVE-2025-20175
    30Monitor

    A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause

    HighCVSS 7.7No exploitEPSS 0%

    cisco · iosFeb 5, 2025

  • CVE-2022-47375
    30Monitor

    A vulnerability has been identified in SIMATIC PC-Station Plus (All versions), SIMATIC S7-400 CPU 412-2 PN V7 (All versions), SIMATIC S7-400

    HighCVSS 7.5No exploitEPSS 0%

    siemens · 6es7412-2ek07-0ab0 firmwareDec 12, 2023

  • CVE-2025-63547
    30Monitor

    An issue in Eprosima Micro-XREC-DDS Agent v.3.0.1 allows a remote attacker to cause a denial of service via a crafted packet to the MTU leng

    HighCVSS 7.5No exploitEPSS 0%

    May 1, 2026

  • CVE-2023-5396
    29Monitor

    Server receiving a malformed message creates connection for a hostname that may cause a stack overflow resulting in possible remote code exe

    HighCVSS 7.4No exploitEPSS 0%

    honeywell · experion serverApr 17, 2024

  • CVE-2025-20191
    29Monitor

    Multiple Cisco Products Denial of Service Vulnerability

    HighCVSS 7.4No exploitEPSS 0%

    cisco · cisco nx-os softwareMay 7, 2025

  • CVE-2025-20202
    29Monitor

    A vulnerability in Cisco IOS XE Wireless Controller Software could allow an unauthenticated, adjacent attacker to cause a denial of service

    HighCVSS 7.4No exploitEPSS 0%

    cisco · ios xeMay 7, 2025

  • CVE-2026-20010
    29Monitor

    Cisco Nexus 3000 and 9000 Series Switches Link Layer Discovery Protocol Denial of Service Vulnerability

    HighCVSS 7.4No exploitEPSS 0%

    cisco · cisco nx-os softwareFeb 25, 2026

All vulnerability classes