CWE-823 · 96 records

Use of Out-of-range Pointer Offset

CVEs in this class

96 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
61This week	CVE-2023-33106Weaponized	Use of Out-of-range Pointer Offset in Graphicsqualcomm · ar8035 firmware · CWE-823	High7.8	KEV	0.7%	Dec 4, 2023
39Monitor	CVE-2023-24855No exploit	Use of Out-of-range Pointer Offset in Modemqualcomm · ar8035 firmware · CWE-823 Pre-auth	Critical9.8	—	0.5%	Oct 3, 2023
39Monitor	CVE-2023-43553No exploit	Use of Out-of-range Pointer Offset in WLAN HOSTqualcomm · ar8035 firmware · CWE-823 Pre-auth	Critical9.8	—	0.3%	Mar 4, 2024
39Monitor	CVE-2023-22388No exploit	Use of Out-of-range Pointer Offset in Multi-mode Call Processorqualcomm · 315 5g iot modem firmware · CWE-823 Pre-auth	Critical9.8	—	0.3%	Nov 7, 2023
39Monitor	CVE-2017-11076No exploit	Use of Out-of-range Pointer Offset in Videoqualcomm · msm8909w firmware · CWE-823 Pre-auth	Critical9.8	—	0.3%	Nov 26, 2024
39Monitor	CVE-2023-43534No exploit	Use of Out-of-range Pointer Offset in WLAN HOSTqualcomm · ar8035 firmware · CWE-823 Pre-auth	Critical9.8	—	0.2%	Feb 6, 2024
39Monitor	CVE-2024-42383No exploit	Use of Out-of-range Pointer Offset in Mongoose Web Server librarycesanta · mongoose · CWE-823 Pre-auth	Critical9.8	—	0.2%	Nov 18, 2024
38Monitor	CVE-2026-21732No exploit	GPU DDK - libusc OOB write at ConvertSwitchToArrayLookupBP during WebGPU shader compilationimaginationtech · ddk · CWE-823 Pre-auth	Critical9.6	—	0.2%	Mar 20, 2026
38Monitor	CVE-2020-8904No exploit	Arbitrary trusted memory overwrite vulnerability in Asylogoogle · asylo · CWE-823	Critical9.6	—	0.2%	Aug 12, 2020
36Monitor	CVE-2016-2161No exploit	In Apache HTTP Server versions 2.4.0 to 2.4.23, malicious input to mod_auth_digest can cause the server to crash, and each instance continueapache · http server · CWE-823 Pre-auth Denial of service	High7.5	—	20.9%	Jul 27, 2017
36Monitor	CVE-2020-6112No exploit	An exploitable code execution vulnerability exists in the JPEG2000 Stripe Decoding functionality of Nitro Software, Inc.’s Nitro Pro 13.13.2gonitro · nitro pro · CWE-823	High7.8	—	17.0%	Sep 17, 2020
35Monitor	CVE-2022-0729No exploit	Use of Out-of-range Pointer Offset in vim/vimvim · vim · CWE-823	High8.8	—	1.6%	Feb 23, 2022
35Monitor	CVE-2026-72642No exploit	Use of Out-of-range Pointer Offset in the Elasticsearch Machine Learning Native Inference Processelastic · elasticsearch · CWE-823 RCE	High8.8	—	0.6%	Aug 13, 2026
35Monitor	CVE-2025-27059No exploit	Use of Out-of-range Pointer Offset in TZ Firmwarequalcomm · immersive home 214 platform firmware · CWE-823	High8.8	—	0.0%	Oct 9, 2025
34Monitor	CVE-2020-27009No exploit	A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions <siemens · nucleus net · CWE-823 Pre-auth	High8.1	—	7.1%	Apr 22, 2021
34Monitor	CVE-2017-20211No exploit	UCanCode E-XD++ Visualization Enterprise Suite Untrusted Pointer Dereference RCEucancode.net software · e-xd++ visualization enterprise suite · CWE-823 pre-auth RCE	High8.6	—	0.7%	Nov 12, 2025
32Monitor	CVE-2022-0685No exploit	Use of Out-of-range Pointer Offset in vim/vimvim · vim · CWE-823	High7.8	—	1.7%	Feb 20, 2022
32Monitor	CVE-2022-0554No exploit	Use of Out-of-range Pointer Offset in vim/vimvim · vim · CWE-823	High7.8	—	1.6%	Feb 10, 2022
32Monitor	CVE-2021-3888No exploit	Use of Out-of-range Pointer Offset in bfabiszewski/libmobilibmobi project · libmobi · CWE-823 Pre-auth	High8.1	—	1.2%	Oct 19, 2021
32Monitor	CVE-2021-3889No exploit	Use of Out-of-range Pointer Offset in bfabiszewski/libmobilibmobi project · libmobi · CWE-823 Pre-auth	High8.1	—	1.2%	Oct 19, 2021
32Monitor	CVE-2022-32142No exploit	CODESYS runtime system prone to denial of service due to use of out of range pointercodesys · plcwinnt · CWE-823	High8.1	—	1.0%	Jun 24, 2022
32Monitor	CVE-2021-34595No exploit	CODESYS V2 runtime: out-of-bounds read or write access may result in denial-of-servicecodesys · codesys · CWE-823	High8.1	—	0.8%	Oct 26, 2021
32Monitor	CVE-2025-0467No exploit	GPU DDK - rgxfw_hwperf_get_packet_buffer OOB writeimaginationtech · ddk · CWE-823	High8.2	—	0.1%	Apr 17, 2025
31Monitor	CVE-2020-13573No exploit	A denial-of-service vulnerability exists in the Ethernet/IP server functionality of Rockwell Automation RSLinx Classic 2.57.00.14 CPR 9 SR 3rockwellautomation · rslinx · CWE-823 Pre-auth Denial of service	High7.5	—	4.1%	Jan 7, 2021
31Monitor	CVE-2024-1013No exploit	Unixodbc: out of bounds stack write due to pointer-to-integer types conversionunixodbc · unixodbc · CWE-823	High7.8	—	0.2%	Mar 18, 2024

CVE-2023-33106
61This week
Use of Out-of-range Pointer Offset in Graphics
HighCVSS 7.8KEVWeaponizedEPSS 0%
qualcomm · ar8035 firmwareDec 4, 2023
CVE-2023-24855
39Monitor
Use of Out-of-range Pointer Offset in Modem
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
qualcomm · ar8035 firmwareOct 3, 2023
CVE-2023-43553
39Monitor
Use of Out-of-range Pointer Offset in WLAN HOST
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
qualcomm · ar8035 firmwareMar 4, 2024
CVE-2023-22388
39Monitor
Use of Out-of-range Pointer Offset in Multi-mode Call Processor
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
qualcomm · 315 5g iot modem firmwareNov 7, 2023
CVE-2017-11076
39Monitor
Use of Out-of-range Pointer Offset in Video
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
qualcomm · msm8909w firmwareNov 26, 2024
CVE-2023-43534
39Monitor
Use of Out-of-range Pointer Offset in WLAN HOST
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
qualcomm · ar8035 firmwareFeb 6, 2024
CVE-2024-42383
39Monitor
Use of Out-of-range Pointer Offset in Mongoose Web Server library
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
cesanta · mongooseNov 18, 2024
CVE-2026-21732
38Monitor
GPU DDK - libusc OOB write at ConvertSwitchToArrayLookupBP during WebGPU shader compilation
CriticalCVSS 9.6No exploitEPSS 0%
- Pre-auth
imaginationtech · ddkMar 20, 2026
CVE-2020-8904
38Monitor
Arbitrary trusted memory overwrite vulnerability in Asylo
CriticalCVSS 9.6No exploitEPSS 0%
google · asyloAug 12, 2020
CVE-2016-2161
36Monitor
In Apache HTTP Server versions 2.4.0 to 2.4.23, malicious input to mod_auth_digest can cause the server to crash, and each instance continue
HighCVSS 7.5No exploitEPSS 20%
- Pre-auth
- Denial of service
apache · http serverJul 27, 2017
CVE-2020-6112
36Monitor
An exploitable code execution vulnerability exists in the JPEG2000 Stripe Decoding functionality of Nitro Software, Inc.’s Nitro Pro 13.13.2
HighCVSS 7.8No exploitEPSS 17%
gonitro · nitro proSep 17, 2020
CVE-2022-0729
35Monitor
Use of Out-of-range Pointer Offset in vim/vim
HighCVSS 8.8No exploitEPSS 1%
vim · vimFeb 23, 2022
CVE-2026-72642
35Monitor
Use of Out-of-range Pointer Offset in the Elasticsearch Machine Learning Native Inference Process
HighCVSS 8.8No exploitEPSS 0%
- RCE
elastic · elasticsearchAug 13, 2026
CVE-2025-27059
35Monitor
Use of Out-of-range Pointer Offset in TZ Firmware
HighCVSS 8.8No exploitEPSS 0%
qualcomm · immersive home 214 platform firmwareOct 9, 2025
CVE-2020-27009
34Monitor
A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions <
HighCVSS 8.1No exploitEPSS 7%
- Pre-auth
siemens · nucleus netApr 22, 2021
CVE-2017-20211
34Monitor
UCanCode E-XD++ Visualization Enterprise Suite Untrusted Pointer Dereference RCE
HighCVSS 8.6No exploitEPSS 0%
- pre-auth RCE
ucancode.net software · e-xd++ visualization enterprise suiteNov 12, 2025
CVE-2022-0685
32Monitor
Use of Out-of-range Pointer Offset in vim/vim
HighCVSS 7.8No exploitEPSS 1%
vim · vimFeb 20, 2022
CVE-2022-0554
32Monitor
Use of Out-of-range Pointer Offset in vim/vim
HighCVSS 7.8No exploitEPSS 1%
vim · vimFeb 10, 2022
CVE-2021-3888
32Monitor
Use of Out-of-range Pointer Offset in bfabiszewski/libmobi
HighCVSS 8.1No exploitEPSS 1%
- Pre-auth
libmobi project · libmobiOct 19, 2021
CVE-2021-3889
32Monitor
Use of Out-of-range Pointer Offset in bfabiszewski/libmobi
HighCVSS 8.1No exploitEPSS 1%
- Pre-auth
libmobi project · libmobiOct 19, 2021
CVE-2022-32142
32Monitor
CODESYS runtime system prone to denial of service due to use of out of range pointer
HighCVSS 8.1No exploitEPSS 1%
codesys · plcwinntJun 24, 2022
CVE-2021-34595
32Monitor
CODESYS V2 runtime: out-of-bounds read or write access may result in denial-of-service
HighCVSS 8.1No exploitEPSS 0%
codesys · codesysOct 26, 2021
CVE-2025-0467
32Monitor
GPU DDK - rgxfw_hwperf_get_packet_buffer OOB write
HighCVSS 8.2No exploitEPSS 0%
imaginationtech · ddkApr 17, 2025
CVE-2020-13573
31Monitor
A denial-of-service vulnerability exists in the Ethernet/IP server functionality of Rockwell Automation RSLinx Classic 2.57.00.14 CPR 9 SR 3
HighCVSS 7.5No exploitEPSS 4%
- Pre-auth
- Denial of service
rockwellautomation · rslinxJan 7, 2021
CVE-2024-1013
31Monitor
Unixodbc: out of bounds stack write due to pointer-to-integer types conversion
HighCVSS 7.8No exploitEPSS 0%
unixodbc · unixodbcMar 18, 2024

All vulnerability classes