CWE-1260 Improper Handling of Overlap Between Protected Memory Ranges
baseThe product allows address regions to overlap, which can result in the bypassing of intended memory protection.
01
parent weaknesses
Broader classes this is a kind of.
02
vulnerabilities (18)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-27813US | high8.2 | — | ||
Motorola MTM5000 series firmwares lack properly configured memory protection of pages shared between the OMAP-L138 ARM and DSP cores. The SoC provides two memory protection units,… | ||||
| CVE-2019-1164US | high7.2 | — | ||
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could r… | ||||
| CVE-2025-31936US | medium5.7 | — | ||
Improper handling of overlap between protected memory ranges for some Intel(R) Xeon(R) 6 processors when using Intel(R) TDX within SMM may allow an escalation of privilege. SMM adv… | ||||
| CVE-2019-25585US | medium5.5 | — | ||
Deluge 1.3.15 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Webseeds field. Attacke… | ||||
| CVE-2019-25572US | medium5.5 | — | ||
NordVPN 6.19.6 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string in the email input field. At… | ||||
| CVE-2019-25570US | medium5.5 | — | ||
RealTerm Serial Terminal 2.0.0.70 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Por… | ||||
| CVE-2026-76668US | — | — | ||
A security vulnerability in HPE NonStop Kernel may allow user space access to privileged or unmapped data. | ||||
| CVE-2026-20760US | — | — | ||
Improper handling of overlap between protected memory ranges in some microcode for some Intel(R) Processors within Ring 0: Hypervisor may allow an escalation of privilege. Authoriz… | ||||
| CVE-2018-25240US | — | — | ||
Watchr 1.1.0.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string to the search functionality.… | ||||
| CVE-2018-25238US | — | — | ||
VSCO 1.1.1.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string through the search functionali… | ||||
| CVE-2019-25602US | — | — | ||
GSearch 1.0.1.0 contains a denial of service vulnerability that allows local attackers to crash the application by inputting an excessively long string in the search bar. Attackers… | ||||
| CVE-2019-25592US | — | — | ||
PHPRunner 10.1 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the dashboard name field.… | ||||
| CVE-2019-25559US | — | — | ||
SpotPaltalk 1.1.5 contains a denial of service vulnerability in the registration code input field that allows local attackers to crash the application by submitting an excessively… | ||||
| CVE-2025-29948US | — | — | ||
Improper access control in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to bypass RMP protections, potentially resulting in a loss of SEV-S… | ||||
| CVE-2025-0012US | — | — | ||
Improper handling of overlap between the segmented reverse map table (RMP) and system management mode (SMM) memory could allow a privileged attacker corrupt or partially infer SMM… | ||||
| CVE-2025-22889US | — | — | ||
Improper handling of overlap between protected memory ranges for some Intel(R) Xeon(R) 6 processor with Intel(R) TDX may allow a privileged user to potentially enable escalation of… | ||||
| CVE-2025-1937US | — | — | ||
Memory safety bugs present in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, and Thunderbird 128.7. Some of these bugs showed evidence of memory corruption an… | ||||
| CVE-2024-4778US | — | — | ||
Memory safety bugs present in Firefox 125. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to… | ||||
03
attack patterns (2)
CAPEC attack patterns that exploit this.
04
source
Where this definition is published.
MITREUS
scry
Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.
Free scan