CWE-823 Use of Out-of-range Pointer Offset
baseThe product performs pointer arithmetic on a valid pointer, but it uses an offset that can point outside of the intended range of valid memory locations for the resulting pointer.
01
parent weaknesses
Broader classes this is a kind of.
02
vulnerabilities (139)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-33106US | high7.8OT critical | KEV | ||
Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND. | ||||
| CVE-2009-3129US | high7.8OT critical | KEV | ||
Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer 2003 SP3; Office Excel Vi… | ||||
| CVE-2009-2694US | high10.0 | Exploit | ||
The msn_slplink_process_msg function in libpurple/protocols/msn/slplink.c in libpurple, as used in Pidgin (formerly Gaim) before 2.5.9 and Adium 1.3.5 and earlier, allows remote at… | ||||
| CVE-2016-9841US | critical9.8 | — | ||
inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic. | ||||
| CVE-2024-42383US | critical9.8 | — | ||
Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows to write a NULL byte value beyond the memory space dedicated for the hostname field. | ||||
| CVE-2023-43534US | critical9.8 | — | ||
Memory corruption while validating the TID to Link Mapping action request frame, when a station connects to an access point. | ||||
| CVE-2023-22388US | critical9.8 | — | ||
Memory Corruption in Multi-mode Call Processor while processing bit mask API. | ||||
| CVE-2023-24855US | critical9.8 | — | ||
Memory corruption in Modem while processing security related configuration before AS Security Exchange. | ||||
| CVE-2019-2287US | critical9.8 | — | ||
Improper validation for inputs received from firmware can lead to an out of bound write issue in video driver. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snap… | ||||
| CVE-2020-8904US | critical9.6 | — | ||
An arbitrary memory overwrite vulnerability in the trusted memory of Asylo exists in versions prior to 0.6.0. As the ecall_restore function fails to validate the range of the outpu… | ||||
| CVE-2020-6112US | high7.8 | — | ||
An exploitable code execution vulnerability exists in the JPEG2000 Stripe Decoding functionality of Nitro Software, Inc.’s Nitro Pro 13.13.2.242 when decoding sub-samples. While in… | ||||
| CVE-2016-2161US | high7.5 | — | ||
In Apache HTTP Server versions 2.4.0 to 2.4.23, malicious input to mod_auth_digest can cause the server to crash, and each instance continues to crash even for subsequently valid r… | ||||
| CVE-2016-9840US | high8.8 | — | ||
inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic. | ||||
| CVE-2022-0729US | high8.8 | — | ||
Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4440. | ||||
| CVE-2024-42416US | high8.8 | — | ||
The ctl_report_supported_opcodes function did not sufficiently validate a field provided by userspace, allowing an arbitrary write to a limited amount of kernel help memory.
Malic… | ||||
| CVE-2020-27009US | high8.1 | — | ||
A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.20), APOGEE PXC Modular (BACnet) (… | ||||
| CVE-2022-0685US | high7.8 | — | ||
Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4418. | ||||
| CVE-2022-0554US | high7.8 | — | ||
Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2. | ||||
| CVE-2021-34595US | high8.1 | — | ||
A crafted request with invalid offsets may cause an out-of-bounds read or write access in CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56, resulting… | ||||
| CVE-2021-3889US | high8.1 | — | ||
libmobi is vulnerable to Use of Out-of-range Pointer Offset | ||||
03
attack patterns (1)
CAPEC attack patterns that exploit this.
04
source
Where this definition is published.
MITREUS
scry
Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.
Free scan