Memory Buffer Bounds Error — CVEs by weakness type

Ipados MEDIUM 6.5

CVE-2023-42849

The issue was addressed with improved memory handling. This issue is fixed in iOS 17.1 and iPadOS 17.1, macOS Monterey 12.7.1, watchOS 10.1, iOS 16.7…

Fix: 10.1 / 12.7.1+

Fix from $1,600 2023-10-25

macOS HIGH 7.8

CVE-2023-42856

The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.1, macOS Monterey 12.7.1, macOS Ventura 13.6.1. Process…

Fix: 12.7.1 / 13.6.1+

Fix from $1,950 2023-10-25

Ipados MEDIUM 6.5

CVE-2023-40416

The issue was addressed with improved memory handling. This issue is fixed in iOS 17.1 and iPadOS 17.1, macOS Monterey 12.7.1, iOS 16.7.2 and iPadOS …

Fix: 12.7.1 / 13.6.1+

Fix from $1,600 2023-10-25

Ipados HIGH 7.8

CVE-2023-40423

The issue was addressed with improved memory handling. This issue is fixed in iOS 17.1 and iPadOS 17.1, macOS Monterey 12.7.1, iOS 16.7.2 and iPadOS …

Fix: 12.7.1 / 13.6.1+

Fix from $1,950 2023-10-25

Safari HIGH 8.8

CVE-2023-40447

The issue was addressed with improved memory handling. This issue is fixed in iOS 17.1 and iPadOS 17.1, watchOS 10.1, iOS 16.7.2 and iPadOS 16.7.2, m…

Fix: 10.1 / 14.1+

Fix from $1,950 2023-10-25

Ipados MEDIUM 5.5

CVE-2023-40449

The issue was addressed with improved memory handling. This issue is fixed in iOS 17.1 and iPadOS 17.1, macOS Monterey 12.7.1, iOS 16.7.2 and iPadOS …

Fix: 12.7.1 / 13.6.1+

Fix from $1,600 2023-10-25

Onsinview2 HIGH 7.8

CVE-2023-42506

Improper restriction of operations within the bounds of a memory buffer issue exists in OnSinView2 versions 2.0.1 and earlier. If this vulnerability …

Fix: after 2.0.1

Fix from $1,950 2023-10-17

Junos MEDIUM 6.5

CVE-2023-44184

An Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in the management daemon (mgd) process of Juniper Networks J…

Fix: 20.4 / 21.4+

Fix from $1,600 2023-10-13

Netscaler Application Delivery Controller HIGH 7.5

CVE-2023-4966 KEVEPSS 100%

Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy)…

Fix: 12.1-55.300 / 13.0-92.19+

Fix from $1,950 2023-10-10

Fedora MEDIUM 5.5

CVE-2023-3576

A memory leak flaw was found in Libtiff's tiffcrop utility. This issue occurs when tiffcrop operates on a TIFF image file, allowing an attacker to pa…

Fix: 4.5.1+

Fix from $1,600 2023-10-04

Easy Chat Server CRITICAL 9.8

CVE-2023-4494

Stack-based buffer overflow vulnerability in Easy Chat Server 3.1 version. An attacker could send an excessively long username string to the register…

Mitigation only

Fix from $2,300 2023-10-04

Easy Address Book Web Server CRITICAL 9.8

CVE-2023-4491

Buffer overflow vulnerability in Easy Address Book Web Server 1.6 version. The exploitation of this vulnerability could allow an attacker to send a v…

Mitigation only

Fix from $2,300 2023-10-04

Gecko Software Development Kit MEDIUM 6.5

CVE-2023-3024

Forcing the Bluetooth LE stack to segment 'prepare write response' packets can lead to an out-of-bounds memory access.

Fix: 6.0.0+

Fix from $1,600 2023-09-29

Mobility Express Software MEDIUM 5.3

CVE-2023-20251

A vulnerability in the memory buffer of Cisco Wireless LAN Controller (WLC) AireOS Software could allow an unauthenticated, adjacent attacker to caus…

Mitigation only

Fix from $1,600 2023-09-27

Ac10u Firmware CRITICAL 9.8

CVE-2023-44016

Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the deviceId parameter in the addWifiMacFilt…

Mitigation only