Skip to content
OpenAdvisories

Weakness (CWE)

CWE-466: Return of Pointer Value Outside of Expected Range

Base Draft

A function can return a pointer to memory that is outside of the buffer that the pointer is expected to reference.

Source: MITRE CWE-466

All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 5.5
    CVE-2026-57025

    Junos OS and Junos OS Evolved: EX Series, QFX Series, MX Series: A specific 'show l2-learning/ethernet-switching' command causes l2ald crash

    A Return of Pointer Value Outside of Expected Range vulnerability in the fileio library of Juniper Networks Junos OS and Junos OS Evolved allows a local, low-privilged attacker to cause a Denial-of-Service (DoS). On EX Series, QFX Series and MX Series a low-p…

    Juniper Networks Junos OS Junos OS Evolved Network devices
  • Medium 6.2
    CVE-2018-25234

    SmartFTP Client 9.0.2615.0 Denial of Service via Host Field

    SmartFTP Client 9.0.2615.0 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Host field. Attackers can paste a buffer of 300 repeated characters into the Host connect…

    Smartftp SmartFTP Client
  • Medium 6.2
    CVE-2018-25227

    Valentina Studio 9.0.4 Denial of Service via Host Parameter

    Valentina Studio 9.0.4 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Host field. Attackers can trigger the crash by pasting a 256-byte buffer of repeated characte…

    Valentina-Db Valentina Studio
  • Medium 6.2
    CVE-2019-25599

    Backup Key Recovery 2.2.4 Denial of Service via Name Field

    Backup Key Recovery 2.2.4 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Name field. Attackers can paste a buffer of 300 or more characters into the Name field dur…

    NSauditor Backup Key Recovery
  • Medium 6.2
    CVE-2019-25586

    Deluge 1.3.15 Denial of Service via URL Field

    Deluge 1.3.15 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the URL field. Attackers can paste a buffer of 5000 characters into the 'From URL' field during torrent ad…

    Dev Deluge deluge deluge Ubuntu PyPI
  • Medium 6.2
    CVE-2019-25548

    BlueStacks 4.80.0.1060 Denial of Service via Search Field

    BlueStacks 4.80.0.1060 contains a denial of service vulnerability that allows local attackers to crash the application by submitting oversized input to the search field. Attackers can paste a buffer of 100,000 'A' characters into the search field and trigger …

    bluestacks BlueStacks