CWE-823— Use of Out-of-range Pointer Offset
The product performs pointer arithmetic on a valid pointer, but it uses an offset that can point outside of the intended range of valid memory locations for the resulting pointer.— MITRE CWE catalog
113 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →
CVEs classified under CWE-823page 3 of 3
- CVE-2022-1420MEDIUMCVSS 5.5EG 5.52022-04-21
Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4774.
- CVE-2022-0614MEDIUMCVSS 5.5EG 5.52022-02-16
Use of Out-of-range Pointer Offset in Homebrew mruby prior to 3.2.
- CVE-2024-42391MEDIUMCVSS 5.3EG 5.32024-11-18
Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and force the application to read unintended heap memory space.
- CVE-2024-42389MEDIUMCVSS 5.3EG 5.32024-11-18
Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and force the application to read unintended heap memory space.
- CVE-2024-42388MEDIUMCVSS 5.3EG 5.32024-11-18
Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and force the application to read unintended heap memory space.
- CVE-2024-42387MEDIUMCVSS 5.3EG 5.32024-11-18
Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and force the application to read unintended heap memory space.
- CVE-2024-52936MEDIUMCVSS 4.4EG 4.42025-01-13
Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to write data outside the Guest's virtualised GPU memory.
- CVE-2026-34193MEDIUMCVSS 4.3EG 4.32026-06-01
Kernel software installed and running inside a Guest/Host VM may post improper commands to the GPU Firmware to trigger a write of data outside the intended GPU memory. A logic error in the address translation allowed a compromised Host …
- CVE-2024-42390MEDIUMCVSS 4.3EG 4.32024-11-18
Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and force the application to read unintended heap memory space.
- CVE-2024-42383MEDIUMCVSS 4.2EG 4.22024-11-18
Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows to write a NULL byte value beyond the memory space dedicated for the hostname field.
- CVE-2024-52935MEDIUMCVSS 4.1EG 4.12025-01-13
Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's virtualised GPU memory.
- CVE-2024-47896LOWCVSS 3.3EG 3.32025-02-22
Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's virtualised GPU memory.
- CVE-2026-107570LOWCVSS 2.5EG 2.52026-10-08
heap OOB write in convert_file_from_to() via a crafted Content-Type header allows attacker to OOB write when email is used as a template.
Map vulnerabilities like CWE-823 to your infrastructure
EchelonGraph correlates every CVE — across CWE-823 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.
Book a Demo →