Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

CVEs (14,534)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2014-0302 1Microsoft 1Internet Explorer May 6, 2026 Mar 12, 2014 N/A· v4 N/A· v3 9.3 HIGH· v2 Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability,"...Show more Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0303.Show less
CVE-2014-0299 1Microsoft 1Internet Explorer May 6, 2026 Mar 12, 2014 N/A· v4 N/A· v3 9.3 HIGH· v2 Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability,"...Show more Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0305 and CVE-2014-0311.Show less
CVE-2014-0298 1Microsoft 1Internet Explorer May 6, 2026 Mar 12, 2014 N/A· v4 N/A· v3 9.3 HIGH· v2 Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."
CVE-2014-0297 1Microsoft 1Internet Explorer May 6, 2026 Mar 12, 2014 N/A· v4 N/A· v3 9.3 HIGH· v2 Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability,"...Show more Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0308, CVE-2014-0312, and CVE-2014-0324.Show less
CVE-2014-0004 2Canonical Freedesktop 2Ubuntu Linux Udisks May 6, 2026 Mar 11, 2014 N/A· v4 N/A· v3 6.9 MEDIUM· v2 Stack-based buffer overflow in udisks before 1.0.5 and 2.x before 2.1.3 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a long mount point.
CVE-2013-3928 1Jpchacha 1Chasys Draw Ies May 6, 2026 Mar 11, 2014 N/A· v4 N/A· v3 9.3 HIGH· v2 Stack-based buffer overflow in the ReadFile function in flt_BMP.dll in Chasys Draw IES before 4.11.02 allows remote attackers to execute arbitrary code via crafted biPlanes and biBitCount fields in a BMP file.
CVE-2014-2309 3Linux OpensuseSuse 3Linux Enterprise Server Linux KernelOpensuse May 6, 2026 Mar 11, 2014 N/A· v4 N/A· v3 6.1 MEDIUM· v2 The ip6_route_add function in net/ipv6/route.c in the Linux kernel through 3.13.6 does not properly count the addition of routes, which allows remote attackers to cause a denial of service (memory consumption) via a floo...Show more The ip6_route_add function in net/ipv6/route.c in the Linux kernel through 3.13.6 does not properly count the addition of routes, which allows remote attackers to cause a denial of service (memory consumption) via a flood of ICMPv6 Router Advertisement packets.Show less
CVE-2014-2299 1Wireshark 1Wireshark May 6, 2026 Mar 11, 2014 N/A· v4 N/A· v3 9.3 HIGH· v2 Buffer overflow in the mpeg_read function in wiretap/mpeg.c in the MPEG parser in Wireshark 1.8.x before 1.8.13 and 1.10.x before 1.10.6 allows remote attackers to execute arbitrary code or cause a denial of service (app...Show more Buffer overflow in the mpeg_read function in wiretap/mpeg.c in the MPEG parser in Wireshark 1.8.x before 1.8.13 and 1.10.x before 1.10.6 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a large record in MPEG data.Show less
CVE-2014-2282 1Wireshark 1Wireshark May 6, 2026 Mar 11, 2014 N/A· v4 N/A· v3 4.3 MEDIUM· v2 The dissect_protocol_data_parameter function in epan/dissectors/packet-m3ua.c in the M3UA dissector in Wireshark 1.10.x before 1.10.6 does not properly allocate memory, which allows remote attackers to cause a denial of...Show more The dissect_protocol_data_parameter function in epan/dissectors/packet-m3ua.c in the M3UA dissector in Wireshark 1.10.x before 1.10.6 does not properly allocate memory, which allows remote attackers to cause a denial of service (application crash) via a crafted SS7 MTP3 packet.Show less
CVE-2014-2206 1Getgosoft 1Getgo Download Manager May 6, 2026 Mar 5, 2014 N/A· v4 N/A· v3 10.0 HIGH· v2 Stack-based buffer overflow in GetGo Download Manager 4.9.0.1982, 4.8.2.1346, 4.4.5.502, and earlier allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a long HTTP Response Header...Show more Stack-based buffer overflow in GetGo Download Manager 4.9.0.1982, 4.8.2.1346, 4.4.5.502, and earlier allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a long HTTP Response Header.Show less
CVE-2013-6665 1Google 1Chrome Apr 29, 2026 Mar 5, 2014 N/A· v4 N/A· v3 7.5 HIGH· v2 Heap-based buffer overflow in the ResourceProvider::InitializeSoftware function in cc/resources/resource_provider.cc in Google Chrome before 33.0.1750.146 allows remote attackers to cause a denial of service or possibly...Show more Heap-based buffer overflow in the ResourceProvider::InitializeSoftware function in cc/resources/resource_provider.cc in Google Chrome before 33.0.1750.146 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large texture size that triggers improper memory allocation in the software renderer.Show less
CVE-2014-2013 1Artifex 1Mupdf Apr 29, 2026 Mar 3, 2014 N/A· v4 N/A· v3 7.5 HIGH· v2 Stack-based buffer overflow in the xps_parse_color function in xps/xps-common.c in MuPDF 1.3 and earlier allows remote attackers to execute arbitrary code via a large number of entries in the ContextColor value of the Fi...Show more Stack-based buffer overflow in the xps_parse_color function in xps/xps-common.c in MuPDF 1.3 and earlier allows remote attackers to execute arbitrary code via a large number of entries in the ContextColor value of the Fill attribute in a Path element.Show less
CVE-2013-4981 1Avtech 2Avn801 Dvr Avn801 Dvr Firmware Apr 29, 2026 Mar 3, 2014 N/A· v4 N/A· v3 9.0 HIGH· v2 Buffer overflow in cgi-bin/user/Config.cgi in AVTECH AVN801 DVR with firmware 1017-1003-1009-1003 and earlier, and possibly other devices, allows remote attackers to cause a denial of service (device crash) and possibly...Show more Buffer overflow in cgi-bin/user/Config.cgi in AVTECH AVN801 DVR with firmware 1017-1003-1009-1003 and earlier, and possibly other devices, allows remote attackers to cause a denial of service (device crash) and possibly execute arbitrary code via a long string in the Network.SMTP.Receivers parameter.Show less
CVE-2013-4980 1Avtech 2Avn801 Dvr Avn801 Dvr Firmware Apr 29, 2026 Mar 3, 2014 N/A· v4 N/A· v3 9.0 HIGH· v2 Buffer overflow in the RTSP Packet Handler in AVTECH AVN801 DVR with firmware 1017-1003-1009-1003 and earlier, and possibly other devices, allows remote attackers to cause a denial of service (device crash) and possibly...Show more Buffer overflow in the RTSP Packet Handler in AVTECH AVN801 DVR with firmware 1017-1003-1009-1003 and earlier, and possibly other devices, allows remote attackers to cause a denial of service (device crash) and possibly execute arbitrary code via a long string in the URI in an RTSP SETUP request.Show less
CVE-2013-4977 1Hikvision 2Ds 2cd7153 E Ds 2cd7153 E Firmware Apr 29, 2026 Mar 3, 2014 N/A· v4 N/A· v3 10.0 HIGH· v2 Buffer overflow in the RTSP Packet Handler in Hikvision DS-2CD7153-E IP camera with firmware 4.1.0 b130111 (Jan 2013), and possibly other devices, allows remote attackers to cause a denial of service (device crash and re...Show more Buffer overflow in the RTSP Packet Handler in Hikvision DS-2CD7153-E IP camera with firmware 4.1.0 b130111 (Jan 2013), and possibly other devices, allows remote attackers to cause a denial of service (device crash and reboot) and possibly execute arbitrary code via a long string in the Range header field in an RTSP transaction.Show less
CVE-2013-3260 1Inmatrix 1Zoom Player Apr 29, 2026 Mar 3, 2014 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Heap-based buffer overflow in INMATRIX Zoom Player before 8.7 beta 11 allows remote attackers to execute arbitrary code via a large biClrUsed value in a BMP file.
CVE-2013-3259 1Inmatrix 1Zoom Player Apr 29, 2026 Mar 3, 2014 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Stack-based buffer overflow in INMATRIX Zoom Player before 8.7 beta 11 allows remote attackers to execute arbitrary code via a large biClrUsed value in a BMP file.
CVE-2014-2098 1Ffmpeg 1Ffmpeg Apr 29, 2026 Mar 2, 2014 N/A· v4 N/A· v3 6.8 MEDIUM· v2 libavcodec/wmalosslessdec.c in FFmpeg before 2.1.4 uses an incorrect data-structure size for certain coefficients, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecifi...Show more libavcodec/wmalosslessdec.c in FFmpeg before 2.1.4 uses an incorrect data-structure size for certain coefficients, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted WMA data.Show less
CVE-2014-2263 1Ffmpeg 1Ffmpeg Apr 29, 2026 Mar 1, 2014 N/A· v4 N/A· v3 6.8 MEDIUM· v2 The mpegts_write_pmt function in the MPEG2 transport stream (aka DVB) muxer (libavformat/mpegtsenc.c) in FFmpeg, possibly 2.1 and earlier, allows remote attackers to have unspecified impact and vectors, which trigger an...Show more The mpegts_write_pmt function in the MPEG2 transport stream (aka DVB) muxer (libavformat/mpegtsenc.c) in FFmpeg, possibly 2.1 and earlier, allows remote attackers to have unspecified impact and vectors, which trigger an out-of-bounds write.Show less
CVE-2014-2262 1Sas 1Base Sas Apr 29, 2026 Mar 1, 2014 N/A· v4 N/A· v3 9.3 HIGH· v2 Buffer overflow in the client application in Base SAS 9.2 TS2M3, SAS 9.3 TS1M1 and TS1M2, and SAS 9.4 TS1M0 allows user-assisted remote attackers to execute arbitrary code via a crafted SAS program.

Previous 1...501502503...727 Next