Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

CVEs (14,079)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2013-2174 4Canonical HaxxOpensuse+1 more 5Curl Enterprise LinuxLibcurl+2 more Apr 29, 2026 Jul 31, 2013 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Heap-based buffer overflow in the curl_easy_unescape function in lib/escape.c in cURL and libcurl 7.7 through 7.30.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary...Show more Heap-based buffer overflow in the curl_easy_unescape function in lib/escape.c in cURL and libcurl 7.7 through 7.30.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted string ending in a "%" (percent) character.Show less
CVE-2013-1377 1Adobe 1Digital Editions Apr 29, 2026 Jul 31, 2013 N/A· v4 N/A· v3 10.0 HIGH· v2 Adobe Digital Editions 2.x before 2.0.1 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2013-4934 1Wireshark 1Wireshark Apr 29, 2026 Jul 30, 2013 N/A· v4 N/A· v3 4.3 MEDIUM· v2 The netmon_open function in wiretap/netmon.c in the Netmon file parser in Wireshark 1.8.x before 1.8.9 and 1.10.x before 1.10.1 does not initialize certain structure members, which allows remote attackers to cause a deni...Show more The netmon_open function in wiretap/netmon.c in the Netmon file parser in Wireshark 1.8.x before 1.8.9 and 1.10.x before 1.10.1 does not initialize certain structure members, which allows remote attackers to cause a denial of service (application crash) via a crafted packet-trace file.Show less
CVE-2013-4933 1Wireshark 1Wireshark Apr 29, 2026 Jul 30, 2013 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The netmon_open function in wiretap/netmon.c in the Netmon file parser in Wireshark 1.8.x before 1.8.9 and 1.10.x before 1.10.1 does not properly allocate memory, which allows remote attackers to cause a denial of servic...Show more The netmon_open function in wiretap/netmon.c in the Netmon file parser in Wireshark 1.8.x before 1.8.9 and 1.10.x before 1.10.1 does not properly allocate memory, which allows remote attackers to cause a denial of service (application crash) via a crafted packet-trace file.Show less
CVE-2013-4920 1Wireshark 1Wireshark Apr 29, 2026 Jul 30, 2013 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The P1 dissector in Wireshark 1.10.x before 1.10.1 does not properly initialize a global variable, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
CVE-2013-0723 1Kingsoft 1Spreadsheets 2012 Apr 29, 2026 Jul 29, 2013 N/A· v4 N/A· v3 9.3 HIGH· v2 Multiple heap-based buffer overflows in etxrw.dll in Kingsoft Spreadsheets 2012 8.1.0.3030 allow remote attackers to cause a denial of service (memory corruption and crash) or possibly execute arbitrary code via a crafte...Show more Multiple heap-based buffer overflows in etxrw.dll in Kingsoft Spreadsheets 2012 8.1.0.3030 allow remote attackers to cause a denial of service (memory corruption and crash) or possibly execute arbitrary code via a crafted spreadsheet file.Show less
CVE-2013-3300 1Liftweb 1Lift Apr 29, 2026 Jul 29, 2013 N/A· v4 N/A· v3 4.0 MEDIUM· v2 The JsonParser class in json/JsonParser.scala in Lift before 2.5 interprets a certain end-index value as a length value, which allows remote authenticated users to obtain sensitive information from other users' sessions...Show more The JsonParser class in json/JsonParser.scala in Lift before 2.5 interprets a certain end-index value as a length value, which allows remote authenticated users to obtain sensitive information from other users' sessions via invalid input data containing a < (less than) character.Show less
CVE-2013-3441 1Cisco 4Aironet 3600 Aironet 3600eAironet 3600i+1 more Apr 29, 2026 Jul 23, 2013 N/A· v4 N/A· v3 5.4 MEDIUM· v2 Cisco Aironet 3600 access points allow remote attackers to cause a denial of service (memory corruption and device crash) by disrupting Cisco Wireless LAN Controller communication and consequently forcing many transition...Show more Cisco Aironet 3600 access points allow remote attackers to cause a denial of service (memory corruption and device crash) by disrupting Cisco Wireless LAN Controller communication and consequently forcing many transitions from FlexConnect mode to Standalone mode, aka Bug ID CSCuh71210.Show less
CVE-2012-6349 2Autonomy Ibm 2Keyview Idol Lotus Notes Apr 29, 2026 Jul 18, 2013 N/A· v4 N/A· v3 9.3 HIGH· v2 Buffer overflow in the .mdb parser in Autonomy KeyView IDOL, as used in IBM Notes 8.5.x before 8.5.3 FP4, allows remote attackers to execute arbitrary code via a crafted file, aka SPR KLYH92XL3W.
CVE-2013-1606 1Ui 4Aircam Aircam DomeAircam Mini+1 more Apr 29, 2026 Jul 18, 2013 N/A· v4 N/A· v3 7.5 HIGH· v2 Buffer overflow in the ubnt-streamer RTSP service on the Ubiquiti UBNT AirCam with airVision firmware before 1.1.6 allows remote attackers to execute arbitrary code via a long rtsp: URI in a DESCRIBE request.
CVE-2013-3410 1Cisco 2Intrusion Prevention System Ips Nme Apr 29, 2026 Jul 18, 2013 N/A· v4 N/A· v3 7.8 HIGH· v2 Cisco Intrusion Prevention System (IPS) Software on IPS NME devices before 7.0(9)E4 allows remote attackers to cause a denial of service (device reload) via malformed IPv4 packets that trigger incorrect memory allocation...Show more Cisco Intrusion Prevention System (IPS) Software on IPS NME devices before 7.0(9)E4 allows remote attackers to cause a denial of service (device reload) via malformed IPv4 packets that trigger incorrect memory allocation, aka Bug ID CSCua61977.Show less
CVE-2013-1243 1Cisco 9Asa 5500 X Series Ips Ssp Software Asa 5585 XIdsm 2+6 more Apr 29, 2026 Jul 18, 2013 N/A· v4 N/A· v3 7.8 HIGH· v2 The IP stack in Cisco Intrusion Prevention System (IPS) Software in ASA 5500-X IPS-SSP software and hardware modules before 7.1(5)E4, IPS 4500 sensors before 7.1(6)E4, and IPS 4300 sensors before 7.1(5)E4 allows remote a...Show more The IP stack in Cisco Intrusion Prevention System (IPS) Software in ASA 5500-X IPS-SSP software and hardware modules before 7.1(5)E4, IPS 4500 sensors before 7.1(6)E4, and IPS 4300 sensors before 7.1(5)E4 allows remote attackers to cause a denial of service (MainApp process hang) via malformed IPv4 packets, aka Bug ID CSCtx18596.Show less
CVE-2013-1218 1Cisco 9Asa 5500 X Series Ips Ssp Software Asa 5585 XIdsm 2+6 more Apr 29, 2026 Jul 18, 2013 N/A· v4 N/A· v3 7.8 HIGH· v2 Cisco Intrusion Prevention System (IPS) Software in ASA 5500-X IPS-SSP software modules before 7.1(7)sp1E4 allows remote attackers to cause a denial of service (Analysis Engine process hang or device reload) via fragment...Show more Cisco Intrusion Prevention System (IPS) Software in ASA 5500-X IPS-SSP software modules before 7.1(7)sp1E4 allows remote attackers to cause a denial of service (Analysis Engine process hang or device reload) via fragmented (1) IPv4 or (2) IPv6 packets, aka Bug ID CSCue51272.Show less
CVE-2013-2688 1Blackberry 2Qnx Neutrino Rtos Qnx Software Development Platform Apr 29, 2026 Jul 12, 2013 N/A· v4 N/A· v3 5.4 MEDIUM· v2 Buffer overflow in phrelay in BlackBerry QNX Neutrino RTOS through 6.5.0 SP1 in the QNX Software Development Platform allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary...Show more Buffer overflow in phrelay in BlackBerry QNX Neutrino RTOS through 6.5.0 SP1 in the QNX Software Development Platform allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted packets to TCP port 4868 that leverage improper handling of the /dev/photon device file.Show less
CVE-2013-2687 1Blackberry 3Qnx Momentics Tool Suite Qnx Neutrino RtosQnx Software Development Platform Apr 29, 2026 Jul 12, 2013 N/A· v4 N/A· v3 7.8 HIGH· v2 Stack-based buffer overflow in the bpe_decompress function in (1) BlackBerry QNX Neutrino RTOS through 6.5.0 SP1 and (2) QNX Momentics Tool Suite through 6.5.0 SP1 in the QNX Software Development Platform allows remote a...Show more Stack-based buffer overflow in the bpe_decompress function in (1) BlackBerry QNX Neutrino RTOS through 6.5.0 SP1 and (2) QNX Momentics Tool Suite through 6.5.0 SP1 in the QNX Software Development Platform allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted packets to TCP port 4868.Show less
CVE-2013-4685 1Juniper 13Junos Srx100Srx110+10 more Apr 29, 2026 Jul 11, 2013 N/A· v4 N/A· v3 10.0 HIGH· v2 Buffer overflow in flowd in Juniper Junos 10.4 before 10.4S14, 11.4 before 11.4R7, 12.1 before 12.1R6, and 12.1X44 before 12.1X44-D15 on SRX devices, when Captive Portal is enabled with the UAC enforcer role, allows remo...Show more Buffer overflow in flowd in Juniper Junos 10.4 before 10.4S14, 11.4 before 11.4R7, 12.1 before 12.1R6, and 12.1X44 before 12.1X44-D15 on SRX devices, when Captive Portal is enabled with the UAC enforcer role, allows remote attackers to execute arbitrary code via crafted HTTP requests, aka PR 849100.Show less
CVE-2013-3245 1Videolan 1Vlc Media Player Apr 29, 2026 Jul 10, 2013 N/A· v4 6.3 MEDIUM· v3 6.8 MEDIUM· v2 plugins/demux/libmkv_plugin.dll in VideoLAN VLC Media Player 2.0.7, and possibly other versions, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted MKV file, po...Show more plugins/demux/libmkv_plugin.dll in VideoLAN VLC Media Player 2.0.7, and possibly other versions, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted MKV file, possibly involving an integer overflow and out-of-bounds read or heap-based buffer overflow, or an uncaught exception. NOTE: the vendor disputes the severity and claimed vulnerability type of this issue, stating "This PoC crashes VLC, indeed, but does nothing more... this is not an integer overflow error, but an uncaught exception and I doubt that it is exploitable. This uncaught exception makes VLC abort, not execute random code, on my Linux 64bits machine." A PoC posted by the original researcher shows signs of an attacker-controlled out-of-bounds read, but the affected instruction does not involve a register that directly influences control flowShow less
CVE-2013-1954 1Videolan 1Vlc Media Player Apr 29, 2026 Jul 10, 2013 N/A· v4 N/A· v3 6.8 MEDIUM· v2 The ASF Demuxer (modules/demux/asf/asf.c) in VideoLAN VLC media player 2.0.5 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted ASF movie that trigg...Show more The ASF Demuxer (modules/demux/asf/asf.c) in VideoLAN VLC media player 2.0.5 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted ASF movie that triggers an out-of-bounds read.Show less
CVE-2013-1868 1Videolan 1Vlc Media Player Apr 29, 2026 Jul 10, 2013 N/A· v4 N/A· v3 9.3 HIGH· v2 Multiple buffer overflows in VideoLAN VLC media player 2.0.4 and earlier allow remote attackers to cause a denial of service (crash) and execute arbitrary code via vectors related to the (1) freetype renderer and (2) HTM...Show more Multiple buffer overflows in VideoLAN VLC media player 2.0.4 and earlier allow remote attackers to cause a denial of service (crash) and execute arbitrary code via vectors related to the (1) freetype renderer and (2) HTML subtitle parser.Show less
CVE-2013-3348 1Adobe 1Shockwave Player Apr 29, 2026 Jul 10, 2013 N/A· v4 N/A· v3 10.0 HIGH· v2 Adobe Shockwave Player before 12.0.3.133 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

Previous 1...502503504...704 Next