Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

CVEs (14,685)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2013-7105 1Fujitsu 2Interstage Application Server Interstage Studio Apr 29, 2026 Dec 14, 2013 N/A· v4 N/A· v3 10.0 HIGH· v2 Buffer overflow in the Interstage HTTP Server log functionality, as used in Fujitsu Interstage Application Server 9.0.0, 9.1.0, 9.2.0, 9.3.1, and 10.0.0; and Interstage Studio 9.0.0, 9.1.0, 9.2.0, and 10.0.0, has unspeci...Show more Buffer overflow in the Interstage HTTP Server log functionality, as used in Fujitsu Interstage Application Server 9.0.0, 9.1.0, 9.2.0, 9.3.1, and 10.0.0; and Interstage Studio 9.0.0, 9.1.0, 9.2.0, and 10.0.0, has unspecified impact and attack vectors related to "ihsrlog/rotatelogs."Show less
CVE-2013-6411 1Openttd 1Openttd Apr 29, 2026 Dec 14, 2013 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The HandleCrashedAircraft function in aircraft_cmd.cpp in OpenTTD 0.3.6 through 1.3.2 allows remote attackers to cause a denial of service (out-of-bounds read and crash) by crashing an aircraft outside of the map.
CVE-2013-7039 1Gnu 1Libmicrohttpd Apr 29, 2026 Dec 13, 2013 N/A· v4 N/A· v3 5.1 MEDIUM· v2 Stack-based buffer overflow in the MHD_digest_auth_check function in libmicrohttpd before 0.9.32, when MHD_OPTION_CONNECTION_MEMORY_LIMIT is set to a large value, allows remote attackers to cause a denial of service (cra...Show more Stack-based buffer overflow in the MHD_digest_auth_check function in libmicrohttpd before 0.9.32, when MHD_OPTION_CONNECTION_MEMORY_LIMIT is set to a large value, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long URI in an authentication header.Show less
CVE-2013-7038 1Gnu 1Libmicrohttpd Apr 29, 2026 Dec 13, 2013 N/A· v4 N/A· v3 6.4 MEDIUM· v2 The MHD_http_unescape function in libmicrohttpd before 0.9.32 might allow remote attackers to obtain sensitive information or cause a denial of service (crash) via unspecified vectors that trigger an out-of-bounds read.
CVE-2013-4988 1Icofx 1Icofx Apr 29, 2026 Dec 13, 2013 N/A· v4 N/A· v3 9.3 HIGH· v2 Stack-based buffer overflow in IcoFX 2.5 and earlier allows remote attackers to execute arbitrary code via a long idCount value in an ICONDIR structure in an ICO file. NOTE: some of these details are obtained from third...Show more Stack-based buffer overflow in IcoFX 2.5 and earlier allows remote attackers to execute arbitrary code via a long idCount value in an ICONDIR structure in an ICO file. NOTE: some of these details are obtained from third party information.Show less
CVE-2013-6054 1Uclouvain 1Openjpeg Apr 29, 2026 Dec 12, 2013 N/A· v4 N/A· v3 7.5 HIGH· v2 Heap-based buffer overflow in OpenJPEG 1.3 has unspecified impact and remote vectors, a different vulnerability than CVE-2013-6045.
CVE-2013-6045 1Uclouvain 1Openjpeg Apr 29, 2026 Dec 12, 2013 N/A· v4 N/A· v3 7.5 HIGH· v2 Multiple heap-based buffer overflows in OpenJPEG 1.3 and earlier might allow remote attackers to execute arbitrary code via unspecified vectors.
CVE-2013-4458 2Gnu Suse 3Glibc Linux Enterprise DebuginfoLinux Enterprise Server Apr 29, 2026 Dec 12, 2013 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in GNU C Library (aka glibc or libc6) 2.18 and earlier allows remote attackers to cause a denial of service (crash) via a (1) hostnam...Show more Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in GNU C Library (aka glibc or libc6) 2.18 and earlier allows remote attackers to cause a denial of service (crash) via a (1) hostname or (2) IP address that triggers a large number of AF_INET6 address results. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-1914.Show less
CVE-2013-5334 1Adobe 1Shockwave Player Apr 29, 2026 Dec 11, 2013 N/A· v4 N/A· v3 10.0 HIGH· v2 Adobe Shockwave Player before 12.0.7.148 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-5333.
CVE-2013-5333 1Adobe 1Shockwave Player Apr 29, 2026 Dec 11, 2013 N/A· v4 N/A· v3 10.0 HIGH· v2 Adobe Shockwave Player before 12.0.7.148 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-5334.
CVE-2013-5052 1Microsoft 1Internet Explorer Apr 29, 2026 Dec 11, 2013 N/A· v4 N/A· v3 9.3 HIGH· v2 Microsoft Internet Explorer 7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."
CVE-2013-5051 1Microsoft 1Internet Explorer Apr 29, 2026 Dec 11, 2013 N/A· v4 N/A· v3 9.3 HIGH· v2 Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."
CVE-2013-5049 1Microsoft 1Internet Explorer Apr 29, 2026 Dec 11, 2013 N/A· v4 N/A· v3 9.3 HIGH· v2 Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."
CVE-2013-5048 1Microsoft 1Internet Explorer Apr 29, 2026 Dec 11, 2013 N/A· v4 N/A· v3 9.3 HIGH· v2 Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability,"...Show more Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-5047.Show less
CVE-2013-5047 1Microsoft 1Internet Explorer Apr 29, 2026 Dec 11, 2013 N/A· v4 N/A· v3 9.3 HIGH· v2 Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability,"...Show more Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-5048.Show less
CVE-2013-3907 1Microsoft 6Windows 7 Windows 8Windows Rt+3 more Apr 29, 2026 Dec 11, 2013 N/A· v4 N/A· v3 7.2 HIGH· v2 portcls.sys in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges via a crafted...Show more portcls.sys in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges via a crafted application, aka "Port-Class Driver Double Fetch Vulnerability."Show less
CVE-2013-3878 1Microsoft 2Windows Server 2003 Windows Xp Apr 29, 2026 Dec 11, 2013 N/A· v4 N/A· v3 6.9 MEDIUM· v2 Stack-based buffer overflow in the LRPC client in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges by operating an LRPC server that sends a crafted LPC port message, aka "LRPC Cl...Show more Stack-based buffer overflow in the LRPC client in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges by operating an LRPC server that sends a crafted LPC port message, aka "LRPC Client Buffer Overrun Vulnerability."Show less
CVE-2013-3623 1Supermicro 1Intelligent Platform Management Firmware Apr 29, 2026 Dec 10, 2013 N/A· v4 N/A· v3 10.0 HIGH· v2 Multiple stack-based buffer overflows in cgi/close_window.cgi in the web interface in the Intelligent Platform Management Interface (IPMI) with firmware before 3.15 (SMT_X9_315) on Supermicro X9 generation motherboards a...Show more Multiple stack-based buffer overflows in cgi/close_window.cgi in the web interface in the Intelligent Platform Management Interface (IPMI) with firmware before 3.15 (SMT_X9_315) on Supermicro X9 generation motherboards allow remote attackers to execute arbitrary code via the (1) sess_sid or (2) ACT parameter.Show less
CVE-2013-3622 1Supermicro 1Intelligent Platform Management Firmware Apr 29, 2026 Dec 10, 2013 N/A· v4 N/A· v3 9.0 HIGH· v2 Buffer overflow in logout.cgi in the Intelligent Platform Management Interface (IPMI) with firmware before 3.15 (SMT_X9_315) on Supermicro X9 generation motherboards allows remote authenticated users to execute arbitrary...Show more Buffer overflow in logout.cgi in the Intelligent Platform Management Interface (IPMI) with firmware before 3.15 (SMT_X9_315) on Supermicro X9 generation motherboards allows remote authenticated users to execute arbitrary code via the SID parameter.Show less
CVE-2013-5447 1Ibm 1Forms Viewer Apr 29, 2026 Dec 10, 2013 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Stack-based buffer overflow in IBM Forms Viewer 4.x before 4.0.0.3 and 8.x before 8.0.1.1 allows remote attackers to execute arbitrary code via an XFDL form with a long fontname value.

Previous 1...516517518...735 Next