Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

CVEs (14,661)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2012-3644 1Apple 1Safari Apr 29, 2026 Jul 25, 2012 N/A· v4 N/A· v3 9.3 HIGH· v2 WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than...Show more WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.Show less
CVE-2012-3642 1Apple 1Safari Apr 29, 2026 Jul 25, 2012 N/A· v4 N/A· v3 9.3 HIGH· v2 WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than...Show more WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.Show less
CVE-2012-3641 1Apple 1Safari Apr 29, 2026 Jul 25, 2012 N/A· v4 N/A· v3 9.3 HIGH· v2 WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than...Show more WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.Show less
CVE-2012-3640 1Apple 1Safari Apr 29, 2026 Jul 25, 2012 N/A· v4 N/A· v3 9.3 HIGH· v2 WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than...Show more WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.Show less
CVE-2012-3639 1Apple 1Safari Apr 29, 2026 Jul 25, 2012 N/A· v4 N/A· v3 9.3 HIGH· v2 WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than...Show more WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.Show less
CVE-2012-3636 1Apple 1Safari Apr 29, 2026 Jul 25, 2012 N/A· v4 N/A· v3 9.3 HIGH· v2 WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than...Show more WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.Show less
CVE-2012-3634 1Apple 1Safari Apr 29, 2026 Jul 25, 2012 N/A· v4 N/A· v3 9.3 HIGH· v2 WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than...Show more WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.Show less
CVE-2012-3629 1Apple 1Safari Apr 29, 2026 Jul 25, 2012 N/A· v4 N/A· v3 9.3 HIGH· v2 WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than...Show more WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.Show less
CVE-2012-3627 1Apple 1Safari Apr 29, 2026 Jul 25, 2012 N/A· v4 N/A· v3 9.3 HIGH· v2 WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than...Show more WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.Show less
CVE-2012-3625 1Apple 1Safari Apr 29, 2026 Jul 25, 2012 N/A· v4 N/A· v3 9.3 HIGH· v2 WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than...Show more WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.Show less
CVE-2012-0683 1Apple 1Safari Apr 29, 2026 Jul 25, 2012 N/A· v4 N/A· v3 9.3 HIGH· v2 WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than...Show more WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.Show less
CVE-2012-0682 1Apple 1Safari Apr 29, 2026 Jul 25, 2012 N/A· v4 N/A· v3 9.3 HIGH· v2 WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than...Show more WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.Show less
CVE-2012-3571 3Canonical DebianIsc 3Debian Linux DhcpUbuntu Linux Apr 29, 2026 Jul 25, 2012 N/A· v4 N/A· v3 6.1 MEDIUM· v2 ISC DHCP 4.1.2 through 4.2.4 and 4.1-ESV before 4.1-ESV-R6 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a malformed client identifier.
CVE-2012-3570 1Isc 1Dhcp Apr 29, 2026 Jul 25, 2012 N/A· v4 N/A· v3 5.7 MEDIUM· v2 Buffer overflow in ISC DHCP 4.2.x before 4.2.4-P1, when DHCPv6 mode is enabled, allows remote attackers to cause a denial of service (segmentation fault and daemon exit) via a crafted client identifier parameter.
CVE-2012-2197 1Ibm 1Db2 Apr 29, 2026 Jul 25, 2012 N/A· v4 N/A· v3 7.1 HIGH· v2 Stack-based buffer overflow in the Java Stored Procedure infrastructure in IBM DB2 9.1 before FP12, 9.5 through FP9, 9.7 through FP6, 9.8 through FP5, and 10.1 allows remote authenticated users to execute arbitrary code...Show more Stack-based buffer overflow in the Java Stored Procedure infrastructure in IBM DB2 9.1 before FP12, 9.5 through FP9, 9.7 through FP6, 9.8 through FP5, and 10.1 allows remote authenticated users to execute arbitrary code by leveraging certain CONNECT and EXECUTE privileges.Show less
CVE-2012-4045 1Nullsoft 1Winamp Apr 29, 2026 Jul 22, 2012 N/A· v4 N/A· v3 7.5 HIGH· v2 Multiple heap-based buffer overflows in bmp.w5s in Winamp before 5.63 build 3235 allow remote attackers to execute arbitrary code via the (1) strf chunk in BI_RGB or (2) UYVY video data in an AVI file, or (3) decompresse...Show more Multiple heap-based buffer overflows in bmp.w5s in Winamp before 5.63 build 3235 allow remote attackers to execute arbitrary code via the (1) strf chunk in BI_RGB or (2) UYVY video data in an AVI file, or (3) decompressed TechSmith Screen Capture Codec (TSCC) data in an AVI file.Show less
CVE-2011-3149 1Linux Pam 1Linux Pam Apr 29, 2026 Jul 22, 2012 N/A· v4 N/A· v3 2.1 LOW· v2 The _expand_arg function in the pam_env module (modules/pam_env/pam_env.c) in Linux-PAM (aka pam) before 1.1.5 does not properly handle when environment variable expansion can overflow, which allows local users to cause...Show more The _expand_arg function in the pam_env module (modules/pam_env/pam_env.c) in Linux-PAM (aka pam) before 1.1.5 does not properly handle when environment variable expansion can overflow, which allows local users to cause a denial of service (CPU consumption).Show less
CVE-2011-3148 1Linux Pam 1Linux Pam Apr 29, 2026 Jul 22, 2012 N/A· v4 N/A· v3 4.6 MEDIUM· v2 Stack-based buffer overflow in the _assemble_line function in modules/pam_env/pam_env.c in Linux-PAM (aka pam) before 1.1.5 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via...Show more Stack-based buffer overflow in the _assemble_line function in modules/pam_env/pam_env.c in Linux-PAM (aka pam) before 1.1.5 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a long string of white spaces at the beginning of the ~/.pam_environment file.Show less
CVE-2011-2199 1H Peter Anvin 1Tftp Hpa Apr 29, 2026 Jul 22, 2012 N/A· v4 N/A· v3 7.5 HIGH· v2 Buffer overflow in tftp-hpa before 5.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via the utimeout option.
CVE-2012-2738 1Nalin Dahyabhai 1Vte Apr 29, 2026 Jul 22, 2012 N/A· v4 N/A· v3 4.0 MEDIUM· v2 The VteTerminal in gnome-terminal (vte) before 0.32.2 allows remote authenticated users to cause a denial of service (long loop and CPU consumption) via an escape sequence with a large repeat count value.

Previous 1...567568569...734 Next