← Back
CWE-119

14,074 CVEs • Abstraction: Class • Likelihood of Exploit: High

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

JSON object

Loading...

CVEs (14,074)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2010-3776
1Mozilla
3Firefox
SeamonkeyThunderbird
Apr 29, 2026
Dec 10, 2010
N/A· v4
N/A· v3
9.3 HIGH· v2
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, Thunderbird before 3.0.11 and 3.1.x before 3.1.7, and SeaMonkey before 2.0.11 allow remote attackers to...Show more
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, Thunderbird before 3.0.11 and 3.1.x before 3.1.7, and SeaMonkey before 2.0.11 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.Show less
CVE-2010-3769
1Mozilla
3Firefox
SeamonkeyThunderbird
Apr 29, 2026
Dec 10, 2010
N/A· v4
N/A· v3
9.3 HIGH· v2
The line-breaking implementation in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, Thunderbird before 3.0.11 and 3.1.x before 3.1.7, and SeaMonkey before 2.0.11 on Windows does not properly handle long strings, w...Show more
The line-breaking implementation in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, Thunderbird before 3.0.11 and 3.1.x before 3.1.7, and SeaMonkey before 2.0.11 on Windows does not properly handle long strings, which allows remote attackers to execute arbitrary code via a crafted document.write call that triggers a buffer over-read.Show less
CVE-2010-3801
1Apple
1Quicktime
Apr 29, 2026
Dec 9, 2010
N/A· v4
N/A· v3
9.3 HIGH· v2
Apple QuickTime before 7.6.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted FlashPix file.
CVE-2010-3800
1Apple
1Quicktime
Apr 29, 2026
Dec 9, 2010
N/A· v4
N/A· v3
9.3 HIGH· v2
Apple QuickTime before 7.6.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted PICT file.
CVE-2010-1508
1Apple
1Quicktime
Apr 29, 2026
Dec 9, 2010
N/A· v4
N/A· v3
9.3 HIGH· v2
Heap-based buffer overflow in Apple QuickTime before 7.6.9 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Track Header (aka tkhd) atoms.
CVE-2010-4489
1Google
1Chrome
Apr 29, 2026
Dec 7, 2010
N/A· v4
N/A· v3
4.3 MEDIUM· v2
libvpx, as used in Google Chrome before 8.0.552.215 and possibly other products, allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WebM video. NOTE: this vulnerability exists becaus...Show more
libvpx, as used in Google Chrome before 8.0.552.215 and possibly other products, allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WebM video. NOTE: this vulnerability exists because of a regression.Show less
CVE-2010-4259
1Alexej Kryukov
1Fontforge
Apr 29, 2026
Dec 7, 2010
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Stack-based buffer overflow in FontForge 20100501 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long CHARSET_REGISTRY header in a BDF font file.
CVE-2010-4371
1Nullsoft
1Winamp
Apr 29, 2026
Dec 2, 2010
N/A· v4
N/A· v3
9.3 HIGH· v2
Buffer overflow in the in_mod plugin in Winamp before 5.6 allows remote attackers to have an unspecified impact via vectors related to the comment box.
CVE-2010-3855
1Freetype
1Freetype
Apr 29, 2026
Nov 26, 2010
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Buffer overflow in the ft_var_readpackedpoints function in truetype/ttgxvar.c in FreeType 2.4.3 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via...Show more
Buffer overflow in the ft_var_readpackedpoints function in truetype/ttgxvar.c in FreeType 2.4.3 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted TrueType GX font.Show less
CVE-2010-3832
1Apple
1Iphone Os
Apr 29, 2026
Nov 26, 2010
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Heap-based buffer overflow in the GSM mobility management implementation in Telephony in Apple iOS before 4.2 on the iPhone and iPad allows remote attackers to execute arbitrary code on the baseband processor via a craft...Show more
Heap-based buffer overflow in the GSM mobility management implementation in Telephony in Apple iOS before 4.2 on the iPhone and iPad allows remote attackers to execute arbitrary code on the baseband processor via a crafted Temporary Mobile Subscriber Identity (TMSI) field.Show less
CVE-2010-3814
1Freetype
1Freetype
Apr 29, 2026
Nov 26, 2010
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Heap-based buffer overflow in the Ins_SHZ function in ttinterp.c in FreeType 2.4.3 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted SHZ bytecode...Show more
Heap-based buffer overflow in the Ins_SHZ function in ttinterp.c in FreeType 2.4.3 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted SHZ bytecode instruction, related to TrueType opcodes, as demonstrated by a PDF document with a crafted embedded font.Show less
CVE-2010-4300
1Wireshark
1Wireshark
Apr 29, 2026
Nov 26, 2010
N/A· v4
N/A· v3
7.5 HIGH· v2
Heap-based buffer overflow in the dissect_ldss_transfer function (epan/dissectors/packet-ldss.c) in the LDSS dissector in Wireshark 1.2.0 through 1.2.12 and 1.4.0 through 1.4.1 allows remote attackers to cause a denial o...Show more
Heap-based buffer overflow in the dissect_ldss_transfer function (epan/dissectors/packet-ldss.c) in the LDSS dissector in Wireshark 1.2.0 through 1.2.12 and 1.4.0 through 1.4.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an LDSS packet with a long digest line that triggers memory corruption.Show less
CVE-2010-3822
1Apple
2Safari
Webkit
Apr 29, 2026
Nov 22, 2010
N/A· v4
N/A· v3
9.3 HIGH· v2
WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, accesses an uninitialized pointer during processing of Cascading Style Sheets (CSS) counter styles, which...Show more
WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, accesses an uninitialized pointer during processing of Cascading Style Sheets (CSS) counter styles, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted web site.Show less
CVE-2010-3821
1Apple
2Safari
Webkit
Apr 29, 2026
Nov 22, 2010
N/A· v4
N/A· v3
9.3 HIGH· v2
WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, does not properly handle the :first-letter pseudo-element in a Cascading Style Sheets (CSS) token sequence...Show more
WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, does not properly handle the :first-letter pseudo-element in a Cascading Style Sheets (CSS) token sequence, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.Show less
CVE-2010-4299
1Novell
1Zenworks Handheld Management
Apr 29, 2026
Nov 22, 2010
N/A· v4
N/A· v3
9.3 HIGH· v2
Heap-based buffer overflow in ZfHIPCND.exe in Novell Zenworks 7 Handheld Management (ZHM) allows remote attackers to execute arbitrary code via a crafted request to TCP port 2400.
CVE-2010-4230
2Camtron
Tecvoz
4Cmnc 200
Cmnc 200Cmnc 200 Firmware+1 more
Apr 29, 2026
Nov 17, 2010
N/A· v4
N/A· v3
9.3 HIGH· v2
Stack-based buffer overflow in a certain ActiveX control for the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1.102A-008 allows remote attackers to execute arbitrary code via a...Show more
Stack-based buffer overflow in a certain ActiveX control for the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1.102A-008 allows remote attackers to execute arbitrary code via a long string in the first argument to the connect method.Show less
CVE-2010-4008
9Apache
AppleCanonical+6 more
15Chrome
Debian LinuxEnterprise Linux Desktop+12 more
Apr 29, 2026
Nov 17, 2010
N/A· v4
N/A· v3
4.3 MEDIUM· v2
libxml2 before 2.7.8, as used in Google Chrome before 7.0.517.44, Apple Safari 5.0.2 and earlier, and other products, reads from invalid memory locations during processing of malformed XPath expressions, which allows con...Show more
libxml2 before 2.7.8, as used in Google Chrome before 7.0.517.44, Apple Safari 5.0.2 and earlier, and other products, reads from invalid memory locations during processing of malformed XPath expressions, which allows context-dependent attackers to cause a denial of service (application crash) via a crafted XML document.Show less
CVE-2010-3798
1Apple
2Mac Os X
Mac Os X Server
Apr 29, 2026
Nov 16, 2010
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Heap-based buffer overflow in xar in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted xar archive.
CVE-2010-3795
1Apple
2Mac Os X
Mac Os X Server
Apr 29, 2026
Nov 16, 2010
N/A· v4
N/A· v3
6.8 MEDIUM· v2
QuickTime in Apple Mac OS X 10.6.x before 10.6.5 accesses uninitialized memory locations during processing of GIF image data, which allows remote attackers to execute arbitrary code or cause a denial of service (applicat...Show more
QuickTime in Apple Mac OS X 10.6.x before 10.6.5 accesses uninitialized memory locations during processing of GIF image data, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted GIF file.Show less
CVE-2010-3794
1Apple
2Mac Os X
Mac Os X Server
Apr 29, 2026
Nov 16, 2010
N/A· v4
N/A· v3
6.8 MEDIUM· v2
QuickTime in Apple Mac OS X 10.6.x before 10.6.5 accesses uninitialized memory locations during processing of FlashPix image data, which allows remote attackers to execute arbitrary code or cause a denial of service (app...Show more
QuickTime in Apple Mac OS X 10.6.x before 10.6.5 accesses uninitialized memory locations during processing of FlashPix image data, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted FlashPix file.Show less