← Back
CWE-119

14,074 CVEs • Abstraction: Class • Likelihood of Exploit: High

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

JSON object

Loading...

CVEs (14,074)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2010-1753
1Apple
1Iphone Os
Apr 29, 2026
Jun 22, 2010
N/A· v4
N/A· v3
6.8 MEDIUM· v2
ImageIO in Apple iOS before 4 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted JPEG image.
CVE-2010-1752
1Apple
1Iphone Os
Apr 29, 2026
Jun 22, 2010
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Stack-based buffer overflow in CFNetwork in Apple iOS before 4 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to URL ha...Show more
Stack-based buffer overflow in CFNetwork in Apple iOS before 4 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to URL handling.Show less
CVE-2010-2351
1Novell
1Netware
Apr 29, 2026
Jun 21, 2010
N/A· v4
N/A· v3
10.0 HIGH· v2
Stack-based buffer overflow in the CIFS.NLM driver in Netware SMB 1.0 for Novell Netware 6.5 SP8 and earlier allows remote attackers to execute arbitrary code via a Sessions Setup AndX packet with a long AccountName.
CVE-2010-2350
1Daniel Mealha Cabrita
1Ziproxy
Apr 29, 2026
Jun 21, 2010
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Heap-based buffer overflow in the PNG decoder in Ziproxy 3.1.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PNG file.
CVE-2010-2348
1Freesoftwaretoolbox
1Batch Audio Converter
Apr 29, 2026
Jun 21, 2010
N/A· v4
N/A· v3
9.3 HIGH· v2
Stack-based buffer overflow in Batch Audio Converter Lite Edition 1.0.0.0 and earlier allows remote attackers to execute arbitrary code via a long line in a .WAV file.
CVE-2010-2343
1Dennisre
1Audio Converter
Apr 29, 2026
Jun 21, 2010
N/A· v4
N/A· v3
9.3 HIGH· v2
Stack-based buffer overflow in D.R. Software Audio Converter 8.1, 2007, and 8.05 allows remote attackers to execute arbitrary code via a crafted pls playlist file.
CVE-2010-2331
1Upredsun
1Isharer File Sharing Wizard
Apr 29, 2026
Jun 18, 2010
N/A· v4
N/A· v3
9.3 HIGH· v2
Stack-based buffer overflow in iSharer File Sharing Wizard 1.5.0 allows remote attackers to execute arbitrary code via a long HEAD request.
CVE-2010-2330
1Upredsun
1Isharer File Sharing Wizard
Apr 29, 2026
Jun 18, 2010
N/A· v4
N/A· v3
9.3 HIGH· v2
Stack-based buffer overflow in iSharer File Sharing Wizard 1.5.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long Content-Length header.
CVE-2010-2329
1Rosoftengineering
1Rosoft Audio Converter
Apr 29, 2026
Jun 18, 2010
N/A· v4
N/A· v3
9.3 HIGH· v2
Buffer overflow in Rosoft Audio Converter 4.4.4 allows remote attackers to execute arbitrary code via a long playlist entry in a .m3u file.
CVE-2010-2321
1Adobe
1Indesign Cs3
Apr 29, 2026
Jun 18, 2010
N/A· v4
N/A· v3
9.3 HIGH· v2
Buffer overflow in Adobe InDesign CS3 10.0 allows user-assisted remote attackers to execute arbitrary code via a crafted .indd file.
CVE-2010-0407
1Muscle
1Pcsc Lite
Apr 29, 2026
Jun 18, 2010
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Multiple buffer overflows in the MSGFunctionDemarshall function in winscard_svc.c in the PC/SC Smart Card daemon (aka PCSCD) in MUSCLE PCSC-Lite before 1.5.4 allow local users to gain privileges via crafted message data,...Show more
Multiple buffer overflows in the MSGFunctionDemarshall function in winscard_svc.c in the PC/SC Smart Card daemon (aka PCSCD) in MUSCLE PCSC-Lite before 1.5.4 allow local users to gain privileges via crafted message data, which is improperly demarshalled.Show less
CVE-2009-4902
1Muscle
1Pcsc Lite
Apr 29, 2026
Jun 18, 2010
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Buffer overflow in the MSGFunctionDemarshall function in winscard_svc.c in the PC/SC Smart Card daemon (aka PCSCD) in MUSCLE PCSC-Lite 1.5.4 and earlier might allow local users to gain privileges via crafted SCARD_CONTRO...Show more
Buffer overflow in the MSGFunctionDemarshall function in winscard_svc.c in the PC/SC Smart Card daemon (aka PCSCD) in MUSCLE PCSC-Lite 1.5.4 and earlier might allow local users to gain privileges via crafted SCARD_CONTROL message data, which is improperly demarshalled. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-0407.Show less
CVE-2009-4901
1Muscle
1Pcsc Lite
Apr 29, 2026
Jun 18, 2010
N/A· v4
N/A· v3
2.1 LOW· v2
The MSGFunctionDemarshall function in winscard_svc.c in the PC/SC Smart Card daemon (aka PCSCD) in MUSCLE PCSC-Lite before 1.5.4 might allow local users to cause a denial of service (daemon crash) via crafted SCARD_SET_A...Show more
The MSGFunctionDemarshall function in winscard_svc.c in the PC/SC Smart Card daemon (aka PCSCD) in MUSCLE PCSC-Lite before 1.5.4 might allow local users to cause a denial of service (daemon crash) via crafted SCARD_SET_ATTRIB message data, which is improperly demarshalled and triggers a buffer over-read, a related issue to CVE-2010-0407.Show less
CVE-2010-2063
3Canonical
DebianSamba
3Debian Linux
SambaUbuntu Linux
Apr 29, 2026
Jun 17, 2010
N/A· v4
N/A· v3
7.5 HIGH· v2
Buffer overflow in the SMB1 packet chaining implementation in the chain_reply function in process.c in smbd in Samba 3.0.x before 3.3.13 allows remote attackers to cause a denial of service (memory corruption and daemon...Show more
Buffer overflow in the SMB1 packet chaining implementation in the chain_reply function in process.c in smbd in Samba 3.0.x before 3.3.13 allows remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a crafted field in a packet.Show less
CVE-2010-1748
1Apple
1Cups
Apr 29, 2026
Jun 17, 2010
N/A· v4
N/A· v3
4.3 MEDIUM· v2
The cgi_initialize_string function in cgi-bin/var.c in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X 10.5.8, Mac OS X 10.6 before 10.6.4, and other platforms, does not properly handle parameter values...Show more
The cgi_initialize_string function in cgi-bin/var.c in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X 10.5.8, Mac OS X 10.6 before 10.6.4, and other platforms, does not properly handle parameter values containing a % (percent) character without two subsequent hex characters, which allows context-dependent attackers to obtain sensitive information from cupsd process memory via a crafted request, as demonstrated by the (1) /admin?OP=redirect&URL=% and (2) /admin?URL=/admin/&OP=% URIs.Show less
CVE-2010-1642
1Samba
1Samba
Apr 29, 2026
Jun 17, 2010
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The reply_sesssetup_and_X_spnego function in sesssetup.c in smbd in Samba before 3.4.8 and 3.5.x before 3.5.2 allows remote attackers to trigger an out-of-bounds read, and cause a denial of service (process crash), via a...Show more
The reply_sesssetup_and_X_spnego function in sesssetup.c in smbd in Samba before 3.4.8 and 3.5.x before 3.5.2 allows remote attackers to trigger an out-of-bounds read, and cause a denial of service (process crash), via a \xff\xff security blob length in a Session Setup AndX request.Show less
CVE-2010-0543
1Apple
2Mac Os X
Mac Os X Server
Apr 29, 2026
Jun 17, 2010
N/A· v4
N/A· v3
6.8 MEDIUM· v2
ImageIO in Apple Mac OS X 10.5.8, and 10.6 before 10.6.2, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file with MPEG2 encod...Show more
ImageIO in Apple Mac OS X 10.5.8, and 10.6 before 10.6.2, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file with MPEG2 encoding.Show less
CVE-2010-2311
1Power Tab
1Power Tab Editor
Apr 29, 2026
Jun 16, 2010
N/A· v4
N/A· v3
9.3 HIGH· v2
Stack-based buffer overflow in Power Tab Editor 1.7 build 80 allows user-assisted remote attackers to execute arbitrary code via a .ptb file with a long font name.
CVE-2010-2309
1Evological
1Evocam
Apr 29, 2026
Jun 16, 2010
N/A· v4
N/A· v3
7.5 HIGH· v2
Buffer overflow in the web server for EvoLogical EvoCam 3.6.6 and 3.6.7 allows remote attackers to execute arbitrary code via a long GET request.
CVE-2010-2305
1Symantec
1Sygate Personal Firewall
Apr 29, 2026
Jun 16, 2010
N/A· v4
N/A· v3
9.3 HIGH· v2
Buffer overflow in an ActiveX control in SSHelper.dll for Symantec Sygate Personal Firewall 5.6 build 2808 allows remote attackers to execute arbitrary code via a long third argument to the SetRegString method.