← Back
CWE-119

14,074 CVEs • Abstraction: Class • Likelihood of Exploit: High

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

JSON object

Loading...

CVEs (14,074)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2010-0518
1Apple
2Mac Os X
Mac Os X Server
Apr 29, 2026
Mar 30, 2010
N/A· v4
N/A· v3
6.8 MEDIUM· v2
QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file with Sorenson encoding.
CVE-2010-0517
1Apple
2Mac Os X
Mac Os X Server
Apr 29, 2026
Mar 30, 2010
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Heap-based buffer overflow in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with M-JPEG encoding, wh...Show more
Heap-based buffer overflow in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with M-JPEG encoding, which causes QuickTime to calculate a buffer size using height and width fields, but to use a different field to control the length of a copy operation.Show less
CVE-2010-0516
1Apple
2Mac Os X
Mac Os X Server
Apr 29, 2026
Mar 30, 2010
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Heap-based buffer overflow in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with RLE encoding, which...Show more
Heap-based buffer overflow in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with RLE encoding, which triggers memory corruption when the length of decompressed data exceeds that of the allocated heap chunk.Show less
CVE-2010-0515
1Apple
2Mac Os X
Mac Os X Server
Apr 29, 2026
Mar 30, 2010
N/A· v4
N/A· v3
6.8 MEDIUM· v2
QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file with H.264 encoding.
CVE-2010-0514
1Apple
2Mac Os X
Mac Os X Server
Apr 29, 2026
Mar 30, 2010
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Heap-based buffer overflow in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with H.261 encoding.
CVE-2010-0513
1Apple
2Mac Os X
Mac Os X Server
Apr 29, 2026
Mar 30, 2010
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Stack-based buffer overflow in PS Normalizer in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PostScript document.
CVE-2010-0507
1Apple
2Mac Os X
Mac Os X Server
Apr 29, 2026
Mar 30, 2010
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Buffer overflow in Image RAW in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PEF image.
CVE-2010-0506
1Apple
2Mac Os X
Mac Os X Server
Apr 29, 2026
Mar 30, 2010
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Buffer overflow in Image RAW in Apple Mac OS X 10.5.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted NEF image.
CVE-2010-0505
1Apple
2Mac Os X
Mac Os X Server
Apr 29, 2026
Mar 30, 2010
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Heap-based buffer overflow in ImageIO in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted JP2 (JPEG2000) image, related to inco...Show more
Heap-based buffer overflow in ImageIO in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted JP2 (JPEG2000) image, related to incorrect calculation and the CGImageReadGetBytesAtOffset function.Show less
CVE-2010-0504
1Apple
1Mac Os X Server
Apr 29, 2026
Mar 30, 2010
N/A· v4
N/A· v3
7.5 HIGH· v2
Multiple stack-based buffer overflows in iChat Server in Apple Mac OS X Server before 10.6.3 allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors.
CVE-2010-0065
1Apple
2Mac Os X
Mac Os X Server
Apr 29, 2026
Mar 30, 2010
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Disk Images in Apple Mac OS X before 10.6.3 allows user-assisted remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted disk image with bzip2 compr...Show more
Disk Images in Apple Mac OS X before 10.6.3 allows user-assisted remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted disk image with bzip2 compression.Show less
CVE-2010-0062
1Apple
2Mac Os X
Mac Os X Server
Apr 29, 2026
Mar 30, 2010
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Heap-based buffer overflow in quicktime.qts in CoreMedia and QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a malformed .3...Show more
Heap-based buffer overflow in quicktime.qts in CoreMedia and QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a malformed .3g2 movie file with H.263 encoding that triggers an incorrect buffer length calculation.Show less
CVE-2010-0060
1Apple
2Mac Os X
Mac Os X Server
Apr 29, 2026
Mar 30, 2010
N/A· v4
N/A· v3
6.8 MEDIUM· v2
CoreAudio in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted audio content with QDMC encoding.
CVE-2010-0059
1Apple
2Mac Os X
Mac Os X Server
Apr 29, 2026
Mar 30, 2010
N/A· v4
N/A· v3
6.8 MEDIUM· v2
CoreAudio in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted audio content with QDM2 encoding, which trigg...Show more
CoreAudio in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted audio content with QDM2 encoding, which triggers a buffer overflow due to inconsistent length fields, related to QDCA.Show less
CVE-2010-0056
1Apple
2Mac Os X
Mac Os X Server
Apr 29, 2026
Mar 30, 2010
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Buffer overflow in Cocoa spell checking in AppKit in Apple Mac OS X 10.5.8 allows user-assisted remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted document.
CVE-2010-1185
1Sap
1Maxdb
Apr 29, 2026
Mar 29, 2010
N/A· v4
N/A· v3
10.0 HIGH· v2
Stack-based buffer overflow in serv.exe in SAP MaxDB 7.4.3.32, and 7.6.0.37 through 7.6.06 allows remote attackers to execute arbitrary code via an invalid length parameter in a handshake packet to TCP port 7210. NOTE:...Show more
Stack-based buffer overflow in serv.exe in SAP MaxDB 7.4.3.32, and 7.6.0.37 through 7.6.06 allows remote attackers to execute arbitrary code via an invalid length parameter in a handshake packet to TCP port 7210. NOTE: some of these details are obtained from third party information.Show less
CVE-2009-4761
1Mini Stream
1Rm Downloader
Apr 29, 2026
Mar 29, 2010
N/A· v4
N/A· v3
9.3 HIGH· v2
Stack-based buffer overflow in Mini-stream RM Downloader allows remote attackers to execute arbitrary code via a long string in a .smi file.
CVE-2009-4759
1Joric
1Bmxplay
Apr 29, 2026
Mar 29, 2010
N/A· v4
N/A· v3
9.3 HIGH· v2
Buffer overflow in BrotherSoft BMXPlay 0.4.4b allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long string in a .BMX file.
CVE-2009-4758
1Dicas
1Mpegable Player
Apr 29, 2026
Mar 29, 2010
N/A· v4
N/A· v3
9.3 HIGH· v2
Stack-based buffer overflow in dicas Mpegable Player 2.12 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long string in a .YUV file.
CVE-2009-4757
1Evils World
1Ew Musicplayer
Apr 29, 2026
Mar 29, 2010
N/A· v4
N/A· v3
9.3 HIGH· v2
Stack-based buffer overflow in BrotherSoft EW-MusicPlayer 0.8 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long string in a malformed playlist (.m3u) f...Show more
Stack-based buffer overflow in BrotherSoft EW-MusicPlayer 0.8 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long string in a malformed playlist (.m3u) file. NOTE: some of these details are obtained from third party information.Show less