← Back
CWE-119

14,050 CVEs • Abstraction: Class • Likelihood of Exploit: High

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

JSON object

Loading...

CVEs (14,050)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Apple
1Quicktime
Apr 23, 2026
Apr 4, 2008
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Heap-based buffer overflow in Animation codec content handling in Apple QuickTime before 7.4.5 on Windows allows remote attackers to execute arbitrary code via a crafted movie with run length encoding.
1Apple
1Quicktime
Apr 23, 2026
Apr 4, 2008
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Heap-based buffer overflow in quickTime.qts in Apple QuickTime before 7.4.5 on Windows allows remote attackers to execute arbitrary code via a crafted PICT image file with Kodak encoding, related to error checking and er...Show more
Heap-based buffer overflow in quickTime.qts in Apple QuickTime before 7.4.5 on Windows allows remote attackers to execute arbitrary code via a crafted PICT image file with Kodak encoding, related to error checking and error messages.Show less
1Apple
1Quicktime
Apr 23, 2026
Apr 4, 2008
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Heap-based buffer overflow in quickTime.qts in Apple QuickTime before 7.4.5 allows remote attackers to execute arbitrary code via a crafted PICT image file, related to an improperly terminated memory copy loop.
1Apple
1Quicktime
Apr 23, 2026
Apr 4, 2008
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Heap-based buffer overflow in Apple QuickTime before 7.4.5 allows remote attackers to execute arbitrary code via an MP4A movie with a malformed Channel Compositor (aka chan) atom.
1Apple
1Quicktime
Apr 23, 2026
Apr 4, 2008
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Heap-based buffer overflow in clipping region (aka crgn) atom handling in quicktime.qts in Apple QuickTime before 7.4.5 allows remote attackers to execute arbitrary code via a crafted movie.
1Apple
1Quicktime
Apr 23, 2026
Apr 4, 2008
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Buffer overflow in the data reference atom handling in Apple QuickTime before 7.4.5 allows remote attackers to execute arbitrary code via a crafted movie.
1Easy Software Products
1Cups
Apr 23, 2026
Apr 4, 2008
N/A· v4
N/A· v3
5.8 MEDIUM· v2
Buffer overflow in the gif_read_lzw function in CUPS 1.3.6 allows remote attackers to have an unknown impact via a GIF file with a large code_size value, a similar issue to CVE-2006-4484.
1Linux
1Audit
Apr 23, 2026
Apr 2, 2008
N/A· v4
N/A· v3
4.1 MEDIUM· v2
Stack-based buffer overflow in the audit_log_user_command function in lib/audit_logging.c in Linux Audit before 1.7 might allow remote attackers to execute arbitrary code via a long command argument. NOTE: some of these...Show more
Stack-based buffer overflow in the audit_log_user_command function in lib/audit_logging.c in Linux Audit before 1.7 might allow remote attackers to execute arbitrary code via a long command argument. NOTE: some of these details are obtained from third party information.Show less
1Pierreegougelet
1Xnview
Apr 23, 2026
Apr 2, 2008
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Stack-based buffer overflow in XnView 1.92 and 1.92.1 allows user-assisted remote attackers to execute arbitrary code via a long FontName parameter in a slideshow (.sld) file, a different vector than CVE-2008-1461.
1Tftp Server
1Winagents Tftp Server
Apr 23, 2026
Apr 1, 2008
N/A· v4
N/A· v3
10.0 HIGH· v2
Stack-based buffer overflow in TFTP Server SP 1.4 for Windows allows remote attackers to cause a denial of service or execute arbitrary code via a long filename in a read or write request.
1Tallsoft Quick
1Tftp Server Pro
Apr 23, 2026
Apr 1, 2008
N/A· v4
N/A· v3
7.5 HIGH· v2
Stack-based buffer overflow in TallSoft Quick TFTP Server Pro 2.1 allows remote attackers to cause a denial of service or execute arbitrary code via a long mode field in a read or write request.
1Ibm
1Aix
Apr 23, 2026
Mar 31, 2008
N/A· v4
N/A· v3
7.2 HIGH· v2
Stack-based buffer overflow in the reboot program on IBM AIX 5.2 and 5.3 allows local users in the shutdown group to gain privileges.
1Novell
1Edirectory
Apr 23, 2026
Mar 28, 2008
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Stack-based buffer overflow in the DoLBURPRequest function in libnldap in ndsd in Novell eDirectory 8.7.3.9 and earlier, and 8.8.1 and earlier in the 8.8.x series, allows remote attackers to cause a denial of service (da...Show more
Stack-based buffer overflow in the DoLBURPRequest function in libnldap in ndsd in Novell eDirectory 8.7.3.9 and earlier, and 8.8.1 and earlier in the 8.8.x series, allows remote attackers to cause a denial of service (daemon crash or CPU consumption) or execute arbitrary code via a long delRequest LDAP Extended Request message, probably involving a long Distinguished Name (DN) field.Show less
1Netwin
1Surgemail
Apr 23, 2026
Mar 25, 2008
N/A· v4
N/A· v3
9.0 HIGH· v2
Stack-based buffer overflow in the IMAP service in NetWin Surgemail 3.8k4-4 and earlier allows remote authenticated users to execute arbitrary code via a long first argument to the LIST command.
1Netwin
1Surgemail
Apr 23, 2026
Mar 25, 2008
N/A· v4
N/A· v3
9.0 HIGH· v2
Stack-based buffer overflow in the IMAP service in NetWin SurgeMail 38k4-4 and earlier allows remote authenticated users to execute arbitrary code via long arguments to the LSUB command.
1Asus
1Remote Console
Apr 23, 2026
Mar 25, 2008
N/A· v4
N/A· v3
10.0 HIGH· v2
Stack-based buffer overflow in the DPC Proxy server (DpcProxy.exe) in ASUS Remote Console (aka ARC or ASMB3) 2.0.0.19 and 2.0.0.24 allows remote attackers to execute arbitrary code via a long string to TCP port 623.
2Aurigma
Piczo
2Image Uploader Activex Control
Imageuploader4
Apr 23, 2026
Mar 25, 2008
N/A· v4
N/A· v3
9.3 HIGH· v2
Buffer overflow in a certain Aurigma ActiveX control in ImageUploader4.ocx 4.1.36.0, as used with Piczo (aka Pizco) and possibly other online services, allows remote attackers to execute arbitrary code via unspecified ve...Show more
Buffer overflow in a certain Aurigma ActiveX control in ImageUploader4.ocx 4.1.36.0, as used with Piczo (aka Pizco) and possibly other online services, allows remote attackers to execute arbitrary code via unspecified vectors, possibly involving a long Action property, a different CLSID than CVE-2008-0659.Show less
1Microsoft
1Word
Apr 23, 2026
Mar 25, 2008
N/A· v4
N/A· v3
9.3 HIGH· v2
Buffer overflow in msjet40.dll before 4.0.9505.0 in Microsoft Jet Database Engine allows remote attackers to execute arbitrary code via a crafted Word file, as exploited in the wild in March 2008. NOTE: as of 20080513,...Show more
Buffer overflow in msjet40.dll before 4.0.9505.0 in Microsoft Jet Database Engine allows remote attackers to execute arbitrary code via a crafted Word file, as exploited in the wild in March 2008. NOTE: as of 20080513, Microsoft has stated that this is the same issue as CVE-2007-6026.Show less
1Pecl Php
1Alternative Php Cache
Apr 23, 2026
Mar 24, 2008
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Stack-based buffer overflow in apc.c in Alternative PHP Cache (APC) 3.0.11 through 3.0.16 allows remote attackers to execute arbitrary code via a long filename.
1Xine
1Xine Lib
Apr 23, 2026
Mar 24, 2008
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Multiple integer overflows in xine-lib 1.1.11 and earlier allow remote attackers to trigger heap-based buffer overflows and possibly execute arbitrary code via (1) a crafted .FLV file, which triggers an overflow in demux...Show more
Multiple integer overflows in xine-lib 1.1.11 and earlier allow remote attackers to trigger heap-based buffer overflows and possibly execute arbitrary code via (1) a crafted .FLV file, which triggers an overflow in demuxers/demux_flv.c; (2) a crafted .MOV file, which triggers an overflow in demuxers/demux_qt.c; (3) a crafted .RM file, which triggers an overflow in demuxers/demux_real.c; (4) a crafted .MVE file, which triggers an overflow in demuxers/demux_wc3movie.c; (5) a crafted .MKV file, which triggers an overflow in demuxers/ebml.c; or (6) a crafted .CAK file, which triggers an overflow in demuxers/demux_film.c.Show less