← Back
CWE-119

14,646 CVEs • Abstraction: Class • Likelihood of Exploit: High

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

JSON object

Loading...

CVEs (14,646)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2009-0012
1Apple
2Mac Os X
Mac Os X Server
Apr 23, 2026
Feb 13, 2009
N/A· v4
N/A· v3
10.0 HIGH· v2
Heap-based buffer overflow in CoreText in Apple Mac OS X 10.5.6 allows remote attackers to execute arbitrary code via a crafted Unicode string.
CVE-2009-0009
1Apple
2Mac Os X
Mac Os X Server
Apr 23, 2026
Feb 13, 2009
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Unspecified vulnerability in the Pixlet codec in Apple Mac OS X 10.4.11 and 10.5.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a crafted movie fi...Show more
Unspecified vulnerability in the Pixlet codec in Apple Mac OS X 10.4.11 and 10.5.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a crafted movie file that triggers memory corruption.Show less
CVE-2009-0546
1Newsgator
1Feeddemon
Apr 23, 2026
Feb 12, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Stack-based buffer overflow in NewsGator FeedDemon 2.7 and earlier allows user-assisted remote attackers to execute arbitrary code via a long text attribute in an outline element in a .opml file.
CVE-2009-0544
1Pycrypto
1Arc2
Apr 23, 2026
Feb 12, 2009
N/A· v4
N/A· v3
10.0 HIGH· v2
Buffer overflow in the PyCrypto ARC2 module 2.0.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large ARC2 key length.
CVE-2009-0036
1Libvirt
1Libvirt
Apr 23, 2026
Feb 11, 2009
N/A· v4
N/A· v3
4.4 MEDIUM· v2
Buffer overflow in the proxyReadClientSocket function in proxy/libvirt_proxy.c in libvirt_proxy 0.5.1 might allow local users to gain privileges by sending a portion of the header of a virProxyPacket packet, and then sen...Show more
Buffer overflow in the proxyReadClientSocket function in proxy/libvirt_proxy.c in libvirt_proxy 0.5.1 might allow local users to gain privileges by sending a portion of the header of a virProxyPacket packet, and then sending the remainder of the packet with crafted values in the header, related to use of uninitialized memory in a validation check.Show less
CVE-2009-0305
1Research In Motion Limited
1Blackberry Application Web Loader
Apr 23, 2026
Feb 10, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Multiple stack-based buffer overflows in the Research in Motion RIM AxLoader ActiveX control in AxLoader.ocx and AxLoader.dll in BlackBerry Application Web Loader 1.0 allow remote attackers to execute arbitrary code via...Show more
Multiple stack-based buffer overflows in the Research in Motion RIM AxLoader ActiveX control in AxLoader.ocx and AxLoader.dll in BlackBerry Application Web Loader 1.0 allow remote attackers to execute arbitrary code via unspecified use of the (1) load or (2) loadJad method.Show less
CVE-2009-0450
1Blazevideo
1Hdtv Player
Apr 23, 2026
Feb 10, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Stack-based buffer overflow in BlazeVideo HDTV Player 3.5 and earlier allows remote attackers to execute arbitrary code via a long string in a playlist (aka .plf) file.
CVE-2009-0449
1Kaspersky Lab
1Kaspersky Anti Virus
Apr 23, 2026
Feb 10, 2009
N/A· v4
N/A· v3
7.2 HIGH· v2
Buffer overflow in klim5.sys in Kaspersky Anti-Virus for Workstations 6.0 and Anti-Virus 2008 allows local users to gain privileges via an IOCTL 0x80052110 call.
CVE-2009-0443
1Elecard
1Elecard Avc Hd Player
Apr 23, 2026
Feb 10, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Stack-based buffer overflow in Elecard AVC HD PLAYER 5.5.90116 allows remote attackers to execute arbitrary code via an M3U file containing a long string in a URL.
CVE-2008-6071
1Graphicsmagick
1Graphicsmagick
Apr 23, 2026
Feb 10, 2009
N/A· v4
N/A· v3
10.0 HIGH· v2
Heap-based buffer overflow in the DecodeImage function in coders/pict.c in GraphicsMagick before 1.1.14, and 1.2.x before 1.2.3, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary...Show more
Heap-based buffer overflow in the DecodeImage function in coders/pict.c in GraphicsMagick before 1.1.14, and 1.2.x before 1.2.3, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted PICT image. NOTE: some of these details are obtained from third party information.Show less
CVE-2008-6070
1Graphicsmagick
1Graphicsmagick
Apr 23, 2026
Feb 10, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Multiple heap-based buffer underflows in the ReadPALMImage function in coders/palm.c in GraphicsMagick before 1.2.3 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a cra...Show more
Multiple heap-based buffer underflows in the ReadPALMImage function in coders/palm.c in GraphicsMagick before 1.2.3 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted PALM image, a different vulnerability than CVE-2007-0770. NOTE: some of these details are obtained from third party information.Show less
CVE-2009-0491
1Elecard
1Elecard Mpeg Player
Apr 23, 2026
Feb 10, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Stack-based buffer overflow in Elecard MPEG Player 5.5 build 15884.081218 allows remote attackers to execute arbitrary code via a M3U file containing a long URL.
CVE-2009-0210
1Areva
1E Terrahabitat
Apr 23, 2026
Feb 8, 2009
N/A· v4
N/A· v3
10.0 HIGH· v2
Buffer overflow in the MLF application in AREVA e-terrahabitat 5.7 and earlier allows remote attackers to execute arbitrary commands or cause a denial of service (system crash) via unspecified vectors, aka PD28578.
CVE-2009-0476
1Multimediasoft
5Audio Dj Studio For .net
Audio Sound Editer For .netAudio Sound Recorder For .net+2 more
Apr 23, 2026
Feb 8, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Stack-based buffer overflow in MultiMedia Soft AdjMmsEng.dll 7.11.1.0 and 7.11.2.7, as distributed in multiple MultiMedia Soft audio components for .NET, allows remote attackers to execute arbitrary code via a long strin...Show more
Stack-based buffer overflow in MultiMedia Soft AdjMmsEng.dll 7.11.1.0 and 7.11.2.7, as distributed in multiple MultiMedia Soft audio components for .NET, allows remote attackers to execute arbitrary code via a long string in a playlist (.pls) file, as originally reported for Euphonics Audio Player 1.0. NOTE: some of these details are obtained from third party information.Show less
CVE-2009-0376
1Realnetworks
1Realplayer
Apr 23, 2026
Feb 8, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Heap-based buffer overflow in a DLL file in RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer 11 11.0.0 through 11.0.4, RealPlayer Enterprise, Mac RealPlayer 10 and 10.1, Linux RealP...Show more
Heap-based buffer overflow in a DLL file in RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer 11 11.0.0 through 11.0.4, RealPlayer Enterprise, Mac RealPlayer 10 and 10.1, Linux RealPlayer 10, and Helix Player 10.x allows remote attackers to execute arbitrary code via a crafted Internet Video Recording (IVR) file with a modified field that controls an unspecified structure length and triggers heap corruption, related to use of RealPlayer through a Windows Explorer plugin.Show less
CVE-2008-4562
1Hp
1Openview Network Node Manager
Apr 23, 2026
Feb 8, 2009
N/A· v4
N/A· v3
10.0 HIGH· v2
Buffer overflow in the ovlaunch CGI program in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 on Windows allows remote attackers to execute arbitrary code via a crafted Host parameter. NOTE: this issue ma...Show more
Buffer overflow in the ovlaunch CGI program in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 on Windows allows remote attackers to execute arbitrary code via a crafted Host parameter. NOTE: this issue may be partially covered by CVE-2009-0205.Show less
CVE-2009-0410
1Novell
1Groupwise
Apr 23, 2026
Feb 3, 2009
N/A· v4
N/A· v3
10.0 HIGH· v2
Off-by-one error in the SMTP daemon in GroupWise Internet Agent (GWIA) in Novell GroupWise 6.5x, 7.0, 7.01, 7.02, 7.03, 7.03HP1a, and 8.0 allows remote attackers to execute arbitrary code via a long e-mail address in a m...Show more
Off-by-one error in the SMTP daemon in GroupWise Internet Agent (GWIA) in Novell GroupWise 6.5x, 7.0, 7.01, 7.02, 7.03, 7.03HP1a, and 8.0 allows remote attackers to execute arbitrary code via a long e-mail address in a malformed RCPT command, leading to a buffer overflow.Show less
CVE-2009-0184
1Free Download Manager
1Free Download Manager
Apr 23, 2026
Feb 3, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Multiple buffer overflows in the torrent parsing implementation in Free Download Manager (FDM) 2.5 Build 758 and 3.0 Build 844 allow remote attackers to execute arbitrary code via (1) a long file name within a torrent fi...Show more
Multiple buffer overflows in the torrent parsing implementation in Free Download Manager (FDM) 2.5 Build 758 and 3.0 Build 844 allow remote attackers to execute arbitrary code via (1) a long file name within a torrent file, (2) a long tracker URL in a torrent file, or (3) a long comment in a torrent file.Show less
CVE-2009-0183
1Free Download Manager
1Free Download Manager
Apr 23, 2026
Feb 3, 2009
N/A· v4
N/A· v3
10.0 HIGH· v2
Stack-based buffer overflow in Remote Control Server in Free Download Manager (FDM) 2.5 Build 758 and 3.0 Build 844 allows remote attackers to execute arbitrary code via a long Authorization header in an HTTP request.
CVE-2009-0398
1Gstreamer
1Plug Ins
Apr 23, 2026
Feb 3, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Array index error in the gst_qtp_trak_handler function in gst/qtdemux/qtdemux.c in GStreamer Plug-ins (aka gstreamer-plugins) 0.6.0 allows remote attackers to have an unknown impact via a crafted QuickTime media file.