← Back
CWE-119

14,219 CVEs • Abstraction: Class • Likelihood of Exploit: High

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

JSON object

Loading...

CVEs (14,219)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
13d Ftp
13d Ftp
Apr 16, 2026
Dec 31, 2003
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Buffer overflow in 3D-FTP client 4.0 allows remote FTP servers to cause a denial of service (crash) and possibly execute arbitrary code via a long banner.
1Alt N
1Mdaemon
Apr 16, 2026
Dec 31, 2003
N/A· v4
N/A· v3
9.0 HIGH· v2
Buffer overflow in IMAP service in MDaemon 6.7.5 and earlier allows remote authenticated users to cause a denial of service (crash) and execute arbitrary code via a CREATE command with a long mailbox name.
1Siemens
2M45
S45
Apr 16, 2026
Dec 31, 2003
N/A· v4
N/A· v3
7.8 HIGH· v2
Buffer overflow in Siemens 45 series mobile phones allows remote attackers to cause a denial of service (disconnect and unavailable inbox) via a Short Message Service (SMS) message with a long image name.
1Hp
1Hp Ux
Apr 16, 2026
Dec 31, 2003
N/A· v4
N/A· v3
7.2 HIGH· v2
Buffer overflow in rwrite for HP-UX 11.0 could allow local users to execute arbitrary code via a long argument. NOTE: the vendor was unable to reproduce the problem on a system that had been patched for an lp vulnerabil...Show more
Buffer overflow in rwrite for HP-UX 11.0 could allow local users to execute arbitrary code via a long argument. NOTE: the vendor was unable to reproduce the problem on a system that had been patched for an lp vulnerability (CVE-2002-1473).Show less
1Poptop
1Pptp Server
Apr 16, 2026
Dec 31, 2003
N/A· v4
N/A· v3
7.2 HIGH· v2
Multiple buffer overflows in the launch_bcrelay function in pptpctrl.c in PoPToP 1.1.4-b1 through PoPToP 1.1.4-b3 allow local users to execute arbitrary code.
1Symantec
1Norton Antivirus
Apr 16, 2026
Dec 31, 2003
N/A· v4
N/A· v3
6.4 MEDIUM· v2
Buffer overflow in Symantec Norton AntiVirus 2002 allows remote attackers to execute arbitrary code via an e-mail attachment with a compressed ZIP file that contains a file with a long filename.
1Rogue
1Rogue
Apr 16, 2026
Dec 31, 2003
N/A· v4
N/A· v3
4.9 MEDIUM· v2
Buffer overflow in the save_into_file function in save.c for Rogue 5.2-2 allows local users to execute arbitrary code with games group privileges by setting a long HOME environment variable and invoking the save game fun...Show more
Buffer overflow in the save_into_file function in save.c for Rogue 5.2-2 allows local users to execute arbitrary code with games group privileges by setting a long HOME environment variable and invoking the save game function with a ~ (tilde).Show less
1Rarlab
1Far Manager
Apr 16, 2026
Dec 31, 2003
N/A· v4
N/A· v3
4.6 MEDIUM· v2
Stack-based buffer overflow in Far Manager 1.70beta1 and earlier allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a long pathname.
1Epic Games
1Unreal Engine
Apr 16, 2026
Dec 31, 2003
N/A· v4
N/A· v3
7.1 HIGH· v2
Buffer overflow in Epic Games Unreal Engine 226f through 436 allows remote attackers to cause a denial of service (crash) via a long host string in the Unreal URL.
1Proxomitron
1Proxomitron Naoko
Apr 16, 2026
Dec 31, 2003
N/A· v4
N/A· v3
7.5 HIGH· v2
Buffer overflow in Proxomitron Naoko 4.4 allows remote attackers to execute arbitrary code via a long request.
1Visual Mining
1Netcharts Xbrl Server
Apr 16, 2026
Dec 31, 2003
N/A· v4
N/A· v3
6.8 MEDIUM· v2
NetCharts XBRL Server 4.0.0 allows remote attackers to obtain sensitive information via an HTTP request with an invalid chunked transfer encoding specification.
1Microsoft
1Windows Nt
Apr 16, 2026
Dec 31, 2003
N/A· v4
N/A· v3
7.2 HIGH· v2
Buffer overflow in cmd.exe in Windows NT 4.0 may allow local users to execute arbitrary code via a long pathname argument to the cd command.
1Opera
1Opera Browser
Apr 16, 2026
Dec 31, 2003
N/A· v4
N/A· v3
4.3 MEDIUM· v2
The PluginContext object of Opera 6.05 and 7.0 allows remote attackers to cause a denial of service (crash) via an HTTP request containing a long string that gets passed to the ShowDocument method.
1Kazaa
1Kazaa Media Desktop
Apr 16, 2026
Dec 31, 2003
N/A· v4
N/A· v3
9.0 HIGH· v2
Buffer overflow in KaZaA Media Desktop 2.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a response to the ad server.
1Gupta Technologies
1Sqlbase
Apr 16, 2026
Dec 31, 2003
N/A· v4
N/A· v3
8.5 HIGH· v2
Buffer overflow in Gupta SQLBase 8.1.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long EXECUTE command.
1Instantservers Inc.
1Ismail
Apr 16, 2026
Dec 31, 2003
N/A· v4
N/A· v3
7.5 HIGH· v2
Buffer overflow in ISMail 1.4.3 and earlier allow remote attackers to execute arbitrary code via long domain names in (1) MAIL FROM or (2) RCPT TO fields.
1Sircd
1Sircd
Apr 16, 2026
Dec 31, 2003
N/A· v4
N/A· v3
8.3 HIGH· v2
Buffer overflow in the reverse DNS lookup of Smart IRC Daemon (SIRCD) 0.4.0 and 0.4.4 allows remote attackers to execute arbitrary code via a client with a long hostname.
1Hp
1Hp Ux
Apr 16, 2026
Dec 31, 2003
N/A· v4
N/A· v3
7.2 HIGH· v2
Buffer overflow in wall for HP-UX 10.20 through 11.11 may allow local users to execute arbitrary code by calling wall with a large file as an argument.
1Hp
1Hp Ux
Apr 16, 2026
Dec 31, 2003
N/A· v4
N/A· v3
4.6 MEDIUM· v2
Buffer overflow in disable of HP-UX 11.0 may allow local users to execute arbitrary code via a long argument to the (1) -r or (2)-c options.
1Save It Software Pty
1Bytecatcherftp
Apr 16, 2026
Dec 31, 2003
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Buffer overflow in ByteCatcher FTP client 1.04b allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long FTP server banner.