Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

CVEs (14,074)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2014-125009 1Ffmpeg 1Ffmpeg Nov 21, 2024 Jun 18, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 A vulnerability classified as problematic has been found in FFmpeg 2.0. This affects the function add_yblock of the file libavcodec/snow.h. The manipulation leads to memory corruption. It is possible to initiate the atta...Show more A vulnerability classified as problematic has been found in FFmpeg 2.0. This affects the function add_yblock of the file libavcodec/snow.h. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. It is recommended to apply a patch to fix this issue.Show less
CVE-2014-125008 1Ffmpeg 1Ffmpeg Nov 21, 2024 Jun 18, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 A vulnerability classified as problematic has been found in FFmpeg 2.0. Affected is the function vorbis_header of the file libavformat/oggparsevorbis.c. The manipulation leads to memory corruption. It is possible to laun...Show more A vulnerability classified as problematic has been found in FFmpeg 2.0. Affected is the function vorbis_header of the file libavformat/oggparsevorbis.c. The manipulation leads to memory corruption. It is possible to launch the attack remotely. It is recommended to apply a patch to fix this issue.Show less
CVE-2014-125007 1Ffmpeg 1Ffmpeg Nov 21, 2024 Jun 18, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 A vulnerability classified as problematic was found in FFmpeg 2.0. Affected by this vulnerability is the function intra_pred of the file libavcodec/hevcpred_template.c. The manipulation leads to memory corruption. The at...Show more A vulnerability classified as problematic was found in FFmpeg 2.0. Affected by this vulnerability is the function intra_pred of the file libavcodec/hevcpred_template.c. The manipulation leads to memory corruption. The attack can be launched remotely. It is recommended to apply a patch to fix this issue.Show less
CVE-2014-125006 1Ffmpeg 1Ffmpeg Nov 21, 2024 Jun 18, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 A vulnerability, which was classified as problematic, has been found in FFmpeg 2.0. Affected by this issue is the function output_frame of the file libavcodec/h264.c. The manipulation leads to memory corruption. The atta...Show more A vulnerability, which was classified as problematic, has been found in FFmpeg 2.0. Affected by this issue is the function output_frame of the file libavcodec/h264.c. The manipulation leads to memory corruption. The attack may be launched remotely. It is recommended to apply a patch to fix this issue.Show less
CVE-2014-125005 1Ffmpeg 1Ffmpeg Nov 21, 2024 Jun 18, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 A vulnerability, which was classified as problematic, was found in FFmpeg 2.0. This affects the function decode_vol_header of the file libavcodec/mpeg4videodec.c. The manipulation leads to memory corruption. It is possib...Show more A vulnerability, which was classified as problematic, was found in FFmpeg 2.0. This affects the function decode_vol_header of the file libavcodec/mpeg4videodec.c. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. It is recommended to apply a patch to fix this issue.Show less
CVE-2014-125004 1Ffmpeg 1Ffmpeg Nov 21, 2024 Jun 18, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 A vulnerability has been found in FFmpeg 2.0 and classified as problematic. This vulnerability affects the function decode_hextile of the file libavcodec/vmnc.c. The manipulation leads to memory corruption. The attack ca...Show more A vulnerability has been found in FFmpeg 2.0 and classified as problematic. This vulnerability affects the function decode_hextile of the file libavcodec/vmnc.c. The manipulation leads to memory corruption. The attack can be initiated remotely. It is recommended to apply a patch to fix this issue.Show less
CVE-2014-125003 1Ffmpeg 1Ffmpeg Nov 21, 2024 Jun 18, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 A vulnerability was found in FFmpeg 2.0 and classified as problematic. This issue affects the function get_siz of the file libavcodec/jpeg2000dec.c. The manipulation leads to memory corruption. The attack may be initiate...Show more A vulnerability was found in FFmpeg 2.0 and classified as problematic. This issue affects the function get_siz of the file libavcodec/jpeg2000dec.c. The manipulation leads to memory corruption. The attack may be initiated remotely. It is recommended to apply a patch to fix this issue.Show less
CVE-2014-125002 1Ffmpeg 1Ffmpeg Nov 21, 2024 Jun 18, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 A vulnerability was found in FFmpeg 2.0. It has been classified as problematic. Affected is the function dnxhd_init_rc of the file libavcodec/dnxhdenc.c. The manipulation leads to memory corruption. It is possible to lau...Show more A vulnerability was found in FFmpeg 2.0. It has been classified as problematic. Affected is the function dnxhd_init_rc of the file libavcodec/dnxhdenc.c. The manipulation leads to memory corruption. It is possible to launch the attack remotely. It is recommended to apply a patch to fix this issue.Show less
CVE-2018-25042 1Bittorrent 1Utorrent Nov 21, 2024 Jun 17, 2022 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 A vulnerability classified as critical has been found in uTorrent. This affects an unknown part. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. It is recommended to upgrade t...Show more A vulnerability classified as critical has been found in uTorrent. This affects an unknown part. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. It is recommended to upgrade the affected component.Show less
CVE-2022-30937 1Siemens 5En100 Ethernet Module Dnp3 Firmware En100 Ethernet Module Iec 104 FirmwareEn100 Ethernet Module Iec 61850 Firmware+2 more Jun 17, 2026 Jun 14, 2022 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 A vulnerability has been identified in EN100 Ethernet module DNP3 IP variant (All versions), EN100 Ethernet module IEC 104 variant (All versions), EN100 Ethernet module IEC 61850 variant (All versions < V4.37), EN100 Eth...Show more A vulnerability has been identified in EN100 Ethernet module DNP3 IP variant (All versions), EN100 Ethernet module IEC 104 variant (All versions), EN100 Ethernet module IEC 61850 variant (All versions < V4.37), EN100 Ethernet module Modbus TCP variant (All versions), EN100 Ethernet module PROFINET IO variant (All versions). Affected applications contains a memory corruption vulnerability while parsing specially crafted HTTP packets to /txtrace endpoint. This could allow an attacker to crash the affected application leading to a denial of service condition.Show less
CVE-2021-35098 1Qualcomm 86Apq8053 Firmware Apq8096au FirmwareAqt1000 Firmware+83 more Jun 17, 2026 Jun 14, 2022 N/A· v4 6.7 MEDIUM· v3 4.6 MEDIUM· v2 Improper validation of session id in PCM routing process can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobil...Show more Improper validation of session id in PCM routing process can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesShow less
CVE-2019-25063 1Sricam 1Deviceviewer Jun 17, 2026 Jun 8, 2022 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 A vulnerability was found in Sricam IP CCTV Camera. It has been classified as critical. Affected is an unknown function of the component Device Viewer. The manipulation leads to memory corruption. Local access is require...Show more A vulnerability was found in Sricam IP CCTV Camera. It has been classified as critical. Affected is an unknown function of the component Device Viewer. The manipulation leads to memory corruption. Local access is required to approach this attack.Show less
CVE-2022-26776 1Apple 1Macos Jun 17, 2026 May 26, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.4, macOS Big Sur 11.6.6. An attacker may be able to cause unexpected application termination or arbitrary code execution.
CVE-2022-26772 1Apple 1Macos Jun 17, 2026 May 26, 2022 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.4. An application may be able to execute arbitrary code with kernel privileges.
CVE-2022-26763 1Apple 6Ipados Iphone OsMac Os X+3 more Jun 17, 2026 May 26, 2022 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, Security Update 2022-004 Catalina, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey...Show more An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, Security Update 2022-004 Catalina, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey 12.4. A malicious application may be able to execute arbitrary code with system privileges.Show less
CVE-2021-44975 1Radare 1Radare2 Jun 17, 2026 May 24, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 radareorg radare2 5.5.2 is vulnerable to Buffer Overflow via /libr/core/anal_objc.c mach-o parser.
CVE-2021-42659 1Tenda 1Ac9 Firmware Jun 17, 2026 May 24, 2022 N/A· v4 6.5 MEDIUM· v3 6.1 MEDIUM· v2 There is a buffer overflow vulnerability in the Web server httpd of the router in Tenda router devices such as Tenda AC9 V1.0 V15.03.02.19(6318) and Tenda AC9 V3.0 V15.03.06.42_multi. When setting the virtual service, th...Show more There is a buffer overflow vulnerability in the Web server httpd of the router in Tenda router devices such as Tenda AC9 V1.0 V15.03.02.19(6318) and Tenda AC9 V3.0 V15.03.06.42_multi. When setting the virtual service, the httpd program will crash and exit when the super-long list parameter occurs.Show less
CVE-2021-46786 1Huawei 3Emui HarmonyosMagic Ui Jun 17, 2026 May 13, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 The audio module has a vulnerability in verifying the parameters passed by the application space.Successful exploitation of this vulnerability may cause out-of-bounds memory access.
CVE-2021-26369 1Amd 50Athlon 3050ge Firmware Athlon 3150g FirmwareAthlon 3150ge Firmware+47 more Jun 17, 2026 May 12, 2022 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 A malicious or compromised UApp or ABL may be used by an attacker to send a malformed system call to the bootloader, resulting in out-of-bounds memory accesses.
CVE-2022-21237 1Intel 59Lapbc510 Firmware Lapbc710 FirmwareLapkc51e Firmware+56 more Jun 17, 2026 May 12, 2022 N/A· v4 6.7 MEDIUM· v3 6.1 MEDIUM· v2 Improper buffer access in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access.

Previous 1...136137138...704 Next