Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

CVEs (14,074)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-40779 1Adobe 1Media Encoder Jun 17, 2026 Mar 16, 2022 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 Adobe Media Encoder version 15.4.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious file, potentially resulting in arbitrary code execution in the context of the curr...Show more Adobe Media Encoder version 15.4.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.Show less
CVE-2021-40777 1Adobe 1Media Encoder Jun 17, 2026 Mar 16, 2022 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 Adobe Media Encoder version 15.4.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious file, potentially resulting in arbitrary code execution in the context of the curr...Show more Adobe Media Encoder version 15.4.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.Show less
CVE-2021-40765 1Adobe 1Character Animator Jun 17, 2026 Mar 16, 2022 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 Adobe Character Animator version 4.4 (and earlier) is affected by a memory corruption vulnerability when parsing a M4A file, potentially resulting in arbitrary code execution in the context of the current user. User inte...Show more Adobe Character Animator version 4.4 (and earlier) is affected by a memory corruption vulnerability when parsing a M4A file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.Show less
CVE-2021-40764 1Adobe 1Character Animator Jun 17, 2026 Mar 16, 2022 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 Adobe Character Animator version 4.4 (and earlier) is affected by a memory corruption vulnerability when parsing a M4A file, potentially resulting in arbitrary code execution in the context of the current user. User inte...Show more Adobe Character Animator version 4.4 (and earlier) is affected by a memory corruption vulnerability when parsing a M4A file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.Show less
CVE-2021-40763 1Adobe 1Character Animator Jun 17, 2026 Mar 16, 2022 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 Adobe Character Animator version 4.4 (and earlier) is affected by a memory corruption vulnerability when parsing a WAF file, potentially resulting in arbitrary code execution in the context of the current user. User inte...Show more Adobe Character Animator version 4.4 (and earlier) is affected by a memory corruption vulnerability when parsing a WAF file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.Show less
CVE-2021-40740 1Adobe 1Audition Jun 17, 2026 Mar 16, 2022 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 Adobe Audition version 14.4 (and earlier) is affected by a memory corruption vulnerability when parsing a M4A file, potentially resulting in arbitrary code execution in the context of the current user. User interaction i...Show more Adobe Audition version 14.4 (and earlier) is affected by a memory corruption vulnerability when parsing a M4A file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.Show less
CVE-2021-40739 1Adobe 1Audition Jun 17, 2026 Mar 16, 2022 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 Adobe Audition version 14.4 (and earlier) is affected by a memory corruption vulnerability when parsing a M4A file, potentially resulting in arbitrary code execution in the context of the current user. User interaction i...Show more Adobe Audition version 14.4 (and earlier) is affected by a memory corruption vulnerability when parsing a M4A file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.Show less
CVE-2021-40738 1Adobe 1Audition Jun 17, 2026 Mar 16, 2022 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 Adobe Audition version 14.4 (and earlier) is affected by a memory corruption vulnerability when parsing a WAV file, potentially resulting in arbitrary code execution in the context of the current user. User interaction i...Show more Adobe Audition version 14.4 (and earlier) is affected by a memory corruption vulnerability when parsing a WAV file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.Show less
CVE-2021-40736 1Adobe 1Audition Jun 17, 2026 Mar 16, 2022 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 Adobe Audition version 14.4 (and earlier) is affected by a memory corruption vulnerability, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit th...Show more Adobe Audition version 14.4 (and earlier) is affected by a memory corruption vulnerability, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.Show less
CVE-2021-40735 1Adobe 1Audition Jun 17, 2026 Mar 16, 2022 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 Adobe Audition version 14.4 (and earlier) is affected by a memory corruption vulnerability, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit th...Show more Adobe Audition version 14.4 (and earlier) is affected by a memory corruption vulnerability, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.Show less
CVE-2021-40734 1Adobe 1Audition Jun 17, 2026 Mar 16, 2022 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 Adobe Audition version 14.4 (and earlier) is affected by a memory corruption vulnerability when parsing a SVG file, potentially resulting in arbitrary code execution in the context of the current user. User interaction i...Show more Adobe Audition version 14.4 (and earlier) is affected by a memory corruption vulnerability when parsing a SVG file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.Show less
CVE-2021-39693 1Google 1Android Jun 17, 2026 Mar 16, 2022 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 In onUidStateChanged of AppOpsService.java, there is a possible way to access location without a visible indicator due to a logic error in the code. This could lead to local escalation of privilege with no additional exe...Show more In onUidStateChanged of AppOpsService.java, there is a possible way to access location without a visible indicator due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-208662370Show less
CVE-2021-42262 1Softing 3Datafeed Opc Suite Opc Ua C++ Software Development KitSecure Integration Server Jun 17, 2026 Mar 11, 2022 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 An issue was discovered in Softing OPC UA C++ SDK before 5.70. An invalid XML element in the type dictionary makes the OPC/UA client crash due to an out-of-memory condition.
CVE-2022-24421 1Dell 46Alienware 13 R3 Firmware Alienware 15 R3 FirmwareAlienware 15 R4 Firmware+43 more Jun 17, 2026 Mar 11, 2022 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM.
CVE-2022-24420 1Dell 46Alienware 13 R3 Firmware Alienware 15 R3 FirmwareAlienware 15 R4 Firmware+43 more Jun 17, 2026 Mar 11, 2022 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM.
CVE-2022-24419 1Dell 46Alienware 13 R3 Firmware Alienware 15 R3 FirmwareAlienware 15 R4 Firmware+43 more Jun 17, 2026 Mar 11, 2022 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM.
CVE-2022-24416 1Dell 46Alienware 13 R3 Firmware Alienware 15 R3 FirmwareAlienware 15 R4 Firmware+43 more Jun 17, 2026 Mar 11, 2022 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM.
CVE-2022-24415 1Dell 46Alienware 13 R3 Firmware Alienware 15 R3 FirmwareAlienware 15 R4 Firmware+43 more Jun 17, 2026 Mar 11, 2022 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM.
CVE-2022-25818 1Google 1Android Jun 17, 2026 Mar 10, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Improper boundary check in UWB stack prior to SMR Mar-2022 Release 1 allows arbitrary code execution.
CVE-2022-0204 3Bluez DebianFedoraproject 3Bluez Debian LinuxFedora Jun 17, 2026 Mar 10, 2022 N/A· v4 8.8 HIGH· v3 5.8 MEDIUM· v2 A heap overflow vulnerability was found in bluez in versions prior to 5.63. An attacker with local network access could pass specially crafted files causing an application to halt or crash, leading to a denial of service...Show more A heap overflow vulnerability was found in bluez in versions prior to 5.63. An attacker with local network access could pass specially crafted files causing an application to halt or crash, leading to a denial of service.Show less

Previous 1...139140141...704 Next