Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

CVEs (14,074)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-36343 1Dell 411Alienware 13 R3 Firmware Alienware 15 R3 FirmwareAlienware 15 R4 Firmware+408 more Jun 17, 2026 Jan 24, 2022 N/A· v4 6.4 MEDIUM· v3 7.2 HIGH· v2 Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.
CVE-2021-36342 1Dell 427Alienware 13 R3 Firmware Alienware 15 R3 FirmwareAlienware 15 R4 Firmware+424 more Jun 17, 2026 Jan 24, 2022 N/A· v4 6.4 MEDIUM· v3 7.2 HIGH· v2 Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.
CVE-2021-46333 1Moddable 1Moddable Sdk Jun 17, 2026 Jan 20, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Moddable SDK v11.5.0 was discovered to contain an invalid memory access vulnerability via the component __asan_memmove.
CVE-2021-46020 1Mruby 1Mruby Jun 17, 2026 Jan 14, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An untrusted pointer dereference in mrb_vm_exec() of mruby v3.0.0 can lead to a segmentation fault or application crash.
CVE-2021-45767 1Gpac 1Gpac Jun 17, 2026 Jan 14, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 GPAC 1.1.0 was discovered to contain an invalid memory address dereference via the function lsr_read_id(). This vulnerability can lead to a Denial of Service (DoS).
CVE-2021-45764 1Gpac 1Gpac Jun 17, 2026 Jan 14, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 GPAC v1.1.0 was discovered to contain an invalid memory address dereference via the function shift_chunk_offsets.isra().
CVE-2021-45067 1Adobe 4Acrobat Acrobat DcAcrobat Reader+1 more Jun 17, 2026 Jan 14, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by an Access of Memory Location After End of Buffer vulnerability that could lead to disclosure...Show more Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by an Access of Memory Location After End of Buffer vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2021-44712 1Adobe 4Acrobat Acrobat DcAcrobat Reader+1 more Jun 17, 2026 Jan 14, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by an Access of Memory Location After End of Buffer vulnerability that could lead to applicatio...Show more Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by an Access of Memory Location After End of Buffer vulnerability that could lead to application denial-of-service. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2021-39633 1Google 1Android Jun 17, 2026 Jan 14, 2022 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 In gre_handle_offloads of ip_gre.c, there is a possible page fault due to an invalid memory access. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not...Show more In gre_handle_offloads of ip_gre.c, there is a possible page fault due to an invalid memory access. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-150694665References: Upstream kernelShow less
CVE-2021-45762 1Gpac 1Gpac Jun 17, 2026 Jan 14, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 GPAC v1.1.0 was discovered to contain an invalid memory address dereference via the function gf_sg_vrml_mf_reset(). This vulnerability allows attackers to cause a Denial of Service (DoS).
CVE-2021-45760 1Gpac 1Gpac Jun 17, 2026 Jan 14, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 GPAC v1.1.0 was discovered to contain an invalid memory address dereference via the function gf_list_last(). This vulnerability allows attackers to cause a Denial of Service (DoS).
CVE-2021-34934 1Bentley 2Bentley View Microstation Jun 17, 2026 Jan 13, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malici...Show more This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JT files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-14912.Show less
CVE-2021-34874 1Bentley 2Bentley View Microstation Jun 17, 2026 Jan 13, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malici...Show more This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of 3DS files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-14736.Show less
CVE-2022-21852 1Microsoft 4Windows 10 Windows 11Windows Server+1 more Jun 17, 2026 Jan 11, 2022 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 Windows DWM Core Library Elevation of Privilege Vulnerability
CVE-2021-46053 1Webassembly 1Binaryen Jun 17, 2026 Jan 10, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 A Denial of Service vulnerability exists in Binaryen 103. The program terminates with signal SIGKILL.
CVE-2021-40027 1Huawei 1Harmonyos Jun 17, 2026 Jan 10, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The bone voice ID TA has a vulnerability in calculating the buffer length,Successful exploitation of this vulnerability may affect data confidentiality.
CVE-2021-30289 1Qualcomm 103Apq8009w Firmware Apq8017 FirmwareApq8096au Firmware+100 more Jun 17, 2026 Jan 3, 2022 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 Possible buffer overflow due to lack of range check while processing a DIAG command for COEX management in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapd...Show more Possible buffer overflow due to lack of range check while processing a DIAG command for COEX management in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesShow less
CVE-2021-45709 1Crypto2 Project 1Crypto2 Jun 17, 2026 Dec 27, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 An issue was discovered in the crypto2 crate through 2021-10-08 for Rust. During Chacha20 encryption and decryption, an unaligned read of a u32 may occur.
CVE-2017-13906 1Apple 1Mac Os X Nov 21, 2024 Dec 23, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS High Sierra 10.13.1, Security Update 2017-001 Sierra, and Security Update 2017-004 El Capitan, macOS High Sierra 10.13....Show more A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS High Sierra 10.13.1, Security Update 2017-001 Sierra, and Security Update 2017-004 El Capitan, macOS High Sierra 10.13. A malicious application may be able to elevate privileges.Show less
CVE-2017-13835 1Apple 1Mac Os X Nov 21, 2024 Dec 23, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS High Sierra 10.13. An application may be able to execute arbitrary code with elevated privileges.

Previous 1...142143144...704 Next