Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

CVEs (14,074)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-3889 1Libmobi Project 1Libmobi Jun 17, 2026 Oct 19, 2021 N/A· v4 8.1 HIGH· v3 5.8 MEDIUM· v2 libmobi is vulnerable to Use of Out-of-range Pointer Offset
CVE-2021-3888 1Libmobi Project 1Libmobi Jun 17, 2026 Oct 19, 2021 N/A· v4 8.1 HIGH· v3 5.8 MEDIUM· v2 libmobi is vulnerable to Use of Out-of-range Pointer Offset
CVE-2021-38442 1Fatek 1Winproladder Jun 17, 2026 Oct 18, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 FATEK Automation WinProladder versions 3.30 and prior lacks proper validation of user-supplied data when parsing project files, which could result in a heap-corruption condition. An attacker could leverage this vulnerabi...Show more FATEK Automation WinProladder versions 3.30 and prior lacks proper validation of user-supplied data when parsing project files, which could result in a heap-corruption condition. An attacker could leverage this vulnerability to execute code in the context of the current process.Show less
CVE-2021-38436 1Fatek 1Winproladder Jun 17, 2026 Oct 18, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 FATEK Automation WinProladder versions 3.30 and prior lacks proper validation of user-supplied data when parsing project files, which could result in a memory-corruption condition. An attacker could leverage this vulnera...Show more FATEK Automation WinProladder versions 3.30 and prior lacks proper validation of user-supplied data when parsing project files, which could result in a memory-corruption condition. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process.Show less
CVE-2021-41121 1Vyperlang 1Vyper Jun 17, 2026 Oct 6, 2021 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 Vyper is a Pythonic Smart Contract Language for the EVM. In affected versions when performing a function call inside a literal struct, there is a memory corruption issue that occurs because of an incorrect pointer to the...Show more Vyper is a Pythonic Smart Contract Language for the EVM. In affected versions when performing a function call inside a literal struct, there is a memory corruption issue that occurs because of an incorrect pointer to the the top of the stack. This issue has been resolved in version 0.3.0.Show less
CVE-2021-25493 1Samsung 1Notes Jun 17, 2026 Oct 6, 2021 N/A· v4 7.1 HIGH· v3 3.6 LOW· v2 Lack of boundary checking of a buffer in libSPenBase library of Samsung Notes prior to Samsung Note version 4.3.02.61 allows OOB read
CVE-2021-40715 1Adobe 1Premiere Pro Jun 17, 2026 Sep 29, 2021 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 Adobe Premiere Pro version 15.4 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious .exr file, potentially resulting in arbitrary code execution in the context of the cu...Show more Adobe Premiere Pro version 15.4 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious .exr file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required in that the victim must open a specially crafted file to exploit this vulnerability.Show less
CVE-2021-40710 1Adobe 1Premiere Pro Jun 17, 2026 Sep 29, 2021 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 Adobe Premiere Pro version 15.4 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious .svg file, potentially resulting in arbitrary code execution in the context of the cu...Show more Adobe Premiere Pro version 15.4 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious .svg file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required in that the victim must open a specially crafted file to exploit this vulnerability.Show less
CVE-2021-39832 1Adobe 1Framemaker Jun 17, 2026 Sep 29, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Adobe Framemaker versions 2019 Update 8 (and earlier) and 2020 Release Update 2 (and earlier) are affected by a memory corruption vulnerability due to insecure handling of a malicious PDF file, potentially resulting in a...Show more Adobe Framemaker versions 2019 Update 8 (and earlier) and 2020 Release Update 2 (and earlier) are affected by a memory corruption vulnerability due to insecure handling of a malicious PDF file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.Show less
CVE-2021-39830 1Adobe 1Framemaker Jun 17, 2026 Sep 29, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Adobe Framemaker versions 2019 Update 8 (and earlier) and 2020 Release Update 2 (and earlier) are affected by a memory corruption vulnerability due to insecure handling of a malicious PDF file, potentially resulting in a...Show more Adobe Framemaker versions 2019 Update 8 (and earlier) and 2020 Release Update 2 (and earlier) are affected by a memory corruption vulnerability due to insecure handling of a malicious PDF file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.Show less
CVE-2021-40703 1Adobe 1Premiere Elements Jun 17, 2026 Sep 27, 2021 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 Adobe Premiere Elements version 2021.2235820 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious m4a file, potentially resulting in arbitrary code execution in the conte...Show more Adobe Premiere Elements version 2021.2235820 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious m4a file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.Show less
CVE-2021-40702 1Adobe 1Premiere Elements Jun 17, 2026 Sep 27, 2021 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 Adobe Premiere Elements version 2021.2235820 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious psd file, potentially resulting in arbitrary code execution in the conte...Show more Adobe Premiere Elements version 2021.2235820 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious psd file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.Show less
CVE-2021-40701 1Adobe 1Premiere Elements Jun 17, 2026 Sep 27, 2021 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 Adobe Premiere Elements version 2021.2235820 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious m4a file, potentially resulting in arbitrary code execution in the conte...Show more Adobe Premiere Elements version 2021.2235820 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious m4a file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.Show less
CVE-2021-40700 1Adobe 1Premiere Elements Jun 17, 2026 Sep 27, 2021 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 Adobe Premiere Elements version 2021.2235820 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious TIFF file, potentially resulting in arbitrary code execution in the cont...Show more Adobe Premiere Elements version 2021.2235820 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious TIFF file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.Show less
CVE-2021-39824 1Adobe 1Premiere Elements Jun 17, 2026 Sep 27, 2021 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 Adobe Premiere Elements version 2021.2235820 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious png file, potentially resulting in arbitrary code execution in the conte...Show more Adobe Premiere Elements version 2021.2235820 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious png file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.Show less
CVE-2021-39819 1Adobe 1Incopy Jun 17, 2026 Sep 27, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Adobe InCopy version 11.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious XML file, potentially resulting in arbitrary code execution in the context of the current u...Show more Adobe InCopy version 11.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious XML file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.Show less
CVE-2021-39818 1Adobe 1Incopy Jun 17, 2026 Sep 27, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Adobe InCopy version 11.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious TIFF file, potentially resulting in arbitrary code execution in the context of the current...Show more Adobe InCopy version 11.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious TIFF file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.Show less
CVE-2021-40157 1Autodesk 1Fbx Review Jun 17, 2026 Sep 15, 2021 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 A user may be tricked into opening a malicious FBX file which may exploit an Untrusted Pointer Dereference vulnerability in FBX’s Review version 1.5.0 and prior causing it to run arbitrary code on the system.
CVE-2021-33737 1Siemens 6Simatic Cp 343 1 Advanced Firmware Simatic Cp 343 1 Erpc FirmwareSimatic Cp 343 1 Firmware+3 more Jun 17, 2026 Sep 14, 2021 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 A vulnerability has been identified in SIMATIC CP 343-1 (incl. SIPLUS variants) (All versions), SIMATIC CP 343-1 Advanced (incl. SIPLUS variants) (All versions), SIMATIC CP 343-1 ERPC (All versions), SIMATIC CP 343-1 Lea...Show more A vulnerability has been identified in SIMATIC CP 343-1 (incl. SIPLUS variants) (All versions), SIMATIC CP 343-1 Advanced (incl. SIPLUS variants) (All versions), SIMATIC CP 343-1 ERPC (All versions), SIMATIC CP 343-1 Lean (incl. SIPLUS variants) (All versions), SIMATIC CP 443-1 (All versions < V3.3), SIMATIC CP 443-1 (All versions < V3.3), SIMATIC CP 443-1 Advanced (All versions < V3.3), SIPLUS NET CP 443-1 (All versions < V3.3), SIPLUS NET CP 443-1 Advanced (All versions < V3.3). Sending a specially crafted packet to port 102/tcp of an affected device could cause a denial of service condition. A restart is needed to restore normal operations.Show less
CVE-2021-25449 1Google 1Android Jun 17, 2026 Sep 9, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 An improper input validation vulnerability in libsapeextractor library prior to SMR Sep-2021 Release 1 allows attackers to execute arbitrary code in mediaextractor process.

Previous 1...146147148...704 Next