Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

CVEs (14,548)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2014-8985 1Microsoft 1Internet Explorer Nov 21, 2024 Feb 8, 2018 N/A· v4 7.5 HIGH· v3 7.6 HIGH· v2 Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a differe...Show more Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2810, CVE-2014-2811, CVE-2014-2822, CVE-2014-2823, CVE-2014-4057, and CVE-2014-4145.Show less
CVE-2014-4145 1Microsoft 1Internet Explorer Nov 21, 2024 Feb 8, 2018 N/A· v4 7.5 HIGH· v3 7.6 HIGH· v2 Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a differe...Show more Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2810, CVE-2014-2811, CVE-2014-2822, CVE-2014-2823, CVE-2014-4057, and CVE-2014-8985.Show less
CVE-2014-4112 1Microsoft 1Internet Explorer Nov 21, 2024 Feb 8, 2018 N/A· v4 7.5 HIGH· v3 7.6 HIGH· v2 Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a differe...Show more Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0304.Show less
CVE-2014-4066 1Microsoft 1Internet Explorer Nov 21, 2024 Feb 8, 2018 N/A· v4 7.5 HIGH· v3 7.6 HIGH· v2 Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a differe...Show more Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2787, CVE-2014-2790, CVE-2014-2802, and CVE-2014-2806.Show less
CVE-2013-3553 1Nitropdf 2Nitro Pro Nitro Reader Nov 21, 2024 Feb 8, 2018 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 Nitro Pro 7.5.0.22 and earlier and Nitro Reader 2.5.0.36 and earlier allow remote attackers to execute arbitrary code via a crafted PDF file.
CVE-2013-3552 1Nitropdf 2Nitro Pro Nitro Reader Nov 21, 2024 Feb 8, 2018 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 Nitro Pro 7.5.0.29 and earlier and Nitro Reader 2.5.0.45 and earlier allow remote attackers to execute arbitrary code via a crafted PDF file.
CVE-2018-0132 1Cisco 1Carrier Routing System Nov 21, 2024 Feb 8, 2018 N/A· v4 8.6 HIGH· v3 5.0 MEDIUM· v2 A vulnerability in the forwarding information base (FIB) code of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause inconsistency between the routing information base (RIB) and the FIB, result...Show more A vulnerability in the forwarding information base (FIB) code of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause inconsistency between the routing information base (RIB) and the FIB, resulting in a denial of service (DoS) condition. The vulnerability is due to incorrect processing of extremely long routing updates. An attacker could exploit this vulnerability by sending a large routing update. A successful exploit could allow the attacker to trigger inconsistency between the FIB and the RIB, resulting in a DoS condition. Cisco Bug IDs: CSCus84718.Show less
CVE-2017-5132 2Debian Google 2Chrome Debian Linux Nov 21, 2024 Feb 7, 2018 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Inappropriate implementation in V8 in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page, aka incorrect WebAssembly stack manipulation.
CVE-2017-5128 2Debian Google 2Chrome Debian Linux Nov 21, 2024 Feb 7, 2018 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Heap buffer overflow in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page, related to WebGL.
CVE-2017-5125 2Debian Google 2Chrome Debian Linux Nov 21, 2024 Feb 7, 2018 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Heap buffer overflow in Skia in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2017-12471 1Ccn Lite 1Ccn Lite Nov 21, 2024 Feb 7, 2018 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 The cnb_parse_lev function in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact by leveraging failure to check for out-of-bounds conditions, which triggers an invalid read in the hexdump...Show more The cnb_parse_lev function in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact by leveraging failure to check for out-of-bounds conditions, which triggers an invalid read in the hexdump function.Show less
CVE-2017-12469 1Ccn Lite 1Ccn Lite Nov 21, 2024 Feb 7, 2018 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Buffer overflow in util/ccnl-common.c in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact by leveraging incorrect memory allocation.
CVE-2017-12468 1Ccn Lite 1Ccn Lite Nov 21, 2024 Feb 7, 2018 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Buffer overflow in ccn-lite-ccnb2xml.c in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact via vectors involving the vallen and len variables.
CVE-2017-12466 1Ccn Lite 1Ccn Lite Nov 21, 2024 Feb 7, 2018 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact via vectors related to ssl_halen when running ccn-lite-sim, which trigger an out-of-bounds access.
CVE-2016-6169 1Foxitsoftware 2Foxit Reader Phantompdf Nov 21, 2024 Feb 7, 2018 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Heap-based buffer overflow in Foxit Reader and PhantomPDF 7.3.4.311 and earlier on Windows allows remote attackers to cause a denial of service (memory corruption and application crash) or potentially execute arbitrary c...Show more Heap-based buffer overflow in Foxit Reader and PhantomPDF 7.3.4.311 and earlier on Windows allows remote attackers to cause a denial of service (memory corruption and application crash) or potentially execute arbitrary code via the Bezier data in a crafted PDF file.Show less
CVE-2016-2541 1Audacityteam 1Audacity Nov 21, 2024 Feb 7, 2018 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Audacity before 2.1.2 allows remote attackers to cause a denial of service (memory corruption and application crash) via a crafted MP2 file.
CVE-2016-2540 1Audacityteam 1Audacity Nov 21, 2024 Feb 7, 2018 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Audacity before 2.1.2 allows remote attackers to cause a denial of service (memory corruption and application crash) via a crafted FORMATCHUNK structure.
CVE-2017-17482 1Hp 1Openvms Nov 21, 2024 Feb 7, 2018 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 An issue was discovered in OpenVMS through V8.4-2L2 on Alpha and through V8.4-2L1 on IA64, and VAX/VMS 4.0 and later. A malformed DCL command table may result in a buffer overflow allowing a local privilege escalation wh...Show more An issue was discovered in OpenVMS through V8.4-2L2 on Alpha and through V8.4-2L1 on IA64, and VAX/VMS 4.0 and later. A malformed DCL command table may result in a buffer overflow allowing a local privilege escalation when a non-privileged account enters a crafted command line. This bug is exploitable on VAX and Alpha and may cause a process crash on IA64. Software was affected regardless of whether it was directly shipped by VMS Software, Inc. (VSI), HPE, HP, Compaq, or Digital Equipment Corporation.Show less
CVE-2018-6799 2Debian Graphicsmagick 2Debian Linux Graphicsmagick Jun 17, 2026 Feb 7, 2018 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 The AcquireCacheNexus function in magick/pixel_cache.c in GraphicsMagick before 1.3.28 allows remote attackers to cause a denial of service (heap overwrite) or possibly have unspecified other impact via a crafted image f...Show more The AcquireCacheNexus function in magick/pixel_cache.c in GraphicsMagick before 1.3.28 allows remote attackers to cause a denial of service (heap overwrite) or possibly have unspecified other impact via a crafted image file, because a pixel staging area is not used.Show less
CVE-2017-17663 1Acme 2Mini Httpd Thttpd Nov 21, 2024 Feb 6, 2018 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 The htpasswd implementation of mini_httpd before v1.28 and of thttpd before v2.28 is affected by a buffer overflow that can be exploited remotely to perform code execution.

Previous 1...261262263...728 Next