Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

CVEs (14,087)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2017-15782 1Xnview 1Xnview May 13, 2026 Oct 22, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV starting at CADImage+0x00000000000032eb."
CVE-2017-15781 1Xnview 1Xnview May 13, 2026 Oct 22, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "Read Access Violation on Control Flow starting at CADImage+0x00000000...Show more XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "Read Access Violation on Control Flow starting at CADImage+0x0000000000286a76."Show less
CVE-2017-15780 1Xnview 1Xnview May 13, 2026 Oct 22, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at CADImage+0x00000000...Show more XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at CADImage+0x0000000000285dad."Show less
CVE-2017-15779 1Xnview 1Xnview May 13, 2026 Oct 22, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to "Data from Faulting Address controls subsequent Write Address starting a...Show more XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to "Data from Faulting Address controls subsequent Write Address starting at CADImage+0x00000000000034b0."Show less
CVE-2017-15778 1Xnview 1Xnview May 13, 2026 Oct 22, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at CADImage+0x00000000...Show more XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at CADImage+0x0000000000285de7."Show less
CVE-2017-15777 1Xnview 1Xnview May 13, 2026 Oct 22, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV near NULL starting at CADImage+0x0000000000288750....Show more XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV near NULL starting at CADImage+0x0000000000288750."Show less
CVE-2017-15776 1Xnview 1Xnview May 13, 2026 Oct 22, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address may be used as a return valu...Show more XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address may be used as a return value starting at CADImage+0x0000000000285ec1."Show less
CVE-2017-15775 1Xnview 1Xnview May 13, 2026 Oct 22, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address controls Branch Selection st...Show more XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address controls Branch Selection starting at CADImage+0x0000000000259aa4."Show less
CVE-2017-15774 1Xnview 1Xnview May 13, 2026 Oct 22, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to "Data from Faulting Address controls Code Flow starting at CADImage+0x00...Show more XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to "Data from Faulting Address controls Code Flow starting at CADImage+0x0000000000221a9a."Show less
CVE-2017-15773 1Xnview 1Xnview May 13, 2026 Oct 22, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at CADImage+0x00000000...Show more XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at CADImage+0x0000000000285d79."Show less
CVE-2017-15772 1Xnview 1Xnview May 13, 2026 Oct 22, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address may be used as a return valu...Show more XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address may be used as a return value starting at CADImage+0x0000000000285e9d."Show less
CVE-2017-15769 1Irfanview 1Irfanview May 13, 2026 Oct 22, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 IrfanView 4.50 - 64bit allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dds file, related to "Read Access Violation starting at FORMATS!ReadBLP_W+0x0000000000001b22."
CVE-2017-15768 1Irfanview 1Irfanview May 13, 2026 Oct 22, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 IrfanView version 4.50 - 64bit allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .tif file, related to "Data from Faulting Address controls Branch Selection starting at...Show more IrfanView version 4.50 - 64bit allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .tif file, related to "Data from Faulting Address controls Branch Selection starting at image000007f7_42060000+0x0000000000094113."Show less
CVE-2017-15767 1Irfanview 2Cadimage Irfanview May 13, 2026 Oct 22, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV near NULL starting at CADIMAG...Show more IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV near NULL starting at CADIMAGE+0x00000000003d5b52."Show less
CVE-2017-15766 1Irfanview 2Babacad4image Irfanview May 13, 2026 Oct 22, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address control...Show more IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address controls Branch Selection starting at BabaCAD4Image!ShowPlugInOptions+0x000000000001f0a0."Show less
CVE-2017-15765 1Irfanview 2Cadimage Irfanview May 13, 2026 Oct 22, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address is used...Show more IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at CADIMAGE+0x00000000003e9462."Show less
CVE-2017-15764 1Irfanview 2Babacad4image Irfanview May 13, 2026 Oct 22, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting a...Show more IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at BabaCAD4Image!ShowPlugInOptions+0x000000000001e6b0."Show less
CVE-2017-15763 1Irfanview 2Babacad4image Irfanview May 13, 2026 Oct 22, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to "Data from Faulting Address controls subsequent Wri...Show more IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to "Data from Faulting Address controls subsequent Write Address starting at BabaCAD4Image!ShowPlugInOptions+0x000000000001eca0."Show less
CVE-2017-15762 1Irfanview 2Babacad4image Irfanview May 13, 2026 Oct 22, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV near NULL starting at BabaCAD...Show more IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV near NULL starting at BabaCAD4Image!ShowPlugInOptions+0x000000000001f31b."Show less
CVE-2017-15761 1Irfanview 2Babacad4image Irfanview May 13, 2026 Oct 22, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV starting at BabaCAD4Image!Sho...Show more IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV starting at BabaCAD4Image!ShowPlugInOptions+0x000000000001ecaa."Show less

Previous 1...261262263...705 Next