Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

CVEs (14,087)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2017-15760 1Irfanview 2Babacad4image Irfanview May 13, 2026 Oct 22, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV near NULL starting at BabaCAD...Show more IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV near NULL starting at BabaCAD4Image!ShowPlugInOptions+0x000000000001ce82."Show less
CVE-2017-15759 1Irfanview 2Babacad4image Irfanview May 13, 2026 Oct 22, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV near NULL starting at BabaCAD...Show more IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV near NULL starting at BabaCAD4Image!ShowPlugInOptions+0x000000000001b3f3."Show less
CVE-2017-15758 1Irfanview 2Babacad4image Irfanview May 13, 2026 Oct 22, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to "Data from Faulting Address controls subsequent Wri...Show more IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to "Data from Faulting Address controls subsequent Write Address starting at BabaCAD4Image!ShowPlugInOptions+0x000000000004d75b."Show less
CVE-2017-15757 1Irfanview 2Babacad4image Irfanview May 13, 2026 Oct 22, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address control...Show more IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address controls Branch Selection starting at BabaCAD4Image!ShowPlugInOptions+0x00000000000029ba."Show less
CVE-2017-15756 1Irfanview 2Babacad4image Irfanview May 13, 2026 Oct 22, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to "Data from Faulting Address controls subsequent Wri...Show more IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to "Data from Faulting Address controls subsequent Write Address starting at BabaCAD4Image!ShowPlugInOptions+0x000000000004d7c4."Show less
CVE-2017-15755 1Irfanview 2Babacad4image Irfanview May 13, 2026 Oct 22, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address control...Show more IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address controls Branch Selection starting at verifier!AVrfpDphFindBusyMemoryNoCheck+0x0000000000000091."Show less
CVE-2017-15754 1Irfanview 2Babacad4image Irfanview May 13, 2026 Oct 22, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV near NULL starting at BabaCAD...Show more IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV near NULL starting at BabaCAD4Image!ShowPlugInOptions+0x0000000000013968."Show less
CVE-2017-15753 1Irfanview 2Babacad4image Irfanview May 13, 2026 Oct 22, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address control...Show more IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address controls Branch Selection starting at BabaCAD4Image!ShowPlugInOptions+0x00000000000029c2."Show less
CVE-2017-15752 1Irfanview 2Babacad4image Irfanview May 13, 2026 Oct 22, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to "Data from Faulting Address controls subsequent Wri...Show more IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to "Data from Faulting Address controls subsequent Write Address starting at BabaCAD4Image!ShowPlugInOptions+0x000000000004d6b0."Show less
CVE-2017-15751 1Irfanview 2Babacad4image Irfanview May 13, 2026 Oct 22, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting a...Show more IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at BabaCAD4Image!ShowPlugInOptions+0x0000000000009f39."Show less
CVE-2017-15750 1Irfanview 2Babacad4image Irfanview May 13, 2026 Oct 22, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting a...Show more IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at BabaCAD4Image!ShowPlugInOptions+0x0000000000009ae0."Show less
CVE-2017-15749 1Irfanview 2Cadimage Irfanview May 13, 2026 Oct 22, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address control...Show more IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address controls Branch Selection starting at CADIMAGE+0x00000000000348b9."Show less
CVE-2017-15748 1Irfanview 2Cadimage Irfanview May 13, 2026 Oct 22, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV starting at CADIMAGE+0x000000...Show more IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV starting at CADIMAGE+0x000000000000613a."Show less
CVE-2017-15747 1Irfanview 2Cadimage Irfanview May 13, 2026 Oct 22, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "Data Execution Prevention Violation starting at...Show more IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "Data Execution Prevention Violation starting at Unknown Symbol @ 0x0000700b00260112 called from CADIMAGE+0x00000000003d35ad."Show less
CVE-2017-15746 1Irfanview 2Cadimage Irfanview May 13, 2026 Oct 22, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address control...Show more IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address controls Branch Selection starting at CADIMAGE+0x00000000003d21b3."Show less
CVE-2017-15745 1Irfanview 2Cadimage Irfanview May 13, 2026 Oct 22, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address control...Show more IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address controls Branch Selection starting at CADIMAGE+0x000000000002ca2e."Show less
CVE-2017-15744 1Irfanview 2Cadimage Irfanview May 13, 2026 Oct 22, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "Read Access Violation on Control Flow starting a...Show more IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "Read Access Violation on Control Flow starting at CADIMAGE+0x00000000003d35a7."Show less
CVE-2017-15743 1Irfanview 2Cadimage Irfanview May 13, 2026 Oct 22, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address may be...Show more IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address may be used as a return value starting at CADIMAGE+0x00000000003d24a0."Show less
CVE-2017-15742 1Irfanview 2Cadimage Irfanview May 13, 2026 Oct 22, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting a...Show more IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at CADIMAGE+0x00000000003d2328."Show less
CVE-2017-15741 1Irfanview 2Cadimage Irfanview May 13, 2026 Oct 22, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Possible Stack Corruption starting...Show more IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Possible Stack Corruption starting at CADIMAGE+0x00000000003d2378."Show less

Previous 1...262263264...705 Next