← Back
CWE-119

14,087 CVEs • Abstraction: Class • Likelihood of Exploit: High

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

JSON object

Loading...

CVEs (14,087)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Stdutility
1Stdu Viewer
May 13, 2026
Sep 18, 2017
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .djvu file, related to a "Possible Stack Corruption starting at STDUDjVuFile!DllUnregisterServer+0...Show more
STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .djvu file, related to a "Possible Stack Corruption starting at STDUDjVuFile!DllUnregisterServer+0x000000000000e8b8."Show less
1Stdutility
1Stdu Viewer
May 13, 2026
Sep 18, 2017
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .djvu file, related to a "Heap Corruption starting at wow64!Wow64NotifyDebugger+0x000000000000001d."
1Stdutility
1Stdu Viewer
May 13, 2026
Sep 18, 2017
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .djvu file, related to a "User Mode Write AV starting at STDUDjVuFile!DllUnregisterServer+0x000000000000854d."
1Stdutility
1Stdu Viewer
May 13, 2026
Sep 18, 2017
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .mobi file, related to a "Read Access Violation starting at STDUMOBIFile!DllUnregisterServer+0x000...Show more
STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .mobi file, related to a "Read Access Violation starting at STDUMOBIFile!DllUnregisterServer+0x000000000002efc0."Show less
1Stdutility
1Stdu Viewer
May 13, 2026
Sep 18, 2017
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .epub file, related to an "Error Code (0xe06d7363) starting at wow64!Wow64NotifyDebugger+0x0000000...Show more
STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .epub file, related to an "Error Code (0xe06d7363) starting at wow64!Wow64NotifyDebugger+0x000000000000001d."Show less
1Stdutility
1Stdu Viewer
May 13, 2026
Sep 18, 2017
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .epub file, related to "Data from Faulting Address controls Branch Selection starting at STDUEPubF...Show more
STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .epub file, related to "Data from Faulting Address controls Branch Selection starting at STDUEPubFile!DllUnregisterServer+0x0000000000010332."Show less
1Stdutility
1Stdu Viewer
May 13, 2026
Sep 18, 2017
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .epub file, related to "Data from Faulting Address is used as one or more arguments in a subsequen...Show more
STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .epub file, related to "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at STDUEPubFile!DllUnregisterServer+0x000000000003fff1."Show less
1Stdutility
1Stdu Viewer
May 13, 2026
Sep 18, 2017
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .epub file, related to "Data from Faulting Address controls Branch Selection starting at STDUEPubF...Show more
STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .epub file, related to "Data from Faulting Address controls Branch Selection starting at STDUEPubFile!DllUnregisterServer+0x0000000000039335."Show less
1Stdutility
1Stdu Viewer
May 13, 2026
Sep 18, 2017
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .epub file, related to a "Read Access Violation on Block Data Move starting at STDUEPubFile!DllUnregisterServer+0x...Show more
STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .epub file, related to a "Read Access Violation on Block Data Move starting at STDUEPubFile!DllUnregisterServer+0x0000000000010262."Show less
1Xnview
1Xnview
May 13, 2026
Sep 18, 2017
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .svg file, related to "Data from Faulting Address controls Branch Selection st...Show more
XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .svg file, related to "Data from Faulting Address controls Branch Selection starting at CADImage+0x000000000001f23e."Show less
1Irfanview
1Irfanview
May 13, 2026
Sep 18, 2017
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
IrfanView 4.44 - 32bit allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .svg file, related to "Data from Faulting Address controls Branch Selection starting at CADIMAG...Show more
IrfanView 4.44 - 32bit allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .svg file, related to "Data from Faulting Address controls Branch Selection starting at CADIMAGE+0x000000000001f23e."Show less
1Irfanview
1Irfanview
May 13, 2026
Sep 18, 2017
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
IrfanView 4.44 - 32bit allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .svg file, related to "Data from Faulting Address controls Branch Selection starting at image00...Show more
IrfanView 4.44 - 32bit allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .svg file, related to "Data from Faulting Address controls Branch Selection starting at image00000000_00400000+0x000000000011d767."Show less
1Xnview
1Xnview
May 13, 2026
Sep 18, 2017
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to "Data from Faulting Address controls subsequent Write Address starting a...Show more
XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to "Data from Faulting Address controls subsequent Write Address starting at jbig2dec+0x0000000000008823."Show less
1Tenda
1W15e Firmware
May 13, 2026
Sep 17, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Heap-based Buffer Overflow on Tenda W15E devices before 15.11.0.14 allows remote attackers to cause a denial of service (temporary HTTP outage and forced logout) via unspecified vectors.
2Debian
Linux
2Debian Linux
Linux Kernel
May 13, 2026
Sep 15, 2017
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
The tpacket_rcv function in net/packet/af_packet.c in the Linux kernel before 4.13 mishandles vnet headers, which might allow local users to cause a denial of service (buffer overflow, and disk and memory corruption) or...Show more
The tpacket_rcv function in net/packet/af_packet.c in the Linux kernel before 4.13 mishandles vnet headers, which might allow local users to cause a denial of service (buffer overflow, and disk and memory corruption) or possibly have unspecified other impact via crafted system calls.Show less
1Corega
1Wlr 300 Nm Firmware
May 13, 2026
Sep 15, 2017
N/A· v4
6.8 MEDIUM· v3
7.7 HIGH· v2
Buffer overflow in CG-WLR300NM Firmware version 1.90 and earlier allows an attacker to execute arbitrary code via unspecified vectors.
1Google
1Android
May 13, 2026
Sep 14, 2017
N/A· v4
8.8 HIGH· v3
8.3 HIGH· v2
A remote code execution vulnerability in the Android system (bluetooth). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63146105.
1Tcpdump
1Tcpdump
May 13, 2026
Sep 14, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Several protocol parsers in tcpdump before 4.9.2 could cause a buffer overflow in util-print.c:bittok2str_internal().
2Debian
Libofx Project
2Debian Linux
Libofx
May 13, 2026
Sep 13, 2017
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
An exploitable buffer overflow vulnerability exists in the tag parsing functionality of LibOFX 0.9.11. A specially crafted OFX file can cause a write out of bounds resulting in a buffer overflow on the stack. An attacker...Show more
An exploitable buffer overflow vulnerability exists in the tag parsing functionality of LibOFX 0.9.11. A specially crafted OFX file can cause a write out of bounds resulting in a buffer overflow on the stack. An attacker can construct a malicious OFX file to trigger this vulnerability.Show less
1Sophos
1Hitmanpro
May 13, 2026
Sep 13, 2017
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
In Sophos SurfRight HitmanPro before 3.7.20 Build 286 (included in the HitmanPro.Alert solution and Sophos Clean), a crafted IOCTL with code 0x22E1C0 might lead to kernel data leaks. Because the leak occurs at the driver...Show more
In Sophos SurfRight HitmanPro before 3.7.20 Build 286 (included in the HitmanPro.Alert solution and Sophos Clean), a crafted IOCTL with code 0x22E1C0 might lead to kernel data leaks. Because the leak occurs at the driver level, an attacker can use this vulnerability to leak some critical information about the machine such as nt!ExpPoolQuotaCookie.Show less