Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

CVEs (14,088)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2017-9925 1Swftools 1Swftools May 13, 2026 Jul 5, 2017 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 In SWFTools 2013-04-09-1007 on Windows, png2swf allows remote attackers to execute arbitrary code or cause a denial of service via a crafted file, related to a "User Mode Write AV near NULL starting at wow64!Wow64NotifyD...Show more In SWFTools 2013-04-09-1007 on Windows, png2swf allows remote attackers to execute arbitrary code or cause a denial of service via a crafted file, related to a "User Mode Write AV near NULL starting at wow64!Wow64NotifyDebugger+0x000000000000001d."Show less
CVE-2017-9924 1Swftools 1Swftools May 13, 2026 Jul 5, 2017 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 In SWFTools 2013-04-09-1007 on Windows, png2swf allows remote attackers to execute arbitrary code or cause a denial of service via a crafted file, related to a "User Mode Write AV starting at image00000000_00400000+0x000...Show more In SWFTools 2013-04-09-1007 on Windows, png2swf allows remote attackers to execute arbitrary code or cause a denial of service via a crafted file, related to a "User Mode Write AV starting at image00000000_00400000+0x000000000001b72a."Show less
CVE-2017-9923 1Irfanview 2Irfanview Tools May 13, 2026 Jul 5, 2017 N/A· v4 7.8 HIGH· v3 4.4 MEDIUM· v2 IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 might allow attackers to cause a denial of service or execute arbitrary code via a crafted file, related to "Data from Faulting Address controls Branch Selection star...Show more IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 might allow attackers to cause a denial of service or execute arbitrary code via a crafted file, related to "Data from Faulting Address controls Branch Selection starting at KERNELBASE!EnumResourceTypesInternal+0x0000000000000589."Show less
CVE-2017-9922 1Irfanview 2Irfanview Tools May 13, 2026 Jul 5, 2017 N/A· v4 7.8 HIGH· v3 4.4 MEDIUM· v2 IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 might allow attackers to cause a denial of service or execute arbitrary code via a crafted file, related to "Data from Faulting Address controls Branch Selection star...Show more IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 might allow attackers to cause a denial of service or execute arbitrary code via a crafted file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!LdrpCompareResourceNames_U+0x0000000000000062."Show less
CVE-2017-9921 1Irfanview 2Irfanview Tools May 13, 2026 Jul 5, 2017 N/A· v4 7.8 HIGH· v3 4.4 MEDIUM· v2 IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 might allow attackers to cause a denial of service or execute arbitrary code via a crafted file, related to "Data from Faulting Address controls Branch Selection star...Show more IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 might allow attackers to cause a denial of service or execute arbitrary code via a crafted file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!LdrpResGetMappingSize+0x00000000000003cc."Show less
CVE-2017-9920 1Irfanview 2Irfanview Tools May 13, 2026 Jul 5, 2017 N/A· v4 7.8 HIGH· v3 4.4 MEDIUM· v2 IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 might allow attackers to cause a denial of service or execute arbitrary code via a crafted file, related to "Data from Faulting Address controls Branch Selection star...Show more IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 might allow attackers to cause a denial of service or execute arbitrary code via a crafted file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!LdrpResSearchResourceInsideDirectory+0x000000000000029e."Show less
CVE-2017-9919 1Irfanview 2Irfanview Tools May 13, 2026 Jul 5, 2017 N/A· v4 7.8 HIGH· v3 4.4 MEDIUM· v2 IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 might allow attackers to cause a denial of service or execute arbitrary code via a crafted file, related to "Data from Faulting Address controls Branch Selection star...Show more IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 might allow attackers to cause a denial of service or execute arbitrary code via a crafted file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!LdrpResCompareResourceNames+0x0000000000000087."Show less
CVE-2017-9918 1Irfanview 2Irfanview Tools May 13, 2026 Jul 5, 2017 N/A· v4 7.8 HIGH· v3 4.4 MEDIUM· v2 IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 might allow attackers to cause a denial of service or execute arbitrary code via a crafted file, related to "Data from Faulting Address controls Branch Selection star...Show more IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 might allow attackers to cause a denial of service or execute arbitrary code via a crafted file, related to "Data from Faulting Address controls Branch Selection starting at KERNELBASE!QueryOptionalDelayLoadedAPI+0x0000000000000c42."Show less
CVE-2017-9917 1Irfanview 2Irfanview Tools May 13, 2026 Jul 5, 2017 N/A· v4 7.8 HIGH· v3 4.4 MEDIUM· v2 IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted file, related to "Data from Faulting Address is used as one...Show more IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted file, related to "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at ntdll_77df0000!RtlFreeHandle+0x0000000000000218."Show less
CVE-2017-9916 1Irfanview 1Tools May 13, 2026 Jul 5, 2017 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted file, related to "Data from Faulting Address controls Branc...Show more IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlFreeHandle+0x00000000000001b6."Show less
CVE-2017-9915 1Irfanview 2Irfanview Tools May 13, 2026 Jul 5, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 IrfanView version 4.44 (32bit) with TOOLS plugin 4.50 allows attackers to execute arbitrary code or cause a denial of service via a crafted file, related to a "Read Access Violation on Block Data Move starting at ntdll_7...Show more IrfanView version 4.44 (32bit) with TOOLS plugin 4.50 allows attackers to execute arbitrary code or cause a denial of service via a crafted file, related to a "Read Access Violation on Block Data Move starting at ntdll_77df0000!memcpy+0x0000000000000033."Show less
CVE-2017-9914 1Xnview 1Xnview May 13, 2026 Jul 5, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .bie file, related to a "Read Access Violation on Block Data Move starting at Xjbig+0x000000000000121b."
CVE-2017-9913 1Xnview 1Xnview May 13, 2026 Jul 5, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address controls Branch Selec...Show more XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!TpAllocCleanupGroup+0x00000000000003d7."Show less
CVE-2017-9912 1Xnview 1Xnview May 13, 2026 Jul 5, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address controls Branch Selec...Show more XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpFreeHeap+0x0000000000000393."Show less
CVE-2017-9911 1Xnview 1Xnview May 13, 2026 Jul 5, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address is used as one or mor...Show more XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at Xfpx+0x0000000000010e81."Show less
CVE-2017-9910 1Xnview 1Xnview May 13, 2026 Jul 5, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to an "Error Code (0xc000041d) starting at wow64!Wow...Show more XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to an "Error Code (0xc000041d) starting at wow64!Wow64NotifyDebugger+0x000000000000001d."Show less
CVE-2017-9909 1Xnview 1Xnview May 13, 2026 Jul 5, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address controls Branch Selec...Show more XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlAddAccessAllowedAce+0x000000000000027a."Show less
CVE-2017-9908 1Xnview 1Xnview May 13, 2026 Jul 5, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to a "Read Access Violation starting at Xfpx+0x00000...Show more XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to a "Read Access Violation starting at Xfpx+0x000000000000d6da."Show less
CVE-2017-9907 1Xnview 1Xnview May 13, 2026 Jul 5, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Possible Stack Corruption starting at Xfpx!gffGe...Show more XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Possible Stack Corruption starting at Xfpx!gffGetFormatInfo+0x0000000000022e1f."Show less
CVE-2017-9906 1Xnview 1Xnview May 13, 2026 Jul 5, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address is used as one or mor...Show more XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at Xfpx!gffGetFormatInfo+0x0000000000028508."Show less

Previous 1...296297298...705 Next