Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

CVEs (14,089)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2017-10761 1Xnview 1Xnview May 13, 2026 Jul 5, 2017 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selecti...Show more XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpAllocateHeap+0x0000000000000429."Show less
CVE-2017-10760 1Xnview 1Xnview May 13, 2026 Jul 5, 2017 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selecti...Show more XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at COMCTL32!SetStatusText+0x0000000000000029."Show less
CVE-2017-10759 1Xnview 1Xnview May 13, 2026 Jul 5, 2017 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selecti...Show more XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!LdrpInsertDependencyRecord+0x0000000000000039."Show less
CVE-2017-10758 1Xnview 1Xnview May 13, 2026 Jul 5, 2017 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selecti...Show more XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpCoalesceFreeBlocks+0x00000000000004b4."Show less
CVE-2017-10757 1Xnview 1Xnview May 13, 2026 Jul 5, 2017 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selecti...Show more XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpCoalesceFreeBlocks+0x00000000000001b6."Show less
CVE-2017-10756 1Xnview 1Xnview May 13, 2026 Jul 5, 2017 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selecti...Show more XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpRemoveUCRBlock+0x0000000000000046."Show less
CVE-2017-10755 1Xnview 1Xnview May 13, 2026 Jul 5, 2017 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selecti...Show more XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!LdrpInitializeThread+0x000000000000010b."Show less
CVE-2017-10754 1Xnview 1Xnview May 13, 2026 Jul 5, 2017 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selecti...Show more XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpEnterCriticalSectionContended+0x0000000000000031."Show less
CVE-2017-10753 1Xnview 1Xnview May 13, 2026 Jul 5, 2017 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selecti...Show more XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!LdrpFindLoadedDllByMapping+0x0000000000000046."Show less
CVE-2017-10752 1Xnview 1Xnview May 13, 2026 Jul 5, 2017 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selecti...Show more XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpLowFragHeapFree+0x000000000000001f."Show less
CVE-2017-10751 1Xnview 1Xnview May 13, 2026 Jul 5, 2017 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selecti...Show more XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at GDI32!GenericEngineGetGlyphs+0x0000000000000133."Show less
CVE-2017-10750 1Xnview 1Xnview May 13, 2026 Jul 5, 2017 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV near NULL starting at ntdll_77df0000!RtlEnterCriti...Show more XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV near NULL starting at ntdll_77df0000!RtlEnterCriticalSection+0x0000000000000012."Show less
CVE-2017-10749 1Xnview 1Xnview May 13, 2026 Jul 5, 2017 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV near NULL starting at wow64!Wow64NotifyDebugger+0x...Show more XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV near NULL starting at wow64!Wow64NotifyDebugger+0x000000000000001d."Show less
CVE-2017-10748 1Xnview 1Xnview May 13, 2026 Jul 5, 2017 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at xnview+0x000000000022bf8d."
CVE-2017-10747 1Xnview 1Xnview May 13, 2026 Jul 5, 2017 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at xnview+0x000000000037a8aa."
CVE-2017-10746 1Xnview 1Xnview May 13, 2026 Jul 5, 2017 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at ntdll_77df0000!RtlEnterCriticalSection...Show more XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at ntdll_77df0000!RtlEnterCriticalSection+0x0000000000000012."Show less
CVE-2017-10745 1Xnview 1Xnview May 13, 2026 Jul 5, 2017 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Stack Buffer Overrun (/GS Exception) starting at ntdll_77df0000!RtlPr...Show more XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Stack Buffer Overrun (/GS Exception) starting at ntdll_77df0000!RtlProcessFlsData+0x00000000000000b0."Show less
CVE-2017-10744 1Xnview 1Xnview May 13, 2026 Jul 5, 2017 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Read Access Violation on Control Flow starting at COMCTL32!CToolTipsM...Show more XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Read Access Violation on Control Flow starting at COMCTL32!CToolTipsMgr::s_ToolTipsWndProc+0x0000000000000032."Show less
CVE-2017-10743 1Xnview 1Xnview May 13, 2026 Jul 5, 2017 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Stack Buffer Overrun (/GS Exception) starting at ntdll_77df0000!LdrpI...Show more XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Stack Buffer Overrun (/GS Exception) starting at ntdll_77df0000!LdrpInitializeNode+0x000000000000015b."Show less
CVE-2017-10742 1Xnview 1Xnview May 13, 2026 Jul 5, 2017 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Data Execution Prevention Violation starting at Unknown Symbol @ 0x00...Show more XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Data Execution Prevention Violation starting at Unknown Symbol @ 0x00000000380a0500 called from ntdll_77df0000!LdrxCallInitRoutine+0x0000000000000016."Show less

Previous 1...301302303...705 Next