← Back
CWE-119

14,089 CVEs • Abstraction: Class • Likelihood of Exploit: High

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

JSON object

Loading...

CVEs (14,089)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Graphicsmagick
1Graphicsmagick
May 13, 2026
Jul 2, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
When GraphicsMagick 1.3.25 processes an RGB TIFF picture (with metadata indicating a single sample per pixel) in coders/tiff.c, a buffer overflow occurs, related to QuantumTransferMode.
1Aeroadmin
1Aeroadmin
May 13, 2026
Jul 2, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
AeroAdmin 4.1 uses a function to copy data between two pointers where the size of the data copied is taken directly from a network packet. This can cause a buffer overflow and denial of service.
1Antiy
1Antivirus Engine
May 13, 2026
Jul 2, 2017
N/A· v4
6.2 MEDIUM· v3
2.1 LOW· v2
When Antiy Antivirus Engine before 5.0.0.05171547 scans a special ZIP archive, it crashes with a stack-based buffer overflow because a fixed path length is used.
2Gnu
Invisible Island
2Ncurses
Ncurses
Jul 23, 2026
Jun 29, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
In ncurses 6.0, there is a stack-based buffer overflow in the fmt_entry function. A crafted input will lead to a remote arbitrary code execution attack.
1Microsoft
5Endpoint Protection
Forefront Endpoint ProtectionSecurity Essentials+2 more
May 13, 2026
Jun 29, 2017
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on 32-bit versions of Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R...Show more
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on 32-bit versions of Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703 does not properly scan a specially crafted file leading to memory corruption. aka "Microsoft Malware Protection Engine Remote Code Execution Vulnerability".Show less
1Ibm
1Informix Dynamic Server
May 13, 2026
Jun 29, 2017
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
IBM Informix Dynamic Server 12.1 could allow an authenticated user to cause a buffer overflow that would write large assertion fail files to the server. Done enough times, this could use large parts of the file system an...Show more
IBM Informix Dynamic Server 12.1 could allow an authenticated user to cause a buffer overflow that would write large assertion fail files to the server. Done enough times, this could use large parts of the file system and cause the server to crash. IBM X-Force ID: 125569.Show less
1Libdwarf Project
1Libdwarf
May 13, 2026
Jun 28, 2017
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
The _dwarf_decode_s_leb128_chk function in dwarf_leb.c in libdwarf through 2017-06-28 allows remote attackers to cause a denial of service (Segmentation fault) via a crafted file.
1Ffmpeg
1Ffmpeg
May 13, 2026
Jun 28, 2017
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
The cdxl_decode_frame function in libavcodec/cdxl.c in FFmpeg 2.8.x before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before 3.3.1 does not exclude the CHUNKY format, which allows remot...Show more
The cdxl_decode_frame function in libavcodec/cdxl.c in FFmpeg 2.8.x before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before 3.3.1 does not exclude the CHUNKY format, which allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file.Show less
1Ffmpeg
1Ffmpeg
May 13, 2026
Jun 28, 2017
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
libavcodec/scpr.c in FFmpeg 3.3 before 3.3.1 does not properly validate height and width data, which allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly hav...Show more
libavcodec/scpr.c in FFmpeg 3.3 before 3.3.1 does not properly validate height and width data, which allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file.Show less
2Debian
Ffmpeg
2Debian Linux
Ffmpeg
May 13, 2026
Jun 28, 2017
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
libavcodec/webp.c in FFmpeg before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before 3.3.1 does not ensure that pix_fmt is set, which allows remote attackers to cause a denial of servic...Show more
libavcodec/webp.c in FFmpeg before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before 3.3.1 does not ensure that pix_fmt is set, which allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file, related to the vp8_decode_mb_row_no_filter and pred8x8_128_dc_8_c functions.Show less
2Debian
Ffmpeg
2Debian Linux
Ffmpeg
May 13, 2026
Jun 28, 2017
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Heap-based buffer overflow in the decode_dds1 function in libavcodec/dfa.c in FFmpeg before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before 3.3.1 allows remote attackers to cause a de...Show more
Heap-based buffer overflow in the decode_dds1 function in libavcodec/dfa.c in FFmpeg before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before 3.3.1 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file.Show less
1Ffmpeg
1Ffmpeg
May 13, 2026
Jun 28, 2017
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Heap-based buffer overflow in the xwd_decode_frame function in libavcodec/xwddec.c in FFmpeg before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before 3.3.1 allows remote attackers to ca...Show more
Heap-based buffer overflow in the xwd_decode_frame function in libavcodec/xwddec.c in FFmpeg before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before 3.3.1 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file.Show less
1Ffmpeg
1Ffmpeg
May 13, 2026
Jun 28, 2017
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Stack-based buffer overflow in the color_string_to_rgba function in libavcodec/xpmdec.c in FFmpeg 3.3 before 3.3.1 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified oth...Show more
Stack-based buffer overflow in the color_string_to_rgba function in libavcodec/xpmdec.c in FFmpeg 3.3 before 3.3.1 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file.Show less
1Libav
1Libav
May 13, 2026
Jun 28, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
There is a heap-based buffer overflow in the function hpel_motion in mpegvideo_motion.c in libav 12.1. A crafted input can lead to a remote denial of service attack.
1Microsoft
1Internet Explorer
May 13, 2026
Jun 27, 2017
N/A· v4
7.5 HIGH· v3
7.6 HIGH· v2
Internet Explorer 6, Internet Explorer 7, Internet Explorer 8, Internet Explorer 9, Internet Explorer 10, and Internet Explorer 11 allows remote attackers to execute arbitrary code.
1Ibm
6Data Server Client
Data Server Driver For Odbc And CliData Server Driver Package+3 more
May 13, 2026
Jun 27, 2017
N/A· v4
7.3 HIGH· v3
4.4 MEDIUM· v2
IBM DB2 for Linux, UNIX and Windows 9.2, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) is vulnerable to a stack-based buffer overflow, caused by improper bounds checking which could allow a local attacker to execute...Show more
IBM DB2 for Linux, UNIX and Windows 9.2, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) is vulnerable to a stack-based buffer overflow, caused by improper bounds checking which could allow a local attacker to execute arbitrary code. IBM X-Force ID: 125159.Show less
1Ibm
6Data Server Client
Data Server Driver For Odbc And CliData Server Driver Package+3 more
May 13, 2026
Jun 27, 2017
N/A· v4
7.1 HIGH· v3
3.6 LOW· v2
IBM DB2 for Linux, UNIX and Windows 9.2, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) is vulnerable to a buffer overflow that could allow a local user to overwrite DB2 files or cause a denial of service. IBM X-Forc...Show more
IBM DB2 for Linux, UNIX and Windows 9.2, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) is vulnerable to a buffer overflow that could allow a local user to overwrite DB2 files or cause a denial of service. IBM X-Force ID: 120668.Show less
1Audiocoding
1Freeware Advanced Audio Decoder 2
May 13, 2026
Jun 27, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The mp4ff_read_stco function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (memory allocation error) via a crafted mp4 file.
1Audiocoding
1Freeware Advanced Audio Decoder 2
May 13, 2026
Jun 27, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The mp4ff_read_stsc function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (memory allocation error and application crash) via a crafted m...Show more
The mp4ff_read_stsc function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (memory allocation error and application crash) via a crafted mp4 file.Show less
1Microsoft
1Skype
May 13, 2026
Jun 26, 2017
N/A· v4
8.8 HIGH· v3
6.5 MEDIUM· v2
A stack buffer overflow vulnerability has been discovered in Microsoft Skype 7.2, 7.35, and 7.36 before 7.37, involving MSFTEDIT.DLL mishandling of remote RDP clipboard content within the message box.