Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

CVEs (14,552)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2017-12786 1Noviflow 1Noviware May 13, 2026 Aug 22, 2017 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 Network interfaces of the cliengine and noviengine services, included in the NoviWare software distribution through NW400.2.6 and deployed on NoviSwitch devices, can be inadvertently exposed if an operator attempts to mo...Show more Network interfaces of the cliengine and noviengine services, included in the NoviWare software distribution through NW400.2.6 and deployed on NoviSwitch devices, can be inadvertently exposed if an operator attempts to modify ACLs, because of a bug when ACL modifications are applied. This could be leveraged by remote, unauthenticated attackers to gain resultant privileged (root) code execution on the switch, because there is a stack-based buffer overflow during unserialization of packet data.Show less
CVE-2017-12785 1Noviflow 1Noviware May 13, 2026 Aug 22, 2017 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 The novish command-line interface, included in the NoviWare software distribution through NW400.2.6 and deployed on NoviSwitch devices, is prone to a buffer overflow in the "show log cli" command. This could be used by a...Show more The novish command-line interface, included in the NoviWare software distribution through NW400.2.6 and deployed on NoviSwitch devices, is prone to a buffer overflow in the "show log cli" command. This could be used by a read-only user (monitor role) to gain privileged (root) code execution on the switch via command injection.Show less
CVE-2017-13064 2Debian Graphicsmagick 2Debian Linux Graphicsmagick May 13, 2026 Aug 22, 2017 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 GraphicsMagick 1.3.26 has a heap-based buffer overflow vulnerability in the function GetStyleTokens in coders/svg.c:311:12.
CVE-2017-13063 2Debian Graphicsmagick 2Debian Linux Graphicsmagick May 13, 2026 Aug 22, 2017 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 GraphicsMagick 1.3.26 has a heap-based buffer overflow vulnerability in the function GetStyleTokens in coders/svg.c:314:12.
CVE-2017-12983 1Imagemagick 1Imagemagick May 13, 2026 Aug 21, 2017 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Heap-based buffer overflow in the ReadSFWImage function in coders/sfw.c in ImageMagick 7.0.6-8 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a craf...Show more Heap-based buffer overflow in the ReadSFWImage function in coders/sfw.c in ImageMagick 7.0.6-8 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file.Show less
CVE-2017-12982 1Uclouvain 1Openjpeg May 13, 2026 Aug 21, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 The bmp_read_info_header function in bin/jp2/convertbmp.c in OpenJPEG 2.2.0 does not reject headers with a zero biBitCount, which allows remote attackers to cause a denial of service (memory allocation failure) in the op...Show more The bmp_read_info_header function in bin/jp2/convertbmp.c in OpenJPEG 2.2.0 does not reject headers with a zero biBitCount, which allows remote attackers to cause a denial of service (memory allocation failure) in the opj_image_create function in lib/openjp2/image.c, related to the opj_aligned_alloc_n function in opj_malloc.c.Show less
CVE-2017-12966 1Asn1c Project 1Asn1c May 13, 2026 Aug 20, 2017 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 The asn1f_lookup_symbol_impl function in asn1fix_retrieve.c in libasn1fix.a in asn1c 0.9.28 allows remote attackers to cause a denial of service (segmentation fault) via a crafted .asn1 file.
CVE-2017-11323 1Estsoft 1Alzip May 13, 2026 Aug 19, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Stack-based buffer overflow in ESTsoft ALZip 8.51 and earlier allows remote attackers to execute arbitrary code via a crafted MS-DOS device file, as demonstrated by use of "AUX" as the initial substring of a filename.
CVE-2017-12955 1Exiv2 1Exiv2 May 13, 2026 Aug 18, 2017 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 There is a heap-based buffer overflow in basicio.cpp of Exiv2 0.26. The vulnerability causes an out-of-bounds write in Exiv2::Image::printIFDStructure(), which may lead to remote denial of service or possibly unspecified...Show more There is a heap-based buffer overflow in basicio.cpp of Exiv2 0.26. The vulnerability causes an out-of-bounds write in Exiv2::Image::printIFDStructure(), which may lead to remote denial of service or possibly unspecified other impact.Show less
CVE-2007-5341 1Mozilla 1Firefox May 13, 2026 Aug 18, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Remote code execution in the Venkman script debugger in Mozilla Firefox before 2.0.0.8.
CVE-2007-5199 1X 1Libxfont May 13, 2026 Aug 18, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 A single byte overflow in catalogue.c in X.Org libXfont 1.3.1 allows remote attackers to have unspecified impact.
CVE-2017-9678 1Google 1Android May 13, 2026 Aug 18, 2017 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 In all Qualcomm products with Android releases from CAF using the Linux kernel, in a video driver, memory corruption can potentially occur due to lack of bounds checking in a memcpy().
CVE-2016-5871 1Google 1Android May 13, 2026 Aug 18, 2017 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow to buffer overflow vulnerability exists when loading an image file.
CVE-2016-10392 1Google 1Android May 13, 2026 Aug 18, 2017 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 In all Qualcomm products with Android releases from CAF using the Linux kernel, a driver can potentially leak kernel memory.
CVE-2016-10389 1Google 1Android May 13, 2026 Aug 18, 2017 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 In all Qualcomm products with Android releases from CAF using the Linux kernel, there is no size check for the images being flashed onto the NAND memory in their respective partitions, so there is a possibility of writin...Show more In all Qualcomm products with Android releases from CAF using the Linux kernel, there is no size check for the images being flashed onto the NAND memory in their respective partitions, so there is a possibility of writing beyond the intended partition.Show less
CVE-2016-10343 1Google 1Android May 13, 2026 Aug 18, 2017 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 In all Qualcomm products with Android releases from CAF using the Linux kernel, sSL handshake failure with ClientHello rejection results in memory leak.
CVE-2015-9071 1Google 1Android May 13, 2026 Aug 18, 2017 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer over-read vulnerability exists in a TrustZone syscall.
CVE-2015-9070 1Google 1Android May 13, 2026 Aug 18, 2017 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer over-read vulnerability exists in a TrustZone syscall.
CVE-2015-9066 1Google 1Android May 13, 2026 Aug 18, 2017 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in an Inter-RAT procedure.
CVE-2015-9063 1Google 1Android May 13, 2026 Aug 18, 2017 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a procedure involving a remote UIM client.

Previous 1...304305306...728 Next