Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

CVEs (14,552)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2017-10744 1Xnview 1Xnview May 13, 2026 Jul 5, 2017 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Read Access Violation on Control Flow starting at COMCTL32!CToolTipsM...Show more XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Read Access Violation on Control Flow starting at COMCTL32!CToolTipsMgr::s_ToolTipsWndProc+0x0000000000000032."Show less
CVE-2017-10743 1Xnview 1Xnview May 13, 2026 Jul 5, 2017 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Stack Buffer Overrun (/GS Exception) starting at ntdll_77df0000!LdrpI...Show more XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Stack Buffer Overrun (/GS Exception) starting at ntdll_77df0000!LdrpInitializeNode+0x000000000000015b."Show less
CVE-2017-10742 1Xnview 1Xnview May 13, 2026 Jul 5, 2017 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Data Execution Prevention Violation starting at Unknown Symbol @ 0x00...Show more XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Data Execution Prevention Violation starting at Unknown Symbol @ 0x00000000380a0500 called from ntdll_77df0000!LdrxCallInitRoutine+0x0000000000000016."Show less
CVE-2017-10741 1Xnview 1Xnview May 13, 2026 Jul 5, 2017 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at ntdll_77df0000!RtlpWaitOnCriticalSecti...Show more XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at ntdll_77df0000!RtlpWaitOnCriticalSection+0x0000000000000121."Show less
CVE-2017-10740 1Xnview 1Xnview May 13, 2026 Jul 5, 2017 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at ntdll_77df0000!RtlRbInsertNodeEx+0x000...Show more XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at ntdll_77df0000!RtlRbInsertNodeEx+0x000000000000002d."Show less
CVE-2017-10739 1Xnview 1Xnview May 13, 2026 Jul 5, 2017 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Data Execution Prevention Violation starting at Unknown Symbol @ 0x00...Show more XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Data Execution Prevention Violation starting at Unknown Symbol @ 0x000000000c1b541c called from xnview+0x00000000003826ec."Show less
CVE-2017-10738 1Xnview 1Xnview May 13, 2026 Jul 5, 2017 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Data Execution Prevention Violation starting at Unknown Symbol @ 0x00...Show more XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Data Execution Prevention Violation starting at Unknown Symbol @ 0x000000002f32332f called from KERNELBASE!CompareStringW+0x0000000000000082."Show less
CVE-2017-10737 1Xnview 1Xnview May 13, 2026 Jul 5, 2017 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at ntdll_77df0000!RtlpCoalesceFreeBlocks+...Show more XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at ntdll_77df0000!RtlpCoalesceFreeBlocks+0x00000000000002e6."Show less
CVE-2017-10736 1Xnview 1Xnview May 13, 2026 Jul 5, 2017 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at msvcrt!_VEC_memzero+0x000000000000006a...Show more XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at msvcrt!_VEC_memzero+0x000000000000006a."Show less
CVE-2017-10735 1Irfanview 1Irfanview May 13, 2026 Jul 5, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 IrfanView version 4.44 (32bit) might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starti...Show more IrfanView version 4.44 (32bit) might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpFreeHeap+0x00000000000003ca."Show less
CVE-2017-10734 1Irfanview 1Irfanview May 13, 2026 Jul 5, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 IrfanView version 4.44 (32bit) might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to an "Invalid Handle starting at wow64!Wow64NotifyDebugger+0x0...Show more IrfanView version 4.44 (32bit) might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to an "Invalid Handle starting at wow64!Wow64NotifyDebugger+0x000000000000001d."Show less
CVE-2017-10733 1Irfanview 1Irfanview May 13, 2026 Jul 5, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 IrfanView version 4.44 (32bit) might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starti...Show more IrfanView version 4.44 (32bit) might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpEnterCriticalSectionContended+0x0000000000000031."Show less
CVE-2017-10732 1Irfanview 1Irfanview May 13, 2026 Jul 5, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 IrfanView version 4.44 (32bit) might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starti...Show more IrfanView version 4.44 (32bit) might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpAllocateHeap+0x0000000000000429."Show less
CVE-2017-10731 1Irfanview 1Irfanview May 13, 2026 Jul 5, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 IrfanView version 4.44 (32bit) allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at FORMATS!GetPlugInInfo+0x0000000000007d80."
CVE-2017-10730 1Irfanview 1Irfanview May 13, 2026 Jul 5, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 IrfanView version 4.44 (32bit) allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at FORMATS!GetPlugInInfo+0x0000000000007d96."
CVE-2017-10729 1Irfanview 1Irfanview May 13, 2026 Jul 5, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 IrfanView version 4.44 (32bit) allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at ntdll_77df0000!RtlpWaitOnCriticalSection+0x0000...Show more IrfanView version 4.44 (32bit) allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at ntdll_77df0000!RtlpWaitOnCriticalSection+0x0000000000000121."Show less
CVE-2017-10728 1Winamp 1Winamp May 13, 2026 Jul 5, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Winamp 5.666 Build 3516(x86) might allow attackers to execute arbitrary code or cause a denial of service via a crafted .flv file, related to "Error Code (0xe06d7363) starting at wow64!Wow64NotifyDebugger+0x0000000000000...Show more Winamp 5.666 Build 3516(x86) might allow attackers to execute arbitrary code or cause a denial of service via a crafted .flv file, related to "Error Code (0xe06d7363) starting at wow64!Wow64NotifyDebugger+0x000000000000001d."Show less
CVE-2017-10727 1Winamp 1Winamp May 13, 2026 Jul 5, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Winamp 5.666 Build 3516(x86) might allow attackers to execute arbitrary code or cause a denial of service via a crafted .flv file, related to "Data from Faulting Address controls Branch Selection starting at in_mp3!Delet...Show more Winamp 5.666 Build 3516(x86) might allow attackers to execute arbitrary code or cause a denial of service via a crafted .flv file, related to "Data from Faulting Address controls Branch Selection starting at in_mp3!DeleteAudioDecoder+0x000000000000762f."Show less
CVE-2017-10726 1Winamp 1Winamp May 13, 2026 Jul 5, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Winamp 5.666 Build 3516(x86) might allow attackers to execute arbitrary code or cause a denial of service via a crafted .flv file, related to "Data from Faulting Address may be used as a return value starting at f263!Get...Show more Winamp 5.666 Build 3516(x86) might allow attackers to execute arbitrary code or cause a denial of service via a crafted .flv file, related to "Data from Faulting Address may be used as a return value starting at f263!GetWinamp5SystemComponent+0x0000000000001951."Show less
CVE-2017-10725 1Winamp 1Winamp May 13, 2026 Jul 5, 2017 N/A· v4 7.3 HIGH· v3 4.4 MEDIUM· v2 Winamp 5.666 Build 3516(x86) allows attackers to execute arbitrary code or cause a denial of service via a crafted .flv file, related to "Data from Faulting Address controls Code Flow starting at in_flv!winampGetInModule...Show more Winamp 5.666 Build 3516(x86) allows attackers to execute arbitrary code or cause a denial of service via a crafted .flv file, related to "Data from Faulting Address controls Code Flow starting at in_flv!winampGetInModule2+0x00000000000009a8."Show less

Previous 1...325326327...728 Next