Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

CVEs (14,557)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2014-9836 1Imagemagick 1Imagemagick May 13, 2026 Mar 22, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service via a crafted xpm file.
CVE-2014-9835 1Imagemagick 1Imagemagick May 13, 2026 Mar 22, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Heap overflow in ImageMagick 6.8.9-9 via a crafted wpf file.
CVE-2014-9834 1Imagemagick 1Imagemagick May 13, 2026 Mar 22, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Heap overflow in ImageMagick 6.8.9-9 via a crafted pict file.
CVE-2014-9833 1Imagemagick 1Imagemagick May 13, 2026 Mar 22, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Heap overflow in ImageMagick 6.8.9-9 via a crafted psd file.
CVE-2014-9832 1Imagemagick 1Imagemagick May 13, 2026 Mar 22, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Heap overflow in ImageMagick 6.8.9-9 via a crafted pcx file.
CVE-2017-7210 1Gnu 1Binutils May 13, 2026 Mar 21, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 objdump in GNU Binutils 2.28 is vulnerable to multiple heap-based buffer over-reads (of size 1 and size 8) while handling corrupt STABS enum type strings in a crafted object file, leading to program crash.
CVE-2014-9939 1Gnu 1Binutils May 13, 2026 Mar 21, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 ihex.c in GNU Binutils before 2.26 contains a stack buffer overflow when printing bad bytes in Intel Hex objects.
CVE-2017-6836 2Audiofile Debian 2Audiofile Debian Linux May 13, 2026 Mar 20, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Heap-based buffer overflow in the Expand3To4Module::run function in libaudiofile/modules/SimpleModule.h in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0 allows remote attackers to cau...Show more Heap-based buffer overflow in the Expand3To4Module::run function in libaudiofile/modules/SimpleModule.h in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0 allows remote attackers to cause a denial of service (crash) via a crafted file.Show less
CVE-2017-6834 2Audiofile Debian 2Audiofile Debian Linux May 13, 2026 Mar 20, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Heap-based buffer overflow in the ulaw2linear_buf function in G711.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0, 0.2.7 allows remote attackers to cause a denial of service (cr...Show more Heap-based buffer overflow in the ulaw2linear_buf function in G711.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0, 0.2.7 allows remote attackers to cause a denial of service (crash) via a crafted file.Show less
CVE-2017-6832 2Audiofile Debian 2Audiofile Debian Linux May 13, 2026 Mar 20, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Heap-based buffer overflow in the decodeBlock in MSADPCM.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0, 0.2.7 allows remote attackers to cause a denial of service (crash) via a...Show more Heap-based buffer overflow in the decodeBlock in MSADPCM.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0, 0.2.7 allows remote attackers to cause a denial of service (crash) via a crafted file.Show less
CVE-2017-6831 2Audiofile Debian 2Audiofile Debian Linux May 13, 2026 Mar 20, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Heap-based buffer overflow in the decodeBlockWAVE function in IMA.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0 and 0.2.7 allows remote attackers to cause a denial of service (...Show more Heap-based buffer overflow in the decodeBlockWAVE function in IMA.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0 and 0.2.7 allows remote attackers to cause a denial of service (crash) via a crafted file.Show less
CVE-2017-6830 1Audiofile 1Audiofile May 13, 2026 Mar 20, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Heap-based buffer overflow in the alaw2linear_buf function in G711.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via a crafted file.
CVE-2014-9847 4Canonical ImagemagickOpensuse+1 more 10Imagemagick LeapOpensuse+7 more May 13, 2026 Mar 20, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 The jng decoder in ImageMagick 6.8.9.9 allows remote attackers to have an unspecified impact.
CVE-2014-9846 5Canonical ImagemagickOpensuse+2 more 11Imagemagick LeapLeap+8 more May 13, 2026 Mar 20, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact.
CVE-2014-9845 5Canonical ImagemagickOpensuse+2 more 11Imagemagick LeapLeap+8 more May 13, 2026 Mar 20, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 The ReadDIBImage function in coders/dib.c in ImageMagick allows remote attackers to cause a denial of service (crash) via a corrupted dib file.
CVE-2014-9843 4Canonical ImagemagickOpensuse+1 more 8Imagemagick LeapOpensuse+5 more May 13, 2026 Mar 20, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 The DecodePSDPixels function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors.
CVE-2012-5361 1Ffmpeg 1Ffmpeg May 13, 2026 Mar 20, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Libavcodec in FFmpeg before 0.11 allows remote attackers to execute arbitrary code via a crafted WMV file.
CVE-2017-7187 1Linux 1Linux Kernel May 13, 2026 Mar 20, 2017 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 The sg_ioctl function in drivers/scsi/sg.c in the Linux kernel through 4.10.4 allows local users to cause a denial of service (stack-based buffer overflow) or possibly have unspecified other impact via a large command si...Show more The sg_ioctl function in drivers/scsi/sg.c in the Linux kernel through 4.10.4 allows local users to cause a denial of service (stack-based buffer overflow) or possibly have unspecified other impact via a large command size in an SG_NEXT_CMD_LEN ioctl call, leading to out-of-bounds write access in the sg_write function.Show less
CVE-2017-7186 1Pcre 2Pcre Pcre2 May 13, 2026 Mar 20, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 libpcre1 in PCRE 8.40 and libpcre2 in PCRE2 10.23 allow remote attackers to cause a denial of service (segmentation violation for read access, and application crash) by triggering an invalid Unicode property lookup.
CVE-2016-10253 1Erlang 1Erlang/otp May 13, 2026 Mar 18, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 An issue was discovered in Erlang/OTP 18.x. Erlang's generation of compiled regular expressions is vulnerable to a heap overflow. Regular expressions using a malformed extpattern can indirectly specify an offset that is...Show more An issue was discovered in Erlang/OTP 18.x. Erlang's generation of compiled regular expressions is vulnerable to a heap overflow. Regular expressions using a malformed extpattern can indirectly specify an offset that is used as an array index. This ordinal permits arbitrary regions within the erts_alloc arena to be both read and written to.Show less

Previous 1...352353354...728 Next