CWE-119
14,090 CVEs • Abstraction: Class • Likelihood of Exploit: High
Improper Restriction of Operations within the Bounds of a Memory Buffer
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.
CVEs (14,090)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
2Apple Webkitgtk5Iphone Os SafariTvos+2 moreMay 6, 2026 Feb 1, 2016 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 WebKit, as used in Apple iOS before 9.2.1, Safari before 9.0.3, and tvOS before 9.1.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a differen...Show more |
WebKit, as used in Apple iOS before 9.2.1 and Safari before 9.0.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than...Show more |
1Apple 4Iphone Os Mac Os XTvos+1 moreMay 6, 2026 Feb 1, 2016 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 syslog in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors. |
1Apple 4Iphone Os Mac Os XTvos+1 moreMay 6, 2026 Feb 1, 2016 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 The kernel in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors. |
1Apple 4Iphone Os Mac Os XTvos+1 moreMay 6, 2026 Feb 1, 2016 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 IOKit in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors. |
1Apple 4Iphone Os Mac Os XTvos+1 moreMay 6, 2026 Feb 1, 2016 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 The IOHIDFamily API in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors. |
The IOAcceleratorFamily2 interface in IOAcceleratorFamily in Apple OS X before 10.11.3 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors. |
1Apple 4Iphone Os Mac Os XTvos+1 moreMay 6, 2026 Feb 1, 2016 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 The Disk Images component in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors. |
AppleGraphicsPowerManagement in Apple OS X before 10.11.3 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors. |
2Mozilla Opensuse3Firefox LeapOpensuseMay 6, 2026 Jan 31, 2016 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 The MoofParser::Metadata function in binding/MoofParser.cpp in libstagefright in Mozilla Firefox before 44.0 does not limit the size of read operations, which might allow remote attackers to cause a denial of service (in...Show more |
2Mozilla Opensuse3Firefox LeapOpensuseMay 6, 2026 Jan 31, 2016 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 The Buffer11::NativeBuffer11::map function in ANGLE, as used in Mozilla Firefox before 44.0, might allow remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unk...Show more |
3Mozilla OpensuseOracle4Firefox LeapLinux+1 moreMay 6, 2026 Jan 31, 2016 N/A· v4 8.8 HIGH· v3 9.3 HIGH· v2 Buffer overflow in the BufferSubData function in Mozilla Firefox before 44.0 and Firefox ESR 38.x before 38.6 allows remote attackers to execute arbitrary code via crafted WebGL content. |
2Mozilla Opensuse3Firefox LeapOpensuseMay 6, 2026 Jan 31, 2016 N/A· v4 10.0 CRITICAL· v3 10.0 HIGH· v2 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 44.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code v...Show more |
3Mozilla OpensuseOracle4Firefox LeapLinux+1 moreMay 6, 2026 Jan 31, 2016 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 44.0 and Firefox ESR 38.x before 38.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or...Show more |
Stack-based buffer overflow in McPvDrv.sys 4.6.111.0 in McAfee File Lock 5.x in McAfee Total Protection allows attackers to cause a denial of service (system crash) via a long vault GUID in an ioctl call. |
2Matroska Opensuse3Leap LibmatroskaOpensuseMay 6, 2026 Jan 29, 2016 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 The KaxInternalBlock::ReadData function in libMatroska before 1.4.4 allows context-dependent attackers to obtain sensitive information from process heap memory via crafted EBML lacing, which triggers an invalid memory ac...Show more |
1Rockwellautomation 81763 L16awa Series A 1763 L16awa Series B1763 L16bbb Series A+5 moreMay 6, 2026 Jan 28, 2016 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 Stack-based buffer overflow on Rockwell Automation Allen-Bradley MicroLogix 1100 devices A through 15.000 and B before 15.002 allows remote attackers to execute arbitrary code via a crafted web request. |
The opj_tgt_reset function in OpenJpeg 2016.1.18 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted JPEG 2000 image. |
Heap-based buffer overflow in the opj_j2k_update_image_data function in OpenJpeg 2016.1.18 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted JPEG 2000 image. |
Heap-based buffer overflow in MICROSYS PROMOTIC before 8.3.11 allows remote authenticated users to cause a denial of service via a malformed HTML document. |