Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

CVEs (14,090)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2015-6996 1Apple 3Iphone Os Mac Os XWatchos May 6, 2026 Oct 23, 2015 N/A· v4 N/A· v3 6.8 MEDIUM· v2 IOAcceleratorFamily in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted app.
CVE-2015-6995 1Apple 2Iphone Os Mac Os X May 6, 2026 Oct 23, 2015 N/A· v4 N/A· v3 6.8 MEDIUM· v2 The Disk Images component in Apple iOS before 9.1 and OS X before 10.11.1 misparses images, which allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted app.
CVE-2015-6993 1Apple 2Iphone Os Mac Os X May 6, 2026 Oct 23, 2015 N/A· v4 N/A· v3 6.8 MEDIUM· v2 FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-20...Show more FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-6976, CVE-2015-6977, CVE-2015-6978, CVE-2015-6990, CVE-2015-6991, CVE-2015-7008, CVE-2015-7009, CVE-2015-7010, and CVE-2015-7018.Show less
CVE-2015-6991 1Apple 2Iphone Os Mac Os X May 6, 2026 Oct 23, 2015 N/A· v4 N/A· v3 6.8 MEDIUM· v2 FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-20...Show more FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-6976, CVE-2015-6977, CVE-2015-6978, CVE-2015-6990, CVE-2015-6993, CVE-2015-7008, CVE-2015-7009, CVE-2015-7010, and CVE-2015-7018.Show less
CVE-2015-6990 1Apple 2Iphone Os Mac Os X May 6, 2026 Oct 23, 2015 N/A· v4 N/A· v3 6.8 MEDIUM· v2 FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-20...Show more FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-6976, CVE-2015-6977, CVE-2015-6978, CVE-2015-6991, CVE-2015-6993, CVE-2015-7008, CVE-2015-7009, CVE-2015-7010, and CVE-2015-7018.Show less
CVE-2015-6989 1Apple 3Iphone Os Mac Os XWatchos May 6, 2026 Oct 23, 2015 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Grand Central Dispatch in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted package that is mish...Show more Grand Central Dispatch in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted package that is mishandled during dispatch calls.Show less
CVE-2015-6985 1Apple 1Mac Os X May 6, 2026 Oct 23, 2015 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Apple Type Services (ATS) in Apple OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web page.
CVE-2015-6978 1Apple 3Iphone Os Mac Os XWatchos May 6, 2026 Oct 23, 2015 N/A· v4 N/A· v3 6.8 MEDIUM· v2 FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-20...Show more FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-6976, CVE-2015-6977, CVE-2015-6990, CVE-2015-6991, CVE-2015-6993, CVE-2015-7008, CVE-2015-7009, CVE-2015-7010, and CVE-2015-7018.Show less
CVE-2015-6977 1Apple 2Iphone Os Mac Os X May 6, 2026 Oct 23, 2015 N/A· v4 N/A· v3 6.8 MEDIUM· v2 FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-20...Show more FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-6976, CVE-2015-6978, CVE-2015-6990, CVE-2015-6991, CVE-2015-6993, CVE-2015-7008, CVE-2015-7009, CVE-2015-7010, and CVE-2015-7018.Show less
CVE-2015-6976 1Apple 2Iphone Os Mac Os X May 6, 2026 Oct 23, 2015 N/A· v4 N/A· v3 6.8 MEDIUM· v2 FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-20...Show more FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-6977, CVE-2015-6978, CVE-2015-6990, CVE-2015-6991, CVE-2015-6993, CVE-2015-7008, CVE-2015-7009, CVE-2015-7010, and CVE-2015-7018.Show less
CVE-2015-6974 1Apple 3Iphone Os Mac Os XWatchos May 6, 2026 Oct 23, 2015 N/A· v4 N/A· v3 9.3 HIGH· v2 IOHIDFamily in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVE-2015-5944 1Apple 1Mac Os X May 6, 2026 Oct 23, 2015 N/A· v4 N/A· v3 6.8 MEDIUM· v2 CoreText in Apple OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file.
CVE-2015-5942 1Apple 3Iphone Os Mac Os XWatchos May 6, 2026 Oct 23, 2015 N/A· v4 N/A· v3 6.8 MEDIUM· v2 FontParser in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vu...Show more FontParser in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-5927.Show less
CVE-2015-5940 1Apple 2Iphone Os Mac Os X May 6, 2026 Oct 23, 2015 N/A· v4 N/A· v3 6.8 MEDIUM· v2 The Accelerate Framework component in Apple iOS before 9.1 and OS X before 10.11.1, when multi-threading is enabled, omits certain validation and locking steps, which allows remote attackers to execute arbitrary code or...Show more The Accelerate Framework component in Apple iOS before 9.1 and OS X before 10.11.1, when multi-threading is enabled, omits certain validation and locking steps, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.Show less
CVE-2015-5939 1Apple 3Iphone Os Mac Os XWatchos May 6, 2026 Oct 23, 2015 N/A· v4 N/A· v3 6.8 MEDIUM· v2 ImageIO in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted metadata in an image, a differ...Show more ImageIO in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted metadata in an image, a different vulnerability than CVE-2015-5935, CVE-2015-5936, and CVE-2015-5937.Show less
CVE-2015-5938 1Apple 1Mac Os X May 6, 2026 Oct 23, 2015 N/A· v4 N/A· v3 6.8 MEDIUM· v2 ImageIO in Apple OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted metadata in an image.
CVE-2015-5937 1Apple 3Iphone Os Mac Os XWatchos May 6, 2026 Oct 23, 2015 N/A· v4 N/A· v3 6.8 MEDIUM· v2 ImageIO in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted metadata in an image, a differ...Show more ImageIO in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted metadata in an image, a different vulnerability than CVE-2015-5935, CVE-2015-5936, and CVE-2015-5939.Show less
CVE-2015-5936 1Apple 3Iphone Os Mac Os XWatchos May 6, 2026 Oct 23, 2015 N/A· v4 N/A· v3 6.8 MEDIUM· v2 ImageIO in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted metadata in an image, a differ...Show more ImageIO in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted metadata in an image, a different vulnerability than CVE-2015-5935, CVE-2015-5937, and CVE-2015-5939.Show less
CVE-2015-5935 1Apple 3Iphone Os Mac Os XWatchos May 6, 2026 Oct 23, 2015 N/A· v4 N/A· v3 6.8 MEDIUM· v2 ImageIO in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted metadata in an image, a differ...Show more ImageIO in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted metadata in an image, a different vulnerability than CVE-2015-5936, CVE-2015-5937, and CVE-2015-5939.Show less
CVE-2015-5934 1Apple 1Mac Os X May 6, 2026 Oct 23, 2015 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Audio in Apple OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted audio file, a different vulnerability than CVE-2015-5933.

Previous 1...412413414...705 Next