CWE-119
14,087 CVEs • Abstraction: Class • Likelihood of Exploit: High
Improper Restriction of Operations within the Bounds of a Memory Buffer
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.
CVEs (14,087)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
2Debian X.org3Debian Linux X11X ServerMay 6, 2026 Dec 10, 2014 N/A· v4 N/A· v3 6.5 MEDIUM· v2 The SProcXCMiscGetXIDList function in the XC-MISC extension in X.Org X Window System (aka X11 or X) X11R6.0 and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial...Show more |
2Debian X.org3Debian Linux X11X ServerMay 6, 2026 Dec 10, 2014 N/A· v4 N/A· v3 6.5 MEDIUM· v2 The XInput extension in X.Org X Window System (aka X11 or X) X11R4 and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write)...Show more |
The ff_hevc_decode_nal_sps function in libavcodec/hevc_ps.c in FFMpeg before 2.1.6, 2.2.x through 2.3.x, and 2.4.x before 2.4.4 allows remote attackers to cause a denial of service (out-of-bounds access) via a crafted .b...Show more |
The raw_decode function in libavcodec/rawdec.c in FFMpeg before 2.1.6, 2.2.x through 2.3.x, and 2.4.x before 2.4.4 allows remote attackers to cause a denial of service (out-of-bounds heap access) and possibly have other...Show more |
The decode_ihdr_chunk function in libavcodec/pngdec.c in FFMpeg before 2.1.6, 2.2.x through 2.3.x, and 2.4.x before 2.4.4 allows remote attackers to cause a denial of service (out-of-bounds heap access) and possibly have...Show more |
The mjpeg_decode_app function in libavcodec/mjpegdec.c in FFMpeg before 2.1.6, 2.2.x through 2.3.x, and 2.4.x before 2.4.4 allows remote attackers to cause a denial of service (out-of-bounds heap access) and possibly hav...Show more |
UnRTF allows remote attackers to cause a denial of service (out-of-bounds memory access and crash) and possibly execute arbitrary code via a crafted RTF file. |
4Debian FedoraprojectMageia Project+1 more4Debian Linux FedoraMageia+1 moreMay 6, 2026 Dec 9, 2014 N/A· v4 N/A· v3 7.5 HIGH· v2 UnRTF allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code as demonstrated by a file containing the string "{\cb-999999999". |
3Canonical FedoraprojectGnu3Binutils FedoraUbuntu LinuxMay 6, 2026 Dec 9, 2014 N/A· v4 N/A· v3 7.5 HIGH· v2 Stack-based buffer overflow in the srec_scan function in bfd/srec.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (crash) and possibly have other unspecified impact via a crafted f...Show more |
3Canonical FedoraprojectGnu3Binutils FedoraUbuntu LinuxMay 6, 2026 Dec 9, 2014 N/A· v4 N/A· v3 7.5 HIGH· v2 Stack-based buffer overflow in the ihex_scan function in bfd/ihex.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (crash) and possibly have other unspecified impact via a crafted i...Show more |
3Canonical FedoraprojectGnu3Binutils FedoraUbuntu LinuxMay 6, 2026 Dec 9, 2014 N/A· v4 N/A· v3 7.5 HIGH· v2 Heap-based buffer overflow in the pe_print_edata function in bfd/peXXigen.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (crash) and possibly have other unspecified impact via a t...Show more |
3Canonical FedoraprojectGnu3Binutils FedoraUbuntu LinuxMay 6, 2026 Dec 9, 2014 N/A· v4 N/A· v3 7.5 HIGH· v2 The _bfd_XXi_swap_aouthdr_in function in bfd/peXXigen.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (out-of-bounds write) and possibly have other unspecified impact via a crafted...Show more |
3Canonical FedoraprojectGnu3Binutils FedoraUbuntu LinuxMay 6, 2026 Dec 9, 2014 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The srec_scan function in bfd/srec.c in libdbfd in GNU binutils before 2.25 allows remote attackers to cause a denial of service (out-of-bounds read) via a small S-record. |
3Debian OpensuseRedhat6Enterprise Linux Desktop Enterprise Linux Hpc NodeEnterprise Linux Server+3 moreMay 6, 2026 Dec 8, 2014 N/A· v4 N/A· v3 4.6 MEDIUM· v2 lib/handle.c in Hivex before 1.3.11 allows local users to execute arbitrary code and gain privileges via a small hive files, which triggers an out-of-bounds read or write. |
Heap-based buffer overflow in the PTC IsoView ActiveX control allows remote attackers to execute arbitrary code via a crafted ViewPort property value. |
Stack-based buffer overflow in the BackupToAvi method in the CNC_Ctrl ActiveX control in Samsung SmartViewer allows remote attackers to execute arbitrary code via unspecified vectors. |
13s Pocketnet Tech 13s Pocketnet Tech Video Management Software May 6, 2026 Dec 8, 2014 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Multiple buffer overflows in the PocketNetNVRMediaClientAxCtrl.NVRMediaViewer.1 control in 3S Pocketnet Tech VMS allow remote attackers to execute arbitrary code via a crafted string to the (1) StartRecord, (2) StartReco...Show more |
Heap-based buffer overflow in the Cirrus VGA emulator (hw/display/cirrus_vga.c) in QEMU before 2.2.0 allows local guest users to execute arbitrary code via vectors related to blit regions. NOTE: this vulnerability exists...Show more |
Buffer overflow in Hikvision DVR DS-7204 Firmware 2.2.10 build 131009, and other models and versions, allows remote attackers to execute arbitrary code via an RTSP PLAY request with a long Authorization header. |
Buffer overflow in the ppp_hdlc function in print-ppp.c in tcpdump 4.6.2 and earlier allows remote attackers to cause a denial of service (crash) cia a crafted PPP packet. |