← Back
CWE-119

14,087 CVEs • Abstraction: Class • Likelihood of Exploit: High

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

JSON object

Loading...

CVEs (14,087)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2014-6422
1Wireshark
1Wireshark
May 6, 2026
Sep 20, 2014
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The SDP dissector in Wireshark 1.10.x before 1.10.10 creates duplicate hashtables for a media channel, which allows remote attackers to cause a denial of service (application crash) via a crafted packet to the RTP dissec...Show more
The SDP dissector in Wireshark 1.10.x before 1.10.10 creates duplicate hashtables for a media channel, which allows remote attackers to cause a denial of service (application crash) via a crafted packet to the RTP dissector.Show less
CVE-2014-0992
1Advantech
1Advantech Webaccess
May 6, 2026
Sep 20, 2014
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the password parameter.
CVE-2014-0991
1Advantech
1Advantech Webaccess
May 6, 2026
Sep 20, 2014
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the projectname parameter.
CVE-2014-0990
1Advantech
1Advantech Webaccess
May 6, 2026
Sep 20, 2014
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the UserName parameter.
CVE-2014-0989
1Advantech
1Advantech Webaccess
May 6, 2026
Sep 20, 2014
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the AccessCode2 parameter.
CVE-2014-0988
1Advantech
1Advantech Webaccess
May 6, 2026
Sep 20, 2014
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the AccessCode parameter.
CVE-2014-0987
1Advantech
1Advantech Webaccess
May 6, 2026
Sep 20, 2014
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the NodeName2 parameter.
CVE-2014-0986
1Advantech
1Advantech Webaccess
May 6, 2026
Sep 20, 2014
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the GotoCmd parameter.
CVE-2014-0985
1Advantech
1Advantech Webaccess
May 6, 2026
Sep 20, 2014
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the NodeName parameter.
CVE-2014-4402
1Apple
1Mac Os X
May 6, 2026
Sep 19, 2014
N/A· v4
N/A· v3
9.3 HIGH· v2
An unspecified IOAcceleratorFamily function in Apple OS X before 10.9.5 lacks proper bounds checking on read operations, which allows attackers to execute arbitrary code in a privileged context via a crafted application.
CVE-2014-4393
1Apple
1Mac Os X
May 6, 2026
Sep 19, 2014
N/A· v4
N/A· v3
10.0 HIGH· v2
Buffer overflow in the shader compiler in the Intel Graphics Driver subsystem in Apple OS X before 10.9.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted G...Show more
Buffer overflow in the shader compiler in the Intel Graphics Driver subsystem in Apple OS X before 10.9.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted GLSL shader.Show less
CVE-2014-4350
1Apple
2Mac Os X
Mac Os X Server
May 6, 2026
Sep 19, 2014
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Buffer overflow in QT Media Foundation in Apple OS X before 10.9.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted MIDI file.
CVE-2014-1391
1Apple
2Mac Os X
Mac Os X Server
May 6, 2026
Sep 19, 2014
N/A· v4
N/A· v3
6.8 MEDIUM· v2
QT Media Foundation in Apple OS X before 10.9.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file with RLE encoding.
CVE-2014-4415
1Apple
3Iphone Os
SafariTvos
May 6, 2026
Sep 18, 2014
N/A· v4
N/A· v3
6.8 MEDIUM· v2
WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vu...Show more
WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-09-17-1 and APPLE-SA-2014-09-17-2.Show less
CVE-2014-4414
1Apple
3Iphone Os
Mac Os XTvos
May 6, 2026
Sep 18, 2014
N/A· v4
N/A· v3
6.8 MEDIUM· v2
WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vu...Show more
WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-09-17-1 and APPLE-SA-2014-09-17-2.Show less
CVE-2014-4413
1Apple
3Iphone Os
Mac Os XTvos
May 6, 2026
Sep 18, 2014
N/A· v4
N/A· v3
6.8 MEDIUM· v2
WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vu...Show more
WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-09-17-1 and APPLE-SA-2014-09-17-2.Show less
CVE-2014-4412
1Apple
3Iphone Os
Mac Os XTvos
May 6, 2026
Sep 18, 2014
N/A· v4
N/A· v3
6.8 MEDIUM· v2
WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vu...Show more
WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-09-17-1 and APPLE-SA-2014-09-17-2.Show less
CVE-2014-4411
1Apple
3Iphone Os
Mac Os XTvos
May 6, 2026
Sep 18, 2014
N/A· v4
N/A· v3
6.8 MEDIUM· v2
WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vu...Show more
WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-09-17-1 and APPLE-SA-2014-09-17-2.Show less
CVE-2014-4410
1Apple
3Iphone Os
Mac Os XTvos
May 6, 2026
Sep 18, 2014
N/A· v4
N/A· v3
6.8 MEDIUM· v2
WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vu...Show more
WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-09-17-1 and APPLE-SA-2014-09-17-2.Show less
CVE-2014-4408
1Apple
3Iphone Os
Mac Os XTvos
May 6, 2026
Sep 18, 2014
N/A· v4
N/A· v3
6.9 MEDIUM· v2
The rt_setgate function in the kernel in Apple iOS before 8 and Apple TV before 7 allows local users to gain privileges or cause a denial of service (out-of-bounds read and device crash) via a crafted call.