← Back
CWE-119

14,552 CVEs • Abstraction: Class • Likelihood of Exploit: High

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

JSON object

Loading...

CVEs (14,552)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2014-9636
4Canonical
DebianFedoraproject+1 more
4Debian Linux
FedoraUbuntu Linux+1 more
May 6, 2026
Feb 6, 2015
N/A· v4
N/A· v3
5.0 MEDIUM· v2
unzip 6.0 allows remote attackers to cause a denial of service (out-of-bounds read or write and crash) via an extra field with an uncompressed size smaller than the compressed field size in a zip archive that advertises...Show more
unzip 6.0 allows remote attackers to cause a denial of service (out-of-bounds read or write and crash) via an extra field with an uncompressed size smaller than the compressed field size in a zip archive that advertises STORED method compression.Show less
CVE-2015-0327
1Adobe
1Flash Player
May 6, 2026
Feb 6, 2015
N/A· v4
N/A· v3
10.0 HIGH· v2
Heap-based buffer overflow in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified v...Show more
Heap-based buffer overflow in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0323.Show less
CVE-2015-0324
1Adobe
1Flash Player
May 6, 2026
Feb 6, 2015
N/A· v4
N/A· v3
10.0 HIGH· v2
Buffer overflow in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors.
CVE-2015-0323
1Adobe
1Flash Player
May 6, 2026
Feb 6, 2015
N/A· v4
N/A· v3
10.0 HIGH· v2
Heap-based buffer overflow in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified v...Show more
Heap-based buffer overflow in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0327.Show less
CVE-2015-1462
2Clamav
Fedoraproject
2Clamav
Fedora
May 6, 2026
Feb 3, 2015
N/A· v4
N/A· v3
7.5 HIGH· v2
ClamAV before 0.98.6 allows remote attackers to have unspecified impact via a crafted upx packer file, related to a "heap out of bounds condition."
CVE-2015-1461
2Clamav
Fedoraproject
2Clamav
Fedora
May 6, 2026
Feb 3, 2015
N/A· v4
N/A· v3
7.5 HIGH· v2
ClamAV before 0.98.6 allows remote attackers to have unspecified impact via a crafted (1) Yoda's crypter or (2) mew packer file, related to a "heap out of bounds condition."
CVE-2015-1348
1Arubanetworks
1Instant Access Point Firmware
May 6, 2026
Feb 3, 2015
N/A· v4
N/A· v3
7.8 HIGH· v2
Heap-based buffer overflow in Aruba Instant (IAP) with firmware before 4.0.0.7 and 4.1.x before 4.1.1.2 allows remote attackers to cause a denial of service (crash or reset to factory default) via a malformed frame to th...Show more
Heap-based buffer overflow in Aruba Instant (IAP) with firmware before 4.0.0.7 and 4.1.x before 4.1.1.2 allows remote attackers to cause a denial of service (crash or reset to factory default) via a malformed frame to the wireless interface.Show less
CVE-2014-9328
2Clamav
Fedoraproject
2Clamav
Fedora
May 6, 2026
Feb 3, 2015
N/A· v4
N/A· v3
7.5 HIGH· v2
ClamAV before 0.98.6 allows remote attackers to have unspecified impact via a crafted upack packer file, related to a "heap out of bounds condition."
CVE-2015-1449
1Siemens
1Ruggedcom Firmware
May 6, 2026
Feb 2, 2015
N/A· v4
N/A· v3
10.0 HIGH· v2
Buffer overflow in the integrated web server on Siemens Ruggedcom WIN51xx devices with firmware before SS4.4.4624.35, WIN52xx devices with firmware before SS4.4.4624.35, WIN70xx devices with firmware before BS4.4.4621.32...Show more
Buffer overflow in the integrated web server on Siemens Ruggedcom WIN51xx devices with firmware before SS4.4.4624.35, WIN52xx devices with firmware before SS4.4.4624.35, WIN70xx devices with firmware before BS4.4.4621.32, and WIN72xx devices with firmware before BS4.4.4621.32 allows remote attackers to execute arbitrary code via unspecified vectors.Show less
CVE-2014-9200
1Schneider Electric
4Somachine
SomoveSomove Lite+1 more
May 6, 2026
Feb 1, 2015
N/A· v4
N/A· v3
7.5 HIGH· v2
Stack-based buffer overflow in an unspecified DLL file in a DTM development kit in Schneider Electric Unity Pro, SoMachine, SoMove, SoMove Lite, Modbus Communication Library 2.2.6 and earlier, CANopen Communication Libra...Show more
Stack-based buffer overflow in an unspecified DLL file in a DTM development kit in Schneider Electric Unity Pro, SoMachine, SoMove, SoMove Lite, Modbus Communication Library 2.2.6 and earlier, CANopen Communication Library 1.0.2 and earlier, EtherNet/IP Communication Library 1.0.0 and earlier, EM X80 Gateway DTM (MB TCP/SL), Advantys DTM for OTB, Advantys DTM for STB, KINOS DTM, SOLO DTM, and Xantrex DTMs allows remote attackers to execute arbitrary code via unspecified vectors.Show less
CVE-2014-9161
1Adobe
2Acrobat
Acrobat Reader
May 6, 2026
Jan 30, 2015
N/A· v4
N/A· v3
9.3 HIGH· v2
CoolType.dll in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows, and 10.x through 10.1.13 and 11.x through 11.0.10 on OS X, allows remote attackers to cause a denial of service (out-of-bou...Show more
CoolType.dll in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows, and 10.x through 10.1.13 and 11.x through 11.0.10 on OS X, allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted PDF document.Show less
CVE-2014-8830
1Apple
1Mac Os X
May 6, 2026
Jan 30, 2015
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Heap-based buffer overflow in SceneKit in Apple OS X before 10.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted accessor element in a Collada file.
CVE-2014-8829
1Apple
1Mac Os X
May 6, 2026
Jan 30, 2015
N/A· v4
N/A· v3
7.5 HIGH· v2
SceneKit in Apple OS X before 10.10.2 allows attackers to execute arbitrary code or cause a denial of service (out-of-bounds write) via a crafted app.
CVE-2014-4487
1Apple
3Iphone Os
Mac Os XTvos
May 6, 2026
Jan 30, 2015
N/A· v4
N/A· v3
10.0 HIGH· v2
Buffer overflow in IOHIDFamily in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 allows attackers to execute arbitrary code in a privileged context via a crafted app.
CVE-2014-4485
1Apple
3Iphone Os
Mac Os XTvos
May 6, 2026
Jan 30, 2015
N/A· v4
N/A· v3
7.5 HIGH· v2
Buffer overflow in the XML parser in Foundation in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 allows remote attackers to execute arbitrary code or cause a denial of service (application...Show more
Buffer overflow in the XML parser in Foundation in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted XML document.Show less
CVE-2014-4483
1Apple
3Iphone Os
Mac Os XTvos
May 6, 2026
Jan 30, 2015
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Buffer overflow in FontParser in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a craft...Show more
Buffer overflow in FontParser in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted font file in a PDF document.Show less
CVE-2014-4479
1Apple
4Iphone Os
ItunesSafari+1 more
May 6, 2026
Jan 30, 2015
N/A· v4
N/A· v3
6.8 MEDIUM· v2
WebKit, as used in Apple iOS before 8.1.3; Apple Safari before 6.2.3, 7.x before 7.1.3, and 8.x before 8.0.3; and Apple TV before 7.0.3, allows remote attackers to execute arbitrary code or cause a denial of service (mem...Show more
WebKit, as used in Apple iOS before 8.1.3; Apple Safari before 6.2.3, 7.x before 7.1.3, and 8.x before 8.0.3; and Apple TV before 7.0.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2014-4476 and CVE-2014-4477.Show less
CVE-2014-4477
1Apple
4Iphone Os
ItunesSafari+1 more
May 6, 2026
Jan 30, 2015
N/A· v4
N/A· v3
6.8 MEDIUM· v2
WebKit, as used in Apple iOS before 8.1.3; Apple Safari before 6.2.3, 7.x before 7.1.3, and 8.x before 8.0.3; and Apple TV before 7.0.3, allows remote attackers to execute arbitrary code or cause a denial of service (mem...Show more
WebKit, as used in Apple iOS before 8.1.3; Apple Safari before 6.2.3, 7.x before 7.1.3, and 8.x before 8.0.3; and Apple TV before 7.0.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2014-4476 and CVE-2014-4479.Show less
CVE-2014-4476
1Apple
4Iphone Os
ItunesSafari+1 more
May 6, 2026
Jan 30, 2015
N/A· v4
N/A· v3
6.8 MEDIUM· v2
WebKit, as used in Apple iOS before 8.1.3; Apple Safari before 6.2.3, 7.x before 7.1.3, and 8.x before 8.0.3; and Apple TV before 7.0.3, allows remote attackers to execute arbitrary code or cause a denial of service (mem...Show more
WebKit, as used in Apple iOS before 8.1.3; Apple Safari before 6.2.3, 7.x before 7.1.3, and 8.x before 8.0.3; and Apple TV before 7.0.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2014-4477 and CVE-2014-4479.Show less
CVE-2014-8920
1Ibm
1I Access
May 6, 2026
Jan 28, 2015
N/A· v4
N/A· v3
7.2 HIGH· v2
Buffer overflow in the Data Transfer Program in IBM i Access 5770-XE1 5R4, 6.1, and 7.1 on Windows allows local users to gain privileges via unspecified vectors.