Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

CVEs (14,750)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2019-9719 1Libav 1Libav Jun 17, 2026 Sep 19, 2019 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 A stack-based buffer overflow in the subtitle decoder in Libav 12.3 allows attackers to corrupt the stack via a crafted video file in Matroska format, because srt_to_ass in libavcodec/srtdec.c misuses snprintf. NOTE: Thi...Show more A stack-based buffer overflow in the subtitle decoder in Libav 12.3 allows attackers to corrupt the stack via a crafted video file in Matroska format, because srt_to_ass in libavcodec/srtdec.c misuses snprintf. NOTE: Third parties dispute that this is a vulnerability because “no evidence of a vulnerability is provided” and only “a generic warning from a static code analysis” is providedShow less
CVE-2019-14821 8Canonical DebianFedoraproject+5 more 28Aff A700s Firmware Data Availability ServicesDebian Linux+25 more Jun 17, 2026 Sep 19, 2019 N/A· v4 8.8 HIGH· v3 7.2 HIGH· v2 An out-of-bounds access issue was found in the Linux kernel, all versions through 5.3, in the way Linux kernel's KVM hypervisor implements the Coalesced MMIO write operation. It operates on an MMIO ring buffer 'struct kv...Show more An out-of-bounds access issue was found in the Linux kernel, all versions through 5.3, in the way Linux kernel's KVM hypervisor implements the Coalesced MMIO write operation. It operates on an MMIO ring buffer 'struct kvm_coalesced_mmio' object, wherein write indices 'ring->first' and 'ring->last' value could be supplied by a host user-space process. An unprivileged host user or process with access to '/dev/kvm' device could use this flaw to crash the host kernel, resulting in a denial of service or potentially escalating privileges on the system.Show less
CVE-2019-15943 1Valvesoftware 1Counter Strike Jun 17, 2026 Sep 19, 2019 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 vphysics.dll in Counter-Strike: Global Offensive before 1.37.1.1 allows remote attackers to achieve code execution or denial of service by creating a gaming server and inviting a victim to this server, because a crafted...Show more vphysics.dll in Counter-Strike: Global Offensive before 1.37.1.1 allows remote attackers to achieve code execution or denial of service by creating a gaming server and inviting a victim to this server, because a crafted map is mishandled during a memset call.Show less
CVE-2019-13556 1Advantech 1Webaccess Jun 17, 2026 Sep 18, 2019 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 In WebAccess versions 8.4.1 and prior, multiple stack-based buffer overflow vulnerabilities are caused by a lack of proper validation of the length of user-supplied data. Exploitation of these vulnerabilities may allow r...Show more In WebAccess versions 8.4.1 and prior, multiple stack-based buffer overflow vulnerabilities are caused by a lack of proper validation of the length of user-supplied data. Exploitation of these vulnerabilities may allow remote code execution.Show less
CVE-2019-16395 1Gnucobol Project 1Gnucobol Jun 17, 2026 Sep 17, 2019 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 GnuCOBOL 2.2 has a stack-based buffer overflow in the cb_name() function in cobc/tree.c via crafted COBOL source code.
CVE-2019-5482 6Debian FedoraprojectHaxx+3 more 17Cloud Backup Communications Operations MonitorCommunications Session Border Controller+14 more Jun 17, 2026 Sep 16, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.
CVE-2019-16366 1Moddable 2Moddable Xs Jun 17, 2026 Sep 16, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 In XS 9.0.0 in Moddable SDK OS180329, there is a heap-based buffer overflow in fxBeginHost in xsAPI.c when called from fxRunDefine in xsRun.c, as demonstrated by crafted JavaScript code to xst.
CVE-2019-16352 1Rockcarry 1Ffjpeg Jun 17, 2026 Sep 16, 2019 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 ffjpeg before 2019-08-21 has a heap-based buffer overflow in jfif_load() at jfif.c.
CVE-2019-16347 1Miniupnp Project 1Ngiflib Jun 17, 2026 Sep 16, 2019 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 ngiflib 0.4 has a heap-based buffer overflow in WritePixels() in ngiflib.c when called from DecodeGifImg, because deinterlacing for small pictures is mishandled.
CVE-2019-16346 1Miniupnp Project 1Ngiflib Jun 17, 2026 Sep 16, 2019 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 ngiflib 0.4 has a heap-based buffer overflow in WritePixel() in ngiflib.c when called from DecodeGifImg, because deinterlacing for small pictures is mishandled.
CVE-2019-16294 2Notepad Plus Plus Scintilla 2Notepad++ Scintilla Jun 17, 2026 Sep 14, 2019 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 SciLexer.dll in Scintilla in Notepad++ (x64) before 7.7 allows remote code execution or denial of service via Unicode characters in a crafted .ml file.
CVE-2019-13548 1Codesys 13Control For Beaglebone Control For Empc A/imx6Control For Iot2000+10 more Jun 17, 2026 Sep 13, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 CODESYS V3 web server, all versions prior to 3.5.14.10, allows an attacker to send specially crafted http or https requests which could cause a stack overflow and create a denial-of-service condition or allow remote code...Show more CODESYS V3 web server, all versions prior to 3.5.14.10, allows an attacker to send specially crafted http or https requests which could cause a stack overflow and create a denial-of-service condition or allow remote code execution.Show less
CVE-2019-16277 1Picoc Project 1Picoc Jun 17, 2026 Sep 13, 2019 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 PicoC 2.1 has a heap-based buffer overflow in StringStrcpy in cstdlib/string.c when called from ExpressionParseFunctionCall in expression.c.
CVE-2019-1300 1Microsoft 2Chakracore Edge Jun 17, 2026 Sep 11, 2019 N/A· v4 7.5 HIGH· v3 7.6 HIGH· v2 A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique f...Show more A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1138, CVE-2019-1217, CVE-2019-1237, CVE-2019-1298.Show less
CVE-2019-1298 1Microsoft 2Chakracore Edge Jun 17, 2026 Sep 11, 2019 N/A· v4 7.5 HIGH· v3 7.6 HIGH· v2 A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique f...Show more A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1138, CVE-2019-1217, CVE-2019-1237, CVE-2019-1300.Show less
CVE-2019-1271 1Microsoft 8Windows 10 Windows 7Windows 8.1+5 more Jun 17, 2026 Sep 11, 2019 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 An elevation of privilege exists in hdAudio.sys which may lead to an out of band write, aka 'Windows Media Elevation of Privilege Vulnerability'.
CVE-2019-1237 1Microsoft 2Chakracore Edge Jun 17, 2026 Sep 11, 2019 N/A· v4 7.5 HIGH· v3 7.6 HIGH· v2 A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique f...Show more A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1138, CVE-2019-1217, CVE-2019-1298, CVE-2019-1300.Show less
CVE-2019-1236 1Microsoft 8Windows 10 Windows 7Windows 8.1+5 more Jun 17, 2026 Sep 11, 2019 N/A· v4 7.5 HIGH· v3 7.6 HIGH· v2 A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1208.
CVE-2019-1221 1Microsoft 1Internet Explorer Jun 17, 2026 Sep 11, 2019 N/A· v4 7.5 HIGH· v3 7.6 HIGH· v2 A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'.
CVE-2019-1217 1Microsoft 2Chakracore Edge Jun 17, 2026 Sep 11, 2019 N/A· v4 7.5 HIGH· v3 7.6 HIGH· v2 A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique f...Show more A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1138, CVE-2019-1237, CVE-2019-1298, CVE-2019-1300.Show less

Previous 1...622623624...738 Next