← Back
CWE-788

147 CVEs • Abstraction: Base

Access of Memory Location After End of Buffer

The product reads or writes to a buffer using an index or pointer that references a memory location after the end of the buffer.

JSON object

Loading...

CVEs (147)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Adobe
1Indesign
Jun 17, 2026
Sep 10, 2020
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A memory corruption vulnerability exists in InDesign 15.1.1 (and earlier versions). Insecure handling of a malicious indd file could be abused to cause an out-of-bounds memory access, potentially resulting in code execut...Show more
A memory corruption vulnerability exists in InDesign 15.1.1 (and earlier versions). Insecure handling of a malicious indd file could be abused to cause an out-of-bounds memory access, potentially resulting in code execution in the context of the current user.Show less
1Adobe
1Indesign
Jun 17, 2026
Sep 10, 2020
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A memory corruption vulnerability exists in InDesign 15.1.1 (and earlier versions). Insecure handling of a malicious indd file could be abused to cause an out-of-bounds memory access, potentially resulting in code execut...Show more
A memory corruption vulnerability exists in InDesign 15.1.1 (and earlier versions). Insecure handling of a malicious indd file could be abused to cause an out-of-bounds memory access, potentially resulting in code execution in the context of the current user.Show less
1Adobe
1Indesign
Jun 17, 2026
Sep 10, 2020
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A memory corruption vulnerability exists in InDesign 15.1.1 (and earlier versions). Insecure handling of a malicious indd file could be abused to cause an out-of-bounds memory access, potentially resulting in code execut...Show more
A memory corruption vulnerability exists in InDesign 15.1.1 (and earlier versions). Insecure handling of a malicious indd file could be abused to cause an out-of-bounds memory access, potentially resulting in code execution in the context of the current user.Show less
1Uvnc
1Ultravnc
Jun 17, 2026
Mar 8, 2019
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
UltraVNC revision 1203 has out-of-bounds access vulnerability in VNC client inside RAW decoder, which can potentially result code execution. This attack appear to be exploitable via network connectivity. This vulnerabili...Show more
UltraVNC revision 1203 has out-of-bounds access vulnerability in VNC client inside RAW decoder, which can potentially result code execution. This attack appear to be exploitable via network connectivity. This vulnerability has been fixed in revision 1204.Show less
1Uvnc
1Ultravnc
Jun 17, 2026
Mar 8, 2019
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
UltraVNC revision 1207 has multiple out-of-bounds access vulnerabilities connected with improper usage of ClientConnection::Copybuffer function in VNC client code, which can potentially result in code execution. This att...Show more
UltraVNC revision 1207 has multiple out-of-bounds access vulnerabilities connected with improper usage of ClientConnection::Copybuffer function in VNC client code, which can potentially result in code execution. This attack appears to be exploitable via network connectivity. User interaction is required to trigger these vulnerabilities. These vulnerabilities have been fixed in revision 1208.Show less
1Uvnc
1Ultravnc
Jun 17, 2026
Mar 8, 2019
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
UltraVNC revision 1207 has multiple out-of-bounds access vulnerabilities connected with improper usage of SETPIXELS macro in VNC client code, which can potentially result in code execution. This attack appears to be expl...Show more
UltraVNC revision 1207 has multiple out-of-bounds access vulnerabilities connected with improper usage of SETPIXELS macro in VNC client code, which can potentially result in code execution. This attack appears to be exploitable via network connectivity. These vulnerabilities have been fixed in revision 1208.Show less
1Uvnc
1Ultravnc
Jun 17, 2026
Mar 8, 2019
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
UltraVNC revision 1203 has out-of-bounds access vulnerability in VNC client inside Ultra2 decoder, which can potentially result in code execution. This attack appears to be exploitable via network connectivity. This vuln...Show more
UltraVNC revision 1203 has out-of-bounds access vulnerability in VNC client inside Ultra2 decoder, which can potentially result in code execution. This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1204.Show less