CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer (page 59)
Page 59 of 100 — CVEs classified under CWE-119, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-11764 | High | 7.5 | 2017-09-13 | Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due… |
CVE-2017-14348 | High | 8.8 | 2017-09-12 | LibRaw before 0.18.4 has a heap-based Buffer Overflow in the processCanonCameraInfo function via a crafted file. |
CVE-2017-14315 | High | 7.5 | 2017-09-12 | In Apple iOS 7 through 9, due to a BlueBorne flaw in the implementation of LEAP (Low Energy Audio Protocol), a large audio command can be sent to a targeted de… |
CVE-2017-14266 | High | 7.8 | 2017-09-12 | tcprewrite in Tcpreplay 3.4.4 has a Heap-Based Buffer Overflow vulnerability triggered by a crafted PCAP file, a related issue to CVE-2016-6160. |
CVE-2017-1000249 | Medium | 5.5 | 2017-09-11 | An issue in file() was introduced in commit 9611f31313a93aa036389c5f3b15eea53510d4d1 (Oct 2016) lets an attacker overwrite a fixed 20 bytes stack buffer with a… |
CVE-2017-14310 | High | 7.8 | 2017-09-11 | STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a "Read Access… |
CVE-2017-14309 | High | 7.8 | 2017-09-11 | STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a "Read Access… |
CVE-2017-14308 | High | 7.8 | 2017-09-11 | STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a "Read Access… |
CVE-2017-14307 | High | 7.8 | 2017-09-11 | STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to "Data from Faul… |
CVE-2017-14306 | High | 7.8 | 2017-09-11 | STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a "Read Access… |
CVE-2017-14305 | High | 7.8 | 2017-09-11 | STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to "Data from Faul… |
CVE-2017-14304 | High | 7.8 | 2017-09-11 | STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a "Read Access… |
CVE-2017-14303 | High | 7.8 | 2017-09-11 | STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a "Read Access… |
CVE-2017-14302 | High | 7.8 | 2017-09-11 | STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to "Data from Faul… |
CVE-2017-14301 | High | 7.8 | 2017-09-11 | STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to "Data from Faulting Address con… |
CVE-2017-14300 | High | 7.8 | 2017-09-11 | STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to "Data from Faulting Address con… |
CVE-2017-14299 | High | 7.8 | 2017-09-11 | STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to "Data from Faulting Address con… |
CVE-2017-14298 | High | 7.8 | 2017-09-11 | STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to "Data from Faulting Address con… |
CVE-2017-14297 | High | 7.8 | 2017-09-11 | STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to "Data from Faulting Address con… |
CVE-2017-14296 | High | 7.8 | 2017-09-11 | STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to "Data from Faulting Address con… |
CVE-2017-14295 | High | 7.8 | 2017-09-11 | STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to "Data from Faulting Address con… |
CVE-2017-14294 | High | 7.8 | 2017-09-11 | STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV starting… |
CVE-2017-14293 | High | 7.8 | 2017-09-11 | STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to "Heap Corruption starting at wo… |
CVE-2017-14292 | High | 7.8 | 2017-09-11 | STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV starting… |
CVE-2017-14291 | High | 7.8 | 2017-09-11 | STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV starting… |
CVE-2017-14290 | High | 7.8 | 2017-09-11 | STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to "Heap Corruption starting at wo… |
CVE-2017-14289 | High | 7.8 | 2017-09-11 | STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV starting… |
CVE-2017-14288 | High | 7.8 | 2017-09-11 | STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV starting… |
CVE-2017-14287 | High | 7.8 | 2017-09-11 | STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "Read Access Violation on Con… |
CVE-2017-14286 | High | 7.8 | 2017-09-11 | STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV starting… |
CVE-2017-14285 | High | 7.8 | 2017-09-11 | XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, relate… |
CVE-2017-14284 | High | 7.8 | 2017-09-11 | XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, relate… |
CVE-2017-14283 | High | 7.8 | 2017-09-11 | XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, relate… |
CVE-2017-14282 | High | 7.8 | 2017-09-11 | XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, relate… |
CVE-2017-14281 | High | 7.8 | 2017-09-11 | XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, relate… |
CVE-2017-14280 | High | 7.8 | 2017-09-11 | XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, relate… |
CVE-2017-14279 | High | 7.8 | 2017-09-11 | XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, relate… |
CVE-2017-14278 | High | 7.8 | 2017-09-11 | XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, relate… |
CVE-2017-14277 | High | 7.8 | 2017-09-11 | XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, relate… |
CVE-2017-14276 | High | 7.8 | 2017-09-11 | XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, relate… |
CVE-2017-14275 | High | 7.8 | 2017-09-11 | XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mod… |
CVE-2017-14274 | High | 7.8 | 2017-09-11 | XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to "Data from… |
CVE-2017-14273 | High | 7.8 | 2017-09-11 | XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mod… |
CVE-2017-14272 | High | 7.8 | 2017-09-11 | XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mod… |
CVE-2017-14271 | High | 7.8 | 2017-09-11 | XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mod… |
CVE-2017-14270 | High | 7.8 | 2017-09-11 | XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mod… |
CVE-2017-14153 | High | 7.8 | 2017-09-11 | This vulnerability allows local attackers to escalate privileges on Jungo WinDriver 12.4.0 and earlier. An attacker must first obtain the ability to execute lo… |
CVE-2017-14265 | Critical | 9.8 | 2017-09-11 | A Stack-based Buffer Overflow was discovered in xtrans_interpolate in internal/dcraw_common.cpp in LibRaw before 0.18.3. It could allow a remote denial of serv… |
CVE-2017-14261 | High | 7.8 | 2017-09-11 | In the SDK in Bento4 1.5.0-616, the AP4_StszAtom class in Ap4StszAtom.cpp file contains a Read Memory Access Violation vulnerability. It is possible to exploit… |
CVE-2017-14260 | High | 7.8 | 2017-09-11 | In the SDK in Bento4 1.5.0-616, the AP4_StssAtom class in Ap4StssAtom.cpp contains a Write Memory Access Violation vulnerability. It is possible to exploit thi… |
CVE-2017-14259 | High | 7.8 | 2017-09-11 | In the SDK in Bento4 1.5.0-616, the AP4_StscAtom class in Ap4StscAtom.cpp contains a Write Memory Access Violation vulnerability. It is possible to exploit thi… |
CVE-2017-14258 | High | 7.8 | 2017-09-11 | In the SDK in Bento4 1.5.0-616, SetItemCount in Core/Ap4StscAtom.h file contains a Write Memory Access Violation vulnerability. It is possible to exploit this… |
CVE-2017-14257 | High | 7.8 | 2017-09-11 | In the SDK in Bento4 1.5.0-616, AP4_AtomSampleTable::GetSample in Core/Ap4AtomSampleTable.cpp contains a Read Memory Access Violation vulnerability. It is poss… |
CVE-2017-14224 | High | 8.8 | 2017-09-09 | A heap-based buffer overflow in WritePCXImage in coders/pcx.c in ImageMagick 7.0.6-8 Q16 allows remote attackers to cause a denial of service or code execution… |
CVE-2017-0761 | High | 7.8 | 2017-09-08 | A remote code execution vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-38… |
CVE-2017-0758 | High | 7.8 | 2017-09-08 | A remote code execution vulnerability in the Android media framework (libhevc). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Androi… |
CVE-2017-0757 | High | 7.8 | 2017-09-08 | A remote code execution vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-3600681… |
CVE-2017-6791 | High | 7.5 | 2017-09-07 | A vulnerability in the Trust Verification Service (TVS) of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to cause a deni… |
CVE-2017-12912 | Medium | 5.5 | 2017-09-07 | The "mpglibDBL/layer3.c" file in MP3Gain 1.5.2.r2 has a vulnerability which results in a read access violation when opening a crafted MP3 file. |
CVE-2017-12911 | Medium | 5.5 | 2017-09-07 | The "apetag.c" file in MP3Gain 1.5.2.r2 has a vulnerability which results in a stack memory corruption when opening a crafted MP3 file. |
CVE-2015-3450 | High | 8.8 | 2017-09-06 | Heap-based buffer overflow in libaxl 0.6.9 allows attackers to cause a denial of service (memory corruption) or execute arbitrary code via a crafted XML docume… |
CVE-2017-14165 | Medium | 6.5 | 2017-09-06 | The ReadSUNImage function in coders/sun.c in GraphicsMagick 1.3.26 has an issue where memory allocation is excessive because it depends only on a length field… |
CVE-2017-14164 | High | 8.8 | 2017-09-06 | A size-validation issue was discovered in opj_j2k_write_sot in lib/openjp2/j2k.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write, which may… |
CVE-2017-2822 | High | 7.5 | 2017-09-05 | An exploitable code execution vulnerability exists in the image rendering functionality of Lexmark Perceptive Document Filters 11.3.0.2400. A specifically craf… |
CVE-2017-2807 | High | 7.5 | 2017-09-05 | An exploitable buffer overflow vulnerability exists in the tag parsing functionality of Ledger-CLI 3.1.1. A specially crafted journal file can cause an integer… |
CVE-2017-14151 | High | 8.8 | 2017-09-05 | An off-by-one error was discovered in opj_tcd_code_block_enc_allocate_data in lib/openjp2/tcd.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds wr… |
CVE-2017-14064 | Critical | 9.8 | 2017-08-31 | Ruby through 2.2.7, 2.3.x through 2.3.4, and 2.4.x through 2.4.1 can expose arbitrary memory during a JSON.generate call. The issues lies in using strdup in ex… |
CVE-2017-13708 | Critical | 9.8 | 2017-08-31 | Buffer overflow in the web server service in VX Search Enterprise 10.0.14 allows remote attackers to execute arbitrary code via a crafted GET request. |
CVE-2017-14042 | Medium | 6.5 | 2017-08-30 | A memory allocation failure was discovered in the ReadPNMImage function in coders/pnm.c in GraphicsMagick 1.3.26. The vulnerability causes a big memory allocat… |
CVE-2017-12708 | Critical | 9.8 | 2017-08-30 | An Improper Restriction Of Operations Within The Bounds Of A Memory Buffer issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. Researc… |
CVE-2017-12706 | Critical | 9.8 | 2017-08-30 | A stack-based buffer overflow issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. Researchers have identified multiple vulnerabilities… |
CVE-2017-12704 | High | 8.8 | 2017-08-30 | A heap-based buffer overflow issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. Researchers have identified multiple vulnerabilities… |
CVE-2016-10504 | Medium | 6.5 | 2017-08-30 | Heap-based buffer overflow vulnerability in the opj_mqc_byteout function in mqc.c in OpenJPEG before 2.2.0 allows remote attackers to cause a denial of service… |
CVE-2017-13760 | Medium | 5.5 | 2017-08-29 | In The Sleuth Kit (TSK) 4.4.2, fls hangs on a corrupt exfat image in tsk_img_read() in tsk/img/img_io.c in libtskimg.a. |
CVE-2017-13758 | Medium | 6.5 | 2017-08-29 | In ImageMagick 7.0.6-10, there is a heap-based buffer overflow in the TracePoint() function in MagickCore/draw.c. |
CVE-2014-9497 | High | 7.5 | 2017-08-29 | Buffer overflow in mpg123 before 1.18.0. |
CVE-2017-12865 | Critical | 9.8 | 2017-08-29 | Stack-based buffer overflow in "dnsproxy.c" in connman 1.34 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code… |
CVE-2015-8299 | Critical | 9.8 | 2017-08-29 | Buffer overflow in the Group messages monitor (Falcon) in KNX ETS 4.1.5 (Build 3246) allows remote attackers to execute arbitrary code via a crafted KNXnet/IP… |
CVE-2017-13743 | Medium | 6.5 | 2017-08-29 | There is a buffer overflow in Liblouis 3.2.0, triggered in the function _lou_showString() in utils.c, that will lead to a remote denial of service attack. |
CVE-2017-13742 | Medium | 6.5 | 2017-08-29 | There is a stack-based buffer overflow in Liblouis 3.2.0, triggered in the function includeFile() in compileTranslationTable.c, that will lead to a remote deni… |
CVE-2017-13740 | High | 8.8 | 2017-08-29 | There is a stack-based buffer overflow in Liblouis 3.2.0, triggered in the function parseChars() in compileTranslationTable.c, that will lead to denial of serv… |
CVE-2017-13739 | High | 8.8 | 2017-08-29 | There is a heap-based buffer overflow that causes a more than two thousand bytes out-of-bounds write in Liblouis 3.2.0, triggered in the function resolveSubtab… |
CVE-2017-13734 | Medium | 6.5 | 2017-08-29 | There is an illegal address access in the _nc_safe_strcat function in strings.c in ncurses 6.0 that will lead to a remote denial of service attack. |
CVE-2017-13733 | Medium | 6.5 | 2017-08-29 | There is an illegal address access in the fmt_entry function in progs/dump_entry.c in ncurses 6.0 that might lead to a remote denial of service attack. |
CVE-2017-13732 | Medium | 6.5 | 2017-08-29 | There is an illegal address access in the function dump_uses() in progs/dump_entry.c in ncurses 6.0 that might lead to a remote denial of service attack. |
CVE-2017-13731 | Medium | 6.5 | 2017-08-29 | There is an illegal address access in the function postprocess_termcap() in parse_entry.c in ncurses 6.0 that will lead to a remote denial of service attack. |
CVE-2017-13730 | Medium | 6.5 | 2017-08-29 | There is an illegal address access in the function _nc_read_entry_source() in progs/tic.c in ncurses 6.0 that might lead to a remote denial of service attack. |
CVE-2017-13729 | Medium | 6.5 | 2017-08-29 | There is an illegal address access in the _nc_save_str function in alloc_entry.c in ncurses 6.0. It will lead to a remote denial of service attack. |
CVE-2017-3735 | Medium | 5.3 | 2017-08-28 | While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of… |
CVE-2017-12919 | Medium | 6.5 | 2017-08-28 | Heap-based buffer overflow in OLEStream::WriteVT_LPSTR in olestrm.cpp in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service via a crafted fpx… |
CVE-2017-12840 | High | 7.8 | 2017-08-28 | A kernel driver, namely DLMFENC.sys, bundled with the DESLock+ client application 4.8.16 and earlier contains a locally exploitable heap based buffer overflow… |
CVE-2017-8380 | Critical | 9.8 | 2017-08-28 | Buffer overflow in the "megasas_mmio_write" function in Qemu 2.9.0 allows remote attackers to have unspecified impact via unknown vectors. |
CVE-2015-1430 | Critical | 9.8 | 2017-08-28 | Buffer overflow in xymon 4.3.17-1. |
CVE-2015-0114 | High | 7.8 | 2017-08-28 | Stack-based buffer overflow in IBM V5R4, and IBM i Access for Windows 6.1 and 7.1. |
CVE-2017-12707 | Critical | 9.8 | 2017-08-25 | A Stack-based Buffer Overflow issue was discovered in SpiderControl SCADA MicroBrowser Versions 1.6.30.144 and prior. Opening a maliciously crafted html file m… |
CVE-2014-7859 | Critical | 9.8 | 2017-08-25 | Stack-based buffer overflow in login_mgr.cgi in D-Link firmware DNR-320L and DNS-320LW before 1.04b08, DNR-322L before 2.10 build 03, DNR-326 before 2.10 build… |
CVE-2015-7896 | Medium | 6.5 | 2017-08-24 | LibQJpeg in the Samsung Galaxy S6 before the October 2015 MR allows remote attackers to cause a denial of service (memory corruption and SIGSEGV) via a crafted… |
CVE-2015-1801 | Critical | 9.8 | 2017-08-24 | The samsung_extdisp driver in the Samsung S4 (GT-I9500) I9500XXUEMK8 kernel 3.4 and earlier allows attackers to cause a denial of service (memory corruption) o… |
CVE-2017-13140 | Medium | 6.5 | 2017-08-23 | In ImageMagick before 6.9.9-1 and 7.x before 7.0.6-2, the ReadOnePNGImage function in coders/png.c allows remote attackers to cause a denial of service (applic… |
CVE-2017-12787 | Critical | 9.8 | 2017-08-22 | A network interface of the novi_process_manager_daemon service, included in the NoviWare software distribution through NW400.2.6 and deployed on NoviSwitch dev… |