CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer (page 65)
Page 65 of 100 — CVEs classified under CWE-119, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-9750 | High | 7.8 | 2017-06-19 | opcodes/rx-decode.opc in GNU Binutils 2.28 lacks bounds checks for certain scale arrays, which allows remote attackers to cause a denial of service (buffer ove… |
CVE-2017-9749 | High | 7.8 | 2017-06-19 | The *regs* macros in opcodes/bfin-dis.c in GNU Binutils 2.28 allow remote attackers to cause a denial of service (buffer overflow and application crash) or pos… |
CVE-2017-9748 | High | 7.8 | 2017-06-19 | The ieee_object_p function in bfd/ieee.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, might allow remote atta… |
CVE-2017-9747 | High | 7.8 | 2017-06-19 | The ieee_archive_p function in bfd/ieee.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, might allow remote att… |
CVE-2017-9746 | High | 7.8 | 2017-06-19 | The disassemble_bytes function in objdump.c in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) o… |
CVE-2017-9745 | High | 7.8 | 2017-06-19 | The _bfd_vms_slurp_etir function in bfd/vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows remot… |
CVE-2017-9744 | High | 7.8 | 2017-06-19 | The sh_elf_set_mach_from_flags function in bfd/elf32-sh.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows… |
CVE-2017-9743 | High | 7.8 | 2017-06-19 | The print_insn_score32 function in opcodes/score7-dis.c:552 in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and appl… |
CVE-2017-9742 | High | 7.8 | 2017-06-19 | The score_opcodes function in opcodes/score7-dis.c in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and application c… |
CVE-2016-10395 | High | 7.8 | 2017-06-15 | In FlexNet Publisher versions before Luton SP1 (11.14.1.1) running FlexNet Publisher Licensing Service on Windows platform, a boundary error related to a named… |
CVE-2017-8549 | High | 7.5 | 2017-06-15 | Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to obtain information to further compromise the u… |
CVE-2017-8548 | High | 7.5 | 2017-06-15 | Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to obtain information to further compromise the u… |
CVE-2017-8547 | High | 7.5 | 2017-06-15 | Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, and Windows Server 2012 and R2 allow an attacker to e… |
CVE-2017-8529 | Medium | 6.5 | 2017-06-15 | Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, and Windows Server 2012 and R2 allow an attacker to d… |
CVE-2017-8528 | High | 8.8 | 2017-06-15 | Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, Wind… |
CVE-2017-8527 | High | 8.8 | 2017-06-15 | Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703… |
CVE-2017-8524 | High | 7.5 | 2017-06-15 | Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1… |
CVE-2017-8522 | High | 7.5 | 2017-06-15 | Microsoft browsers in Microsoft Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allo… |
CVE-2017-8521 | High | 7.5 | 2017-06-15 | Microsoft Edge in Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user when the Edge JavaScript scripting engine fai… |
CVE-2017-8520 | High | 7.5 | 2017-06-15 | Microsoft Edge in Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user when the Edge JavaScript scripting engine fai… |
CVE-2017-8519 | High | 7.5 | 2017-06-15 | Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, and Windows Server 2012 and R2 allow an attacker… |
CVE-2017-8517 | High | 7.5 | 2017-06-15 | Microsoft browsers in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, an… |
CVE-2017-8513 | High | 7.8 | 2017-06-15 | A remote code execution vulnerability exists in Microsoft PowerPoint when the software fails to properly handle objects in memory, aka "Microsoft PowerPoint Re… |
CVE-2017-8507 | High | 7.8 | 2017-06-15 | A remote code execution vulnerability exists in the way Microsoft Office software parses specially crafted email messages, aka "Microsoft Office Memory Corrupt… |
CVE-2017-8499 | High | 7.5 | 2017-06-15 | Microsoft Edge in Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user when the Edge JavaScript scripting engine fai… |
CVE-2017-8497 | High | 7.5 | 2017-06-15 | Microsoft Edge in Windows 10 1607 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user when Microsoft Edge i… |
CVE-2017-8496 | High | 7.5 | 2017-06-15 | Microsoft Edge in Windows 10 1607 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user when Microsoft Edge i… |
CVE-2017-7910 | High | 7.5 | 2017-06-14 | A Stack-Based Buffer Overflow issue was discovered in Digital Canal Structural Wind Analysis versions 9.1 and prior. An attacker may be able to run arbitrary c… |
CVE-2017-9502 | Medium | 5.3 | 2017-06-14 | In curl before 7.54.1 on Windows and DOS, libcurl's default protocol function, which is the logic that allows an application to set which protocol libcurl shou… |
CVE-2017-0637 | High | 7.8 | 2017-06-14 | A remote code execution vulnerability in libhevc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media… |
CVE-2017-8241 | High | 7.8 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a WLAN function due to an incorrect message length. |
CVE-2017-8238 | High | 7.8 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a camera function. |
CVE-2017-8237 | High | 7.8 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists while loading a firmware image. |
CVE-2017-8236 | High | 7.8 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in an IPA driver. |
CVE-2017-7372 | High | 7.0 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, a race condition exists in a video driver potentially leading to buffer overflow or write to arbitrary… |
CVE-2016-10342 | High | 7.8 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a syscall handler. |
CVE-2016-10340 | High | 7.8 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, an integer underflow leading to buffer overflow vulnerability exists in a syscall handler. |
CVE-2015-9028 | High | 7.8 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a cryptographic routine. |
CVE-2015-9025 | High | 7.8 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a QTEE application. |
CVE-2015-9023 | High | 7.8 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in the PlayReady API. |
CVE-2014-9963 | High | 7.8 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in WideVine DRM. |
CVE-2014-9960 | High | 7.8 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in the PlayReady API. |
CVE-2015-3220 | High | 7.5 | 2017-06-13 | The tlslite library before 0.4.9 for Python allows remote attackers to trigger a denial of service (runtime exception and process crash). |
CVE-2017-6655 | Medium | 6.5 | 2017-06-13 | A vulnerability in the Fibre Channel over Ethernet (FCoE) protocol implementation in Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to… |
CVE-2017-6892 | High | 8.8 | 2017-06-12 | In libsndfile version 1.0.28, an error in the "aiff_read_chanmap()" function (aiff.c) can be exploited to cause an out-of-bounds read memory access via a speci… |
CVE-2014-9984 | Critical | 9.8 | 2017-06-12 | nscd in the GNU C Library (aka glibc or libc6) before version 2.20 does not correctly compute the size of an internal buffer when processing netgroup requests… |
CVE-2017-9127 | Medium | 6.5 | 2017-06-12 | The quicktime_user_atoms_read_atom function in useratoms.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (heap-based buffer overfl… |
CVE-2017-9126 | Medium | 6.5 | 2017-06-12 | The quicktime_read_dref_table function in dref.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (heap-based buffer overflow and app… |
CVE-2017-8834 | Medium | 6.5 | 2017-06-12 | The cr_tknzr_parse_comment function in cr-tknzr.c in libcroco 0.6.12 allows remote attackers to cause a denial of service (memory allocation error) via a craft… |
CVE-2016-7837 | High | 7.8 | 2017-06-09 | Buffer overflow in BlueZ 5.41 and earlier allows an attacker to execute arbitrary code via the parse_line function used in some userland utilities. |
CVE-2016-7820 | High | 7.2 | 2017-06-09 | Buffer overflow in I-O DATA DEVICE TS-WRLP firmware version 1.01.02 and earlier and TS-WRLA firmware version 1.01.02 and earlier allows an attacker with admini… |
CVE-2014-6031 | Medium | 4.9 | 2017-06-08 | Buffer overflow in the mcpq daemon in F5 BIG-IP systems 10.x before 10.2.4 HF12, 11.x before 11.2.1 HF15, 11.3.x, 11.4.x before 11.4.1 HF9, 11.5.x before 11.5… |
CVE-2017-4909 | High | 7.8 | 2017-06-08 | VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain a heap buffer-overflow vulnerability in TrueType Font (TTF) pars… |
CVE-2017-4908 | High | 7.8 | 2017-06-08 | VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain multiple heap buffer-overflow vulnerabilities in JPEG2000 parser… |
CVE-2017-4907 | Critical | 9.8 | 2017-06-08 | VMware Unified Access Gateway (2.5.x, 2.7.x, 2.8.x prior to 2.8.1) and Horizon View (7.x prior to 7.1.0, 6.x prior to 6.2.4) contain a heap buffer-overflow vul… |
CVE-2017-4901 | Critical | 9.9 | 2017-06-08 | The drag-and-drop (DnD) function in VMware Workstation 12.x before version 12.5.4 and Fusion 8.x before version 8.5.5 has an out-of-bounds memory access vulner… |
CVE-2016-4973 | High | 7.8 | 2017-06-07 | Binaries compiled against targets that use the libssp library in GCC for stack smashing protection (SSP) might allow local users to perform buffer overflow att… |
CVE-2017-7965 | High | 7.3 | 2017-06-07 | A buffer overflow vulnerability exists in Programming Software executable AlTracePrint.exe, in Schneider Electric's SoMachine HVAC v2.1.0 for Modicon M171/M172… |
CVE-2017-4904 | High | 8.8 | 2017-06-07 | The XHCI controller in VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESXi600-201703403-SG… |
CVE-2017-4903 | High | 8.8 | 2017-06-07 | VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESXi600-201703403-SG, 6.0 U1 without patch… |
CVE-2017-4902 | High | 8.8 | 2017-06-07 | VMware ESXi 6.5 without patch ESXi650-201703410-SG and 5.5 without patch ESXi550-201703401-SG; Workstation Pro / Player 12.x prior to 12.5.5; and Fusion Pro /… |
CVE-2017-9469 | High | 7.5 | 2017-06-07 | In Irssi before 1.0.3, when receiving certain incorrectly quoted DCC files, it tries to find the terminating quote one byte before the allocated memory. Thus… |
CVE-2016-3077 | Medium | 6.5 | 2017-06-06 | The VersionMapper.fromKernelVersionString method in oVirt Engine allows remote authenticated users to cause a denial of service (process crash) for all VMs. |
CVE-2014-9929 | High | 7.8 | 2017-06-06 | In WCDMA in all Android releases from CAF using the Linux kernel, a Use of Out-of-range Pointer Offset vulnerability could potentially exist. |
CVE-2014-9928 | High | 7.8 | 2017-06-06 | In GERAN in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size of Input vulnerability could potentially exist. |
CVE-2014-9927 | High | 7.8 | 2017-06-06 | In UIM in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size of Input vulnerability could potentially exist. |
CVE-2014-9925 | High | 7.8 | 2017-06-06 | In HDR in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size of Input vulnerability could potentially exist. |
CVE-2014-9923 | High | 7.8 | 2017-06-06 | In NAS in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size of Input vulnerability could potentially exist. |
CVE-2017-9430 | Critical | 9.8 | 2017-06-05 | Stack-based buffer overflow in dnstracer through 1.9 allows attackers to cause a denial of service (application crash) or possibly have unspecified other impac… |
CVE-2017-9433 | Critical | 9.8 | 2017-06-05 | Document Liberation Project libmwaw before 2017-04-08 has an out-of-bounds write caused by a heap-based buffer overflow related to the MsWrd1Parser::readFootno… |
CVE-2017-9372 | High | 7.5 | 2017-06-02 | PJSIP, as used in Asterisk Open Source 13.x before 13.15.1 and 14.x before 14.4.1, Certified Asterisk 13.13 before 13.13-cert4, and other products, allows remo… |
CVE-2017-9351 | High | 7.5 | 2017-06-02 | In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the DHCP dissector could read past the end of a buffer. This was addressed in epan/dissectors/packet-bootp.c b… |
CVE-2017-9348 | High | 7.5 | 2017-06-02 | In Wireshark 2.2.0 to 2.2.6, the DOF dissector could read past the end of a buffer. This was addressed in epan/dissectors/packet-dof.c by validating a size val… |
CVE-2017-9300 | High | 7.8 | 2017-05-29 | plugins\codec\libflac_plugin.dll in VideoLAN VLC media player 2.2.4 allows remote attackers to cause a denial of service (heap corruption and application crash… |
CVE-2016-10377 | High | 8.8 | 2017-05-29 | In Open vSwitch (OvS) 2.5.0, a malformed IP packet can cause the switch to read past the end of the packet buffer due to an unsigned integer underflow in `lib/… |
CVE-2017-8542 | Medium | 5.5 | 2017-05-26 | The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, W… |
CVE-2017-8541 | High | 7.8 | 2017-05-26 | The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, W… |
CVE-2017-8539 | Medium | 5.5 | 2017-05-26 | The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, W… |
CVE-2017-8538 | High | 7.8 | 2017-05-26 | The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, W… |
CVE-2017-8537 | Medium | 5.5 | 2017-05-26 | The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, W… |
CVE-2017-8536 | Medium | 5.5 | 2017-05-26 | The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, W… |
CVE-2017-8535 | Medium | 5.5 | 2017-05-26 | The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, W… |
CVE-2016-10375 | Critical | 9.8 | 2017-05-26 | Yodl before 3.07.01 has a Buffer Over-read in the queue_push function in queue/queuepush.c. |
CVE-2017-2819 | High | 8.8 | 2017-05-24 | An exploitable heap-based buffer overflow exists in the Hangul Word Processor component (version 9.6.1.4350) of Hancom Thinkfree Office NEO 9.6.1.4902. A speci… |
CVE-2017-2817 | High | 8.8 | 2017-05-24 | A stack buffer overflow vulnerability exists in the ISO parsing functionality of Power Software Ltd PowerISO 6.8. A specially crafted ISO file can cause a vuln… |
CVE-2017-2799 | High | 8.3 | 2017-05-24 | An exploitable heap corruption vulnerability exists in the AddSst functionality of Antenna House DMC HTMLFilter as used by MarkLogic 8.0-6. A specially crafted… |
CVE-2017-2798 | High | 8.3 | 2017-05-24 | An exploitable heap corruption vulnerability exists in the GetIndexArray functionality of Antenna House DMC HTMLFilter as used by MarkLogic 8.0-6. A specially… |
CVE-2017-8311 | High | 7.8 | 2017-05-23 | Potential heap based buffer overflow in ParseJSS in VideoLAN VLC before 2.2.5 due to skipping NULL terminator in an input string allows attackers to execute ar… |
CVE-2017-2797 | High | 8.3 | 2017-05-23 | An exploitable heap overflow vulnerability exists in the ParseEnvironment functionality of AntennaHouse DMC HTMLFilter as used by MarkLogic 8.0-6. |
CVE-2017-2794 | High | 8.3 | 2017-05-23 | An exploitable stack-based buffer overflow vulnerability exists in the DHFSummary functionality of AntennaHouse DMC HTMLFilter as used by MarkLogic 8.0-6. A sp… |
CVE-2017-2793 | High | 8.3 | 2017-05-23 | An exploitable heap corruption vulnerability exists in the UnCompressUnicode functionality of Antenna House DMC HTMLFilter used by MarkLogic 8.0-6. A specially… |
CVE-2017-2783 | High | 8.3 | 2017-05-23 | An exploitable heap corruption vulnerability exists in the FillRowFormat functionality of Antenna House DMC HTMLFilter that is shipped with MarkLogic 8.0-6. A… |
CVE-2017-9192 | Critical | 9.8 | 2017-05-23 | libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-tga.c:528:7. |
CVE-2017-9191 | Critical | 9.8 | 2017-05-23 | libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the rle_fread function in input-tga.c:252:15. |
CVE-2017-9173 | Critical | 9.8 | 2017-05-23 | libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-bmp.c:497:29. |
CVE-2017-9172 | Critical | 9.8 | 2017-05-23 | libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-bmp.c:496:29. |
CVE-2017-9170 | Critical | 9.8 | 2017-05-23 | libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-bmp.c:370:25. |
CVE-2017-9169 | Critical | 9.8 | 2017-05-23 | libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-bmp.c:355:25. |
CVE-2017-9168 | Critical | 9.8 | 2017-05-23 | libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-bmp.c:353:25. |
CVE-2017-9167 | Critical | 9.8 | 2017-05-23 | libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-bmp.c:337:25. |