ByteOS

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://osvdb.org/56838

Resource:

vdb-entry

x_refsource_OSVDB

Hyperlink: http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html

Resource:

vendor-advisory

x_refsource_APPLE

Hyperlink: http://www.securitytracker.com/id?1022674

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: http://www.securityfocus.com/bid/35954

Resource:

vdb-entry

x_refsource_BID

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/52435

Resource:

vdb-entry

x_refsource_XF

Hyperlink: http://www.vupen.com/english/advisories/2009/2172

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: http://www.us-cert.gov/cas/techalerts/TA09-218A.html

Resource:

third-party-advisory

x_refsource_CERT

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://support.apple.com/kb/HT3757	x_refsource_CONFIRM x_transferred
http://secunia.com/advisories/36096	third-party-advisory x_refsource_SECUNIA x_transferred
http://osvdb.org/56838	vdb-entry x_refsource_OSVDB x_transferred
http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html	vendor-advisory x_refsource_APPLE x_transferred
http://www.securitytracker.com/id?1022674	vdb-entry x_refsource_SECTRACK x_transferred
http://www.securityfocus.com/bid/35954	vdb-entry x_refsource_BID x_transferred
https://exchange.xforce.ibmcloud.com/vulnerabilities/52435	vdb-entry x_refsource_XF x_transferred
http://www.vupen.com/english/advisories/2009/2172	vdb-entry x_refsource_VUPEN x_transferred
http://www.us-cert.gov/cas/techalerts/TA09-218A.html	third-party-advisory x_refsource_CERT x_transferred

Hyperlink: http://support.apple.com/kb/HT3757

Resource:

x_refsource_CONFIRM

x_transferred

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://osvdb.org/56838

Resource:

vdb-entry

x_refsource_OSVDB

x_transferred

Hyperlink: http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html

Resource:

vendor-advisory

x_refsource_APPLE

x_transferred

Hyperlink: http://www.securitytracker.com/id?1022674

Resource:

vdb-entry

x_refsource_SECTRACK

x_transferred

Hyperlink: http://www.securityfocus.com/bid/35954

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/52435

Resource:

vdb-entry

x_refsource_XF

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2009/2172

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: http://www.us-cert.gov/cas/techalerts/TA09-218A.html

Resource:

third-party-advisory

x_refsource_CERT

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:cve@mitre.org

Published At:06 Aug, 2009 | 16:30

Updated At:23 Apr, 2026 | 00:35

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C

Type: Primary

Version: 2.0

Base score: 10.0

Base severity: HIGH

Vector:

AV:N/AC:L/Au:N/C:C/I:C/A:C

CPE Matches

cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*

>>mac_os_x>>10.5

cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*

>>mac_os_x>>10.5.0

cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*

>>mac_os_x>>10.5.1

cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*

>>mac_os_x>>10.5.2

cpe:2.3:o:apple:mac_os_x:10.5.2:2008-002:*:*:*:*:*:*

>>mac_os_x>>10.5.2

cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*

>>mac_os_x>>10.5.3

cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*

>>mac_os_x>>10.5.4

cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*

>>mac_os_x>>10.5.5

cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*

>>mac_os_x>>10.5.6

cpe:2.3:o:apple:mac_os_x:10.5.7:*:*:*:*:*:*:*

>>mac_os_x>>10.5.7

cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*

>>mac_os_x_server>>10.5

cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*

>>mac_os_x_server>>10.5.0

cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*

>>mac_os_x_server>>10.5.1

cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*

>>mac_os_x_server>>10.5.2

cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*

>>mac_os_x_server>>10.5.3

cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*

>>mac_os_x_server>>10.5.4

cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*

>>mac_os_x_server>>10.5.5

cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*

>>mac_os_x_server>>10.5.6

cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:*

>>mac_os_x_server>>10.5.7

Weaknesses

CWE ID	Type	Source
CWE-119	Primary	nvd@nist.gov

CWE ID: CWE-119

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html	cve@mitre.org	Patch Vendor Advisory
http://osvdb.org/56838	cve@mitre.org	N/A
http://secunia.com/advisories/36096	cve@mitre.org	Vendor Advisory
http://support.apple.com/kb/HT3757	cve@mitre.org	Patch Vendor Advisory
http://www.securityfocus.com/bid/35954	cve@mitre.org	Patch
http://www.securitytracker.com/id?1022674	cve@mitre.org	N/A
http://www.us-cert.gov/cas/techalerts/TA09-218A.html	cve@mitre.org	US Government Resource
http://www.vupen.com/english/advisories/2009/2172	cve@mitre.org	Patch Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/52435	cve@mitre.org	N/A
http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html	af854a3a-2127-422b-91ae-364da2661108	Patch Vendor Advisory
http://osvdb.org/56838	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/36096	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://support.apple.com/kb/HT3757	af854a3a-2127-422b-91ae-364da2661108	Patch Vendor Advisory
http://www.securityfocus.com/bid/35954	af854a3a-2127-422b-91ae-364da2661108	Patch
http://www.securitytracker.com/id?1022674	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.us-cert.gov/cas/techalerts/TA09-218A.html	af854a3a-2127-422b-91ae-364da2661108	US Government Resource
http://www.vupen.com/english/advisories/2009/2172	af854a3a-2127-422b-91ae-364da2661108	Patch Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/52435	af854a3a-2127-422b-91ae-364da2661108	N/A

Hyperlink: http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html

Source: cve@mitre.org

Resource:

Patch

Vendor Advisory

Hyperlink: http://osvdb.org/56838

Source: cve@mitre.org

Resource: N/A

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: http://support.apple.com/kb/HT3757

Source: cve@mitre.org

Resource:

Patch

Vendor Advisory

Hyperlink: http://www.securityfocus.com/bid/35954

Source: cve@mitre.org

Resource:

Patch

Hyperlink: http://www.securitytracker.com/id?1022674

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.us-cert.gov/cas/techalerts/TA09-218A.html

Source: cve@mitre.org

Resource:

US Government Resource

Hyperlink: http://www.vupen.com/english/advisories/2009/2172

Source: cve@mitre.org

Resource:

Patch

Vendor Advisory

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/52435

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Patch

Vendor Advisory

Hyperlink: http://osvdb.org/56838

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

Hyperlink: http://support.apple.com/kb/HT3757

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Patch

Vendor Advisory

Hyperlink: http://www.securityfocus.com/bid/35954

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Patch

Hyperlink: http://www.securitytracker.com/id?1022674

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.us-cert.gov/cas/techalerts/TA09-218A.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

US Government Resource

Hyperlink: http://www.vupen.com/english/advisories/2009/2172

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Patch

Vendor Advisory

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/52435

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Similar CVEs

4239Records found

CVE-2013-3345

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-7.53% / 91.85%

7 Day CHG~0.00%

Published-10 Jul, 2013 | 10:00

Updated-29 Apr, 2026 | 01:13

Adobe Flash Player before 11.7.700.232 and 11.8.x before 11.8.800.94 on Windows and Mac OS X, before 11.2.202.297 on Linux, before 11.1.111.64 on Android 2.x and 3.x, and before 11.1.115.69 on Android 4.x allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x windows flash_player android linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-1372

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-4.19% / 88.77%

7 Day CHG~0.00%

Published-12 Feb, 2013 | 20:00

Updated-29 Apr, 2026 | 01:13

Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0642, CVE-2013-0645, CVE-2013-1365, CVE-2013-1366, CVE-2013-1367, CVE-2013-1368, CVE-2013-1369, CVE-2013-1370, and CVE-2013-1373.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x windows flash_player air_sdk android air linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-1369

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-4.19% / 88.77%

7 Day CHG~0.00%

Published-12 Feb, 2013 | 20:00

Updated-29 Apr, 2026 | 01:13

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x windows flash_player air_sdk android air linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-1365

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-4.19% / 88.77%

7 Day CHG~0.00%

Published-12 Feb, 2013 | 20:00

Updated-29 Apr, 2026 | 01:13

Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0642, CVE-2013-0645, CVE-2013-1366, CVE-2013-1367, CVE-2013-1368, CVE-2013-1369, CVE-2013-1370, CVE-2013-1372, and CVE-2013-1373.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x windows flash_player air_sdk android air linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2008-0053

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-27.57% / 96.45%

7 Day CHG~0.00%

Published-18 Mar, 2008 | 23:00

Updated-23 Apr, 2026 | 00:35

Multiple buffer overflows in the HP-GL/2-to-PostScript filter in CUPS before 1.3.6 might allow remote attackers to execute arbitrary code via a crafted HP-GL/2 file.

Vendor-n/a Apple Inc.

Product-cups n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-1371

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-3.72% / 88.04%

7 Day CHG~0.00%

Published-13 Mar, 2013 | 10:00

Updated-29 Apr, 2026 | 01:13

Adobe Flash Player before 10.3.183.68 and 11.x before 11.6.602.180 on Windows and Mac OS X, before 10.3.183.68 and 11.x before 11.2.202.275 on Linux, before 11.1.111.44 on Android 2.x and 3.x, and before 11.1.115.48 on Android 4.x; Adobe AIR before 3.6.0.6090; Adobe AIR SDK before 3.6.0.6090; and Adobe AIR SDK & Compiler before 3.6.0.6090 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-adobe_air mac_os_x adobe_air_sdk windows flash_player flash_player_for_android android linux_kernel adobe_air_sdk_and_compiler n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2018-4331

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.8||CRITICAL

EPSS-19.06% / 95.36%

7 Day CHG~0.00%

Published-03 Apr, 2019 | 17:43

Updated-05 Aug, 2024 | 05:11

A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.

Vendor-n/a Apple Inc.

Product-mac_os_x iphone_os watchos tvos iOS, macOS, tvOS, watchOS

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2018-4287

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.68% / 71.56%

7 Day CHG~0.00%

Published-03 Apr, 2019 | 00:00

Updated-05 Aug, 2024 | 05:11

Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to macOS High Sierra 10.13.6.

Vendor-n/a Apple Inc.

Product-mac_os_x macOS

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2018-4286

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.68% / 71.56%

7 Day CHG~0.00%

Published-03 Apr, 2019 | 00:00

Updated-05 Aug, 2024 | 05:11

Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to macOS High Sierra 10.13.6.

Vendor-n/a Apple Inc.

Product-mac_os_x macOS

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2018-4332

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.94% / 76.28%

7 Day CHG~0.00%

Published-03 Apr, 2019 | 17:43

Updated-05 Aug, 2024 | 05:11

A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.

Vendor-n/a Apple Inc.

Product-mac_os_x iphone_os watchos tvos iOS, macOS, tvOS, watchOS

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2018-4258

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.48% / 65.00%

7 Day CHG~0.00%

Published-11 Jan, 2019 | 18:00

Updated-05 Aug, 2024 | 05:11

In macOS High Sierra before 10.13.5, a buffer overflow was addressed with improved bounds checking.

Vendor-n/a Apple Inc.

Product-mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-1373

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-4.19% / 88.77%

7 Day CHG~0.00%

Published-12 Feb, 2013 | 20:00

Updated-29 Apr, 2026 | 01:13

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x windows flash_player air_sdk android air linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2018-4288

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.68% / 71.56%

7 Day CHG~0.00%

Published-03 Apr, 2019 | 00:00

Updated-05 Aug, 2024 | 05:11

Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to macOS High Sierra 10.13.6.

Vendor-n/a Apple Inc.

Product-mac_os_x macOS

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2018-4291

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.68% / 71.56%

7 Day CHG~0.00%

Published-03 Apr, 2019 | 00:00

Updated-05 Aug, 2024 | 05:11

Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to macOS High Sierra 10.13.6.

Vendor-n/a Apple Inc.

Product-mac_os_x macOS

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2018-4257

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.48% / 65.00%

7 Day CHG~0.00%

Published-11 Jan, 2019 | 18:00

Updated-05 Aug, 2024 | 05:11

In macOS High Sierra before 10.13.5, a buffer overflow was addressed with improved size validation.

Vendor-n/a Apple Inc.

Product-mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-1368

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-4.19% / 88.77%

7 Day CHG~0.00%

Published-12 Feb, 2013 | 20:00

Updated-29 Apr, 2026 | 01:13

Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0642, CVE-2013-0645, CVE-2013-1365, CVE-2013-1366, CVE-2013-1367, CVE-2013-1369, CVE-2013-1370, CVE-2013-1372, and CVE-2013-1373.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x windows flash_player air_sdk android air linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2018-4189

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.71% / 72.42%

7 Day CHG~0.00%

Published-11 Jan, 2019 | 18:00

Updated-05 Aug, 2024 | 05:04

In iOS before 11.2.5, macOS High Sierra before 10.13.3, Security Update 2018-001 Sierra, and Security Update 2018-001 El Capitan, watchOS before 4.2.2, and tvOS before 11.2.5, a memory corruption issue exists and was addressed with improved memory handling.

Vendor-n/a Apple Inc.

Product-apple_tv iphone_os watchos mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2018-4268

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.44% / 63.34%

7 Day CHG~0.00%

Published-03 Apr, 2019 | 17:43

Updated-05 Aug, 2024 | 05:11

A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to macOS High Sierra 10.13.6.

Vendor-n/a Apple Inc.

Product-mac_os_x macOS

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-5257

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-6.41% / 91.09%

7 Day CHG~0.00%

Published-09 Oct, 2012 | 10:00

Updated-29 Apr, 2026 | 01:13

Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than other Flash Player buffer overflow CVEs listed in APSB12-22.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-adobe_air mac_os_x adobe_air_sdk windows flash_player flash_player_for_android android linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-5279

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-6.25% / 90.96%

7 Day CHG~0.00%

Published-07 Nov, 2012 | 02:00

Updated-29 Apr, 2026 | 01:13

Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows and Mac OS X, before 10.3.183.43 and 11.x before 11.2.202.251 on Linux, before 11.1.111.24 on Android 2.x and 3.x, and before 11.1.115.27 on Android 4.x; Adobe AIR before 3.5.0.600; and Adobe AIR SDK before 3.5.0.600 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x windows flash_player air_sdk android air linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-1367

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-4.19% / 88.77%

7 Day CHG~0.00%

Published-12 Feb, 2013 | 20:00

Updated-29 Apr, 2026 | 01:13

Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0642, CVE-2013-0645, CVE-2013-1365, CVE-2013-1366, CVE-2013-1368, CVE-2013-1369, CVE-2013-1370, CVE-2013-1372, and CVE-2013-1373.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x windows flash_player air_sdk android air linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2017-8248

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-2.38% / 85.05%

7 Day CHG~0.00%

Published-16 Aug, 2017 | 15:00

Updated-20 Apr, 2025 | 01:37

A buffer overflow may occur in the processing of a downlink NAS message in Qualcomm Telephony as used in Apple iPhone 5 and later, iPad 4th generation and later, iPod touch 6th generation.

Vendor-Apple Inc.Qualcomm Technologies, Inc.

Product-iphone_os Telephony

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2017-7108

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.8||CRITICAL

EPSS-10.95% / 93.44%

7 Day CHG~0.00%

Published-23 Oct, 2017 | 01:00

Updated-20 Apr, 2025 | 01:37

An issue was discovered in certain Apple products. iOS before 11 is affected. tvOS before 11 is affected. watchOS before 4 is affected. The issue involves the "Wi-Fi" component. It might allow remote attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via crafted Wi-Fi traffic.

Vendor-n/a Apple Inc.

Product-iphone_os tvos watchos n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2017-7112

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.8||CRITICAL

EPSS-10.95% / 93.44%

7 Day CHG~0.00%

Published-23 Oct, 2017 | 01:00

Updated-20 Apr, 2025 | 01:37

Vendor-n/a Apple Inc.

Product-iphone_os tvos watchos n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2017-3079

Matching Score-10

Matching Score-10

CVSS Score-9.8||CRITICAL

EPSS-2.79% / 86.16%

7 Day CHG~0.00%

Published-20 Jun, 2017 | 17:00

Updated-20 Apr, 2025 | 01:37

Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the internal representation of raster data. Successful exploitation could lead to arbitrary code execution.

Vendor-n/a Linux Kernel Organization, Inc Apple Inc.Adobe Inc.Microsoft Corporation Google LLC

Product-mac_os_x chrome_os linux_kernel windows_8.1 windows_10 flash_player windows Adobe Flash Player 25.0.0.171 and earlier.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2017-3078

Matching Score-10

Matching Score-10

CVSS Score-9.8||CRITICAL

EPSS-69.99% / 98.69%

7 Day CHG~0.00%

Published-20 Jun, 2017 | 17:00

Updated-20 Apr, 2025 | 01:37

Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the Adobe Texture Format (ATF) module. Successful exploitation could lead to arbitrary code execution.

Vendor-n/a Linux Kernel Organization, Inc Apple Inc.Adobe Inc.Microsoft Corporation Google LLC

Product-mac_os_x chrome_os linux_kernel windows_8.1 windows_10 flash_player windows Adobe Flash Player 25.0.0.171 and earlier.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2017-3061

Matching Score-10

Matching Score-10

CVSS Score-9.8||CRITICAL

EPSS-53.86% / 98.01%

7 Day CHG~0.00%

Published-12 Apr, 2017 | 14:00

Updated-20 Apr, 2025 | 01:37

Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable memory corruption vulnerability in the SWF parser. Successful exploitation could lead to arbitrary code execution.

Vendor-n/a Linux Kernel Organization, Inc Apple Inc.Adobe Inc.Microsoft Corporation Google LLC

Product-mac_os_x chrome_os linux_kernel windows_8.1 windows_10 flash_player windows Adobe Flash Player 25.0.0.127 and earlier.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-1375

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-10.64% / 93.34%

7 Day CHG~0.00%

Published-13 Mar, 2013 | 10:00

Updated-29 Apr, 2026 | 01:13

Heap-based buffer overflow in Adobe Flash Player before 10.3.183.68 and 11.x before 11.6.602.180 on Windows and Mac OS X, before 10.3.183.68 and 11.x before 11.2.202.275 on Linux, before 11.1.111.44 on Android 2.x and 3.x, and before 11.1.115.48 on Android 4.x; Adobe AIR before 3.6.0.6090; Adobe AIR SDK before 3.6.0.6090; and Adobe AIR SDK & Compiler before 3.6.0.6090 allows attackers to execute arbitrary code via unspecified vectors.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-adobe_air mac_os_x adobe_air_sdk windows flash_player flash_player_for_android android linux_kernel adobe_air_sdk_and_compiler n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-1378

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-7.03% / 91.52%

7 Day CHG~0.00%

Published-10 Apr, 2013 | 01:00

Updated-29 Apr, 2026 | 01:13

Adobe Flash Player before 10.3.183.75 and 11.x before 11.7.700.169 on Windows and Mac OS X, before 10.3.183.75 and 11.x before 11.2.202.280 on Linux, before 11.1.111.50 on Android 2.x and 3.x, and before 11.1.115.54 on Android 4.x; Adobe AIR before 3.7.0.1530; and Adobe AIR SDK & Compiler before 3.7.0.1530 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-1380.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-adobe_air mac_os_x adobe_air_sdk windows flash_player android linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-1370

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-4.19% / 88.77%

7 Day CHG~0.00%

Published-12 Feb, 2013 | 20:00

Updated-29 Apr, 2026 | 01:13

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x windows flash_player air_sdk android air linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-1366

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-4.19% / 88.77%

7 Day CHG~0.00%

Published-12 Feb, 2013 | 20:00

Updated-29 Apr, 2026 | 01:13

Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0642, CVE-2013-0645, CVE-2013-1365, CVE-2013-1367, CVE-2013-1368, CVE-2013-1369, CVE-2013-1370, CVE-2013-1372, and CVE-2013-1373.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x windows flash_player air_sdk android air linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2020-3754

Matching Score-10

Matching Score-10

CVSS Score-9.8||CRITICAL

EPSS-2.60% / 85.69%

7 Day CHG~0.00%

Published-13 Feb, 2020 | 15:48

Updated-04 Aug, 2024 | 07:44

Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and earlier have a buffer error vulnerability. Successful exploitation could lead to arbitrary code execution .

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-1379

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-5.70% / 90.45%

7 Day CHG~0.00%

Published-10 Apr, 2013 | 01:00

Updated-29 Apr, 2026 | 01:13

Adobe Flash Player before 10.3.183.75 and 11.x before 11.7.700.169 on Windows and Mac OS X, before 10.3.183.75 and 11.x before 11.2.202.280 on Linux, before 11.1.111.50 on Android 2.x and 3.x, and before 11.1.115.54 on Android 4.x; Adobe AIR before 3.7.0.1530; and Adobe AIR SDK & Compiler before 3.7.0.1530 do not properly initialize pointer arrays, which allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc Novell Microsoft Corporation Adobe Inc.

Product-adobe_air mac_os_x adobe_air_sdk windows flash_player android linux_kernel suse_linux_enterprise_desktop opensuse n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-0647

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-4.78% / 89.51%

7 Day CHG~0.00%

Published-12 Feb, 2013 | 20:00

Updated-29 Apr, 2026 | 01:13

Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-0638.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x windows flash_player air_sdk android air linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2020-3752

Matching Score-10

Matching Score-10

CVSS Score-9.8||CRITICAL

EPSS-3.12% / 86.91%

7 Day CHG~0.00%

Published-13 Feb, 2020 | 15:47

Updated-04 Aug, 2024 | 07:44

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-0630

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-7.17% / 91.61%

7 Day CHG~0.00%

Published-11 Jan, 2013 | 22:00

Updated-29 Apr, 2026 | 01:13

Buffer overflow in Adobe Flash Player before 10.3.183.50 and 11.x before 11.5.502.146 on Windows and Mac OS X, before 10.3.183.50 and 11.x before 11.2.202.261 on Linux, before 11.1.111.31 on Android 2.x and 3.x, and before 11.1.115.36 on Android 4.x; Adobe AIR before 3.5.0.1060; and Adobe AIR SDK before 3.5.0.1060 allows attackers to execute arbitrary code via unspecified vectors.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-adobe_air mac_os_x adobe_air_sdk windows flash_player flash_player_for_android android linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-0642

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-4.19% / 88.77%

7 Day CHG~0.00%

Published-12 Feb, 2013 | 20:00

Updated-29 Apr, 2026 | 01:13

Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0645, CVE-2013-1365, CVE-2013-1366, CVE-2013-1367, CVE-2013-1368, CVE-2013-1369, CVE-2013-1370, CVE-2013-1372, and CVE-2013-1373.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x windows flash_player air_sdk android air linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2017-11120

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-9.8||CRITICAL

EPSS-24.37% / 96.14%

7 Day CHG~0.00%

Published-27 Sep, 2017 | 17:00

Updated-20 Apr, 2025 | 01:37

On Broadcom BCM4355C0 Wi-Fi chips 9.44.78.27.0.1.56 and other chips, an attacker can craft a malformed RRM neighbor report frame to trigger an internal buffer overflow in the Wi-Fi firmware, aka B-V2017061204.

Vendor-n/a Broadcom Inc.Apple Inc.

Product-iphone_os tvos bcm4355c0 bcm4355c0_firmware n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2017-11121

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-9.8||CRITICAL

EPSS-2.08% / 84.09%

7 Day CHG~0.00%

Published-27 Sep, 2017 | 17:00

Updated-20 Apr, 2025 | 01:37

On Broadcom BCM4355C0 Wi-Fi chips 9.44.78.27.0.1.56 and other chips, properly crafted malicious over-the-air Fast Transition frames can potentially trigger internal Wi-Fi firmware heap and/or stack overflows, leading to denial of service or other effects, aka B-V2017061205.

Vendor-n/a Broadcom Inc.Apple Inc.

Product-iphone_os tvos bcm4355c0 bcm4355c0_firmware n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-0645

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-4.19% / 88.77%

7 Day CHG~0.00%

Published-12 Feb, 2013 | 20:00

Updated-29 Apr, 2026 | 01:13

Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0642, CVE-2013-1365, CVE-2013-1366, CVE-2013-1367, CVE-2013-1368, CVE-2013-1369, CVE-2013-1370, CVE-2013-1372, and CVE-2013-1373.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x windows flash_player air_sdk android air linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2017-3010

Matching Score-10

Matching Score-10

Product-acrobat acrobat_dc reader acrobat_reader_dc macos windows Adobe Acrobat Reader 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier.

CVSS Score-9.8||CRITICAL

EPSS-2.31% / 84.84%

7 Day CHG~0.00%

Published-31 Mar, 2017 | 15:00

Updated-20 Apr, 2025 | 01:37

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability in the rendering engine. Successful exploitation could lead to arbitrary code execution.

Vendor-n/a Adobe Inc.Apple Inc.Microsoft Corporation

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-0504

Matching Score-10

Assigner-IBM Corporation

Matching Score-10

Assigner-IBM Corporation

CVSS Score-10||HIGH

EPSS-5.09% / 89.86%

7 Day CHG~0.00%

Published-27 Feb, 2013 | 00:00

Updated-29 Apr, 2026 | 01:13

Buffer overflow in the broker service in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and 11.x before 11.2.202.273 on Linux, allows attackers to execute arbitrary code via unspecified vectors.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-flash_player windows linux_kernel mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-0638

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-4.78% / 89.51%

7 Day CHG~0.00%

Published-12 Feb, 2013 | 20:00

Updated-29 Apr, 2026 | 01:13

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x windows flash_player air_sdk android air linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-5285

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-8.26% / 92.26%

7 Day CHG~0.00%

Published-13 Nov, 2012 | 11:00

Updated-29 Apr, 2026 | 01:13

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x windows flash_player air_sdk android air linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-5676

Matching Score-10

Matching Score-10