CWE-118

Incorrect Access of Indexable Resource ('Range Error')

Parent: CWE-664 - Improper Control of a Resource Through its Lifetime

The product does not restrict or incorrectly restricts operations within the boundaries of a resource that is accessed using an index or pointer, such as memory or files.

24 vulnerabilities with CWE-118
CVE-2025-54628 MEDIUM
Communication Module - Info Disclosure
CVSS 5.3
CVE-2025-48902 MEDIUM
Setting Module - DoS
CVSS 6.6
CVE-2024-43524 MEDIUM
Microsoft Windows 10 1809 < 10.0.17763.6414 - Remote Code Execution
CVSS 6.8
CVE-2023-37923 HIGH
GTKWave <3.3.115 - RCE
CVSS 7.8
CVE-2023-37922 HIGH
GTKWave <3.3.115 - RCE
CVSS 7.8
CVE-2023-37921 HIGH
GTKWave <3.3.115 - RCE
CVSS 7.8
CVE-2023-0201 MEDIUM
NVIDIA DGX-2 SBIOS - Memory Corruption
CVSS 6.7
CVE-2022-38072 MEDIUM
ADMesh Master Commit <767a105-0.98.4 - Buffer Overflow
CVSS 6.5
CVE-2022-36402 MEDIUM
Linux Kernel - Privilege Escalation
CVSS 6.3
CVE-2020-3369 HIGH
Cisco SD-WAN vEdge Routers - DoS
CVSS 7.5
CVE-2020-3235 HIGH
Cisco IOS Software - DoS
CVSS 7.7
CVE-2019-6130 MEDIUM
Artifex MuPDF 1.14.0 - Memory Corruption
CVSS 5.5
CVE-2016-10495 CRITICAL
Android <2018-04-05 - Info Disclosure
CVSS 9.8
CVE-2015-9142 CRITICAL
Android - Memory Corruption
CVSS 9.8
CVE-2018-7530 HIGH
Omron CX-One <4.42 - Memory Corruption
CVSS 7.8
CVE-2015-2004 CRITICAL
GNSDK SDK <1.1.7 - Code Injection
CVSS 9.8
CVE-2015-2003 CRITICAL
PJSIP PJSUA2 SDK <51322 - Code Injection
CVSS 9.8
CVE-2015-2002 CRITICAL
ESRI ArcGis Runtime SDK <10.2.6-2 - RCE
CVSS 9.8
CVE-2015-2001 CRITICAL
MetaIO SDK <6.0.2.1 - Code Injection
CVSS 9.8
CVE-2015-2000 CRITICAL
Jumio SDK <1.5.0 - Code Injection
CVSS 9.8
CVE-2017-10872 MEDIUM
Dena H2o < 2.2.3 - Denial of Service
CVSS 6.5
CVE-2014-9411 CRITICAL
Qualcomm <Android> - Memory Corruption
CVSS 9.8
CVE-2017-0302 MEDIUM
F5 BIG-IP APM <13.1.2 - DoS
CVSS 5.3
CVE-2017-5884 HIGH
gtk-vnc <0.7.0 - RCE
CVSS 7.8
Details
Vulnerabilities 24
Links
MITRE CWE Entry Search this CWE With Exploits