CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

13,962 vulnerabilities with CWE-119
CVE-2022-32455 HIGH
BIG-IP 13.1.x-16.1.x - Denial of Service via Client SSL Profile with Session Tickets
CVSS 7.5
CVE-2022-35911 HIGH
Patlite NH-FB and NHL-FB Firmware < 1.46 - Denial of Service via Missing Query String
CVSS 7.5
CVE-2022-34764 MEDIUM
Modicon Communication Module <1.10 & X80 Advanced RTU 1.0 - DoS via URL Parsing
CVSS 5.9
CVE-2022-20238 CRITICAL
Android - Memory Corruption via remap_pfn_range
CVSS 9.8
CVE-2022-20236 HIGH
Android DRM Driver - Memory Corruption
CVSS 7.5
CVE-2022-34291 MEDIUM
PADS Standard/Plus Viewer - Stack Corruption via PCB File Parsing
CVSS 5.5
CVE-2022-34290 MEDIUM
PADS Standard/Plus Viewer - Stack Corruption via PCB File Parsing
CVSS 5.5
CVE-2022-34287 MEDIUM
PADS Standard/Plus Viewer - Stack Corruption via PCB File Parsing
CVSS 5.5
CVE-2022-30938 HIGH
EN100 Ethernet module - Memory Corruption
CVSS 7.5
CVE-2022-28200 HIGH
NVIDIA DGX A100 Firmware < 22.5.5 - Memory Corruption in SBIOS BiosCfgTool
CVSS 8.2
CVE-2022-30937 HIGH
EN100 Ethernet module - Memory Corruption
CVSS 7.5
CVE-2022-26776 CRITICAL
macOS 11.0-11.6.5 - Memory Corruption
CVSS 9.8
CVE-2022-26772 HIGH
macOS Monterey <12.4 - Memory Corruption
CVSS 7.8
CVE-2022-26763 HIGH
iPadOS < 15.5 - Out-of-Bounds Access
CVSS 7.8
CVE-2022-21237 MEDIUM
Intel NUC Firmware - Privilege Escalation via Improper Buffer Access
CVSS 6.7
CVE-2022-28194 HIGH
NVIDIA Jetson Linux < 32.7.2 - Memory Buffer Overflow in Cboot Module tegrabl_cbo.c
CVSS 7.3
CVE-2022-1441 HIGH
GPAC MP4Box - Buffer Overflow in diST_box_read Function
CVSS 7.8
CVE-2022-22558 MEDIUM
Dell PowerEdge Server BIOS - Buffer Overflow
CVSS 5.7
CVE-2022-1420 MEDIUM
vim < 8.2.4774 - Use-After-Free via Out-of-range Pointer Offset
CVSS 5.5
CVE-2022-1350 MEDIUM
GhostPCL 9.55.0 - Memory Corruption in gsmchunk.c chunk_free_object
CVSS 4.3
CVE-2022-24788 HIGH
vyper < 0.3.2 - Buffer Overrun via JSON Interface Function Import
CVSS 7.1
CVE-2022-22514 HIGH
CODESYS Control Runtime SL < 4.5.0.0 - Authenticated Memory Corruption in CmpTraceMgr
CVSS 7.1
CVE-2022-25959 HIGH
Omron CX-Position <= 2.5.3 - Memory Corruption via Project File Processing
CVSS 7.8
CVE-2022-0500 HIGH
Linux Kernel 5.10-5.15.37 - Out-of-Bounds Memory Write via BPF_BTF_LOAD
CVSS 7.8
CVE-2022-24421 HIGH
Dell Alienware BIOS < 1.18.0 - Authenticated Arbitrary Code Execution via SMI
CVSS 8.2
Details
Vulnerabilities 13,962
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits