CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

13,962 vulnerabilities with CWE-119
CVE-2022-24420 HIGH
Dell Alienware BIOS < 1.18.0 - Authenticated Arbitrary Code Execution via SMI
CVSS 8.2
CVE-2022-24419 HIGH
Dell Alienware BIOS < 1.18.0 - Authenticated Arbitrary Code Execution via SMI
CVSS 8.2
CVE-2022-24416 HIGH
Dell Alienware BIOS < 1.18.0 - Authenticated Arbitrary Code Execution via SMI
CVSS 8.2
CVE-2022-24415 HIGH
Dell Alienware BIOS < 1.18.0 - Authenticated Arbitrary Code Execution via SMI
CVSS 8.2
CVE-2022-25818 MEDIUM
Android UWB Stack - Remote Code Execution via Improper Boundary Check
CVSS 6.5
CVE-2022-0204 HIGH
bluez < 5.63 - Denial of Service via Heap Overflow
CVSS 8.8
CVE-2022-24322 MEDIUM
EcoStruxure Control Expert < V15.0 SP1 - Buffer Overflow
CVSS 5.3
CVE-2022-24661 HIGH
Simcenter STAR-CCM+ Viewer <V2022.1 - Memory Corruption
CVSS 7.8
CVE-2022-26129 HIGH
FRRouting < 8.1 - Buffer Overflow in Babeld Message SubTLV Parsing
CVSS 7.8
CVE-2022-26128 HIGH
FRRouting < 8.1 - Buffer Overflow in babel_packet_examin Function
CVSS 7.8
CVE-2022-26127 HIGH
FRRouting < 8.1 - Buffer Overflow in babel_packet_examin
CVSS 7.8
CVE-2022-26126 HIGH
FRRouting < 8.2 - Buffer Overflow in isis_nb_notifications.c
CVSS 7.8
CVE-2022-26125 HIGH
FRRouting < 8.1 - Buffer Overflow in isisd/isis_tlvs.c
CVSS 7.8
CVE-2022-22706 HIGH KEV
Arm Mali GPU Kernel Driver (Midgard r26p0-r31p0, Bifrost r0p0-r35p0, Valhall r19p0-r35p0) - Arbitrary Memory Write
CVSS 7.8
CVE-2022-0729 HIGH
vim < 8.2.4440 - Use-After-Free via Out-of-range Pointer Offset
CVSS 8.8
CVE-2022-24063 HIGH
Sante DICOM Viewer Pro 13.2.0.21165 - RCE
CVSS 7.8
CVE-2022-0614 MEDIUM
Homebrew mruby <3.2 - Buffer Overflow
CVSS 5.5
CVE-2022-0554 HIGH
vim < 8.2.4327 - Use-After-Free via Out-of-range Pointer Offset
CVSS 7.8
CVE-2022-22716 MEDIUM
Microsoft Excel - Information Disclosure via Memory Buffer Overflow
CVSS 5.5
CVE-2022-0522 HIGH
NPM radare2.js <5.6.2 - Use After Free
CVSS 7.1
CVE-2022-0521 HIGH
radare2 < 5.6.2 - Use-After-Free
CVSS 7.1
CVE-2022-0519 HIGH
radare2 < 5.6.2 - Buffer Overflow
CVSS 7.1
CVE-2022-0351 HIGH
vim < 8.2 - Memory Corruption via Buffer Underflow
CVSS 7.8
CVE-2022-21852 HIGH
Windows DWM Core Library - Elevation of Privilege via Memory Buffer Overflow
CVSS 7.8
CVE-2021-1424 MEDIUM
Cisco ASR 5000 Series Software - Denial of Service via Malformed IKEv2 Packet
CVSS 5.3
Details
Vulnerabilities 13,962
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits