CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

13,972 vulnerabilities with CWE-119
CVE-2020-36619 MEDIUM
multimon-ng < 1.2.0 - Format String Vulnerability in demod_flex.c add_ch Function
CVSS 5.5
CVE-2020-35527 CRITICAL
SQLite 3.31.1 - Out-of-Bounds Memory Access via ALTER TABLE with Nested FROM Clause
CVSS 9.8
CVE-2020-27802 MEDIUM
UPX 4.0.0 - Denial of Service via Crafted Mach-O File
CVSS 5.5
CVE-2020-27801 HIGH
UPX 4.0.0 - Heap-Based Buffer Over-Read in get_le64 Function
CVSS 7.8
CVE-2020-27800 HIGH
UPX 4.0.0 - Heap-Based Buffer Over-Read in get_le32 Function
CVSS 7.8
CVE-2020-27799 HIGH
UPX 4.0.0 - Heap-Based Buffer Over-Read via Crafted Mach-O File
CVSS 7.8
CVE-2020-27798 MEDIUM
UPX 4.0.0 - Invalid Memory Address Reference in adjABS Function
CVSS 5.5
CVE-2020-27797 MEDIUM
UPX 4.0.0 - Invalid Memory Address Reference in elf_lookup Function
CVSS 5.5
CVE-2020-27796 HIGH
UPX 4.0.0 - Heap-Based Buffer Over-Read in invert_pt_dynamic
CVSS 7.8
CVE-2020-35511 HIGH
pngcheck 2.4.0 - Global Buffer Overflow via Crafted PNG File
CVSS 7.8
CVE-2020-27792 HIGH
Ghostscript < 9.50 - Heap-Based Buffer Overflow in lp8000_print_page
CVSS 7.1
CVE-2020-27787 MEDIUM
UPX < 3.96 - Denial of Service via Crafted Input File in invert_pt_dynamic()
CVSS 5.5
CVE-2020-23563 MEDIUM
IrfanView 4.54 - User-Mode Write Access Violation in FORMATS!ShowPlugInSaveOptions_W
CVSS 5.5
CVE-2020-13495 MEDIUM
Pixar OpenUSD 20.05 - Info Disclosure
CVSS 5.5
CVE-2020-8703 MEDIUM
Intel(R) CSME <15.0.22 - Privilege Escalation
CVSS 6.7
CVE-2020-11259 HIGH
Qualcomm AR7420 and related firmware - Memory Corruption in Trustzone BSP Pointer Validation
CVSS 8.8
CVE-2020-11258 HIGH
Qualcomm AR7420 Firmware - Memory Corruption via Trustzone BSP Pointer Validation
CVSS 8.8
CVE-2020-11257 HIGH
Qualcomm AR7420 and related firmware - Memory Corruption in TrustZone BSP Pointer Validation
CVSS 8.8
CVE-2020-11256 HIGH
Qualcomm AR7420 Firmware - Memory Corruption via TrustZone Buffer Pointer Validation
CVSS 8.8
CVE-2020-15782 CRITICAL
SIMATIC Drive Controller < V2.9.2 - Memory Protection Bypass via Port 102/tcp
CVSS 9.8
CVE-2020-27815 HIGH
Linux Kernel >=4.4.249 - Memory Corruption via JFS Extended Attributes
CVSS 7.8
CVE-2020-20220 MEDIUM
Mikrotik RouterOS < 6.47 - Authenticated Denial of Service via /nova/bin/bfd Process
CVSS 6.5
CVE-2020-28600 HIGH
OpenSCAD 2020.12-RC2 - Out-of-Bounds Write via Crafted STL File
CVSS 7.8
CVE-2020-11289 HIGH
Qualcomm APQ8009 Firmware - Memory Corruption via TZ Command Handler
CVSS 7.8
CVE-2020-11288 HIGH
Qualcomm Firmware - Out-of-Bounds Write in PlayReady Command Processing
CVSS 7.8
Details
Vulnerabilities 13,972
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits