CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

13,986 vulnerabilities with CWE-119
CVE-2019-10618 MEDIUM
QCA6390 Firmware - Memory Corruption via IO Control Address Validation Bypass
CVSS 5.5
CVE-2019-19581 MEDIUM
Xen 4.8.0-4.12.0 - Denial of Service via 32-bit Arm Bitmap Iteration
CVSS 6.5
CVE-2019-13726 HIGH
Google Chrome < 79.0.3945.79 - Remote Code Execution via Password Manager Buffer Overflow
CVSS 8.8
CVE-2019-19602 MEDIUM
Linux kernel <5.4.2 - Memory Corruption
CVSS 6.1
CVE-2019-19601 HIGH
OpenDetex 2.8.5 - Buffer Overflow in TexOpen via sprintf
CVSS 7.8
CVE-2019-19481 MEDIUM
OpenSC <0.20.0-rc3 - Buffer Overflow
CVSS 4.6
CVE-2019-15286 HIGH
Cisco Webex Business Suite - Remote Code Execution via Malicious ARF or WRF File
CVSS 7.8
CVE-2019-15284 HIGH
Cisco Webex Business Suite - Remote Code Execution via Malicious ARF or WRF File
CVSS 7.8
CVE-2019-2297 HIGH
Qualcomm APQ/MDM/MSM/QCA/QCN/QCS/SDA/SDM/SDX/SM Firmware - Buffer Overflow via NAN Message Processing
CVSS 7.8
CVE-2019-2295 MEDIUM
Snapdragon Auto-SDI - Info Disclosure
CVSS 5.5
CVE-2019-10627 CRITICAL
Qualcomm IPS < 2019.2 - Integer Overflow to Buffer Overflow in PostScript Image Handling
CVSS 9.8
CVE-2019-10535 MEDIUM
Qualcomm Firmware - Memory Corruption in WLAN Loop Validation
CVSS 5.5
CVE-2019-11113 MEDIUM
Intel Graphics Driver < 25.20.100.6618 - Authenticated Buffer Overflow in Kernel Mode Module
CVSS 4.4
CVE-2019-0152 MEDIUM
Intel Xeon Platinum Firmware - Privilege Escalation via SMM Memory Protection Bypass
CVSS 6.7
CVE-2019-0151 MEDIUM
Intel Core and Xeon Processors - Privilege Escalation via Insufficient Memory Protection
CVSS 6.7
CVE-2019-1441 HIGH
Windows 7 and Windows Server 2008 - Remote Code Execution via Embedded Font Handling
CVSS 8.8
CVE-2019-2324 CRITICAL
Snapdragon Auto - Out of Boundary Access
CVSS 9.8
CVE-2019-2275 MEDIUM
Qualcomm MDM9150 and related firmware - Buffer Overflow during Key Blob Deserialization
CVSS 5.5
CVE-2019-10541 CRITICAL
Qualcomm Snapdragon Firmware - Use-After-Free via FLV Clip Parsing
CVSS 9.8
CVE-2019-10502 HIGH
Qualcomm Snapdragon Firmware - Stack Overflow in Camera Module
CVSS 7.8
CVE-2019-13508 CRITICAL
FreeTDS < 1.1.11 - Buffer Overflow
CVSS 9.8
CVE-2019-11933 CRITICAL
WhatsApp for Android <2.19.291 - Buffer Overflow
CVSS 9.8
CVE-2019-18281 MEDIUM
Qt qtbase < 5.12.5 DoS via Directional Character Processing
CVSS 4.3
CVE-2019-8205 CRITICAL
Adobe Acrobat and Reader DC < 15.006.30504, 15.008.20082-19.021.20047 - Arbitrary Code Execution
CVSS 9.8
CVE-2019-8196 CRITICAL
Adobe Acrobat and Reader DC < 15.006.30504, 15.008.20082-19.021.20047 - Untrusted Pointer Dereference
CVSS 9.8
Details
Vulnerabilities 13,986
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits