CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

13,990 vulnerabilities with CWE-119
CVE-2018-5889 HIGH
Android <2018-06-05 - Buffer Overflow
CVSS 7.8
CVE-2018-5885 CRITICAL
Snapdragon Mobile/Snapdragon Wear - Buffer Overflow
CVSS 9.8
CVE-2018-5878 CRITICAL
Qualcomm Mdm9206 Firmware - Memory Corruption
CVSS 9.8
CVE-2018-5876 HIGH
Qualcomm MDM9206 and related firmware - Buffer Overflow in MP4 File Parser
CVSS 8.8
CVE-2018-5875 HIGH
Qualcomm Multiple Chipsets Firmware - Buffer Overflow via MP4 File Parsing
CVSS 8.8
CVE-2018-5835 HIGH
Android <2018-06-05 - Buffer Overflow
CVSS 7.8
CVE-2018-5834 HIGH
Android <2018-06-05 - Buffer Overflow
CVSS 7.8
CVE-2018-5830 HIGH
Android <2018-06-05 - Buffer Overflow
CVSS 7.8
CVE-2018-12113 CRITICAL
Core FTP LE <2.2 Build 1921 - Buffer Overflow
CVSS 9.8
CVE-2018-13121 MEDIUM
RealOne Player 2.0 Build 6.0.11.872 - Denial of Service via Crafted AIFF File
CVSS 5.5
CVE-2018-7780 CRITICAL
Schneider Electric Pelco Sarix Professional <3.29.69 - Buffer Overflow
CVSS 9.8
CVE-2018-12982 MEDIUM
PoDoFo 0.9.6-rc1 - Denial of Service via Invalid Memory Read in PdfVariant::DelayedLoad
CVSS 5.5
CVE-2018-12918 CRITICAL
PBC < 2017-03-02 - Denial of Service via Segmentation Fault in _pbcB_register_fields
CVSS 9.8
CVE-2018-12916 CRITICAL
PBC < 20170302 - Denial of Service via Segmentation Fault in _pbcP_message_default
CVSS 9.8
CVE-2018-10594 CRITICAL
Delta Industrial Automation COMMGR <1.08 - Buffer Overflow
CVSS 9.8
CVE-2018-10664 HIGH
Axis IP Camera Firmware - Memory Corruption in HTTP Daemon
CVSS 7.5
CVE-2018-10659 HIGH
Axis IP Camera Firmware - Denial of Service via UND ARM Instruction
CVSS 7.5
CVE-2018-10658 HIGH
Axis IP Cameras - Denial of Service via Memory Corruption in libdbus-send.so
CVSS 7.5
CVE-2018-1000537 CRITICAL
Marlin Firmware Marlin <1.1.x - Buffer Overflow
CVSS 9.8
CVE-2018-0608 CRITICAL
Dena H2o < 2.2.4 - Memory Corruption
CVSS 9.8
CVE-2018-12706 CRITICAL
DIGISOL DG-BR4000NG - Buffer Overflow
CVSS 9.8
CVE-2018-12640 CRITICAL
Insteon HD IP Camera White - Buffer Overflow
CVSS 9.8
CVE-2018-0311 HIGH
Cisco NX-OS - Unauthenticated Denial of Service via Malformed Fabric Services Packet
CVSS 7.5
CVE-2018-0303 HIGH
Cisco NX-OS and FXOS - Unauthenticated Remote Code Execution or Denial of Service via Cisco Discovery Protocol Packet
CVSS 8.8
CVE-2018-0302 HIGH
Cisco FXOS and UCS Fabric Interconnect - Authenticated Buffer Overflow via CLI Parser
CVSS 7.8
Details
Vulnerabilities 13,990
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits