CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

13,990 vulnerabilities with CWE-119
CVE-2018-9063 HIGH
Lenovo System Update < 5.07.0072 - Local Buffer Overflow via MapDrv User ID or Password
CVSS 7.8
CVE-2018-8872 HIGH
Schneider Electric Triconex Tricon MP <10.5 - Memory Corruption
CVSS 8.1
CVE-2018-7522 MEDIUM
Schneider Electric Triconex Tricon MP 3008 Firmware 10.0-10.4 - Privilege Escalation via Register Memory Overwrite
CVSS 6.7
CVE-2018-10713 HIGH
D-Link DSL-3782 EU 1.01 - Authenticated Memory Corruption via Diagnostics Component
CVSS 8.8
CVE-2018-10689 MEDIUM
blktrace 1.2.0 - Buffer Overflow in dev_map_read Function
CVSS 5.5
CVE-2018-0252 HIGH
Cisco Wireless LAN Controller Software - Denial of Service via IPv4 Fragment Reassembly
CVSS 8.6
CVE-2018-6242 MEDIUM
NVIDIA Tegra BootROM RCM - Buffer Overflow via Physical USB Access
CVSS 6.8
CVE-2018-10537 HIGH
WavPack < 5.1.0 - Memory Corruption via Multiple Format Chunks in W64 Parser
CVSS 7.8
CVE-2018-7527 MEDIUM
Wecon LeviStudio HMI Editor 1.10, LeviStudioU < 1.8.29, PI Studio HMI < 2017-11-11 - Buffer Overflow
CVSS 5.3
CVE-2018-10253 HIGH
Paessler PRTG Network Monitor <18.1.39.1648 - Buffer Overflow
CVSS 7.5
CVE-2018-9059 CRITICAL
Easy File Sharing Web Server 7.2 - Remote Code Execution via Malicious Login Request
CVSS 9.8
CVE-2018-10238 CRITICAL
skarg BACnet Protocol Stack <0.9.1, 0.8.5 - Buffer Overflow
CVSS 9.8
CVE-2018-1145 CRITICAL
Belkin N750 1.10.22 - Buffer Overflow
CVSS 9.8
CVE-2018-10194 HIGH
Ghostscript < 9.22 - Denial of Service via PDF Text Positioning Overflow
CVSS 7.8
CVE-2018-8840 CRITICAL
InduSoft Web Studio < 8.1 - Remote Code Execution via Crafted Packet in Tag Alarm or Event Action
CVSS 9.8
CVE-2018-7762 HIGH
Schneider Electric's Modicon - Buffer Overflow
CVSS 7.5
CVE-2018-7759 HIGH
Schneider Electric - Buffer Overflow
CVSS 7.5
CVE-2018-6413 HIGH
Hikvision DS-2CD9111-S Firmware < 4.1.2 - Denial of Service via Crafted Network Setting Request
CVSS 7.5
CVE-2018-10124 MEDIUM
Linux Kernel < 4.13 - Denial of Service via INT_MIN Argument in kill_something_info
CVSS 5.5
CVE-2018-10114 HIGH
GEGL < 0.3.32 - Denial of Service via Malformed PPM File
CVSS 8.8
CVE-2018-10113 HIGH
GEGL < 0.3.32 - Denial of Service via Unbounded Memory Allocation in PPM Load Operation
CVSS 7.5
CVE-2018-10112 HIGH
gegl < 0.3.32 - Denial of Service via Malformed PNG File Handling
CVSS 8.8
CVE-2018-10111 HIGH
GEGL < 0.3.32 - Denial of Service via Unbounded Memory Allocation in render_rectangle
CVSS 7.5
CVE-2018-1003 HIGH
Microsoft Windows - Remote Code Execution via Microsoft JET Database Engine Buffer Overflow
CVSS 7.8
CVE-2018-3589 CRITICAL
Qualcomm MDM9650/MDM9655/SD 835/SD 845/SD 850 Firmware - Buffer Overflow in VSWR Capture
CVSS 9.8
Details
Vulnerabilities 13,990
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits