CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,008 vulnerabilities with CWE-119
CVE-2016-9424 HIGH
Tats W3m < 0.5.3-30 - Memory Corruption
CVSS 8.8
CVE-2016-9423 HIGH
Tats W3m < 0.5.3-30 - Memory Corruption
CVSS 8.8
CVE-2016-9422 HIGH
Tats W3m < 0.5.3-30 - Memory Corruption
CVSS 8.8
CVE-2016-8104 MEDIUM
Intel PROSet/Wireless <19.20.3 - Buffer Overflow
CVSS 5.5
CVE-2016-9917 HIGH
BlueZ 5.42 - Buffer Overflow in hcidump read_n Function
CVSS 7.5
CVE-2016-9804 MEDIUM
BlueZ 5.42 - Buffer Overflow in commands_dump Function via Corrupted Dump File
CVSS 5.3
CVE-2016-9803 MEDIUM
BlueZ 5.42 - Out-of-Bounds Read in le_meta_ev_dump
CVSS 5.3
CVE-2016-9802 MEDIUM
BlueZ 5.42 - Buffer Over-Read in L2CAP Packet Processing
CVSS 5.3
CVE-2016-9801 MEDIUM
BlueZ 5.42 - Buffer Overflow in L2CAP Dump File Parser
CVSS 5.3
CVE-2016-9800 MEDIUM
BlueZ 5.42 - Buffer Overflow in pin_code_reply_dump
CVSS 5.3
CVE-2016-9799 MEDIUM
BlueZ 5.42 - Buffer Overflow in btsnoop.c pklg_read_hci
CVSS 5.3
CVE-2016-9797 MEDIUM
BlueZ 5.42 - Buffer Over-Read in L2CAP Dump Parser
CVSS 5.3
CVE-2016-2946 HIGH
IBM Tivoli Monitoring - Stack-based Buffer Overflow in ax Shared Libraries
CVSS 7.8
CVE-2016-9480 CRITICAL
libdwarf 2016-10-21 - Heap Buffer Over-read in dwarf_util.c
CVSS 9.1
CVE-2016-9083 HIGH
Linux kernel <4.8.11 - Memory Corruption
CVSS 7.8
CVE-2016-8633 MEDIUM
Linux Kernel < 4.8.7 - Remote Code Execution via Firewire Fragmented Packets
CVSS 6.8
CVE-2016-8632 HIGH
Linux kernel <4.8.11 - Privilege Escalation
CVSS 7.8
CVE-2016-6701 HIGH
Android < 7.0 - Remote Code Execution in libskia via Crafted Media File
CVSS 7.8
CVE-2016-9540 CRITICAL
libtiff 4.0.6 - Heap-Based Buffer Overflow in tiffcp
CVSS 9.8
CVE-2016-9539 CRITICAL
libtiff 4.0.6 - Out-of-Bounds Read in readContigTilesIntoBuffer
CVSS 9.8
CVE-2016-9537 CRITICAL
libtiff 4.0.6 - Out-of-Bounds Write in tiffcrop
CVSS 9.8
CVE-2016-9536 CRITICAL
libtiff 4.0.6 - Heap-Based Buffer Overflow in t2p_process_jpeg_strip
CVSS 9.8
CVE-2016-9535 CRITICAL
libtiff - Heap-Based Buffer Overflow in Predictor Function
CVSS 9.8
CVE-2016-9534 CRITICAL
libtiff - Heap-Based Buffer Overflow in TIFFFlushData1 Error Handling
CVSS 9.8
CVE-2016-9533 CRITICAL
libtiff - Heap-Based Buffer Overflow in PixarLog horizontalDifference
CVSS 9.8
Details
Vulnerabilities 14,008
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits