CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,008 vulnerabilities with CWE-119
CVE-2015-7106
macOS < 10.11.2 - Memory Corruption in Intel Graphics Driver
CVE-2015-7105
tvOS < 9.1 - Remote Code Execution via Crafted Font File
CVE-2015-7104
Apple tvOS < 9.1 and Safari < 9.0.2 - Remote Code Execution via WebKit Memory Corruption
CVE-2015-7103
Safari < 9.0.2 - Remote Code Execution via Crafted Web Site
CVE-2015-7102
tvOS < 9.1 - Remote Code Execution via Crafted Web Site
CVE-2015-7101
tvOS < 9.1 - Remote Code Execution via Crafted Web Site
CVE-2015-7100
Safari < 9.0.2 - Remote Code Execution via Crafted Web Site
CVE-2015-7099
tvOS < 9.1 - Remote Code Execution via Crafted Web Site
CVE-2015-7098
Apple tvOS < 9.1 - Remote Code Execution via Crafted Web Site
CVE-2015-7097
Apple iOS < 9.2, Safari < 9.0.2, tvOS < 9.1 - Remote Code Execution via WebKit Memory Corruption
CVE-2015-7096
tvOS < 9.1 - Remote Code Execution via Crafted Web Site
CVE-2015-7095
tvOS < 9.1 - Remote Code Execution via Crafted Web Site
CVE-2015-7084
Apple iOS <9.2, macOS <10.11.2, tvOS <9.1, watchOS <2.1 - Memory Corruption in Kernel
CVE-2015-7083
Apple Mac OS X < 10.11.1 - Memory Corruption
CVE-2015-7077
macOS < 10.11.2 - Privilege Escalation or Denial of Service via Intel Graphics Driver Memory Access
CVE-2015-7075
watchOS < 2.1 - Remote Code Execution via Malformed Media File
CVE-2015-7074
Apple iOS <9.2, macOS <10.11.2, tvOS <9.1 - Remote Code Execution via Malformed Media File
CVE-2015-7073
Apple iOS < 9.2, macOS < 10.11.2, tvOS < 9.1, watchOS < 2.1 - Remote Code Execution via Crafted SSL Handshake
CVE-2015-7066
Apple iOS < 9.2, macOS < 10.11.2, tvOS < 9.1, watchOS < 2.1 - Remote Code Execution via OpenGL Memory Corruption
CVE-2015-7065
Apple iOS <9.2, macOS <10.11.2, tvOS <9.1 - Remote Code Execution via OpenGL Memory Corruption
CVE-2015-7064
Apple iOS <9.2, macOS <10.11.2, tvOS <9.1, watchOS <2.1 - Remote Code Execution via OpenGL Memory Corruption
CVE-2015-7061
Apple macOS X < 10.11.1, tvOS < 9.0, watchOS < 2.0 - Remote Code Execution via ASN.1 Certificate Decoding
CVE-2015-7060
watchOS < 2.1 - Remote Code Execution via ASN.1 Certificate Decoding
CVE-2015-7059
watchOS < 2.1 - Remote Code Execution via Crafted Certificate
CVE-2015-7057
Apple Xcode < 7.2 - Memory Corruption via Crafted Mach-O File
Details
Vulnerabilities 14,008
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits