CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,008 vulnerabilities with CWE-119
CVE-2015-7015
Apple iOS <9.1, OS X <10.11.1, watchOS <2.0.1 - Remote Code Execution via Spoofed configd Response
CVE-2015-7014
iTunes < 12.3.1 - Remote Code Execution via Crafted Web Site
CVE-2015-7013
iTunes < 12.3.1 - Remote Code Execution via Crafted Web Site
CVE-2015-7012
iTunes < 12.3.1 - Remote Code Execution via Crafted Web Site
CVE-2015-7011
iTunes < 12.3.1 - Remote Code Execution via Crafted Web Site
CVE-2015-7010
Apple iOS < 9.1 and OS X < 10.11.1 - Remote Code Execution via Crafted Font File
CVE-2015-7009
iPhone OS < 9.0.2 and macOS < 10.11.0 - Remote Code Execution via Crafted Font File
CVE-2015-7008
iPhone OS < 9.1 and macOS < 10.11.1 - Remote Code Execution via Crafted Font File
CVE-2015-7002
iTunes < 12.3.1 - Remote Code Execution via Crafted Web Site
CVE-2015-6996
Apple iOS <9.1, macOS <10.11.1, watchOS <2.0.1 - Remote Code Execution via IOAcceleratorFamily Memory Corruption
CVE-2015-6995
Apple iOS < 9.1 and OS X < 10.11.1 - Remote Code Execution via Disk Images Component
CVE-2015-6993
Apple Iphone OS < 9.0.2 - Memory Corruption
CVE-2015-6991
Apple iOS < 9.1 and OS X < 10.11.1 - Remote Code Execution via Crafted Font File
CVE-2015-6990
iPhone OS < 9.0.2 and macOS < 10.11.0 - Remote Code Execution via Crafted Font File
CVE-2015-6989
Apple iOS <9.1, macOS <10.11.1, watchOS <2.0.1 - Remote Code Execution via Crafted Package in Grand Central Dispatch
CVE-2015-6985
Apple OS X < 10.11.1 - Remote Code Execution via Crafted Web Page
CVE-2015-6978
Apple watchOS < 2.0 - Remote Code Execution via Crafted Font File
CVE-2015-6977
macOS < 10.11.1 and iOS < 9.1 - Remote Code Execution via Crafted Font File
CVE-2015-6976
Apple iOS < 9.1 and OS X < 10.11.1 - Remote Code Execution via Crafted Font File
CVE-2015-6974
watchOS < 2.0.1 - Memory Corruption and Remote Code Execution in IOHIDFamily
CVE-2015-5944
Apple OS X <10.11.1 - Memory Corruption
CVE-2015-5942
Apple iOS <9.1, OS X <10.11.1, watchOS <2.0.1 - RCE
CVE-2015-5940
Apple iOS <9.1 & OS X <10.11.1 - RCE
CVE-2015-5939
ImageIO - Memory Corruption
CVE-2015-5938
Apple OS X <10.11.1 - Memory Corruption
Details
Vulnerabilities 14,008
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits