CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,008 vulnerabilities with CWE-119
CVE-2015-5919
Apple watchOS <2 - Privilege Escalation/DoS
CVE-2015-5918
Apple watchOS <2 - Privilege Escalation/DoS
CVE-2015-5917
tnftpd - Denial of Service via STAT Command Glob Pattern
CVE-2015-5891
Apple OS X <10.11 - Privilege Escalation/DoS
CVE-2015-5890
IOGraphics <10.11 - Privilege Escalation/DoS
CVE-2015-5877
Apple OS X <10.11 - Privilege Escalation/DoS
CVE-2015-5873
IOGraphics <10.11 - Privilege Escalation/DoS
CVE-2015-5872
IOGraphics <10.11 - Privilege Escalation/DoS
CVE-2015-5871
IOGraphics <10.11 - Privilege Escalation/DoS
CVE-2015-5866
Apple OS X < 10.10.5 - Remote Code Execution via IOHIDFamily Memory Corruption
CVE-2015-5830
Apple OS X <10.11 - Privilege Escalation/DoS
CVE-2015-7716
Android < 5.1.1 - Remote Code Execution via Crafted Media File
CVE-2015-6604
Android < 5.1.1 - Remote Code Execution via Crafted Media File
CVE-2015-6603
Android < 5.1.1 - Remote Code Execution via Crafted Media File
CVE-2015-6601
Android < 5.1 - Remote Code Execution via Crafted Media File
CVE-2015-6600
Android < 5.1 - Remote Code Execution via Crafted Media File
CVE-2015-6599
Android < 5.1 - Remote Code Execution via Crafted Media File
CVE-2015-3877
Android < 5.1.1 - Remote Code Execution via Crafted Media File
CVE-2015-3875
Android <5.1.1 LMY48T - Memory Corruption
CVE-2015-3874
Android < 5.1.1 - Remote Code Execution via Crafted Media File
CVE-2015-3873
Android <5.1.1 LMY48T - Memory Corruption
CVE-2015-3872
Android < 5.1.1 - Remote Code Execution via Crafted Media File
CVE-2015-3871
Android < 5.1 - Remote Code Execution via Crafted Media File
CVE-2015-3870
Android < 5.1.1 LMY48T - Remote Code Execution via Crafted Media File
CVE-2015-3869
Android < 5.1.1 - Remote Code Execution via Crafted Media File
Details
Vulnerabilities 14,008
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits