CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,008 vulnerabilities with CWE-119
CVE-2015-4522
Firefox < 41.0 - Memory Corruption via nsUnicodeToUTF8::GetMaxLength Overflow
CVE-2015-4521
Firefox < 40.0.3 - Memory Corruption via ConvertDialogOptions
CVE-2015-4517
Firefox < 40.0.3 - Memory Corruption via NetworkUtils.cpp
CVE-2015-4512
Firefox < 40.0.3 - Out-of-Bounds Read via 2D Canvas Rendering
CVE-2015-4511
Firefox < 41.0 - Remote Code Execution via WebM Video Header
CVE-2015-4506
Firefox < 40.0.3 - Remote Code Execution via VP9 Video Processing
CVE-2015-4504
Firefox < 40.0.3 - Buffer Over-read in QCMS ICC Profile Parser
CVE-2015-4501
Firefox < 40.0.3 - Memory Corruption and Remote Code Execution
CVE-2015-4500
Firefox < 40.0.3 - Memory Corruption and Remote Code Execution
CVE-2015-6678
Adobe Flash Player < 18.0.0.241 and 19.x < 19.0.0.185 - Buffer Overflow
CVE-2015-6677
Adobe Flash Player < 18.0.0.241 and 19.x < 19.0.0.185 - Remote Code Execution via Memory Corruption
CVE-2015-6676
Adobe AIR < 18.0.0.199 - Buffer Overflow
CVE-2015-5588
Adobe Flash Player <18.0.0.241 & 19.x <19.0.0.185 - Memory Corruption
CVE-2015-5587
Adobe Flash Player <18.0.0.241-11.2.202.521 - Buffer Overflow
CVE-2015-5582
Adobe Flash Player <18.0.0.241 & 19.x <19.0.0.185 - Memory Corruption
CVE-2015-5580
Adobe Flash Player <18.0.0.241 & 19.x <19.0.0.185 - Memory Corruption
CVE-2015-5579
Adobe Flash Player <18.0.0.241,19.x<19.0.0.185 - Memory Corruption
CVE-2015-5578
Adobe Flash Player <18.0.0.241,19.x <19.0.0.185 - Memory Corruption
CVE-2015-5577
Adobe Flash Player <18.0.0.241 & 19.x <19.0.0.185 - Memory Corruption
CVE-2015-5575
Adobe Flash Player <18.0.0.241,19.x<19.0.0.185 - Memory Corruption
CVE-2015-5567
Adobe Flash Player <18.0.0.241, 19.x <19.0.0.185 - RCE
CVE-2015-6749
vorbis-tools < 1.4.0 - Denial of Service via Crafted AIFF File
CVE-2015-5993
PLDT SpeedSurf 504AN/GAN9.8U26-4-TX-R6B018-PH.EN - Buffer Overflow
CVE-2015-5689
Symantec Ghost Solutions Suite <3.0 HF2 12.0.0.8010 - RCE
CVE-2015-6284
Cisco TelePresence Server < 4.1(2.33) - Denial of Service via Crafted URL
Details
Vulnerabilities 14,008
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits