CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,009 vulnerabilities with CWE-119
CVE-2015-3792
QuickTime 7 in Apple OS X <10.10.5 - RCE/DoS
CVE-2015-3791
QuickTime 7 in Apple OS X <10.10.5 - RCE/DoS
CVE-2015-3790
QuickTime 7 - Remote Code Execution or Denial of Service via Crafted File
CVE-2015-3789
QuickTime 7 in Apple OS X <10.10.5 - RCE/DoS
CVE-2015-3788
QuickTime 7 in Apple OS X <10.10.5 - RCE/DoS
CVE-2015-3783
macOS X < 10.10.5 - Remote Code Execution in SceneKit
CVE-2015-3779
QuickTime 7 in Apple OS X <10.10.5 - RCE/DoS
CVE-2015-3777
Apple OS X <10.10.5 - Buffer Overflow
CVE-2015-3776
Apple iOS <8.4.1 & OS X <10.10.5 - RCE/DoS
CVE-2015-3773
Apple macOS X < 10.10.5 - Remote Code Execution via SMB Client Memory Corruption
CVE-2015-3772
IOFireWireFamily <10.10.5 - Privilege Escalation/DoS
CVE-2015-3771
IOFireWireFamily <10.10.5 - Privilege Escalation/DoS
CVE-2015-3770
IOGraphics <10.10.5 - Memory Corruption
CVE-2015-3769
IOFireWireFamily <10.10.5 - Privilege Escalation/DoS
CVE-2015-3765
QuickTime 7 in Apple OS X <10.10.5 - RCE/DoS
CVE-2015-3749
iTunes < 12.2 - Remote Code Execution via Memory Corruption
CVE-2015-3748
iTunes < 12.2 - Remote Code Execution via Crafted Web Site
CVE-2015-3747
WebKit in Apple iOS < 8.4.1 and Safari < 6.2.8 - Remote Code Execution via Crafted Web Site
CVE-2015-3746
iTunes < 12.2 - Remote Code Execution via Crafted Web Site
CVE-2015-3745
iTunes < 12.2 - Remote Code Execution via Crafted Web Site
CVE-2015-3744
iTunes < 12.2 - Remote Code Execution via Crafted Web Site
CVE-2015-3743
WebKit in Apple iOS < 8.4.1 and Safari < 6.2.8 - Remote Code Execution via Crafted Web Site
CVE-2015-3742
WebKit in Apple iTunes < 12.2 - Remote Code Execution via Crafted Web Site
CVE-2015-3741
WebKit in Apple iTunes < 12.2 - Remote Code Execution via Crafted Web Site
CVE-2015-3740
WebKit in Apple iTunes < 12.2 - Remote Code Execution via Crafted Web Site
Details
Vulnerabilities 14,009
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits