CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,009 vulnerabilities with CWE-119
CVE-2015-2361
Hyper-V in Windows 8.1 and Windows Server 2012 R2 - Buffer Overflow via Guest OS System Data Structures
CVE-2015-1767
Microsoft Internet Explorer 9-11 - Remote Code Execution via Memory Corruption
CVE-2015-1738
Microsoft Internet Explorer 8 and 9 - Remote Code Execution via Memory Corruption
CVE-2015-1733
Microsoft Internet Explorer 10 and 11 - Remote Code Execution via Memory Corruption
CVE-2015-5147
Redcarpet < 3.3.2 - Stack-Based Buffer Overflow in HTML Renderer
CVE-2015-3258
cups-filters <1.0.70 - Buffer Overflow
CVE-2015-5118
Adobe Flash Player < 13.0.0.289 and 14.x-18.x < 18.0.0.203 - Remote Code Execution via Heap-Based Buffer Overflow
CVE-2015-4432
Adobe AIR < 18.0.0.144 - Remote Code Execution via Heap-Based Buffer Overflow
CVE-2015-4431
Adobe Flash Player < 11.2.202.468 and 13.0.0.302-18.x < 18.0.0.203 - Remote Code Execution via Memory Corruption
CVE-2015-3135
Adobe Flash Player <13.0.0.302,14.x-18.x<18.0.0.203,11.2.202.481 - ...
CVE-2015-3134
Adobe Flash Player <13.0.0.302 & 14.x-18.x - Memory Corruption
CVE-2015-3133
Adobe Flash Player <13.0.0.302,14.x<18.0.0.203 - Memory Corruption
CVE-2015-3130
Adobe Flash Player <13.0.0.302 & 14.x-18.x - Memory Corruption
CVE-2015-3123
Adobe Flash Player <13.0.0.302 & 14.x-18.x - Memory Corruption
CVE-2015-3117
Adobe Flash Player <13.0.0.302 & 14.x-18.x - Memory Corruption
CVE-2015-5380
Google V8 <0.12.6, io.js <1.8.3, 2.x <2.3.3 - Memory Corruption
CVE-2015-3955
Hospira LifeCare PCA Infusion System <5.0 - Buffer Overflow
CVE-2015-3281
HAProxy <1.5.14, 1.6-dev - Info Disclosure
CVE-2015-4647
Panasonic Security API ActiveX SDK < 8.10.14 - Stack-Based Buffer Overflow
CVE-2015-2740
Thunderbird < 38.1 - Buffer Overflow in nsXMLHttpRequest::AppendToResponseText
CVE-2015-2739
Firefox < 39.0 - Memory Corruption via ArrayBufferBuilder
CVE-2015-2729
Firefox < 39.0 and Firefox ESR < 38.1 - Out-of-Bounds Read in Web Audio AudioParamTimeline
CVE-2015-2726
Oracle Solaris < 38.1.0 - Memory Corruption
CVE-2015-2725
Novell Suse Linux Enterprise Software... - Memory Corruption
CVE-2015-2724
Oracle Solaris < 38.0.1 - Memory Corruption
Details
Vulnerabilities 14,009
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits