CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,011 vulnerabilities with CWE-119
CVE-2015-3329
PHP <5.4.40, <5.5.24, <5.6.8 - Buffer Overflow
CVE-2015-3307
PHP < 5.4.40 - Heap Metadata Corruption via Crafted Tar Archive
CVE-2015-2783
PHP < 5.4.40, 5.5.x < 5.5.24, 5.6.x < 5.6.8 - Buffer Over-Read via Crafted Phar Archive Metadata
CVE-2015-3905
t1utils <1.39 - Buffer Overflow
CVE-2015-4004
Linux Kernel 3.4-4.0.5 - Denial of Service via OZWPAN Driver Packet Parsing
CVE-2015-4002
Linux Kernel < 3.4.109 - Buffer Overflow in OZWPAN Driver via Crafted Packet
CVE-2015-1000
Moxa SoftCMS <1.3 - Buffer Overflow
CVE-2015-2282
SAP GUI - Stack-based Buffer Overflow in LZC Decompression
CVE-2015-2278
SAP GUI - Denial of Service via LZH Decompression Out-of-Bounds Read
CVE-2015-4060
Wavelink ConnectPro - Remote Code Execution via Large HTTP Header
CVE-2015-4059
Wavelink Terminal Emulation - Remote Code Execution via Large HTTP Header
CVE-2015-3331
Linux kernel <3.19.3 - Buffer Overflow
CVE-2015-2666
Linux Kernel < 4.0 - Stack-Based Buffer Overflow in Intel Microcode Header Parsing
CVE-2015-3906
Wireshark 1.12.x < 1.12.5 - Denial of Service via Android Logcat Parser
CVE-2015-3815
Wireshark 1.12.x < 1.12.5 - Denial of Service via Android Logcat Payload Length Check
CVE-2015-0986
Moxa VPort ActiveX SDK Plus <2.8 - Buffer Overflow
CVE-2015-4092
SAP Afaria 7.00.6620.2 SP5 - Buffer Overflow in XComms Process
CVE-2015-2946
ocf/sxf_common_library < 3.21 - Stack-based Buffer Overflow via Crafted CAD File
CVE-2015-2110
HP LoadRunner 11.52 - Remote Code Execution via Buffer Overflow
CVE-2015-0120
IBM Tivoli Storage Manager FastBack < 6.1.11.1 - Buffer Overflow in FastBackMount Process
CVE-2015-1896
IBM Tivoli Storage Manager FastBack 6.1 - Remote Code Execution via Stack-Based Buffer Overflow
CVE-2015-3036
KCodes NetUSB - Stack-Based Buffer Overflow via Long Computer Name
CVE-2015-1903
IBM Domino 8.5-9.0 - Remote Code Execution via Crafted BMP Image
CVE-2015-1902
IBM Domino 8.5-9.0 - Remote Code Execution via Crafted BMP Image
CVE-2015-1257
Google Chrome <43.0.2357.65 - DoS
Details
Vulnerabilities 14,011
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits