CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,011 vulnerabilities with CWE-119
CVE-2015-2153
tcpdump < 4.7.0 - Denial of Service via Crafted RPKI-RTR PDU Header Length
CVE-2015-1802
libXfont < 1.4.9 and 1.5.x < 1.5.1 - Authenticated Denial of Service via BDF Font Property Count
CVE-2015-0292
OpenSSL < 0.9.8za, 1.0.0 < 1.0.0m, 1.0.1 < 1.0.1h - Memory Corruption via Base64 Decoding
CVE-2015-2281
Fortinet Single Sign On - Stack-based Buffer Overflow via Large PROCESS_HELLO Message
CVE-2015-0979
SCADA Engine BACnet OPC Server < 2.1.359.22 - Remote Code Execution via SOAP Web Interface
CVE-2015-1065
Apple iOS <8.2 & Apple OS X <=10.10.2 - Buffer Overflow
CVE-2015-0100
Microsoft Internet Explorer 8 - Remote Code Execution via Memory Corruption
CVE-2015-0074
Microsoft Windows Adobe Font Driver - Denial of Service via Crafted Website or File
CVE-2015-2097
WebGate Embedded Standard Protocol SDK - Buffer Overflows in LoadImage, LoadImageEx, ChangePassword, Connect, and AddID
CVE-2015-2095
WebGate eDVR Manager - Remote Code Execution via WESPPTZ ActiveX SetConnectInfo
CVE-2015-2094
WebGate WinRDS - Stack-Based Buffer Overflow in WESPPlaybackCtrl
CVE-2015-2093
WebGate WebEyeAudio - Stack-Based Buffer Overflow via Connect Function
CVE-2015-2092
Agilent Technologies Feature Extraction - Remote Code Execution via AnnotationX.AnnList.1 ActiveX Insert Function
CVE-2015-2061
PTC Creo View - Heap-based Buffer Overflow via Browser Plugin Attribute
CVE-2015-1232
Google Chrome < 40.0.2214.115 - Out-of-Bounds Write in MidiManagerUsb::DispatchSendMidiData
CVE-2015-1225
Google Chrome < 40.0.2214.115 - Denial of Service via PDFium Out-of-Bounds Read
CVE-2015-1215
Skia <41.0.2272.76 - DoS
CVE-2015-1213
Chrome < 40.0.2214.115 - Out-of-Bounds Write in SkBitmap::ReadRawPixels
CVE-2015-0829
Canonical Ubuntu Linux < 35.0.1 - Memory Corruption
CVE-2015-0827
Firefox < 36.0 - Heap-Based Buffer Overflow via Malformed SVG Graphic
CVE-2015-0826
Firefox < 35.0.1 - Remote Code Execution via CSS Token Sequence
CVE-2015-0825
Canonical Ubuntu Linux < 35.0.1 - Memory Corruption
CVE-2015-0824
Opensuse < 35.0.1 - Memory Corruption
CVE-2015-1572
libext2fs <1.42.12 - Buffer Overflow
CVE-2015-0555
Samsung iPOLiS Device Manager 1.12.2 - Remote Code Execution via ReadConfigValue or WriteConfigValue Function
Details
Vulnerabilities 14,011
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits