CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,011 vulnerabilities with CWE-119
CVE-2014-9937 HIGH
Android TrustZone - Buffer Overflow in DRM Routine
CVSS 7.8
CVE-2014-9931 HIGH
Android - Buffer Overflow via OEM App Region Size Customization
CVSS 7.8
CVE-2014-9654 CRITICAL
ICU <2014-12-03 - Memory Corruption
CVSS 9.8
CVE-2014-4706 HIGH
Huawei Campus S3700HI V200R001C00SPC300 and others - Denial of Service via Heap Overflow
CVSS 7.5
CVE-2014-3931 CRITICAL KEV
Multi-Router Looking Glass < 5.4.1 - Arbitrary Memory Write and Memory Corruption
CVSS 9.8
CVE-2014-9825 HIGH
ImageMagick < 6.9.4-0 - Heap-Based Buffer Overflow via Crafted PSD File
CVSS 7.8
CVE-2014-9824 HIGH
ImageMagick < 6.9.4-0 - Heap-Based Buffer Overflow via Crafted PSD File
CVSS 7.8
CVE-2014-9823 HIGH
ImageMagick < 6.9.4-0 - Heap-Based Buffer Overflow via Crafted Palm File
CVSS 7.8
CVE-2014-9822 HIGH
ImageMagick < 6.9.4-0 - Heap-Based Buffer Overflow via Crafted Quantum File
CVSS 7.8
CVE-2014-9821 HIGH
ImageMagick < 6.9.4-0 - Heap-Based Buffer Overflow via Crafted XPM File
CVSS 7.8
CVE-2014-9820 HIGH
ImageMagick < 6.9.4-0 - Heap-Based Buffer Overflow via Crafted PNM File
CVSS 7.8
CVE-2014-9819 HIGH
ImageMagick < 6.9.4-0 - Heap-Based Buffer Overflow via Crafted Palm File
CVSS 7.8
CVE-2014-9817 HIGH
ImageMagick < 6.9.4-0 - Heap-Based Buffer Overflow via Crafted PDB File
CVSS 7.8
CVE-2014-6440 CRITICAL
VideoLAN VLC media player <2.1.5 - RCE/DoS
CVSS 9.8
CVE-2014-9840 MEDIUM
ImageMagick 6.8.9-9 - Denial of Service via Crafted Palm File
CVSS 5.5
CVE-2014-9839 HIGH
ImageMagick 6.8.9-9 - Denial of Service via Out-of-Bounds Access in Colormap Handling
CVSS 7.5
CVE-2014-9836 MEDIUM
ImageMagick 6.8.9-9 - Denial of Service via Crafted XPM File
CVSS 5.5
CVE-2014-9835 HIGH
ImageMagick <6.8.9-9 - Buffer Overflow
CVSS 7.8
CVE-2014-9834 HIGH
ImageMagick 6.8.9-9 - Buffer Overflow
CVSS 7.8
CVE-2014-9833 HIGH
ImageMagick <6.8.9-9 - Buffer Overflow
CVSS 7.8
CVE-2014-9832 HIGH
ImageMagick <6.8.9-9 - Buffer Overflow
CVSS 7.8
CVE-2014-9939 CRITICAL
GNU Binutils < 2.25 - Stack Buffer Overflow in ihex.c
CVSS 9.8
CVE-2014-9847 CRITICAL
ImageMagick 6.8.9.9 - Info Disclosure
CVSS 9.8
CVE-2014-9846 CRITICAL
ImageMagick 6.8.9.9 - Buffer Overflow
CVSS 9.8
CVE-2014-9845 MEDIUM
ImageMagick - Denial of Service
CVSS 5.5
Details
Vulnerabilities 14,011
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits