CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,011 vulnerabilities with CWE-119
CVE-2014-9656
FreeType <2.5.4 - DoS
CVE-2014-9203
HART Device Type Manager <2.00.1 - Buffer Overflow
CVE-2014-9636
unzip 6.0 - Denial of Service via Malformed Extra Field in STORED Method Zip Archive
CVE-2014-9328
ClamAV <0.98.6 - Buffer Overflow
CVE-2014-9200
Schneider Electric Unity Pro - Buffer Overflow
CVE-2014-9161
Adobe Reader/Acrobat <10.1.13-11.0.10 - DoS
CVE-2014-8830
macOS < 10.10.2 - Remote Code Execution via Crafted Collada File
CVE-2014-8829
macOS < 10.10.2 - Remote Code Execution via SceneKit Out-of-Bounds Write
CVE-2014-4487
Apple <8.1.3, <10.10.2, <7.0.3 - RCE
CVE-2014-4485
Apple Foundation <8.1.3-10.10.2-7.0.3 - RCE
CVE-2014-4483
Apple iOS <8.1.3, OS X <10.10.2, TV <7.0.3 - Buffer Overflow
CVE-2014-4479
Apple Safari < 6.2.3 - Remote Code Execution via Memory Corruption
CVE-2014-4477
WebKit - Memory Corruption
CVE-2014-4476
Apple Safari < 6.2.2 - Remote Code Execution via Memory Corruption
CVE-2014-8920
IBM i Access <7.1 - Buffer Overflow
CVE-2014-8154
Vala 0.26.0 and 0.26.1 - Heap-Based Buffer Overflow in Gst.MapInfo
CVE-2014-5211
Attachmate Reflection FTP Client - Stack-based Buffer Overflow via PWD Response
CVE-2014-8158
JasPer < 1.900.1 - Stack-Based Buffer Overflow via Crafted JPEG 2000 Image
CVE-2014-9640
vorbis-tools 1.4.0 - Denial of Service via Crafted Raw File
CVE-2014-7947
Google Chrome < 40.0.2214.91 - Denial of Service via OpenJPEG Out-of-Bounds Read
CVE-2014-7946
Google Chrome < 40.0.2214.85 - Denial of Service via Table Layout Font Handling
CVE-2014-7945
Google Chrome < 40.0.2214.85 - Denial of Service via OpenJPEG Out-of-Bounds Read
CVE-2014-7944
Google Chrome < 40.0.2214.91 - Denial of Service via PDFium sycc422_to_rgb Out-of-Bounds Read
CVE-2014-7943
Canonical Ubuntu Linux < 40.0.2214.85 - Memory Corruption
CVE-2014-7941
Chromium < 40.0.2214.91 - Denial of Service via Out-of-Bounds Read in SelectionOwner
Details
Vulnerabilities 14,011
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits