CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,011 vulnerabilities with CWE-119
CVE-2014-8102
X.Org X Server < 1.16.3 - Authenticated Memory Corruption via XFixes Extension
CVE-2014-8101
X.Org X Server < 1.16.3 - Authenticated Denial of Service or Remote Code Execution via RandR Extension
CVE-2014-8100
X.Org X Server < 1.16.3 - Authenticated Memory Corruption via Render Extension
CVE-2014-8099
X.Org X Server < 1.16.3 - Authenticated Memory Corruption via XVideo Extension
CVE-2014-8098
Debian Linux < 1.16.2.99.901 - Memory Corruption
CVE-2014-8097
X.Org X Server < 1.16.3 - Authenticated Memory Corruption via DBE Extension
CVE-2014-8096
X.Org X Server < 1.16.3 - Authenticated Memory Corruption via XC-MISC SProcXCMiscGetXIDList
CVE-2014-8095
Debian Linux < 1.16.2.99.901 - Memory Corruption
CVE-2014-9319
FFMpeg <2.1.6, <2.2.x-<2.3.x, <2.4.x-2.4.4 - DoS
CVE-2014-9318
FFMpeg <2.1.6, 2.2.x-2.3.x, 2.4.x<2.4.4 - DoS
CVE-2014-9317
FFMpeg <2.1.6, <2.3.x, <2.4.4 - DoS
CVE-2014-9316
FFMpeg <2.1.6, <2.3.x, <2.4.4 - DoS
CVE-2014-9275
unrtf < 0.21.6 - Denial of Service and Possible Remote Code Execution via Crafted RTF File
CVE-2014-9274
unrtf < 0.21.6 - Denial of Service and Possible Remote Code Execution via Malformed RTF File
CVE-2014-8504
Canonical Ubuntu Linux < 2.24 - Memory Corruption
CVE-2014-8503
Fedora < 2.24 - Memory Corruption
CVE-2014-8502
Fedora < 2.24 - Memory Corruption
CVE-2014-8501
GNU binutils < 2.24 - Denial of Service via Crafted PE Executable AOUT Header
CVE-2014-8484
GNU binutils < 2.24 - Denial of Service via Small S-record in srec_scan
CVE-2014-9273
Hivex <1.3.11 - Remote Code Execution
CVE-2014-9267
PTC IsoView - Heap-Based Buffer Overflow via ViewPort Property
CVE-2014-9265
Samsung SmartViewer - Buffer Overflow
CVE-2014-9263
3S Pocketnet Tech VMS - Buffer Overflow
CVE-2014-8106
QEMU < 2.2.0 - Heap-Based Buffer Overflow in Cirrus VGA Emulator
CVE-2014-4880
Hikvision DVR DS-7204 Firmware 2.2.10 build 131009 - Remote Code Execution via RTSP PLAY Authorization Header
Details
Vulnerabilities 14,011
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits