CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,011 vulnerabilities with CWE-119
CVE-2014-3182
Linux Kernel < 3.16.2 - Memory Corruption in Logitech Unifying Receiver Event Handler
CVE-2014-3181
Linux Kernel 2.6.37-3.2.63 - Buffer Overflow in Magic Mouse HID Driver
CVE-2014-3361
Cisco IOS 15.0-15.4 - Denial of Service via SIP ALG Module
CVE-2014-3356
Cisco IOS XE < 3.3.1XO, 3.7.6S, 3.10.1S DoS via Malformed RSVP Packets
CVE-2014-3355
Cisco IOS XE < 3.3.1XO, 3.7.6S, 3.10.1S DoS via Malformed RSVP Packets
CVE-2014-3635
D-Bus < 1.6.24, 1.8.x < 1.8.8 - DoS or RCE via File Descriptor Limit Bypass
CVE-2014-6431
Wireshark <1.10.10, <1.12.1 - Buffer Overflow
CVE-2014-6428
Wireshark 1.10.x-1.10.9 and 1.12.x-1.12.0 - Denial of Service in SES Dissector
CVE-2014-6427
Wireshark 1.10.x < 1.10.10 and 1.12.x < 1.12.1 - Denial of Service via RTSP Token Parsing
CVE-2014-6425
Wireshark <1.12.1 - Buffer Overflow
CVE-2014-6424
Wireshark 1.10.x < 1.10.10 and 1.12.x < 1.12.1 - Denial of Service via Netflow Dissector Uninitialized Memory Read
CVE-2014-6422
Wireshark 1.10.x < 1.10.10 - Denial of Service via SDP Dissector Duplicate Hashtable
CVE-2014-0992
Advantech WebAccess 7.2 - Remote Code Execution via Password Parameter
CVE-2014-0991
Advantech WebAccess 7.2 - Remote Code Execution via Projectname Parameter
CVE-2014-0990
Advantech WebAccess 7.2 - Remote Code Execution via UserName Parameter
CVE-2014-0989
Advantech WebAccess 7.2 - Remote Code Execution via AccessCode2 Parameter
CVE-2014-0988
Advantech WebAccess 7.2 - Remote Code Execution via AccessCode Parameter
CVE-2014-0987
Advantech WebAccess 7.2 - Remote Code Execution via NodeName2 Parameter
CVE-2014-0986
Advantech WebAccess 7.2 - Remote Code Execution via GotoCmd Parameter
CVE-2014-0985
Advantech WebAccess 7.2 - Remote Code Execution via NodeName Parameter
CVE-2014-4402
macOS < 10.9.5 - Remote Code Execution via IOAcceleratorFamily Read Operation
CVE-2014-4393
Intel Graphics Driver <10.9.5 - RCE
CVE-2014-4350
macOS < 10.9.5 - Remote Code Execution via Crafted MIDI File
CVE-2014-1391
macOS X < 10.9.5 - Remote Code Execution via Crafted RLE-Encoded Movie File
CVE-2014-4415
Apple WebKit - Crafted Web Site Memory Corruption Code Execution
Details
Vulnerabilities 14,011
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits