CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,011 vulnerabilities with CWE-119
CVE-2014-4414
Apple WebKit - Crafted Web Site Memory Corruption Code Execution
CVE-2014-4413
Apple WebKit - Crafted Web Site Memory Corruption Code Execution
CVE-2014-4412
tvOS < 6.2 - Remote Code Execution via Crafted Web Site
CVE-2014-4411
Apple iPhone OS < 7.1.2 and macOS < 10.9.4 and tvOS < 6.2 - Remote Code Execution via WebKit Memory Corruption
CVE-2014-4410
Apple WebKit - Crafted Web Site Memory Corruption Code Execution
CVE-2014-4408
Apple iOS <8, Apple TV <7 - Privilege Escalation/DoS
CVE-2014-4381
Apple iOS < 8 and Apple TV < 7 - Remote Code Execution via Libnotify Write Operation
CVE-2014-4380
Apple tvOS < 6.2 - Memory Corruption in IOHIDFamily Kernel Extension
CVE-2014-4379
Apple tvOS < 6.2 - Kernel Pointer Leak via IOHIDFamily Function
CVE-2014-4378
Apple iOS <8, Apple TV <7 - Info Disclosure/DoS
CVE-2014-0567
Adobe Acrobat and Reader - Heap-based Buffer Overflow
CVE-2014-0566
Adobe Acrobat and Reader 10.x < 10.1.15 and 15.006.30033-15.006.30060 - Remote Code Execution
CVE-2014-0565
Adobe Acrobat and Reader 10.x < 10.1.12 and 11.x < 11.0.09 - Remote Code Execution via Memory Corruption
CVE-2014-0563
Adobe Acrobat and Reader 10.x-10.1.11 and 11.x-11.0.08 - Denial of Service via Memory Corruption
CVE-2014-0561
Adobe Acrobat and Reader - Remote Code Execution via Heap-Based Buffer Overflow
CVE-2014-5407
Schneider Electric VAMPSET < 2.2.136 - Denial of Service via Malformed Setting or Disturbance Recording File
CVE-2014-0993
Embarcadero Delphi and C++ Builder XE6 - Buffer Overflow in Vcl.Graphics.TPicture.Bitmap
CVE-2014-6270
Squid - Heap-Based Buffer Overflow via Crafted UDP SNMP Request
CVE-2014-4111
Microsoft Internet Explorer 6-11 - Memory Corruption
CVE-2014-4110
Microsoft Internet Explorer 6-11 - Memory Corruption
CVE-2014-4109
Microsoft Internet Explorer 6-11 - Memory Corruption
CVE-2014-4108
Microsoft Internet Explorer 6-11 - Memory Corruption
CVE-2014-4107
Microsoft Internet Explorer 6-11 - Memory Corruption
CVE-2014-4106
Microsoft Internet Explorer 6-11 - Memory Corruption
CVE-2014-4105
Microsoft Internet Explorer 6-11 - Memory Corruption
Details
Vulnerabilities 14,011
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits