CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,011 vulnerabilities with CWE-119
CVE-2014-1278
iPhone OS < 7.1 and tvOS < 6.1 - Local Privilege Escalation via ptmx_get_ioctl Function
CVE-2014-1275
iPhone OS < 7.1 and tvOS < 6.1 - Remote Code Execution via JPEG2000 Data in PDF
CVE-2014-0784
Yokogawa CENTUM CS 3000 < R3.09.50 - Remote Code Execution via Crafted TCP Packet
CVE-2014-0783
Yokogawa CENTUM CS 3000 < R3.09.50 - Remote Code Execution via Crafted TCP Packet
CVE-2014-0781
Yokogawa CENTUM CS 3000 < R3.09.50 - Remote Code Execution via Crafted UDP Packets
CVE-2014-0779
Schneider Electric ClearSCADA - Denial of Service via Crafted OPF File
CVE-2014-0505
Adobe Shockwave Player <12.1.0.150 - Memory Corruption
CVE-2014-2240
FreeType < 2.5.3 - Stack-Based Buffer Overflow via Stem Hints in Font File
CVE-2014-0324
Microsoft Internet Explorer 8-11 - Code Injection
CVE-2014-0321
Microsoft Internet Explorer 10-11 - Code Injection
CVE-2014-0314
Microsoft Internet Explorer <10 - Code Injection
CVE-2014-0313
Microsoft Internet Explorer 10-11 - Code Injection
CVE-2014-0312
Microsoft Internet Explorer 8-11 - Code Injection
CVE-2014-0311
Microsoft Internet Explorer 6-11 - Code Injection
CVE-2014-0309
Microsoft Internet Explorer <10 - Code Injection
CVE-2014-0308
Microsoft Internet Explorer 8-11 - Code Injection
CVE-2014-0307
Microsoft Internet Explorer 9 - Use After Free
CVE-2014-0306
Microsoft Internet Explorer <9 - Code Injection
CVE-2014-0305
Microsoft Internet Explorer 6-11 - Code Injection
CVE-2014-0304
Microsoft Internet Explorer 11 - Memory Corruption
CVE-2014-0303
Microsoft Internet Explorer <9 - Code Injection
CVE-2014-0302
Microsoft Internet Explorer <9 - Code Injection
CVE-2014-0299
Microsoft Internet Explorer 6-11 - Code Injection
CVE-2014-0298
Microsoft Internet Explorer <11 - Code Injection
CVE-2014-0297
Microsoft Internet Explorer 8-11 - Code Injection
Details
Vulnerabilities 14,011
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits