CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,011 vulnerabilities with CWE-119
CVE-2013-7185 HIGH
PotPlayer <1.5.40688 - Memory Corruption
CVSS 7.8
CVE-2013-5571 MEDIUM
HMailServer <5.3.x - Memory Corruption
CVSS 5.9
CVE-2013-4532 HIGH
Qemu 1.1.2+dfsg-2.1+dfsg - Buffer Overflow
CVSS 7.8
CVE-2013-7087 CRITICAL
ClamAV < 0.97.7 - Heap Memory Corruption via WWPack
CVSS 9.8
CVE-2013-2739 CRITICAL
readymedia < 1.1.0 - Heap-Based Buffer Overflow
CVSS 9.8
CVE-2013-3947 HIGH
AhnLab V3 Internet Security 8.0.7.5 - Local Privilege Escalation via MedCoreD.sys IOCTL Buffer Overflow
CVSS 7.8
CVE-2013-3553 HIGH
Nitro Pro < 7.5.0.22 and Nitro Reader < 2.5.0.36 - Remote Code Execution via Crafted PDF File
CVSS 7.8
CVE-2013-3552 HIGH
Nitro Pro < 7.5.0.22 and Nitro Reader < 2.5.0.36 - Remote Code Execution via Crafted PDF File
CVSS 7.8
CVE-2013-4659 CRITICAL
ASUS RT-AC66U and TRENDnet TEW-812DRU Firmware - Remote Code Execution via ACSD TCP Port 5916 Buffer Overflow
CVSS 9.8
CVE-2013-7459 CRITICAL
Python Cryptography Toolkit - Buffer Overflow
CVSS 9.8
CVE-2013-4312 MEDIUM
Linux Kernel < 4.4.1 - Denial of Service via File Descriptor Exhaustion
CVSS 6.2
CVE-2013-7443
SQLite <3.8.2 - DoS
CVE-2013-7438
pbm212030 - Heap-Based Buffer Overflow via Crafted PBM Image
CVE-2013-7420
Hancom Office 2010 SE - Buffer Overflow
CVE-2013-7401
c-icap - Denial of Service via Malformed ICAP Request URI
CVE-2013-4542
QEMU <1.7.2 - Remote Code Execution
CVE-2013-4541
QEMU <1.7.2 - Remote Code Execution
CVE-2013-4540
QEMU < 1.7.2 - Remote Code Execution via Large GPIO Values in SaveVM Image
CVE-2013-4539
QEMU < 1.7.2 - Buffer Overflow via Crafted Savevm Image
CVE-2013-4538
QEMU < 1.7.2 - Buffer Overflow in ssd0323_load Function
CVE-2013-4534
QEMU < 1.7.2 - Buffer Overflow in hw/intc/openpic.c via IRQDest Elements
CVE-2013-4533
QEMU < 1.7.2 - Buffer Overflow via Crafted savevm Image
CVE-2013-4531
QEMU < 1.7.2 - Buffer Overflow via Negative cpreg_vmstate_array_len in savevm Image
CVE-2013-4530
QEMU < 1.7.2 - Buffer Overflow in PL022 SSI Controller via SaveVM Image
CVE-2013-4529
QEMU < 1.7.2 - Buffer Overflow via Large log_num Value in savevm Image
Details
Vulnerabilities 14,011
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits