CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

13,962 vulnerabilities with CWE-119
CVE-2024-11237 HIGH
TP-Link VN020 F3v(T) TT_V6.2.1021 - Stack-Based Buffer Overflow in DHCP DISCOVER Packet Parser
CVSS 7.5
CVE-2024-8938 HIGH
Schneider Electric Modicon M340 CPU BMXP34* < SV3.65 - Remote Code Execution via Crafted Modbus Function Call
CVSS 8.1
CVE-2024-8937 MEDIUM
Schneider Electric Modicon M340 CPU BMXP34* < SV3.65 - Memory Corruption via Crafted Modbus Function Call
CVSS 6.5
CVE-2024-8534 HIGH
Citrix NetScaler ADC and Gateway 12.1-13.1 - Denial of Service via RDP Feature Memory Corruption
CVSS 8.1
CVE-2024-42442 HIGH
AMI APTIO V 5.0-5.037 - Remote Code Execution via Memory Buffer Overflow
CVSS 7.2
CVE-2024-33658 HIGH
AMI APTIO V 5.0-5.037 - Buffer Overflow via Local Attack
CVSS 7.8
CVE-2024-11061 HIGH
Tenda AC10 Firmware 16.03.10.13 - Stack-Based Buffer Overflow via timeZone Argument in fast_setting_wifi_set
CVSS 8.8
CVE-2024-11056 HIGH
Tenda AC10 16.03.10.13 - Stack-Based Buffer Overflow via WifiExtraSet wpapsk_crypto Argument
CVSS 8.8
CVE-2024-11048 HIGH
D-Link DI-8003 16.07.16A1 - Stack-Based Buffer Overflow via dbsrv_asp str Parameter
CVSS 8.8
CVE-2024-11047 HIGH
D-Link DI-8003 16.07.16A1 - Stack-Based Buffer Overflow in upgrade_filter.asp
CVSS 8.8
CVE-2024-50248 MEDIUM
Linux Kernel < 6.6.60 - Out-of-Bounds Memory Access in NTFS3 Attribute Enumeration
CVSS 5.5
CVE-2024-10964 MEDIUM
emqx neuron < 2.10.0 - Buffer Overflow in RESTful Plugin Handle Function
CVSS 6.3
CVE-2024-10559 MEDIUM
Airport Booking Management System 1.0 - Buffer Overflow in Details Function via Passport/Name Argument
CVSS 5.3
CVE-2024-9489 HIGH
AutoCAD 2025 < 2025.1.1 - Memory Corruption via Malicious DWG File
CVSS 7.8
CVE-2024-8600 HIGH
Autodesk AutoCAD - Memory Corruption
CVSS 7.8
CVE-2024-8599 HIGH
Autodesk AutoCAD - Memory Corruption
CVSS 7.8
CVE-2024-8598 HIGH
Autodesk AutoCAD - Memory Corruption
CVSS 7.8
CVE-2024-8597 HIGH
Autodesk AutoCAD - Memory Corruption
CVSS 7.8
CVE-2024-47046 HIGH
Simcenter Femap - Memory Corruption
CVSS 7.8
CVE-2024-45475 HIGH
Teamcenter Visualization <14.2.0.14, <14.3.0.12, <2312.0008 - Memor...
CVSS 7.8
CVE-2024-45474 HIGH
Tecnomatix Plant Simulation <V2302.0016-V2404.0005 - Memory Corruption
CVSS 7.8
CVE-2024-45473 HIGH
Teamcenter Visualization <14.2.0.14, <14.3.0.12, <2312.0008 - Memor...
CVSS 7.8
CVE-2024-45472 HIGH
Tecnomatix Plant Simulation <V2302.0016, Teamcenter Visualization <...
CVSS 7.8
CVE-2024-45468 HIGH
Tecnomatix Plant Simulation <V2302.0016-V2404.0005 - Memory Corruption
CVSS 7.8
CVE-2024-45467 HIGH
Teamcenter Visualization <14.2.0.14, <14.3.0.12, <2312.0008 - Memor...
CVSS 7.8
Details
Vulnerabilities 13,962
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits