CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

13,962 vulnerabilities with CWE-119
CVE-2023-31355 MEDIUM
AMD EPYC 7003 Series Firmware < milanpi_1.0.0.d - Memory Read via UMC Seed Overwrite
CVSS 6.0
CVE-2023-43554 HIGH
Qualcomm FastConnect and AQT1000 Firmware - Memory Corruption in FastRPC
CVSS 8.4
CVE-2023-52548 HIGH
Huawei Matebook D16 CREM-WXX9 BIOS v2.26 - Arbitrary Memory Corruption in ThisiServicesSmm SMM Module
CVSS 7.8
CVE-2023-48368 MEDIUM
Intel Media SDK - Denial of Service via Improper Input Validation
CVSS 5.9
CVE-2023-47169 LOW
Intel Media SDK - Denial of Service via Improper Buffer Restrictions
CVSS 3.3
CVE-2023-45221 MEDIUM
Intel Media SDK - Authenticated Privilege Escalation via Improper Buffer Restrictions
CVSS 4.8
CVE-2023-28383 MEDIUM
Intel(R) BIOS PPAM - Privilege Escalation
CVSS 6.1
CVE-2023-51608 HIGH
Kofax Power PDF - Memory Corruption RCE
CVSS 7.8
CVE-2023-50187 HIGH
Trimble SketchUp Viewer < 23.2.101 - Remote Code Execution via SKP File Parsing
CVSS 7.8
CVE-2023-42078 HIGH
PDF-XChange Editor - Remote Code Execution via JP2 File Parsing
CVSS 7.8
CVE-2023-42047 HIGH
PDF-XChange Editor - Remote Code Execution via JP2 File Parsing Memory Corruption
CVSS 7.8
CVE-2023-42043 HIGH
PDF-XChange Editor - Remote Code Execution via PDF File Parsing
CVSS 7.8
CVE-2023-42037 HIGH
Kofax Power PDF < 5.0.0.12 - Remote Code Execution via PDF File Parsing
CVSS 7.8
CVE-2023-42036 HIGH
Kofax Power PDF < 5.0.0.12 - Remote Code Execution via PDF File Parsing
CVSS 7.8
CVE-2023-39486 HIGH
PDF-XChange Editor - Remote Code Execution via JP2 File Parsing Memory Corruption
CVSS 7.8
CVE-2023-38084 HIGH
Kofax Power PDF < 5.0.0.10 - Remote Code Execution via PDF File Parsing
CVSS 7.8
CVE-2023-38082 HIGH
Kofax Power PDF < 5.0.0.10 - Remote Code Execution via GIF File Parsing
CVSS 7.8
CVE-2023-37333 HIGH
Kofax Power PDF < 5.0.0.11 - Remote Code Execution via PCX File Parsing
CVSS 7.8
CVE-2023-37332 HIGH
Kofax Power PDF < 5.0.0.11 - Remote Code Execution via PNG File Parsing
CVSS 7.8
CVE-2023-4235 HIGH
ofono < 2.1 - Stack Overflow in SMS Decoding
CVSS 8.1
CVE-2023-4234 HIGH
ofono < 2.1 - Stack Overflow in SMS Decoding via decode_submit_report()
CVSS 8.1
CVE-2023-4233 HIGH
ofono < 2.1 - Stack Overflow in SMS PDU Decoding
CVSS 8.1
CVE-2023-4232 HIGH
ofono < 2.1 - Stack Overflow in SMS Status Report Decoding
CVSS 8.1
CVE-2023-5394 HIGH
Honeywell Experion Server - Remote Code Execution via GCL Hostname Stack Overflow
CVSS 7.4
CVE-2023-2794 HIGH
ofono < 2.5 - Stack Overflow in SMS decode_deliver() Function
CVSS 8.1
Details
Vulnerabilities 13,962
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits