CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

13,962 vulnerabilities with CWE-119
CVE-2022-34422 HIGH
Dell PowerEdge and Precision BIOS - Unauthenticated Arbitrary Code Execution or Denial of Service
CVSS 7.5
CVE-2022-34421 HIGH
Dell PowerEdge and Precision BIOS - Arbitrary Code Execution or Denial of Service via SMM Communication Buffer
CVSS 7.5
CVE-2022-34420 HIGH
Dell PowerEdge and Precision BIOS - Authenticated Arbitrary Code Execution or DoS via SMM
CVSS 7.5
CVE-2022-34419 HIGH
Dell PowerEdge and Precision BIOS - Authenticated Arbitrary Code Execution or Denial of Service
CVSS 7.5
CVE-2022-34418 HIGH
Dell PowerEdge and Precision BIOS - Unauthenticated Arbitrary Code Execution or Denial of Service
CVSS 7.5
CVE-2022-34417 HIGH
Dell PowerEdge and Precision BIOS - Arbitrary Code Execution or Denial of Service via SMM Communication Buffer
CVSS 7.5
CVE-2022-34416 HIGH
Dell PowerEdge and Precision BIOS - Arbitrary Code Execution or Denial of Service via SMM Communication Buffer
CVSS 7.5
CVE-2022-34415 HIGH
Dell PowerEdge and Precision BIOS - Arbitrary Code Execution or Denial of Service
CVSS 7.5
CVE-2022-34414 HIGH
Dell PowerEdge and Precision BIOS - Arbitrary Code Execution or Denial of Service via SMM Communication Buffer
CVSS 7.5
CVE-2022-34413 HIGH
Dell PowerEdge and Precision BIOS - Arbitrary Code Execution or Denial of Service via SMM Communication Buffer
CVSS 7.5
CVE-2022-34412 HIGH
Dell PowerEdge and Precision BIOS - Arbitrary Code Execution or Denial of Service via SMM Communication Buffer
CVSS 7.5
CVE-2022-34411 HIGH
Dell PowerEdge/Precision BIOS Authenticated Arbitrary Code Execution/DoS via SMM
CVSS 7.5
CVE-2022-34410 HIGH
Dell PowerEdge and Precision BIOS - Arbitrary Code Execution or Denial of Service
CVSS 7.5
CVE-2022-34409 HIGH
Dell PowerEdge and Precision BIOS - Arbitrary Code Execution or Denial of Service via SMM Communication Buffer
CVSS 7.5
CVE-2022-34408 HIGH
Dell PowerEdge and Precision BIOS - Arbitrary Code Execution or Denial of Service via SMM Communication Buffer
CVSS 7.5
CVE-2022-34407 HIGH
Dell PowerEdge and Precision BIOS - Arbitrary Code Execution or Denial of Service via SMM Communication Buffer
CVSS 7.5
CVE-2022-34406 HIGH
Dell PowerEdge and Precision BIOS - Arbitrary Code Execution or Denial of Service via SMM Communication Buffer
CVSS 7.5
CVE-2022-47453 MEDIUM
Android - Denial of Service in WCN Service
CVSS 5.5
CVE-2022-25709 HIGH
Qualcomm Modem Firmware - Memory Corruption
CVSS 8.4
CVE-2022-25694 HIGH
Qualcomm Modem Firmware - Memory Corruption via Out-of-Range Pointer Offset in UIM
CVSS 8.4
CVE-2022-34841 MEDIUM
Intel Media Software Development Kit < 22.2.2 - Authenticated Privilege Escalation via Buffer Overflow
CVSS 5.7
CVE-2022-47977 HIGH
Siemens JT Open < 11.2.3.0 and JT Utilities < 13.2.3.0 - Memory Corruption via Crafted JT File Parsing
CVSS 7.8
CVE-2022-33246 MEDIUM
Qualcomm APQ8096AU Firmware - Memory Corruption in Audio via Invalid Session ID
CVSS 6.7
CVE-2022-34377 LOW
Dell PowerEdge and Precision BIOS - Arbitrary Code Execution or Denial of Service via SMM Communication Buffer
CVSS 1.9
CVE-2022-34376 LOW
Dell PowerEdge and Precision BIOS - Denial of Service via SMI Manipulation
CVSS 3.9
Details
Vulnerabilities 13,962
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits