VYPR

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

ClassStableLikelihood: High

Description

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Hierarchy (View 1000)

Related attack patterns (CAPEC)

CAPEC-10 · CAPEC-100 · CAPEC-123 · CAPEC-14 · CAPEC-24 · CAPEC-42 · CAPEC-44 · CAPEC-45 · CAPEC-46 · CAPEC-47 · CAPEC-8 · CAPEC-9

CVEs mapped to this weakness (14,356)

page 198 of 718
  • CVE-2024-11558HigNov 22, 2024
    risk 0.51cvss 7.8epss 0.00

    IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit…

  • CVE-2024-11557HigNov 22, 2024
    risk 0.51cvss 7.8epss 0.00

    IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit…

  • CVE-2024-11556HigNov 22, 2024
    risk 0.51cvss 7.8epss 0.00

    IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit…

  • CVE-2024-11553HigNov 22, 2024
    risk 0.51cvss 7.8epss 0.00

    IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit…

  • CVE-2024-11552HigNov 22, 2024
    risk 0.51cvss 7.8epss 0.00

    IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit…

  • CVE-2024-11551HigNov 22, 2024
    risk 0.51cvss 7.8epss 0.00

    IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit…

  • CVE-2024-11547HigNov 22, 2024
    risk 0.51cvss 7.8epss 0.00

    IrfanView DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit…

  • CVE-2024-11544HigNov 22, 2024
    risk 0.51cvss 7.8epss 0.00

    IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit…

  • CVE-2024-11543HigNov 22, 2024
    risk 0.51cvss 7.8epss 0.00

    IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit…

  • CVE-2024-11542HigNov 22, 2024
    risk 0.51cvss 7.8epss 0.00

    IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit…

  • CVE-2024-11541HigNov 22, 2024
    risk 0.51cvss 7.8epss 0.00

    IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit…

  • CVE-2024-11539HigNov 22, 2024
    risk 0.51cvss 7.8epss 0.00

    IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit…

  • CVE-2024-11538HigNov 22, 2024
    risk 0.51cvss 7.8epss 0.00

    IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit…

  • CVE-2024-11530HigNov 22, 2024
    risk 0.51cvss 7.8epss 0.00

    IrfanView CGM File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit…

  • CVE-2024-11528HigNov 22, 2024
    risk 0.51cvss 7.8epss 0.00

    IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit…

  • CVE-2024-11527HigNov 22, 2024
    risk 0.51cvss 7.8epss 0.00

    IrfanView DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit…

  • CVE-2024-11524HigNov 22, 2024
    risk 0.51cvss 7.8epss 0.00

    IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit…

  • CVE-2024-11523HigNov 22, 2024
    risk 0.51cvss 7.8epss 0.00

    IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit…

  • CVE-2024-11522HigNov 22, 2024
    risk 0.51cvss 7.8epss 0.00

    IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit…

  • CVE-2024-11519HigNov 22, 2024
    risk 0.51cvss 7.8epss 0.00

    IrfanView RLE File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit…