VYPR

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

ClassStableLikelihood: High

Description

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Hierarchy (View 1000)

Related attack patterns (CAPEC)

CAPEC-10 · CAPEC-100 · CAPEC-123 · CAPEC-14 · CAPEC-24 · CAPEC-42 · CAPEC-44 · CAPEC-45 · CAPEC-46 · CAPEC-47 · CAPEC-8 · CAPEC-9

CVEs mapped to this weakness (14,447)

page 200 of 723
  • CVE-2024-9739HigNov 22, 2024
    risk 0.51cvss 7.8epss 0.00

    Tungsten Automation Power PDF PDF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tungsten Automation Power PDF. User interaction is required to exploit this…

  • CVE-2024-9738HigNov 22, 2024
    risk 0.51cvss 7.8epss 0.00

    Tungsten Automation Power PDF PDF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tungsten Automation Power PDF. User interaction is required to exploit this…

  • CVE-2024-9731HigNov 22, 2024
    risk 0.51cvss 7.8epss 0.00

    Trimble SketchUp Viewer SKP File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability…

  • CVE-2024-9730HigNov 22, 2024
    risk 0.51cvss 7.8epss 0.00

    Trimble SketchUp Viewer SKP File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability…

  • CVE-2024-8815HigNov 22, 2024
    risk 0.51cvss 7.8epss 0.00

    PDF-XChange Editor U3D File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the…

  • CVE-2024-11575HigNov 22, 2024
    risk 0.51cvss 7.8epss 0.00

    IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit…

  • CVE-2024-11574HigNov 22, 2024
    risk 0.51cvss 7.8epss 0.00

    IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit…

  • CVE-2024-11573HigNov 22, 2024
    risk 0.51cvss 7.8epss 0.00

    IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit…

  • CVE-2024-11572HigNov 22, 2024
    risk 0.51cvss 7.8epss 0.00

    IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit…

  • CVE-2024-11564HigNov 22, 2024
    risk 0.51cvss 7.8epss 0.00

    IrfanView DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit…

  • CVE-2024-11560HigNov 22, 2024
    risk 0.51cvss 7.8epss 0.00

    IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit…

  • CVE-2024-11558HigNov 22, 2024
    risk 0.51cvss 7.8epss 0.00

    IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit…

  • CVE-2024-11557HigNov 22, 2024
    risk 0.51cvss 7.8epss 0.00

    IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit…

  • CVE-2024-11556HigNov 22, 2024
    risk 0.51cvss 7.8epss 0.00

    IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit…

  • CVE-2024-11553HigNov 22, 2024
    risk 0.51cvss 7.8epss 0.00

    IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit…

  • CVE-2024-11552HigNov 22, 2024
    risk 0.51cvss 7.8epss 0.00

    IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit…

  • CVE-2024-11551HigNov 22, 2024
    risk 0.51cvss 7.8epss 0.00

    IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit…

  • CVE-2024-11547HigNov 22, 2024
    risk 0.51cvss 7.8epss 0.00

    IrfanView DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit…

  • CVE-2024-11544HigNov 22, 2024
    risk 0.51cvss 7.8epss 0.00

    IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit…

  • CVE-2024-11543HigNov 22, 2024
    risk 0.51cvss 7.8epss 0.00

    IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit…