VYPR

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

ClassStableLikelihood: High

Description

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Hierarchy (View 1000)

Parents

Related attack patterns (CAPEC)

CAPEC-10 · CAPEC-100 · CAPEC-123 · CAPEC-14 · CAPEC-24 · CAPEC-42 · CAPEC-44 · CAPEC-45 · CAPEC-46 · CAPEC-47 · CAPEC-8 · CAPEC-9

CVEs mapped to this weakness (10,979)

page 202 of 549
  • CVE-2020-0969HigApr 15, 2020
    Microsoft
    Chakracore
    risk 0.43cvss 7.5epss 0.13

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based), aka 'Chakra Scripting Engine Memory Corruption Vulnerability'.

  • CVE-2020-0712HigFeb 11, 2020
    Microsoft
    Chakracore
    risk 0.43cvss 7.5epss 0.10

    A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0673, CVE-2020-0674, CVE-2020-0710, CVE-2020-0711, CVE-2020-0713,…

  • CVE-2017-16531MedNov 4, 2017
    Linux
    Kernel
    risk 0.43cvss 6.6epss 0.00

    drivers/usb/core/config.c in the Linux kernel before 4.13.6 allows local users to cause a denial of service (out-of-bounds read and system crash) or possibly have unspecified other impact via a crafted USB device, related to the USB_DT_INTERFACE_ASSOCIATION descriptor.

  • CVE-2014-9092MedOct 10, 2017
    Fedoraproject
    Fedora
    risk 0.43cvss 6.5epss 0.03

    libjpeg-turbo before 1.3.1 allows remote attackers to cause a denial of service (crash) via a crafted JPEG file, related to the Exif marker.

  • CVE-2017-1000101MedOct 5, 2017
    Curl
    Curl
    risk 0.43cvss 6.5epss 0.04

    curl supports "globbing" of URLs, in which a user can pass a numerical range to have the tool iterate over those numbers to do a sequence of transfers. In the globbing function that parses the numerical range, there was an omission that made curl read a byte beyond the end of…

  • CVE-2017-3122MedAug 11, 2017
    Adobe Inc.
    Acrobat
    risk 0.43cvss 6.5epss 0.07

    Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to…

  • CVE-2017-11265MedAug 11, 2017
    Adobe Inc.
    Acrobat
    risk 0.43cvss 6.5epss 0.08

    Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the Adobe Graphics Manager module. Successful exploitation could lead to arbitrary code…

  • CVE-2017-11258MedAug 11, 2017
    Adobe Inc.
    Acrobat
    risk 0.43cvss 6.5epss 0.08

    Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) private data and the…

  • CVE-2017-11255MedAug 11, 2017
    Adobe Inc.
    Acrobat
    risk 0.43cvss 6.5epss 0.08

    Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing TIFF color map data. Successful exploitation could…

  • CVE-2017-11252MedAug 11, 2017
    Adobe Inc.
    Acrobat
    risk 0.43cvss 6.5epss 0.08

    Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the Adobe Graphics Manager (AGM) module. Successful exploitation could lead to arbitrary code…

  • CVE-2017-11249MedAug 11, 2017
    Adobe Inc.
    Acrobat
    risk 0.43cvss 6.5epss 0.08

    Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when parsing an invalid Enhanced Metafile Format (EMF) record.…

  • CVE-2017-11248MedAug 11, 2017
    Adobe Inc.
    Acrobat
    risk 0.43cvss 6.5epss 0.08

    Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to pixel…

  • CVE-2017-11246MedAug 11, 2017
    Adobe Inc.
    Acrobat
    risk 0.43cvss 6.5epss 0.08

    Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when parsing JPEG data. Successful exploitation could lead to…

  • CVE-2017-11245MedAug 11, 2017
    Adobe Inc.
    Acrobat
    risk 0.43cvss 6.5epss 0.08

    Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) private data.…

  • CVE-2017-11244MedAug 11, 2017
    Adobe Inc.
    Acrobat
    risk 0.43cvss 6.5epss 0.10

    Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to…

  • CVE-2017-11243MedAug 11, 2017
    Adobe Inc.
    Acrobat
    risk 0.43cvss 6.5epss 0.08

    Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the XSLT engine. Successful exploitation could lead to arbitrary code execution.

  • CVE-2017-11242MedAug 11, 2017
    Adobe Inc.
    Acrobat
    risk 0.43cvss 6.5epss 0.07

    Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to line…

  • CVE-2017-11239MedAug 11, 2017
    Adobe Inc.
    Acrobat
    risk 0.43cvss 6.5epss 0.08

    Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to text…

  • CVE-2017-11238MedAug 11, 2017
    Adobe Inc.
    Acrobat
    risk 0.43cvss 6.5epss 0.08

    Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to curve…

  • CVE-2017-11236MedAug 11, 2017
    Adobe Inc.
    Acrobat
    risk 0.43cvss 6.5epss 0.09

    Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the internal handling of UTF-16 literal strings. Successful exploitation could lead to arbitrary…