CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer, page 135
Filter
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.
What the weakness is: CWE-119 at MITRE
Related attack patterns (CAPEC): 12
- CAPEC-8 Buffer Overflow in an API Call Likelihood: High · Severity: High
- CAPEC-9 Buffer Overflow in Local Command-Line Utilities Likelihood: High · Severity: High
- CAPEC-10 Buffer Overflow via Environment Variables Likelihood: High · Severity: High
- CAPEC-14 Client-side Injection-induced Buffer Overflow Likelihood: Medium · Severity: High
- CAPEC-24 Filter Failure through Buffer Overflow Likelihood: High · Severity: High
- CAPEC-42 MIME Conversion Likelihood: High · Severity: High
- CAPEC-44 Overflow Binary Resource File Likelihood: High · Severity: Very High
- CAPEC-45 Buffer Overflow via Symbolic Links Likelihood: High · Severity: High
- CAPEC-46 Overflow Variables and Tags Likelihood: High · Severity: High
- CAPEC-47 Buffer Overflow via Parameter Expansion Likelihood: Medium · Severity: High
- CAPEC-100 Overflow Buffers Likelihood: High · Severity: Very High
- CAPEC-123 Buffer Manipulation Likelihood: High · Severity: Very High
The attack patterns MITRE's CAPEC relates to CWE-119, as MITRE names them. Credits.
Ask an AI about CWE-119
Show the prompt
Explain CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/119.html and https://cve.bz/cve/cwe/119?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 7.8CVE-2017-2545EPSS 1.1%
An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "IOGraphics" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory …
- 8.8CVE-2017-2544EPSS 1.5%
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of servic…
- 7.8CVE-2017-2543EPSS 1.1%
An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "Multi-Touch" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory…
- 7.8CVE-2017-2542EPSS 1.1%
An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "Multi-Touch" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory…
- 7.8CVE-2017-2541EPSS 1.4%
An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "WindowServer" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memor…
- 8.8CVE-2017-2539EPSS 1.8%
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of servic…
- 8.8CVE-2017-2538EPSS 1.8%
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of servic…
- 7.8CVE-2017-2537EPSS 1.2%
An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "WindowServer" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memor…
- 8.8CVE-2017-2536ExploitEPSS 10%
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary …
- 8.8CVE-2017-2531ExploitEPSS 6.6%
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary …
- 8.8CVE-2017-2530EPSS 1.6%
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. iCloud before 6.2.1 on Windows is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It a…
- 9.8CVE-2017-2527ExploitEPSS 6.8%
An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "CoreAnimation" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory consumption an…
- 8.8CVE-2017-2526EPSS 1.5%
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of servic…
- 8.8CVE-2017-2525EPSS 1.6%
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary …
- 9.8CVE-2017-2524ExploitEPSS 6.7%
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "TextInput" component. It allows r…
- 9.8CVE-2017-2523ExploitEPSS 11%
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "Foundation" component. It allows …
- 9.8CVE-2017-2522ExploitEPSS 6.6%
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "CoreFoundation" component. It all…
- 8.8CVE-2017-2521ExploitEPSS 5.9%
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "WebKit" component. It allows remo…
- 8.8CVE-2017-2515ExploitEPSS 4.7%
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary …
- 8.8CVE-2017-2514ExploitEPSS 6.0%
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of servic…
- 7.8CVE-2017-2512EPSS 0.7%
An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "Sandbox" component. It allows attackers to conduct sandbox-escape attacks or cause a denial of service (memory corruption) via a c…
- 8.8CVE-2017-2506EPSS 1.5%
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of servic…
- 8.8CVE-2017-2505EPSS 1.6%
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary …
- 7.8CVE-2017-2503EPSS 1.1%
An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "Intel Graphics Driver" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of servi…
- 7.8CVE-2017-2499EPSS 1.0%
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit Web Inspector" component. It allows attackers to execute arb…
- 8.8CVE-2017-2496EPSS 1.8%
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of servic…
- 7.8CVE-2017-2494EPSS 1.1%
An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corr…
- 7.5CVE-2017-6633EPSS 2.1%
A vulnerability in the TCP throttling process of Cisco UCS C-Series Rack Servers 3.0(0.234) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to ins…
- 3.5CVE-2017-9139EPSS 0.4%
There is a stack-based buffer overflow on some Tenda routers (FH1202/F1202/F1200: versions before 1.2.0.20). Crafted POST requests to an unspecified URL result in DoS, interrupting the HTTP service (used to login to the web UI of a router)…
- 8.0CVE-2017-9138EPSS 0.7%
There is a debug-interface vulnerability on some Tenda routers (FH1202/F1202/F1200: versions before 1.2.0.20). After connecting locally to a router in a wired or wireless manner, one can bypass intended access restrictions by sending shell…
- 9.8CVE-2017-6025EPSS 2.0%
A Stack Buffer Overflow issue was discovered in 3S-Smart Software Solutions GmbH CODESYS Web Server. The following versions of CODESYS Web Server, part of the CODESYS WebVisu web browser visualization software, are affected: CODESYS Web Se…
- 7.5CVE-2017-5177ExploitEPSS 18%
A Stack Buffer Overflow issue was discovered in VIPA Controls WinPLC7 5.0.45.5921 and prior. A stack-based buffer overflow vulnerability has been identified, where an attacker with a specially crafted packet could overflow the fixed length…
- 9.8CVE-2017-9052EPSS 2.6%
An issue, also known as DW201703-006, was discovered in libdwarf 2017-03-21. A heap-based buffer over-read in dwarf_formsdata() is due to a failure to check a pointer for being in bounds (in a few places in this function) and a failure in …
- 7.5CVE-2017-9048EPSS 4.8%
libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a stack-based buffer overflow. The function xmlSnprintfElementContent in valid.c is supposed to recursively dump the element content definition into a char buffer 'buf' of size 'size'. A…
- 7.5CVE-2017-9047EPSS 3.2%
A buffer overflow was discovered in libxml2 20904-GITv2.9.4-16-g0741801. The function xmlSnprintfElementContent in valid.c is supposed to recursively dump the element content definition into a char buffer 'buf' of size 'size'. The variable…
- 9.8CVE-2017-9026EPSS 1.6%
Stack buffer overflow in vshttpd (aka ioos) in HooToo Trip Mate 6 (TM6) firmware 2.000.030 and earlier allows remote unauthenticated attackers to control the program counter via a specially crafted fname parameter of a GET request.
- 6.5CVE-2017-9025EPSS 1.6%
Heap buffer overflow in vshttpd (aka ioos) in HooToo Trip Mate 6 (TM6) firmware 2.000.030 and earlier allows remote unauthenticated attackers to control the program counter via a specially crafted HTTP Cookie header.
- 9.6CVE-2017-3882EPSS 1.8%
A vulnerability in the Universal Plug-and-Play (UPnP) implementation in the Cisco CVR100W Wireless-N VPN Router could allow an unauthenticated, Layer 2-adjacent attacker to execute arbitrary code or cause a denial of service (DoS) conditio…
- 7.8CVE-2017-6887EPSS 1.6%
A boundary error within the "parse_tiff_ifd()" function (internal/dcraw_common.cpp) in LibRaw versions before 0.18.2 can be exploited to cause a memory corruption via e.g. a specially crafted KDC file with model set to "DSLR-A100" and cont…
- 9.8CVE-2017-6886EPSS 3.4%
An error within the "parse_tiff_ifd()" function (internal/dcraw_common.cpp) in LibRaw versions before 0.18.2 can be exploited to corrupt memory.
- 7.8CVE-2016-10239EPSS 0.7%
In TrustZone access control policy may potentially be bypassed in all Android releases from CAF using the Linux kernel due to improper input validation an integer overflow vulnerability leading to a buffer overflow could potentially occur …
- 7.8CVE-2015-8999EPSS 0.7%
In TrustZone a buffer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel while loading an ELF file.
- 7.8CVE-2014-9937EPSS 0.7%
In TrustZone a buffer overflow vulnerability can potentially occur in a DRM routine in all Android releases from CAF using the Linux kernel.
- 7.8CVE-2014-9931EPSS 0.7%
A buffer overflow vulnerability in all Android releases from CAF using the Linux kernel can potentially occur if an OEM performs an app region size customization due to a hard-coded value.
- 7.8CVE-2017-8927ExploitEPSS 3.0%
Buffer overflow in Larson VizEx Reader 9.7.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .tif file.
- 7.8CVE-2017-8926ExploitEPSS 3.1%
Buffer overflow in Halliburton LogView Pro 10.0.1 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .tif file.
- 9.8CVE-2017-6890EPSS 1.5%
A boundary error within the "foveon_load_camf()" function (dcraw_foveon.c) when initializing a huffman table in LibRaw-demosaic-pack-GPL2 before 0.18.2 can be exploited to cause a stack-based buffer overflow.
- 9.8CVE-2017-0252EPSS 13%
A remote code execution vulnerability exists in Microsoft Chakra Core in the way JavaScript engines render when handling objects in memory. aka "Scripting Engine Memory Corruption Vulnerability". This vulnerability is unique from CVE-2017-…
- 9.8CVE-2017-0223EPSS 15%
A remote code execution vulnerability exists in Microsoft Chakra Core in the way JavaScript engines render when handling objects in memory. aka "Scripting Engine Memory Corruption Vulnerability". This vulnerability is unique from CVE-2017-…
- 7.8CVE-2017-8245EPSS 0.2%
In all Android releases from CAF using the Linux kernel, while processing a voice SVC request which is nonstandard by specifying a payload size that will overflow its own declared size, an out of bounds memory copy occurs.