CWE-118: Incorrect Access of Indexable Resource
The product does not restrict or incorrectly restricts operations within the boundaries of a resource that is accessed using an index or pointer, such as memory or files.
Also known as Range Error.
A kind of CWE-664 Improper Control of a Resource Through its Lifetime.
From the CWE List. © The MITRE Corporation.
Newest
- google chrome Range error in SiteIsolation in Google Chrome on on Android prior to 156.0.8078.47 allowed a... 8.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +14 more +16 more Windows Sensor Data Service Elevation of Privilege Vulnerability 7.8 High
- huawei emui, harmonyos +1 more Vulnerability of incomplete verification information in the communication module. Impact:... 5.3 Medium
- huawei emui, harmonyos +1 more Vulnerability of uncontrolled system resource applications in the setting module Impact:... 6.6 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +16 more +18 more Windows Mobile Broadband Driver Remote Code Execution Vulnerability 6.8 Medium
- gtkwave Multiple arbitrary write vulnerabilities exist in the VCD sorted bsearch functionality of GTKWave... 7.8 High
- gtkwave Multiple arbitrary write vulnerabilities exist in the VCD sorted bsearch functionality of GTKWave... 7.8 High
- gtkwave Multiple arbitrary write vulnerabilities exist in the VCD sorted bsearch functionality of GTKWave... 7.8 High
- nvidia bmc, dgx servers +1 more NVIDIA DGX-2 SBIOS contains a vulnerability in Bds, where a user with high privileges can cause a... 6.7 Medium
- admesh, slic3r libslic3r +1 more ADMesh improper array index validation 6.5 Medium
- linux kernel There is an int overflow vulnerability in vmwgfx driver 6.3 Medium
- cisco sd-wan vedge router, sd-wan firmware, vedge cloud router +2 more Cisco SD-WAN vEdge Routers Denial of Service Vulnerability 8.6 High
- cisco ios, ios xe, ios 12.2(53)sg1 +1 more +3 more Cisco IOS and IOS XE Software Simple Network Management Protocol Denial of Service Vulnerability 7.7 High
- artifex mupdf Artifex MuPDF 1.14.0 has a SEGV in the function fz_load_page of the fitz/document.c file, as... 5.5 Medium
- qualcomm, inc. snapdragon mobile, qualcomm mdm9635m firmware +1 more In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile... 9.8 Critical
- qualcomm, inc. snapdragon mobile, qualcomm mdm9645 firmware, mdm9650 firmware +24 more +26 more In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile... 9.8 Critical
- ics-cert omron cx-one, omron cx-flnet, cx-one +5 more +7 more Parsing malformed project files in Omron CX-One versions 4.42 and prior, including the following... 7.8 High
- gracenote gnsdk The GraceNote GNSDK SDK before SVN Changeset 1.1.7 for Android might allow attackers to execute... 9.8 Critical
- pjsip pjsua2 sdk The PJSIP PJSUA2 SDK before SVN Changeset 51322 for Android might allow attackers to execute... 9.8 Critical
- esri arcgisruntime sdk The ESRI ArcGis Runtime SDK before 10.2.6-2 for Android might allow attackers to execute... 9.8 Critical
- metaio sdk The MetaIO SDK before 6.0.2.1 for Android might allow attackers to execute arbitrary code by... 9.8 Critical
- jumio sdk The Jumio SDK before 1.5.0 for Android might allow attackers to execute arbitrary code by... 9.8 Critical
- dena h2o H2O version 2.2.3 and earlier allows remote attackers to cause a denial of service in the server... 6.5 Medium
- google android, qualcomm, inc. all qualcomm products +1 more In all Qualcomm products with Android releases from CAF using the Linux kernel, the use of an out... 9.8 Critical
- f5 big-ip apm, big-ip access policy manager +1 more In F5 BIG-IP APM 12.0.0 through 12.1.2 and 13.0.0, an authenticated user with an established... 5.3 Medium
- gnome gtk-vnc, fedoraproject fedora +1 more gtk-vnc before 0.7.0 does not properly check boundaries of subrectangle-containing tiles, which... 7.8 High