Skip to content
BackEsc
Sign in

CWE-118 · weakness in Memory Corruption

Incorrect Access of Indexable Resource

23 CVEs

Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

Every one of the 23 is a mark on the map. Named now: 1 to 23, most at risk first.

  1. gtk-vnc before 0.7.0 does not properly check boundaries of subrectangle-containing tiles, which allows remote servers to execute arbitrary code via the src x, y coordinates in a c…CVE-2017-58842.3% likely
  2. The ESRI ArcGis Runtime SDK before 10.2.6-2 for Android might allow attackers to execute arbitrary code by leveraging a finalize method in a Serializable class that improperly pas…CVE-2015-20022.3% likely
  3. The GraceNote GNSDK SDK before SVN Changeset 1.1.7 for Android might allow attackers to execute arbitrary code by leveraging a finalize method in a Serializable class that imprope…CVE-2015-20042.0% likely
  4. The PJSIP PJSUA2 SDK before SVN Changeset 51322 for Android might allow attackers to execute arbitrary code by leveraging a finalize method in a Serializable class that improperly…CVE-2015-20032.0% likely
  5. The MetaIO SDK before 6.0.2.1 for Android might allow attackers to execute arbitrary code by leveraging a finalize method in a Serializable class that improperly passes an attacke…CVE-2015-20012.0% likely
  6. The Jumio SDK before 1.5.0 for Android might allow attackers to execute arbitrary code by leveraging a finalize method in a Serializable class that improperly passes an attacker-c…CVE-2015-20002.0% likely
  7. H2O version 2.2.3 and earlier allows remote attackers to cause a denial of service in the server via unspecified vectors.CVE-2017-10872Kazuho Oku · 1.9% likely

    Kazuho Oku

  8. Cisco IOS and IOS XE Software Simple Network Management Protocol Denial of Service VulnerabilityCVE-2020-3235Cisco · CVSS 7.7 · 1.6% likely

    Cisco

  9. Artifex MuPDF 1.14.0 has a SEGV in the function fz_load_page of the fitz/document.c file, as demonstrated by mutool. This is related to page-number mishandling in cbz/mucbz.c, cbz…CVE-2019-61301.6% likely
  10. Cisco SD-WAN vEdge Routers Denial of Service VulnerabilityCVE-2020-3369Cisco · CVSS 8.6 · 1.4% likely

    Cisco

  11. In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9635M, made changes to map the scan type value to an index value that is in range.CVE-2016-10495Qualcomm, Inc. · 1.2% likely

    Qualcomm, Inc.

  12. In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9645, MDM9650, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 427, SD 430, SD 43…CVE-2015-9142Qualcomm, Inc. · 1.2% likely

    Qualcomm, Inc.

  13. An improper array index validation vulnerability exists in the stl_fix_normal_directions functionality of ADMesh Master Commit 767a105 and v0.98.4. A specially-crafted stl file ca…CVE-2022-38072ADMesh · CVSS 6.5 · 1.1% likely
  14. In all Qualcomm products with Android releases from CAF using the Linux kernel, the use of an out-of-range pointer offset is potentially possible in rollback protection.CVE-2014-9411Qualcomm, Inc. · 0.9% likely

    Qualcomm, Inc.

  15. In F5 BIG-IP APM 12.0.0 through 12.1.2 and 13.0.0, an authenticated user with an established access session to the BIG-IP APM system may be able to cause a traffic disruption if t…CVE-2017-0302F5 Networks, Inc. · 0.7% likely

    F5

  16. Windows Mobile Broadband Driver Remote Code Execution VulnerabilityCVE-2024-43524Microsoft · CVSS 6.8 · 0.7% likely

    Microsoft

  17. There is an int overflow vulnerability in vmwgfx driverCVE-2022-36402Linux · CVSS 6.3 · 0.6% likely

    Linux

  18. Multiple arbitrary write vulnerabilities exist in the VCD sorted bsearch functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A vi…CVE-2023-37923GTKWave · CVSS 7.8 · 0.4% likely

    GTKWave

  19. Multiple arbitrary write vulnerabilities exist in the VCD sorted bsearch functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A vi…CVE-2023-37922GTKWave · CVSS 7.8 · 0.4% likely

    GTKWave

  20. Multiple arbitrary write vulnerabilities exist in the VCD sorted bsearch functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A vi…CVE-2023-37921GTKWave · CVSS 7.8 · 0.4% likely

    GTKWave

  21. Vulnerability of incomplete verification information in the communication module. Impact: Successful exploitation of this vulnerability may affect availability.CVE-2025-54628Huawei · CVSS 5.3 · 0.3% likely

    Huawei

  22. NVIDIA DGX-2 SBIOS contains a vulnerability in Bds, where a user with high privileges can cause a write beyond the bounds of an indexable resource, which may lead to code executio…CVE-2023-0201NVIDIA · CVSS 6.7 · 0.2% likely

    NVIDIA

  23. Vulnerability of uncontrolled system resource applications in the setting module Impact: Successful exploitation of this vulnerability may affect availability.CVE-2025-48902Huawei · CVSS 6.6 · 0.1% likely

    Huawei

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

CyberSIXTSignal over noise
Updated AboutDevelopersSign in