CWE-118 · Memory Corruption
Incorrect Access of Indexable Resource
23CVEs
SortMost likely exploited
23 CVEs with CWE-118 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2017-5884gtk-vnc before 0.7.0 does not properly check boundaries of subrectangle-containing tiles, which allows remote servers to execute arbitrary code via the src x, y coordinates in a c…Gnome · Gtk-Vnc · 2017-02-28 | – | 2.3% | 2017-02-28 |
| CVE-2015-2002The ESRI ArcGis Runtime SDK before 10.2.6-2 for Android might allow attackers to execute arbitrary code by leveraging a finalize method in a Serializable class that improperly pas…Esri · Arcgisruntime Sdk · 2018-03-29 | – | 2.3% | 2018-03-29 |
| CVE-2015-2004The GraceNote GNSDK SDK before SVN Changeset 1.1.7 for Android might allow attackers to execute arbitrary code by leveraging a finalize method in a Serializable class that imprope…Gracenote · Gnsdk · 2018-03-29 | – | 2.0% | 2018-03-29 |
| CVE-2015-2003The PJSIP PJSUA2 SDK before SVN Changeset 51322 for Android might allow attackers to execute arbitrary code by leveraging a finalize method in a Serializable class that improperly…Pjsip · Pjsua2 Sdk · 2018-03-29 | – | 2.0% | 2018-03-29 |
| CVE-2015-2001The MetaIO SDK before 6.0.2.1 for Android might allow attackers to execute arbitrary code by leveraging a finalize method in a Serializable class that improperly passes an attacke…Metaio · Metaio Sdk · 2018-03-29 | – | 2.0% | 2018-03-29 |
| CVE-2015-2000The Jumio SDK before 1.5.0 for Android might allow attackers to execute arbitrary code by leveraging a finalize method in a Serializable class that improperly passes an attacker-c…Jumio · Jumio Sdk · 2018-03-29 | – | 2.0% | 2018-03-29 |
| CVE-2017-10872H2O version 2.2.3 and earlier allows remote attackers to cause a denial of service in the server via unspecified vectors.Kazuho Oku · H2O · 2017-12-22 | – | 1.9% | 2017-12-22 |
| CVE-2020-3235Cisco IOS and IOS XE Software Simple Network Management Protocol Denial of Service VulnerabilityCisco · Cisco IOS 12.2(53)SG1 · CVSS 7.7 · 2020-06-03 | 7.7 | 1.6% | 2020-06-03 |
| CVE-2019-6130Artifex MuPDF 1.14.0 has a SEGV in the function fz_load_page of the fitz/document.c file, as demonstrated by mutool. This is related to page-number mishandling in cbz/mucbz.c, cbz…Artifex · Mupdf · 2019-01-11 | – | 1.6% | 2019-01-11 |
| CVE-2020-3369Cisco SD-WAN vEdge Routers Denial of Service VulnerabilityCisco · Cisco SD-WAN vEdge router · CVSS 8.6 · 2020-07-16 | 8.6 | 1.4% | 2020-07-16 |
| CVE-2016-10495In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9635M, made changes to map the scan type value to an index value that is in range.Qualcomm, Inc. · Snapdragon Mobile · 2018-04-18 | – | 1.2% | 2018-04-18 |
| CVE-2015-9142In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9645, MDM9650, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 427, SD 430, SD 43…Qualcomm, Inc. · Snapdragon Mobile · 2018-04-18 | – | 1.2% | 2018-04-18 |
| CVE-2022-38072An improper array index validation vulnerability exists in the stl_fix_normal_directions functionality of ADMesh Master Commit 767a105 and v0.98.4. A specially-crafted stl file ca…ADMesh · ADMesh · CVSS 6.5 · 2023-04-03 | 6.5 | 1.1% | 2023-04-03 |
| CVE-2014-9411In all Qualcomm products with Android releases from CAF using the Linux kernel, the use of an out-of-range pointer offset is potentially possible in rollback protection.Qualcomm, Inc. · All Qualcomm products · 2017-08-18 | – | 0.9% | 2017-08-18 |
| CVE-2017-0302In F5 BIG-IP APM 12.0.0 through 12.1.2 and 13.0.0, an authenticated user with an established access session to the BIG-IP APM system may be able to cause a traffic disruption if t…F5 Networks, Inc. · BIG-IP APM · 2017-05-09 | – | 0.7% | 2017-05-09 |
| CVE-2024-43524Windows Mobile Broadband Driver Remote Code Execution VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 6.8 · 2024-10-08 | 6.8 | 0.7% | 2024-10-08 |
| CVE-2022-36402There is an int overflow vulnerability in vmwgfx driverLinux · kernel · CVSS 6.3 · 2022-09-16 | 6.3 | 0.6% | 2022-09-16 |
| CVE-2023-37923Multiple arbitrary write vulnerabilities exist in the VCD sorted bsearch functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A vi…GTKWave · GTKWave · CVSS 7.8 · 2024-01-08 | 7.8 | 0.4% | 2024-01-08 |
| CVE-2023-37922Multiple arbitrary write vulnerabilities exist in the VCD sorted bsearch functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A vi…GTKWave · GTKWave · CVSS 7.8 · 2024-01-08 | 7.8 | 0.4% | 2024-01-08 |
| CVE-2023-37921Multiple arbitrary write vulnerabilities exist in the VCD sorted bsearch functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A vi…GTKWave · GTKWave · CVSS 7.8 · 2024-01-08 | 7.8 | 0.4% | 2024-01-08 |
| CVE-2025-54628Vulnerability of incomplete verification information in the communication module. Impact: Successful exploitation of this vulnerability may affect availability.Huawei · HarmonyOS · CVSS 5.3 · 2025-08-06 | 5.3 | 0.3% | 2025-08-06 |
| CVE-2023-0201NVIDIA DGX-2 SBIOS contains a vulnerability in Bds, where a user with high privileges can cause a write beyond the bounds of an indexable resource, which may lead to code executio…NVIDIA · NVIDIA DGX servers · CVSS 6.7 · 2023-04-22 | 6.7 | 0.2% | 2023-04-22 |
| CVE-2025-48902Vulnerability of uncontrolled system resource applications in the setting module Impact: Successful exploitation of this vulnerability may affect availability.Huawei · HarmonyOS · CVSS 6.6 · 2025-06-06 | 6.6 | 0.1% | 2025-06-06 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.