Skip to content
Noroxi

CWE-118 · 25 records

Incorrect Access of Indexable Resource ('Range Error')

CVEs in this class

25 records

  • CVE-2015-2002
    40Plan

    The ESRI ArcGis Runtime SDK before 10.2.6-2 for Android might allow attackers to execute arbitrary code by leveraging a finalize method in a

    CriticalCVSS 9.8No exploitEPSS 2%

    esri · arcgisruntime sdkMar 29, 2018

  • CVE-2015-2000
    40Plan

    The Jumio SDK before 1.5.0 for Android might allow attackers to execute arbitrary code by leveraging a finalize method in a Serializable cla

    CriticalCVSS 9.8No exploitEPSS 1%

    jumio · jumio sdkMar 29, 2018

  • CVE-2015-2001
    40Plan

    The MetaIO SDK before 6.0.2.1 for Android might allow attackers to execute arbitrary code by leveraging a finalize method in a Serializable

    CriticalCVSS 9.8No exploitEPSS 1%

    metaio · metaio sdkMar 29, 2018

  • CVE-2015-2003
    40Plan

    The PJSIP PJSUA2 SDK before SVN Changeset 51322 for Android might allow attackers to execute arbitrary code by leveraging a finalize method

    CriticalCVSS 9.8No exploitEPSS 1%

    pjsip · pjsua2 sdkMar 29, 2018

  • CVE-2015-2004
    40Plan

    The GraceNote GNSDK SDK before SVN Changeset 1.1.7 for Android might allow attackers to execute arbitrary code by leveraging a finalize meth

    CriticalCVSS 9.8No exploitEPSS 1%

    gracenote · gnsdkMar 29, 2018

  • CVE-2016-10495
    39Monitor

    In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9635M, made changes to map the scan type value

    CriticalCVSS 9.8No exploitEPSS 1%

    qualcomm · mdm9635m firmwareApr 18, 2018

  • CVE-2015-9142
    39Monitor

    In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9645, MDM9650, SD 210/SD 212/SD 205, SD 400, S

    CriticalCVSS 9.8No exploitEPSS 1%

    qualcomm · mdm9645 firmwareApr 18, 2018

  • CVE-2014-9411
    39Monitor

    In all Qualcomm products with Android releases from CAF using the Linux kernel, the use of an out-of-range pointer offset is potentially pos

    CriticalCVSS 9.8No exploitEPSS 0%

    google · androidAug 18, 2017

  • CVE-2022-38072
    35Monitor

    An improper array index validation vulnerability exists in the stl_fix_normal_directions functionality of ADMesh Master Commit 767a105 and v

    HighCVSS 8.8No exploitEPSS 1%

    admesh project · admeshApr 3, 2023

  • CVE-2026-113239
    35Monitor

    Range error in SiteIsolation in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code insid

    HighCVSS 8.8No exploitEPSS 0%

    google · chrome6 days ago

  • CVE-2017-5884
    32Monitor

    gtk-vnc before 0.7.0 does not properly check boundaries of subrectangle-containing tiles, which allows remote servers to execute arbitrary c

    HighCVSS 7.8No exploitEPSS 2%

    fedoraproject · fedoraFeb 28, 2017

  • CVE-2023-37921
    31Monitor

    Multiple arbitrary write vulnerabilities exist in the VCD sorted bsearch functionality of GTKWave 3.3.115.

    HighCVSS 7.8No exploitEPSS 0%

    tonybybell · gtkwaveJan 8, 2024

  • CVE-2023-37922
    31Monitor

    Multiple arbitrary write vulnerabilities exist in the VCD sorted bsearch functionality of GTKWave 3.3.115.

    HighCVSS 7.8No exploitEPSS 0%

    tonybybell · gtkwaveJan 8, 2024

  • CVE-2023-37923
    31Monitor

    Multiple arbitrary write vulnerabilities exist in the VCD sorted bsearch functionality of GTKWave 3.3.115.

    HighCVSS 7.8No exploitEPSS 0%

    tonybybell · gtkwaveJan 8, 2024

  • CVE-2026-50367
    31Monitor

    Windows Sensor Data Service Elevation of Privilege Vulnerability

    HighCVSS 7.8No exploitEPSS 0%

    microsoft · windows 10 1809Jul 14, 2026

  • CVE-2020-3235
    30Monitor

    Cisco IOS and IOS XE Software Simple Network Management Protocol Denial of Service Vulnerability

    HighCVSS 7.7No exploitEPSS 1%

    cisco · iosJun 3, 2020

  • CVE-2020-3369
    30Monitor

    Cisco SD-WAN vEdge Routers Denial of Service Vulnerability

    HighCVSS 7.5No exploitEPSS 1%

    cisco · sd-wan firmwareJul 16, 2020

  • CVE-2025-54628
    30Monitor

    Vulnerability of incomplete verification information in the communication module.

    HighCVSS 7.5No exploitEPSS 0%

    huawei · emuiAug 5, 2025

  • CVE-2017-10872
    27Monitor

    H2O version 2.2.3 and earlier allows remote attackers to cause a denial of service in the server via unspecified vectors.

    MediumCVSS 6.5No exploitEPSS 1%

    dena · h2oDec 22, 2017

  • CVE-2024-43524
    27Monitor

    Windows Mobile Broadband Driver Remote Code Execution Vulnerability

    MediumCVSS 6.8No exploitEPSS 0%

    microsoft · windows 10 1809Oct 8, 2024

  • CVE-2023-0201
    26Monitor

    NVIDIA DGX-2 SBIOS contains a vulnerability in Bds, where a user with high privileges can cause a write beyond the bounds of an indexable re

    MediumCVSS 6.7No exploitEPSS 0%

    nvidia · bmcApr 21, 2023

  • CVE-2025-48902
    26Monitor

    Vulnerability of uncontrolled system resource applications in the setting module Impact: Successful exploitation of this vulnerability may a

    MediumCVSS 6.6No exploitEPSS 0%

    huawei · emuiJun 6, 2025

  • CVE-2019-6130
    22Monitor

    Artifex MuPDF 1.14.0 has a SEGV in the function fz_load_page of the fitz/document.c file, as demonstrated by mutool.

    MediumCVSS 5.5No exploitEPSS 1%

    artifex · mupdfJan 11, 2019

  • CVE-2022-36402
    22Monitor

    There is an int overflow vulnerability in vmwgfx driver

    MediumCVSS 5.5No exploitEPSS 0%

    linux · linux kernelSep 16, 2022

  • CVE-2017-0302
    21Monitor

    In F5 BIG-IP APM 12.0.0 through 12.1.2 and 13.0.0, an authenticated user with an established access session to the BIG-IP APM system may be

    MediumCVSS 5.3No exploitEPSS 0%

    f5 · big-ip access policy managerMay 9, 2017

All vulnerability classes