On this page
CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
Weakness Summary
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.
- Canonical source: MITRE CWE-119 (opens in a new tab)
- Published Atomicorp CVE observations: 14
- Distinct affected products in those observations: 12
- Active Atomicorp rules associated with this weakness: 21
Atomicorp Research Context
Atomicorp has published CVE-specific research observations associated with this weakness category. Each linked CVE page states whether the tested request was detected or blocked and is the authoritative customer-facing finding.
The CVEs and rules shown here are selected published examples, not a complete list of Atomicorp protections. If a CWE, CVE, or rule is absent from this page, no conclusion should be drawn about whether Atomicorp protects against that weakness or attack method.
A CWE describes a class of software weakness. It does not identify one exploit request, and association with a CWE does not mean that every vulnerability or exploitation path in that category is detected or blocked.
Selected Published CVE Observations
| CVE | Vulnerability | Product | Atomicorp finding | Observed rules |
|---|---|---|---|---|
| CVE-2008-3257 | Oracle Weblogic Apache Connector POST Request Buffer Overflow | weblogic server | Protected by Atomicorp rules | 390724 |
| CVE-2008-4193 | Alt-N SecurityGateway username Buffer Overflow | securitygateway | Protected by Atomicorp rules | 390716 |
| CVE-2009-3849 | HP OpenView Network Node Manager Snmp.exe CGI Buffer Overflow | openview network node manager | Protected by Atomicorp rules | 392648 |
| CVE-2011-0266 | HP OpenView NNM nnmRptConfig nameParams Buffer Overflow | openview network node manager | Protected by Atomicorp rules | 344365 , 392647 |
| CVE-2011-0267 | HP OpenView NNM nnmRptConfig.exe schdParams Buffer Overflow | openview network node manager | Protected by Atomicorp rules | 392647 |
| CVE-2014-3936 | D-Link HNAP Request Remote Buffer Overflow | dir505 shareport mobile companion firmware | Protected by Atomicorp rules | 381237 |
| CVE-2016-6563 | Dlink DIR Routers Unauthenticated HNAP Login Stack Buffer Overflow | dir-823 firmware | Protected by Atomicorp rules | 381237 |
| CVE-2021-1472 | Cisco Small Business RV Series Authentication Bypass and Command Injection | rv160 firmware | Protected by Atomicorp rules | 330791 , 334168 , 340014 , 340128 , 340149 , 340152 , 344364 , 344366 , 344370 , 350147 , 360152 , 380018 , 390801 |
| CVE-2021-1473 | Cisco Small Business RV Series Authentication Bypass and Command Injection | rv340 firmware | Protected by Atomicorp rules | 330791 , 334168 , 340128 , 340149 , 340152 , 350147 , 360152 , 380018 , 390801 |
| CVE-2016-5680 | NUUO NVRmini2 / NVRsolo / Crystal Devices / NETGEAR ReadyNAS Surveillance Application - Multiple Vulnerabilities | nvrmini 2 | Protected by Atomicorp rules | 392301 |
| CVE-2007-6377 | BadBlue 2.72b PassThru Buffer Overflow | badblue | Protected by Atomicorp rules | 390716 |
| CVE-2013-0249 | cURL - Buffer Overflow (PoC) | curl | Protected by Atomicorp rules | 390727 , 392301 , 392648 |
| CVE-2012-5451 | TVMOBiLi 2.1.0.3557 - Denial of Service | tvmobili | Protected by Atomicorp rules | 390727 , 392301 , 392648 |
| CVE-2012-1465 | NetDecision NOCVision Server Directory Traversal | netdecision | Protected by Atomicorp rules | 344365 , 390716 |
Associated Atomicorp WAF Rules
| Rule | Status | Behavior |
|---|---|---|
| 330791 | Active | disruptive (deny) |
| 334168 | Active | disruptive (deny) |
| 340014 | Active | disruptive (deny) |
| 340128 | Active | disruptive (deny) |
| 340149 | Active | disruptive (deny) |
| 340152 | Active | disruptive (deny) |
| 344364 | Active | disruptive (deny) |
| 344365 | Active | disruptive (deny) |
| 344366 | Active | disruptive (deny) |
| 344370 | Active | disruptive (deny) |
| 350147 | Active | disruptive (deny) |
| 360152 | Active | disruptive (deny) |
| 380018 | Active | disruptive (deny) |
| 381237 | Active | disruptive (deny) |
| 390716 | Active | disruptive (deny) |
| 390724 | Active | disruptive (deny) |
| 390727 | Active | disruptive (deny) |
| 390801 | Active | disruptive (deny) |
| 392301 | Active | disruptive (deny) |
| 392647 | Active | disruptive (deny) |
| 392648 | Active | disruptive (deny) |
Related MITRE CAPEC Context
MITRE associates this CWE with the following attack-pattern entries. These taxonomy relationships are context, not Atomicorp coverage claims:
CAPEC-10 (opens in a new tab) , CAPEC-100 (opens in a new tab) , CAPEC-123 (opens in a new tab) , CAPEC-14 (opens in a new tab) , CAPEC-24 (opens in a new tab) , CAPEC-42 (opens in a new tab) , CAPEC-44 (opens in a new tab) , CAPEC-45 (opens in a new tab) , CAPEC-46 (opens in a new tab) , CAPEC-47 (opens in a new tab) , CAPEC-8 (opens in a new tab) , CAPEC-9 (opens in a new tab)