Home/CWE/Incorrect Access of Indexable Resource ('Range Error')
Weakness

Incorrect Access of Indexable Resource ('Range Error')

CWE-118 · Class · Incomplete

The product does not restrict or incorrectly restricts operations within the boundaries of a resource that is accessed using an index or pointer, such as memory or files.

△

Weakness Relationships

Where this weakness sits in the CWE hierarchy. Walk up to broader classes or down to more specific variants.
Parent of this (broader)
ChildOfCWE-664 · Improper Control of a Resource Through its Lifetime
Children (more specific)
ParentOfCWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer
◆

Attack Patterns (CAPEC)

8
How adversaries exploit this weakness, per MITRE CAPEC.
CAPEC-10Buffer Overflow via Environment Variables
CAPEC-14Client-side Injection-induced Buffer Overflow
CAPEC-24Filter Failure through Buffer Overflow
CAPEC-45Buffer Overflow via Symbolic Links
CAPEC-46Overflow Variables and Tags
CAPEC-47Buffer Overflow via Parameter Expansion
CAPEC-8Buffer Overflow in an API Call
CAPEC-9Buffer Overflow in Local Command-Line Utilities
⚠

CVEs With This Weakness

24
A sample of the 24 CVEs tagged with this weakness.
CVECVE-2025-54628
CVECVE-2025-48902
CVECVE-2024-43524
CVECVE-2023-37923
CVECVE-2023-37922
CVECVE-2023-37921
CVECVE-2023-0201
CVECVE-2022-38072
CVECVE-2022-36402
CVECVE-2020-3369
CVECVE-2020-3235
CVECVE-2019-6130
External lookups - second-class, for what we don’t hold ourselves
MITRE CWE
Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities
Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs
Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures
Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1
About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service
threatengine.sh  ·  Open-source threat intelligence platform  ·  100+ authoritative sources  ·  Every fact traces to its origin