CWE-562

8 CVEs classified under CWE-562. Browse by severity and year.

Top CVEs for CWE-562
CVESeverityScorePublishedSummary
CVE-2022-41837Critical9.82022-12-22An out-of-bounds write vulnerability exists in the OpenImageIO::add_exif_item_to_spec functionality of OpenImageIO Project OpenImageIO v2.4.4.2. Specially-craf…
CVE-2024-33045High8.42024-09-02Memory corruption when BTFM client sends new messages over Slimbus to ADSP.
CVE-2021-21798High7.82021-09-15An exploitable return of stack variable address vulnerability exists in the JavaScript implementation of Nitro Pro PDF. A specially crafted document can cause…
CVE-2024-4418Medium6.22024-05-08A race condition leading to a stack use-after-free flaw was found in libvirt. Due to a bad assumption in the virNetClientIOEventLoop() method, the `data` point…
CVE-2020-21686Medium5.52023-08-22A stack-use-after-scope issue discovered in expand_mmac_params function in preproc.c in nasm before 2.15.04 allows remote attackers to cause a denial of servic…
CVE-2026-3591Medium5.42026-03-25A use-after-return vulnerability exists in the `named` server when handling DNS queries signed with SIG(0). Using a specially-crafted DNS request, an attacker…
CVE-2026-26399Medium5.32026-04-20A stack-use-after-return issue exists in the Arduino_Core_STM32 library prior to version 1.7.0. The pwm_start() function allocates a TIM_HandleTypeDef structur…
CVE-2026-34553Medium4.02026-03-31iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, there is a defect in LUT dump/iteration…
All CVEs classified under CWE-562 — newest first (page 1 of 1)
CVESeverityScorePublishedSummary
CVE-2026-26399Medium5.32026-04-20A stack-use-after-return issue exists in the Arduino_Core_STM32 library prior to version 1.7.0. The pwm_start() function allocates a TIM_HandleTypeDef structur…
CVE-2026-34553Medium4.02026-03-31iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, there is a defect in LUT dump/iteration…
CVE-2026-3591Medium5.42026-03-25A use-after-return vulnerability exists in the `named` server when handling DNS queries signed with SIG(0). Using a specially-crafted DNS request, an attacker…
CVE-2024-33045High8.42024-09-02Memory corruption when BTFM client sends new messages over Slimbus to ADSP.
CVE-2024-4418Medium6.22024-05-08A race condition leading to a stack use-after-free flaw was found in libvirt. Due to a bad assumption in the virNetClientIOEventLoop() method, the `data` point…
CVE-2020-21686Medium5.52023-08-22A stack-use-after-scope issue discovered in expand_mmac_params function in preproc.c in nasm before 2.15.04 allows remote attackers to cause a denial of servic…
CVE-2022-41837Critical9.82022-12-22An out-of-bounds write vulnerability exists in the OpenImageIO::add_exif_item_to_spec functionality of OpenImageIO Project OpenImageIO v2.4.4.2. Specially-craf…
CVE-2021-21798High7.82021-09-15An exploitable return of stack variable address vulnerability exists in the JavaScript implementation of Nitro Pro PDF. A specially crafted document can cause…