CWE-787 · Out-of-bounds Write (page 100)
Page 100 of 100 — CVEs classified under CWE-787, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-25669 | Critical | 9.8 | 2021-04-22 | A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < 5.5.1), SCALANCE X201-3P IRT (All versions < 5.5.1), SCALANCE X201-3P IRT PRO (All… |
CVE-2021-25668 | Critical | 9.8 | 2021-04-22 | A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < 5.5.1), SCALANCE X201-3P IRT (All versions < 5.5.1), SCALANCE X201-3P IRT PRO (All… |
CVE-2020-27009 | High | 8.1 | 2021-04-22 | A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.20), APOGEE P… |
CVE-2020-15795 | High | 8.1 | 2021-04-22 | A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.20), APOGEE P… |
CVE-2021-0254 | Critical | 9.8 | 2021-04-22 | A buffer size validation vulnerability in the overlayd service of Juniper Networks Junos OS may allow an unauthenticated remote attacker to send specially craf… |
CVE-2021-3496 | High | 7.8 | 2021-04-22 | A heap-based buffer overflow was found in jhead in version 3.06 in Get16u() in exif.c when processing a crafted file. |
CVE-2020-23907 | Critical | 9.8 | 2021-04-21 | An issue was discovered in retdec v3.3. In function canSplitFunctionOn() of ir_modifications.cpp, there is a possible out of bounds read due to a heap buffer o… |
CVE-2020-35979 | High | 7.8 | 2021-04-21 | An issue was discovered in GPAC version 0.8.0 and 1.0.1. There is heap-based buffer overflow in the function gp_rtp_builder_do_avc() in ietf/rtp_pck_mpeg4.c. |
CVE-2021-3498 | High | 7.8 | 2021-04-19 | GStreamer before 1.18.4 might cause heap corruption when parsing certain malformed Matroska files. |
CVE-2021-30020 | Medium | 5.5 | 2021-04-19 | In the function gf_hevc_read_pps_bs_internal function in media_tools/av_parsers.c in GPAC 1.0.1 there is a loop, which with crafted file, pps->num_tile_columns… |
CVE-2021-30019 | Medium | 5.5 | 2021-04-19 | In the adts_dmx_process function in filters/reframe_adts.c in GPAC 1.0.1, a crafted file may cause ctx->hdr.frame_size to be smaller than ctx->hdr.hdr_size, re… |
CVE-2021-29279 | High | 7.8 | 2021-04-19 | There is a integer overflow in function filter_core/filter_props.c:gf_props_assign_value in GPAC 1.0.1. In which, the arg const GF_PropertyValue *value,maybe v… |
CVE-2021-31254 | High | 7.8 | 2021-04-19 | Buffer overflow in the tenc_box_read function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted fil… |
CVE-2021-27028 | High | 7.8 | 2021-04-19 | A Memory Corruption Vulnerability in Autodesk FBX Review version 1.5.0 and prior may lead to remote code execution through maliciously crafted DLL files. |
CVE-2021-20491 | Medium | 4.4 | 2021-04-16 | IBM Spectrum Protect Server 7.1 and 8.1 is subject to a stack-based buffer overflow caused by improper bounds checking during the parsing of commands. By issui… |
CVE-2021-31229 | Medium | 6.5 | 2021-04-15 | An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxml_internal_dtd() performs incorrect memory handling while parsing crafted XML files, whi… |
CVE-2021-21095 | High | 7.8 | 2021-04-15 | Adobe Bridge versions 10.1.1 (and earlier) and 11.0.1 (and earlier) are affected by an Out-of-bounds write vulnerability when parsing a crafted file. An unauth… |
CVE-2021-21094 | High | 7.8 | 2021-04-15 | Adobe Bridge versions 10.1.1 (and earlier) and 11.0.1 (and earlier) are affected by an Out-of-bounds write vulnerability when parsing a specially crafted file… |
CVE-2021-21093 | High | 7.8 | 2021-04-15 | Adobe Bridge versions 10.1.1 (and earlier) and 11.0.1 (and earlier) are affected by a memory corruption vulnerability when parsing a specially crafted file. An… |
CVE-2021-21092 | High | 7.8 | 2021-04-15 | Adobe Bridge versions 10.1.1 (and earlier) and 11.0.1 (and earlier) are affected by a memory corruption vulnerability when parsing a specially crafted file. An… |
CVE-2020-28592 | Critical | 9.8 | 2021-04-15 | A heap-based buffer overflow vulnerability exists in the configuration server functionality of the Cosori Smart 5.8-Quart Air Fryer CS158-AF 1.1.0. A specially… |
CVE-2021-0488 | Medium | 6.7 | 2021-04-15 | In pb_write of pb_encode.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System… |
CVE-2021-27253 | High | 8.8 | 2021-04-14 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Nighthawk R7800. Although authentication is… |
CVE-2021-27114 | Critical | 9.8 | 2021-04-14 | An issue was discovered in D-Link DIR-816 A2 1.10 B05 devices. Within the handler function of the /goform/addassignment route, a very long text entry for the"'… |
CVE-2021-28797 | Critical | 9.8 | 2021-04-14 | A stack-based buffer overflow vulnerability has been reported to affect QNAP NAS devices running Surveillance Station. If exploited, this vulnerability allows… |
CVE-2021-28452 | High | 7.1 | 2021-04-13 | Microsoft Outlook Memory Corruption Vulnerability |
CVE-2021-28310 | High | 7.8 | 2021-04-13 | Win32k Elevation of Privilege Vulnerability |
CVE-2021-21784 | High | 7.8 | 2021-04-13 | An out-of-bounds write vulnerability exists in the JPG format SOF marker processing of Accusoft ImageGear 19.8. A specially crafted malformed file can lead to… |
CVE-2021-0439 | High | 7.8 | 2021-04-13 | In setPowerModeWithHandle of com_android_server_power_PowerManagerService.cpp, there is a possible out of bounds write due to a missing bounds check. This coul… |
CVE-2021-0430 | Critical | 9.8 | 2021-04-13 | In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution via a ma… |
CVE-2021-0427 | High | 7.8 | 2021-04-13 | In parseExclusiveStateAnnotation of LogEvent.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of… |
CVE-2021-0426 | High | 7.8 | 2021-04-13 | In parsePrimaryFieldFirstUidAnnotation of LogEvent.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalat… |
CVE-2021-29999 | Critical | 9.8 | 2021-04-13 | An issue was discovered in Wind River VxWorks through 6.8. There is a possible stack overflow in dhcp server. |
CVE-2021-29998 | Critical | 9.8 | 2021-04-13 | An issue was discovered in Wind River VxWorks before 6.5. There is a possible heap overflow in dhcp client. |
CVE-2019-17656 | Medium | 5.4 | 2021-04-12 | A Stack-based Buffer Overflow vulnerability in the HTTPD daemon of FortiOS 6.0.10 and below, 6.2.2 and below and FortiProxy 1.0.x, 1.1.x, 1.2.9 and below, 2.0… |
CVE-2020-36317 | High | 7.5 | 2021-04-11 | In the standard library in Rust before 1.49.0, String::retain() function has a panic safety problem. It allows creation of a non-UTF-8 Rust string when the pro… |
CVE-2021-21197 | High | 8.8 | 2021-04-09 | Heap buffer overflow in TabStrip in Google Chrome prior to 89.0.4389.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa… |
CVE-2021-21196 | High | 8.8 | 2021-04-09 | Heap buffer overflow in TabStrip in Google Chrome on Windows prior to 89.0.4389.114 allowed a remote attacker to potentially exploit heap corruption via a craf… |
CVE-2021-25360 | Critical | 9.0 | 2021-04-09 | An improper input validation vulnerability in libswmfextractor library prior to SMR APR-2021 Release 1 allows attackers to execute arbitrary code on mediaextra… |
CVE-2021-3482 | Medium | 6.5 | 2021-04-08 | A flaw was found in Exiv2 in versions before and including 0.27.4-RC1. Improper input validation of the rawData.size property in Jp2Image::readMetadata() in jp… |
CVE-2021-28686 | Medium | 5.5 | 2021-04-08 | AsIO2_64.sys and AsIO2_32.sys in ASUS GPUTweak II before 2.3.0.3 allow low-privileged users to trigger a stack-based buffer overflow. This could enable low-pri… |
CVE-2021-26709 | Critical | 9.8 | 2021-04-07 | D-Link DSL-320B-D1 devices through EU_1.25 are prone to multiple Stack-Based Buffer Overflows that allow unauthenticated remote attackers to take over a device… |
CVE-2021-1892 | High | 8.4 | 2021-04-07 | Memory corruption due to improper input validation while processing IO control which is nonstandard in Snapdragon Compute, Snapdragon Connectivity, Snapdragon… |
CVE-2020-11236 | High | 8.4 | 2021-04-07 | Memory corruption due to invalid value of total dimension in the non-histogram type KPI could lead to a denial of service in Snapdragon Auto, Snapdragon Comput… |
CVE-2020-11210 | Critical | 9.3 | 2021-04-07 | Possible memory corruption in RPM region due to improper XPU configuration in Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon… |
CVE-2021-24026 | Critical | 9.8 | 2021-04-06 | A missing bounds check within the audio decoding pipeline for WhatsApp calls in WhatsApp for Android prior to v2.21.3, WhatsApp Business for Android prior to v… |
CVE-2021-20305 | High | 8.1 | 2021-04-05 | A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions (GOST DSA, EDDSA & ECDSA) result in the Elliptic Cur… |
CVE-2021-30072 | Critical | 9.8 | 2021-04-02 | An issue was discovered in prog.cgi on D-Link DIR-878 1.30B08 devices. Because strcat is misused, there is a stack-based buffer overflow that does not require… |
CVE-2021-1844 | High | 8.8 | 2021-04-02 | A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 14.4.1 and iPadOS 14.4.1, Safari 14.0.3 (v. 14610.4.3.1.7 and 1561… |
CVE-2021-1805 | High | 7.8 | 2021-04-02 | An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2.1, macOS Catalina 10.15.7 Supplemental Update, m… |
CVE-2021-1796 | Critical | 9.8 | 2021-04-02 | An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause ar… |
CVE-2021-1795 | Critical | 9.8 | 2021-04-02 | An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause ar… |
CVE-2021-1776 | High | 7.8 | 2021-04-02 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Securit… |
CVE-2021-1772 | High | 7.8 | 2021-04-02 | A stack overflow was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 20… |
CVE-2021-1767 | High | 7.8 | 2021-04-02 | This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, i… |
CVE-2021-1760 | Medium | 5.5 | 2021-04-02 | A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security… |
CVE-2021-1747 | High | 7.8 | 2021-04-02 | An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Upd… |
CVE-2021-1744 | High | 7.8 | 2021-04-02 | An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Upd… |
CVE-2021-1738 | High | 7.8 | 2021-04-02 | An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Upd… |
CVE-2021-1737 | High | 7.8 | 2021-04-02 | An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Upd… |
CVE-2020-9967 | High | 7.8 | 2021-04-02 | Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, tvOS 14.0, macOS Big Sur 11.1, Se… |
CVE-2020-9955 | High | 7.8 | 2021-04-02 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in watchOS 7.0, tvOS 14.0, iOS 14.0 and iPadOS 14.0, macOS Big Su… |
CVE-2020-29624 | High | 7.8 | 2021-04-02 | A memory corruption issue existed in the processing of font files. This issue was addressed with improved input validation. This issue is fixed in watchOS 7.2… |
CVE-2020-29616 | High | 7.8 | 2021-04-02 | A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security… |
CVE-2020-29614 | High | 7.8 | 2021-04-02 | This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, m… |
CVE-2020-29612 | High | 7.8 | 2021-04-02 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Securit… |
CVE-2020-29611 | High | 7.8 | 2021-04-02 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 14.3, macOS Big Sur 11.1, Security Update 2020-001 Catali… |
CVE-2020-27952 | High | 7.8 | 2021-04-02 | An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Upd… |
CVE-2020-27948 | High | 7.8 | 2021-04-02 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in watchOS 7.2, macOS Big Sur 11.1, Security Update 2020-001 Cata… |
CVE-2020-27947 | High | 7.8 | 2021-04-02 | A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security… |
CVE-2020-27944 | High | 7.8 | 2021-04-02 | A memory corruption issue existed in the processing of font files. This issue was addressed with improved input validation. This issue is fixed in watchOS 7.2… |
CVE-2020-27943 | High | 7.8 | 2021-04-02 | A memory corruption issue existed in the processing of font files. This issue was addressed with improved input validation. This issue is fixed in tvOS 14.3, i… |
CVE-2020-27933 | High | 7.8 | 2021-04-02 | A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, iCloud for Windows 7.20, watchOS 6.2.8… |
CVE-2020-27931 | High | 7.8 | 2021-04-02 | A memory corruption issue existed in the processing of font files. This issue was addressed with improved input validation. This issue is fixed in iOS 14.0 and… |
CVE-2020-27923 | High | 7.8 | 2021-04-02 | An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Upd… |
CVE-2020-27919 | High | 7.8 | 2021-04-02 | An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Upd… |
CVE-2020-27915 | High | 7.8 | 2021-04-02 | A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security… |
CVE-2020-27914 | High | 7.8 | 2021-04-02 | A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security… |
CVE-2020-27907 | High | 7.8 | 2021-04-02 | A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security U… |
CVE-2020-27897 | High | 7.8 | 2021-04-02 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Securit… |
CVE-2020-10015 | High | 7.8 | 2021-04-02 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Securit… |
CVE-2021-20235 | High | 8.1 | 2021-04-01 | There's a flaw in the zeromq server in versions before 4.3.3 in src/decoder_allocators.hpp. The decoder static allocator could have its sized changed, but the… |
CVE-2021-29942 | High | 7.3 | 2021-04-01 | An issue was discovered in the reorder crate through 2021-02-24 for Rust. swap_index can return uninitialized values if an iterator returns a len() that is too… |
CVE-2021-29941 | High | 7.3 | 2021-04-01 | An issue was discovered in the reorder crate through 2021-02-24 for Rust. swap_index has an out-of-bounds write if an iterator returns a len() that is too smal… |
CVE-2021-29939 | High | 7.3 | 2021-04-01 | An issue was discovered in the stackvector crate through 2021-02-19 for Rust. There is an out-of-bounds write in StackVec::extend if size_hint provides certain… |
CVE-2021-29930 | High | 7.5 | 2021-04-01 | An issue was discovered in the arenavec crate through 2021-01-12 for Rust. A drop of uninitialized memory can sometimes occur upon a panic in T::default(). |
CVE-2021-3470 | Medium | 5.3 | 2021-03-31 | A heap overflow issue was found in Redis in versions before 5.0.10, before 6.0.9 and before 6.2.0 when using a heap allocator other than jemalloc or glibc's ma… |
CVE-2021-23988 | High | 8.8 | 2021-03-31 | Mozilla developers reported memory safety bugs present in Firefox 86. Some of these bugs showed evidence of memory corruption and we presume that with enough e… |
CVE-2021-23987 | High | 8.8 | 2021-03-31 | Mozilla developers and community members reported memory safety bugs present in Firefox 86 and Firefox ESR 78.8. Some of these bugs showed evidence of memory c… |
CVE-2021-23983 | Medium | 6.5 | 2021-03-31 | By causing a transition on a parent node by removing a CSS rule, an invalid property for a marker could have been applied, resulting in memory corruption and a… |
CVE-2021-23981 | High | 8.1 | 2021-03-31 | A texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the buffer used to unpack it, resulting in memory corruption and a… |
CVE-2021-21782 | High | 8.8 | 2021-03-31 | An out-of-bounds write vulnerability exists in the SGI format buffer size processing functionality of Accusoft ImageGear 19.8. A specially crafted malformed fi… |
CVE-2021-27269 | High | 7.8 | 2021-03-30 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required t… |
CVE-2021-27242 | High | 8.8 | 2021-03-29 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.0.1-48919. An attacker must first obtain the… |
CVE-2020-7461 | High | 7.3 | 2021-03-26 | In FreeBSD 12.1-STABLE before r365010, 11.4-STABLE before r365011, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and 11.3-RELEASE before p13, dhclient(8) fai… |
CVE-2021-25372 | Medium | 6.1 | 2021-03-26 | An improper boundary check in DSP driver prior to SMR Mar-2021 Release 1 allows out of bounds memory access. |
CVE-2021-20285 | Medium | 6.6 | 2021-03-26 | A flaw was found in upx canPack in p_lx_elf.cpp in UPX 3.96. This flaw allows attackers to cause a denial of service (SEGV or buffer overflow and application c… |
CVE-2021-20284 | Medium | 5.5 | 2021-03-26 | A flaw was found in GNU Binutils 2.35.1, where there is a heap-based buffer overflow in _bfd_elf_slurp_secondary_reloc_section in elf.c due to the number of sy… |
CVE-2020-7852 | High | 7.8 | 2021-03-24 | DaviewIndy has a Heap-based overflow vulnerability, triggered when the user opens a malformed ex.j2c format file that is mishandled by Daview.exe. Attackers co… |
CVE-2020-7853 | Medium | 5.5 | 2021-03-24 | An outbound read/write vulnerability exists in XPLATFORM that does not check offset input ranges, allowing out-of-range data to be read. An attacker can exploi… |