CWE-787 · Out-of-bounds Write (page 100)
Page 100 of 100 — CVEs classified under CWE-787, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-34480 | Medium | 6.8 | 2021-08-12 | Scripting Engine Memory Corruption Vulnerability |
CVE-2021-27790 | High | 7.8 | 2021-08-12 | The command ipfilter in Brocade Fabric OS before Brocade Fabric OS v.9.0.1a, v8.2.3, and v8.2.0_CBN4, and v7.4.2h uses unsafe string function to process user i… |
CVE-2021-20314 | Critical | 9.8 | 2021-08-12 | Stack buffer overflow in libspf2 versions below 1.2.11 when processing certain SPF macros can lead to Denial of service and potentially code execution via mali… |
CVE-2021-38593 | High | 7.5 | 2021-08-12 | Qt 5.x before 5.15.6 and 6.x through 6.1.2 has an out-of-bounds write in QOutlineMapper::convertPath (called from QRasterPaintEngine::fill and QPaintEngineEx… |
CVE-2021-38592 | High | 7.5 | 2021-08-12 | Wasm3 0.5.0 has a heap-based buffer overflow in op_Const64 (called from EvaluateExpression and m3_LoadModule). |
CVE-2021-38568 | Critical | 9.8 | 2021-08-11 | An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows memory corruption during conversion of a PDF document to a different document f… |
CVE-2021-1106 | High | 7.8 | 2021-08-11 | NVIDIA Linux kernel distributions contain a vulnerability in nvmap, where writes may be allowed to read-only buffers, which may result in escalation of privile… |
CVE-2021-33793 | Critical | 9.8 | 2021-08-11 | Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 have an out-of-bounds write because the Cross-Reference table is mishandled during Office document conv… |
CVE-2021-32947 | High | 7.8 | 2021-08-11 | FATEK Automation FvDesigner, Versions 1.5.88 and prior is vulnerable to a stack-based buffer overflow, which may allow an attacker to execute arbitrary code. |
CVE-2021-32939 | High | 7.8 | 2021-08-11 | FATEK Automation FvDesigner, Versions 1.5.88 and prior is vulnerable to an out-of-bounds write while processing project files, allowing an attacker to craft a… |
CVE-2021-38525 | Medium | 6.8 | 2021-08-11 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.76, D620… |
CVE-2021-38524 | Medium | 4.5 | 2021-08-11 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects MK62 before 1.0.6.110, MR60 before 1.0.6.110, MS60… |
CVE-2021-38523 | Medium | 6.9 | 2021-08-11 | NETGEAR R6400 devices before 1.0.1.70 are affected by a stack-based buffer overflow by an authenticated user. |
CVE-2021-38522 | Medium | 6.8 | 2021-08-11 | NETGEAR R6400 devices before 1.0.1.52 are affected by a stack-based buffer overflow by an authenticated user. |
CVE-2021-38517 | Medium | 6.9 | 2021-08-11 | Certain NETGEAR devices are affected by out-of-bounds reads and writes. This affects R6400 before 1.0.1.70, RAX75 before 1.0.4.120, RAX80 before 1.0.4.120, and… |
CVE-2020-21680 | Medium | 5.5 | 2021-08-10 | A stack-based buffer overflow in the put_arrow() component in genpict2e.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting… |
CVE-2020-21677 | Medium | 6.5 | 2021-08-10 | A heap-based buffer overflow in the sixel_encoder_output_without_macro function in encoder.c of Libsixel 1.8.4 allows attackers to cause a denial of service (D… |
CVE-2020-21676 | Medium | 5.5 | 2021-08-10 | A stack-based buffer overflow in the genpstrx_text() component in genpstricks.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via conve… |
CVE-2020-21675 | Medium | 5.5 | 2021-08-10 | A stack-based buffer overflow in the genptk_text component in genptk.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a x… |
CVE-2021-32943 | Critical | 9.8 | 2021-08-10 | The affected product is vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute arbitrary code on the WebAccess/SCADA (Web… |
CVE-2021-20349 | Medium | 5.3 | 2021-08-09 | IBM Tivoli Workload Scheduler 9.4 and 9.5 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A local attacker could overflow a… |
CVE-2021-38166 | High | 7.8 | 2021-08-07 | In kernel/bpf/hashtab.c in the Linux kernel through 5.13.8, there is an integer overflow and out-of-bounds write when many elements are placed in a single buck… |
CVE-2021-35325 | High | 7.5 | 2021-08-05 | A stack overflow in the checkLoginUser function of TOTOLINK A720R A720R_Firmware v4.1.5cu.470_B20200911 allows attackers to cause a denial of service (DOS). |
CVE-2021-36584 | Medium | 5.5 | 2021-08-05 | An issue was discovered in GPAC 1.0.1. There is a heap-based buffer overflow in the function gp_rtp_builder_do_tx3g function in ietf/rtp_pck_3gpp.c, as demonst… |
CVE-2021-29977 | High | 8.8 | 2021-08-05 | Mozilla developers reported memory safety bugs present in Firefox 89. Some of these bugs showed evidence of memory corruption and we presume that with enough e… |
CVE-2021-29976 | High | 8.8 | 2021-08-05 | Mozilla developers reported memory safety bugs present in code shared between Firefox and Thunderbird. Some of these bugs showed evidence of memory corruption… |
CVE-2021-29970 | High | 8.8 | 2021-08-05 | A malicious webpage could have triggered a use-after-free, memory corruption, and a potentially exploitable crash. *This bug could only be triggered when acces… |
CVE-2020-24829 | Medium | 5.5 | 2021-08-04 | An issue was discovered in GPAC from v0.5.2 to v0.8.0, as demonstrated by MP4Box. It contains a heap-based buffer overflow in gf_m2ts_section_complete in media… |
CVE-2021-26096 | Medium | 6.4 | 2021-08-04 | Multiple instances of heap-based buffer overflow in the command shell of FortiSandbox before 4.0.0 may allow an authenticated attacker to manipulate memory and… |
CVE-2021-24018 | Medium | 4.3 | 2021-08-04 | A buffer underwrite vulnerability in the firmware verification routine of FortiOS before 7.0.1 may allow an attacker located in the adjacent network to potenti… |
CVE-2021-37232 | Critical | 9.8 | 2021-08-04 | A stack overflow vulnerability occurs in Atomicparsley 20210124.204813.840499f through APar_read64() in src/util.cpp due to the lack of buffer size of uint32_b… |
CVE-2021-37231 | Medium | 5.5 | 2021-08-04 | A stack-buffer-overflow occurs in Atomicparsley 20210124.204813.840499f through APar_readX() in src/util.cpp while parsing a crafted mp4 file because of the mi… |
CVE-2021-30575 | High | 8.8 | 2021-08-03 | Out of bounds write in Autofill in Google Chrome prior to 92.0.4515.107 allowed a remote attacker who had compromised the renderer process to potentially explo… |
CVE-2021-30568 | High | 8.8 | 2021-08-03 | Heap buffer overflow in WebGL in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-30566 | High | 8.8 | 2021-08-03 | Stack buffer overflow in Printing in Google Chrome prior to 92.0.4515.107 allowed a remote attacker who had compromised the renderer process to potentially exp… |
CVE-2021-30565 | High | 8.8 | 2021-08-03 | Out of bounds write in Tab Groups in Google Chrome on Linux and ChromeOS prior to 92.0.4515.107 allowed an attacker who convinced a user to install a malicious… |
CVE-2021-30564 | High | 8.8 | 2021-08-03 | Heap buffer overflow in WebXR in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-30559 | High | 8.8 | 2021-08-03 | Out of bounds write in ANGLE in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-22423 | High | 7.8 | 2021-08-03 | A component of the HarmonyOS has a Out-of-bounds Write Vulnerability. Local attackers may exploit this vulnerability to cause integer overflow. |
CVE-2021-33485 | Critical | 9.8 | 2021-08-03 | CODESYS Control Runtime system before 3.5.17.10 has a Heap-based Buffer Overflow. |
CVE-2021-27954 | High | 8.2 | 2021-08-03 | A heap-based buffer overflow vulnerability exists on the ecobee3 lite 4.5.81.200 device in the HKProcessConfig function of the HomeKit Wireless Access Control… |
CVE-2021-22438 | Critical | 9.8 | 2021-08-02 | There is a Memory Buffer Improper Operation Limit Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause malicious code to… |
CVE-2021-22427 | High | 8.1 | 2021-08-02 | There is a Heap-based Buffer Overflow Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to authentication bypass. |
CVE-2021-22414 | High | 7.5 | 2021-08-02 | There is a Memory Buffer Errors Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause the system to reset. |
CVE-2021-37164 | Critical | 9.8 | 2021-08-02 | A buffer overflow issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus Panel operated by released versions of software before Nexus Software… |
CVE-2021-36004 | High | 8.8 | 2021-07-30 | Adobe InDesign version 16.0 (and earlier) is affected by an Out-of-bounds Write vulnerability in the CoolType library. An unauthenticated attacker could levera… |
CVE-2021-37576 | High | 7.8 | 2021-07-26 | arch/powerpc/kvm/book3s_rtas.c in the Linux kernel through 5.13.5 on the powerpc platform allows KVM guest OS users to cause host OS memory corruption via rtas… |
CVE-2015-2100 | High | 8.8 | 2021-07-22 | Multiple stack-based buffer overflows in WebGate eDVR Manager and Control Center allow remote attackers to execute arbitrary code via unspecified vectors to th… |
CVE-2021-35522 | Critical | 9.8 | 2021-07-22 | A Buffer Overflow in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2, Sigma devices before 4.9.4, and MA VP MD device… |
CVE-2021-35520 | Medium | 6.2 | 2021-07-22 | A Buffer Overflow in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2 allows physically proximate authenticated attack… |
CVE-2021-37220 | Medium | 5.5 | 2021-07-21 | MuPDF through 1.18.1 has an out-of-bounds write because the cached color converter does not properly consider the maximum key size of a hash table. This can, f… |
CVE-2020-19491 | High | 7.8 | 2021-07-21 | There is an invalid memory access bug in cgif.c that leads to a Segmentation fault in sam2p 0.49.4. A crafted input will lead to a denial of service or possibl… |
CVE-2020-19475 | Medium | 5.5 | 2021-07-21 | An issue has been found in function CCITTFaxStream::lookChar in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid write of siz… |
CVE-2020-19469 | Medium | 5.5 | 2021-07-21 | An issue has been found in function DCTStream::reset in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid write of size 8 . |
CVE-2020-20219 | Medium | 6.5 | 2021-07-21 | Mikrotik RouterOs 6.44.6 (long-term tree) suffers from a memory corruption vulnerability in the /nova/bin/igmp-proxy process. An authenticated remote attacker… |
CVE-2020-19609 | Medium | 5.5 | 2021-07-21 | Artifex MuPDF before 1.18.0 has a heap based buffer over-write in tiff_expand_colormap() function when parsing TIFF files allowing attackers to cause a denial… |
CVE-2021-1099 | High | 7.0 | 2021-07-21 | NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin) that could allow an attacker to cause stack-based buffer overflow and pu… |
CVE-2021-33909 | High | 7.8 | 2021-07-20 | fs/seq_file.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly restrict seq buffer allocations, leading to an integer overflow, an Out-o… |
CVE-2021-3246 | High | 8.8 | 2021-07-20 | A heap buffer overflow vulnerability in msadpcm_decode_block of libsndfile 1.0.30 allows attackers to execute arbitrary code via a crafted WAV file. |
CVE-2021-36979 | Medium | 5.5 | 2021-07-20 | Unicorn Engine 1.0.2 has an out-of-bounds write in tb_flush_armeb (called from cpu_arm_exec_armeb and tcg_cpu_exec_armeb). |
CVE-2021-36978 | Medium | 5.5 | 2021-07-20 | QPDF 9.x through 9.1.1 and 10.x through 10.0.4 has a heap-based buffer overflow in Pl_ASCII85Decoder::write (called from Pl_AES_PDF::flush and Pl_AES_PDF::fini… |
CVE-2021-36977 | Medium | 6.5 | 2021-07-20 | matio (aka MAT File I/O Library) 1.5.20 and 1.5.21 has a heap-based buffer overflow in H5MM_memcpy (called from H5MM_malloc and H5C_load_entry), related to use… |
CVE-2020-36431 | Medium | 5.5 | 2021-07-20 | Unicorn Engine 1.0.2 has an out-of-bounds write in helper_wfe_arm. |
CVE-2020-36430 | High | 7.8 | 2021-07-20 | libass 0.15.x before 0.15.1 has a heap-based buffer overflow in decode_chars (called from decode_font and process_text) because the wrong integer data type is… |
CVE-2020-36429 | Medium | 5.5 | 2021-07-20 | Variant_encodeJson in open62541 1.x before 1.0.4 has an out-of-bounds write for a large recursion depth. |
CVE-2020-36428 | High | 8.8 | 2021-07-20 | matio (aka MAT File I/O Library) 1.5.18 through 1.5.21 has a heap-based buffer overflow in ReadInt32DataDouble (called from ReadInt32Data and Mat_VarRead4). |
CVE-2019-25051 | High | 7.8 | 2021-07-20 | objstack in GNU Aspell 0.60.8 has a heap-based buffer overflow in acommon::ObjStack::dup_top (called from acommon::StringMap::add and acommon::Config::lookup_l… |
CVE-2019-25050 | High | 7.8 | 2021-07-20 | netCDF in GDAL 2.4.2 through 3.0.4 has a stack-based buffer overflow in nc4_get_att (called from nc4_get_att_tc and nc_get_att_text) and in uffd_cleanup (calle… |
CVE-2020-20249 | Medium | 6.5 | 2021-07-19 | Mikrotik RouterOs before stable 6.47 suffers from a memory corruption vulnerability in the resolver process. By sending a crafted packet, an authenticated remo… |
CVE-2021-20109 | High | 7.5 | 2021-07-19 | Due to the Asset Explorer agent not validating HTTPS certificates, an attacker on the network can statically configure their IP address to match the Asset Expl… |
CVE-2021-34448 | Medium | 6.8 | 2021-07-16 | Scripting Engine Memory Corruption Vulnerability |
CVE-2020-23707 | Medium | 6.5 | 2021-07-15 | A heap-based buffer overflow vulnerability in the function ok_jpg_decode_block_progressive() at ok_jpg.c:1054 of ok-file-formats through 2020-06-26 allows atta… |
CVE-2020-23706 | Medium | 6.5 | 2021-07-15 | A heap-based buffer overflow vulnerability in the function ok_jpg_decode_block_subsequent_scan() ok_jpg.c:1102 of ok-file-formats through 2020-06-26 allows att… |
CVE-2021-0276 | Critical | 9.8 | 2021-07-15 | A stack-based Buffer Overflow vulnerability in Juniper Networks SBR Carrier with EAP (Extensible Authentication Protocol) authentication configured, allows an… |
CVE-2020-11633 | Critical | 9.8 | 2021-07-15 | The Zscaler Client Connector for Windows prior to 2.1.2.74 had a stack based buffer overflow when connecting to misconfigured TLS servers. An adversary would p… |
CVE-2020-24133 | Critical | 9.8 | 2021-07-14 | A heap buffer overflow vulnerability in the r_asm_swf_disass function of Radare2-extras before commit e74a93c allows attackers to execute arbitrary code or car… |
CVE-2021-35211 | Critical | 9.0 | 2021-07-14 | Microsoft discovered a remote code execution (RCE) vulnerability in the SolarWinds Serv-U product utilizing a Remote Memory Escape Vulnerability. If exploited… |
CVE-2021-0601 | Medium | 5.5 | 2021-07-14 | In encodeFrames of avc_enc_fuzzer.cpp, there is a possible out of bounds write due to a double free. This could lead to local information disclosure with no ad… |
CVE-2021-0592 | High | 8.8 | 2021-07-14 | In various functions in WideVine, there are possible out of bounds writes due to improper input validation. This could lead to remote code execution with no ad… |
CVE-2021-0589 | High | 7.8 | 2021-07-14 | In BTM_TryAllocateSCN of btm_scn.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege… |
CVE-2021-0587 | High | 7.8 | 2021-07-14 | In StreamOut::prepareForWriting of StreamOut.cpp, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privi… |
CVE-2021-0585 | Medium | 6.7 | 2021-07-14 | In beginWrite and beginRead of MessageQueueBase.h, there is a possible out of bounds write due to improper input validation. This could lead to local escalatio… |
CVE-2021-0577 | High | 7.8 | 2021-07-14 | In flv extractor, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional ex… |
CVE-2021-0515 | Critical | 9.8 | 2021-07-14 | In Factory::CreateStrictFunctionMap of factory.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code exe… |
CVE-2020-20231 | Medium | 6.5 | 2021-07-14 | Mikrotik RouterOs through stable version 6.48.3 suffers from a memory corruption vulnerability in the /nova/bin/detnet process. An authenticated remote attacke… |
CVE-2021-33684 | Medium | 5.3 | 2021-07-14 | SAP NetWeaver AS ABAP and ABAP Platform, versions - KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.2… |
CVE-2021-33681 | Medium | 6.5 | 2021-07-14 | SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated CGM file received from untrusted sources which causes out of bounds write and c… |
CVE-2020-19721 | Medium | 6.5 | 2021-07-13 | A heap buffer overflow vulnerability in Ap4TrunAtom.cpp of Bento 1.5.1-628 may lead to an out-of-bounds write while running mp42aac, leading to system crashes… |
CVE-2020-20252 | Medium | 6.5 | 2021-07-13 | Mikrotik RouterOs before stable version 6.47 suffers from a memory corruption vulnerability in the /nova/bin/lcdstat process. An authenticated remote attacker… |
CVE-2020-22907 | High | 7.5 | 2021-07-13 | Stack overflow vulnerability in function jsi_evalcode_sub in jsish before 3.0.18, allows remote attackers to cause a Denial of Service via a crafted value to t… |
CVE-2020-20250 | Medium | 6.5 | 2021-07-13 | Mikrotik RouterOs before stable version 6.47 suffers from a memory corruption vulnerability in the /nova/bin/lcdstat process. An authenticated remote attacker… |
CVE-2021-34331 | High | 7.8 | 2021-07-13 | A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The Jt981.dll library in affected applica… |
CVE-2021-34329 | High | 7.8 | 2021-07-13 | A vulnerability has been identified in JT2Go (All versions < V13.2), Solid Edge SE2021 (All Versions < SE2021MP5), Teamcenter Visualization (All versions < V13… |
CVE-2021-34328 | High | 7.8 | 2021-07-13 | A vulnerability has been identified in JT2Go (All versions < V13.2), Solid Edge SE2021 (All Versions < SE2021MP5), Teamcenter Visualization (All versions < V13… |
CVE-2021-34327 | High | 7.8 | 2021-07-13 | A vulnerability has been identified in JT2Go (All versions < V13.2), Solid Edge SE2021 (All Versions < SE2021MP5), Teamcenter Visualization (All versions < V13… |
CVE-2021-34326 | High | 7.8 | 2021-07-13 | A vulnerability has been identified in JT2Go (All versions < V13.2), Solid Edge SE2021 (All Versions < SE2021MP5), Teamcenter Visualization (All versions < V13… |
CVE-2021-34323 | High | 7.8 | 2021-07-13 | A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The Jt981.dll library in affected applica… |
CVE-2021-34319 | High | 7.8 | 2021-07-13 | A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The BMP_loader.dll library in affected ap… |
CVE-2021-34318 | High | 7.8 | 2021-07-13 | A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The BMP_loader.dll library in affected ap… |
CVE-2021-34317 | High | 7.8 | 2021-07-13 | A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The BMP_loader.dll library in affected ap… |