CWE-787 · Out-of-bounds Write (page 31)
Page 31 of 100 — CVEs classified under CWE-787, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-20092 | High | 7.8 | 2024-10-07 | In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileg… |
CVE-2024-20090 | Medium | 6.7 | 2024-10-07 | In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileg… |
CVE-2024-9482 | Medium | 5.1 | 2024-10-04 | An out-of-bounds write in the engine module in AVG/Avast Antivirus signature <24092400 released on 24/Sep/2024 on MacOS allows a malformed Mach-O file to crash… |
CVE-2024-9481 | Medium | 5.1 | 2024-10-04 | An out-of-bounds write in the engine module in AVG/Avast Antivirus signature <24092400 released on 24/Sep/2024 on MacOS allows a malformed eml file to crash th… |
CVE-2024-6444 | Medium | 6.3 | 2024-10-04 | No proper validation of the length of user input in olcp_ind_handler in zephyr/subsys/bluetooth/services/ots/ots_client.c. |
CVE-2024-6443 | Medium | 6.3 | 2024-10-04 | In utf8_trunc in zephyr/lib/utils/utf8.c, last_byte_p can point to one byte before the string pointer if the string is empty. |
CVE-2024-6442 | Medium | 6.3 | 2024-10-04 | In ascs_cp_rsp_add in /subsys/bluetooth/audio/ascs.c, an unchecked tailroom could lead to a global buffer overflow. |
CVE-2024-41595 | High | 8.0 | 2024-10-03 | DrayTek Vigor310 devices through 4.3.2.6 allow a remote attacker to change settings or cause a denial of service via .cgi pages because of missing bounds check… |
CVE-2024-41593 | Critical | 9.8 | 2024-10-03 | DrayTek Vigor310 devices through 4.3.2.6 allow a remote attacker to execute arbitrary code via the function ft_payload_dns(), because a byte sign-extension ope… |
CVE-2024-47135 | High | 7.8 | 2024-10-03 | Stack-based buffer overflow vulnerability exists in Kostac PLC Programming Software (Former name: Koyo PLC Programming Software) Version 1.6.14.0 and earlier… |
CVE-2024-47134 | High | 7.8 | 2024-10-03 | Out-of-bounds write vulnerability exists in Kostac PLC Programming Software (Former name: Koyo PLC Programming Software) Version 1.6.14.0 and earlier. Having a… |
CVE-2024-20501 | High | 8.6 | 2024-10-02 | Multiple vulnerabilities in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthentica… |
CVE-2024-20499 | High | 8.6 | 2024-10-02 | Multiple vulnerabilities in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthentica… |
CVE-2024-20524 | Medium | 6.8 | 2024-10-02 | A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrat… |
CVE-2024-20523 | Medium | 6.8 | 2024-10-02 | A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrat… |
CVE-2024-20522 | Medium | 6.5 | 2024-10-02 | A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrat… |
CVE-2024-20521 | Medium | 6.5 | 2024-10-02 | A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrat… |
CVE-2024-20520 | Medium | 6.5 | 2024-10-02 | A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrat… |
CVE-2024-20519 | Medium | 6.5 | 2024-10-02 | A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrat… |
CVE-2024-20518 | Medium | 6.5 | 2024-10-02 | A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrat… |
CVE-2024-20517 | Medium | 6.8 | 2024-10-02 | A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrat… |
CVE-2024-20516 | Medium | 6.8 | 2024-10-02 | A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrat… |
CVE-2024-46276 | High | 7.8 | 2024-10-01 | cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_chunk() function at cute_png.h. |
CVE-2024-46274 | High | 7.8 | 2024-10-01 | cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_stored() function at cute_png.h. |
CVE-2024-46267 | High | 7.8 | 2024-10-01 | cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_block() function at cute_png.h. |
CVE-2024-46264 | High | 7.8 | 2024-10-01 | cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_find() function at cute_png.h. |
CVE-2024-46263 | High | 7.8 | 2024-10-01 | cute_png v1.05 was discovered to contain a stack overflow via the cp_dynamic() function at cute_png.h. |
CVE-2024-46261 | High | 7.8 | 2024-10-01 | cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_make32() function at cute_png.h. |
CVE-2024-46259 | High | 7.8 | 2024-10-01 | cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_unfilter() function at cute_png.h. |
CVE-2024-46258 | High | 7.8 | 2024-10-01 | cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_load_png_mem() function at cute_png.h. |
CVE-2024-7674 | High | 7.8 | 2024-09-30 | A maliciously crafted DWFX file, when parsed in dwfcore.dll through Autodesk Navisworks, can force a Heap-based Buffer Overflow. A malicious actor can leverage… |
CVE-2024-7673 | High | 7.8 | 2024-09-30 | A maliciously crafted DWFX file, when parsed in w3dtk.dll through Autodesk Navisworks, can force a Heap-based Buffer Overflow. A malicious actor can leverage t… |
CVE-2024-7672 | High | 7.8 | 2024-09-30 | A maliciously crafted DWF file, when parsed in dwfcore.dll through Autodesk Autodesk Navisworks, may force an Out-of-Bounds Write vulnerability. A malicious ac… |
CVE-2024-7671 | High | 7.8 | 2024-09-30 | A maliciously crafted DWFX file, when parsed in dwfcore.dll through Autodesk Navisworks, may force an Out-of-Bounds Write vulnerability. A malicious actor may… |
CVE-2024-45993 | Medium | 6.5 | 2024-09-30 | Giflib Project v5.2.2 is vulnerable to a heap buffer overflow via gif2rgb. |
CVE-2024-23967 | High | 8.0 | 2024-09-28 | Autel MaxiCharger AC Elite Business C50 WebSocket Base64 Decoding Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows ne… |
CVE-2024-23959 | High | 8.0 | 2024-09-28 | Autel MaxiCharger AC Elite Business C50 BLE AppChargingControl Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows netwo… |
CVE-2024-23935 | High | 8.0 | 2024-09-28 | Alpine Halo9 DecodeUTF7 Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitr… |
CVE-2024-23957 | High | 8.8 | 2024-09-28 | Autel MaxiCharger AC Elite Business C50 DLB_HostHeartBeat Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-ad… |
CVE-2024-23938 | High | 8.8 | 2024-09-28 | Silicon Labs Gecko OS Debug Interface Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to… |
CVE-2024-46853 | High | 7.8 | 2024-09-27 | In the Linux kernel, the following vulnerability has been resolved: spi: nxp-fspi: fix the KASAN report out-of-bounds bug Change the memcpy length to fix the… |
CVE-2024-47293 | Medium | 4.7 | 2024-09-27 | Out-of-bounds write vulnerability in the HAL-WIFI module Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2024-39433 | Medium | 6.2 | 2024-09-27 | In drm service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privile… |
CVE-2024-39432 | High | 8.3 | 2024-09-27 | In UMTS RLC driver, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with System execution pri… |
CVE-2024-39431 | High | 8.3 | 2024-09-27 | In UMTS RLC driver, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with System execution pr… |
CVE-2022-49039 | Medium | 6.7 | 2024-09-26 | Out-of-bounds write vulnerability in backup task management functionality in Synology Drive Client before 3.4.0-15721 allows local users with administrator pri… |
CVE-2024-46488 | Medium | 5.5 | 2024-09-25 | sqlite-vec v0.1.1 was discovered to contain a heap buffer overflow via the npy_token_next function. This vulnerability allows attackers to cause a Denial of Se… |
CVE-2024-41445 | Medium | 6.5 | 2024-09-25 | Library MDF (mdflib) v2.1 is vulnerable to a heap-based buffer overread via a crafted mdf4 file is parsed using the ReadData function |
CVE-2024-20508 | Medium | 5.8 | 2024-09-25 | A vulnerability in Cisco Unified Threat Defense (UTD) Snort Intrusion Prevention System (IPS) Engine for Cisco IOS XE Software could allow an unauthenticated… |
CVE-2024-20496 | Medium | 6.1 | 2024-09-25 | A vulnerability in the UDP packet validation code of Cisco SD-WAN vEdge Software could allow an unauthenticated, adjacent attacker to cause a denial of service… |
CVE-2024-20433 | High | 8.6 | 2024-09-25 | A vulnerability in the Resource Reservation Protocol (RSVP) feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote atta… |
CVE-2024-9121 | High | 8.8 | 2024-09-25 | Inappropriate implementation in V8 in Google Chrome prior to 129.0.6668.70 allowed a remote attacker to potentially perform out of bounds memory access via a c… |
CVE-2024-38266 | Medium | 4.9 | 2024-09-24 | An improper restriction of operations within the bounds of a memory buffer in the parameter type parser of the Zyxel VMG8825-T50K firmware versions through 5.5… |
CVE-2024-7024 | Critical | 9.6 | 2024-09-23 | Inappropriate implementation in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML… |
CVE-2024-7018 | High | 7.8 | 2024-09-23 | Heap buffer overflow in PDF in Google Chrome prior to 124.0.6367.78 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (C… |
CVE-2024-46652 | Critical | 9.8 | 2024-09-20 | Tenda AC8v4 V16.03.34.06 has a stack overflow vulnerability in the fromAdvSetMacMtuWan function. |
CVE-2024-9043 | Critical | 9.8 | 2024-09-20 | Secure Email Gateway from Cellopoint has Buffer Overflow Vulnerability in authentication process. Remote unauthenticated attackers can send crafted packets to… |
CVE-2024-43496 | Medium | 6.5 | 2024-09-19 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
CVE-2024-31570 | Critical | 9.8 | 2024-09-19 | libfreeimage in FreeImage 3.4.0 through 3.18.0 has a stack-based buffer overflow in the PluginXPM.cpp Load function via an XPM file. |
CVE-2024-45769 | Medium | 5.5 | 2024-09-19 | A vulnerability was found in Performance Co-Pilot (PCP). This flaw allows an attacker to send specially crafted data to the system, which could cause the prog… |
CVE-2024-7254 | High | 7.5 | 2024-09-19 | Any project that parses untrusted Protocol Buffers data containing an arbitrary number of nested groups / series of SGROUP tags can corrupted by exceeding the… |
CVE-2024-34026 | Critical | 9.0 | 2024-09-18 | A stack-based buffer overflow vulnerability exists in the OpenPLC Runtime EtherNet/IP parser functionality of OpenPLC _v3 b4702061dc14d1024856f71b4543298d77007… |
CVE-2024-46774 | High | 7.1 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas() Smatch warns: arch/… |
CVE-2024-46766 | High | 7.8 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: ice: move netif_queue_set_napi to rtnl-protected sections Currently, netif_queue_set_napi… |
CVE-2024-46729 | High | 7.8 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix incorrect size calculation for loop [WHY] fe_clk_en has size of 5 bu… |
CVE-2024-46725 | High | 7.8 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix out-of-bounds write warning Check the ring type value to fix the out-of-b… |
CVE-2022-39068 | Medium | 4.5 | 2024-09-18 | There is a buffer overflow vulnerability in ZTE MF296R. Due to insufficient validation of the SMS parameter length, an authenticated attacker could use the vul… |
CVE-2024-8905 | High | 8.8 | 2024-09-17 | Inappropriate implementation in V8 in Google Chrome prior to 129.0.6668.58 allowed a remote attacker to potentially exploit stack corruption via a crafted HTML… |
CVE-2024-8948 | High | 7.3 | 2024-09-17 | A vulnerability was found in MicroPython 1.23.0. It has been rated as critical. Affected by this issue is the function mpz_as_bytes of the file py/objint.c. Th… |
CVE-2024-8946 | High | 7.3 | 2024-09-17 | A vulnerability was found in MicroPython 1.23.0. It has been classified as critical. Affected is the function mp_vfs_umount of the file extmod/vfs.c of the com… |
CVE-2024-38812 | Critical | 9.8 | 2024-09-17 | The vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server… |
CVE-2024-44178 | Medium | 5.5 | 2024-09-17 | This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7. An app may be ab… |
CVE-2024-40841 | Medium | 5.5 | 2024-09-17 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7. Processing a maliciously… |
CVE-2023-22351 | Medium | 6.1 | 2024-09-16 | Out-of-bounds write in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. |
CVE-2024-45695 | Critical | 9.8 | 2024-09-16 | The web service of certain models of D-Link wireless routers contains a Stack-based Buffer Overflow vulnerability, which allows unauthenticated remote attacker… |
CVE-2024-6259 | High | 7.6 | 2024-09-13 | BT: HCI: adv_ext_report Improper discarding in adv_ext_report |
CVE-2024-44095 | High | 7.8 | 2024-09-13 | In ppmp_protect_mfcfw_buf of code/drm_fw.c, there is a possible corrupt memory due to a logic error in the code. This could lead to local escalation of privile… |
CVE-2024-44094 | High | 7.8 | 2024-09-13 | In ppmp_protect_mfcfw_buf of code/drm_fw.c, there is a possible memory corruption due to improper input validation. This could lead to local escalation of priv… |
CVE-2024-44093 | High | 7.8 | 2024-09-13 | In ppmp_unprotect_buf of drm/code/drm_fw.c, there is a possible memory corruption due to a logic error in the code. This could lead to local escalation of priv… |
CVE-2024-6137 | High | 7.6 | 2024-09-13 | BT: Classic: SDP OOB access in get_att_search_list |
CVE-2024-5931 | Medium | 6.3 | 2024-09-13 | BT: Unchecked user input in bap_broadcast_assistant |
CVE-2024-46713 | High | 7.8 | 2024-09-13 | In the Linux kernel, the following vulnerability has been resolved: perf/aux: Fix AUX buffer serialization Ole reported that event->mmap_mutex is strictly in… |
CVE-2024-46049 | Critical | 9.8 | 2024-09-13 | Tenda O6 V3.0 firmware V1.0.0.7(2054) contains a stack overflow vulnerability in the formexeCommand function. |
CVE-2024-46047 | High | 7.5 | 2024-09-13 | Tenda FH451 v1.0.0.9 has a stack overflow vulnerability in the fromDhcpListClient function. |
CVE-2024-46046 | Critical | 9.8 | 2024-09-13 | Tenda FH451 v1.0.0.9 has a stack overflow vulnerability located in the RouteStatic function. |
CVE-2024-46045 | Critical | 9.8 | 2024-09-13 | Tenda CH22 V1.0.0.6(468) has a stack overflow vulnerability located in the frmL7PlotForm function. |
CVE-2024-46044 | Critical | 9.8 | 2024-09-13 | CH22 V1.0.0.6(468) has a stack overflow vulnerability located in the fromqossetting function. |
CVE-2024-45109 | High | 7.8 | 2024-09-13 | Photoshop Desktop versions 24.7.4, 25.11 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the… |
CVE-2024-45108 | High | 7.8 | 2024-09-13 | Photoshop Desktop versions 24.7.4, 25.11 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the… |
CVE-2024-43760 | High | 7.8 | 2024-09-13 | Photoshop Desktop versions 24.7.4, 25.11 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the… |
CVE-2024-41859 | High | 7.8 | 2024-09-13 | After Effects versions 23.6.6, 24.5 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the conte… |
CVE-2024-39384 | High | 7.8 | 2024-09-13 | Premiere Pro versions 24.5, 23.6.8 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the contex… |
CVE-2024-39381 | High | 7.8 | 2024-09-13 | After Effects versions 23.6.6, 24.5 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the conte… |
CVE-2024-39377 | High | 7.8 | 2024-09-13 | Media Encoder versions 24.5, 23.6.8 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the conte… |
CVE-2024-46689 | Medium | 5.5 | 2024-09-13 | In the Linux kernel, the following vulnerability has been resolved: soc: qcom: cmd-db: Map shared memory as WC, not WB Linux does not write into cmd-db regio… |
CVE-2024-46688 | Medium | 5.5 | 2024-09-13 | In the Linux kernel, the following vulnerability has been resolved: erofs: fix out-of-bound access when z_erofs_gbuf_growsize() partially fails If z_erofs_gb… |
CVE-2024-45181 | High | 7.8 | 2024-09-12 | An issue was discovered in WibuKey64.sys in WIBU-SYSTEMS WibuKey before v6.70 and fixed in v.6.70. An improper bounds check allows crafted packets to cause an… |
CVE-2024-45030 | Critical | 9.8 | 2024-09-11 | In the Linux kernel, the following vulnerability has been resolved: igb: cope with large MAX_SKB_FRAGS Sabrina reports that the igb driver does not cope well… |
CVE-2024-45026 | High | 7.0 | 2024-09-11 | In the Linux kernel, the following vulnerability has been resolved: s390/dasd: fix error recovery leading to data corruption on ESE devices Extent Space Effi… |
CVE-2024-45025 | Medium | 5.5 | 2024-09-11 | In the Linux kernel, the following vulnerability has been resolved: fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE copy_fd_bitmaps(new, old… |