CWE-787 · Out-of-bounds Write (page 32)
Page 32 of 100 — CVEs classified under CWE-787, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-45023 | High | 7.8 | 2024-09-11 | In the Linux kernel, the following vulnerability has been resolved: md/raid1: Fix data corruption for degraded array with slow disk read_balance() will avoid… |
CVE-2024-45022 | High | 7.8 | 2024-09-11 | In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: fix page mapping if vm_area_alloc_pages() with high order fallback to order 0 … |
CVE-2024-45020 | High | 7.8 | 2024-09-11 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a kernel verifier crash in stacksafe() Daniel Hodges reported a kernel verifier… |
CVE-2024-39378 | High | 7.8 | 2024-09-11 | Audition versions 24.4.1, 23.6.6 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context… |
CVE-2024-8636 | High | 8.8 | 2024-09-11 | Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… |
CVE-2024-40658 | High | 7.8 | 2024-09-11 | In getConfig of SoftVideoDecoderOMXComponent.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of… |
CVE-2024-31336 | High | 7.8 | 2024-09-11 | In PVRSRVBridgeRGXKickTA3D2 of server_rgxta3d_bridge.c, there is a possible arbitrary code execution due to improper input validation. This could lead to local… |
CVE-2024-8443 | Low | 2.9 | 2024-09-10 | A heap-based buffer overflow vulnerability was found in the libopensc OpenPGP driver. A crafted USB device or smart card with malicious responses to the APDUs… |
CVE-2024-27365 | Medium | 4.4 | 2024-09-09 | An issue was discovered in Samsung Mobile Processor Exynos Exynos 980, Exynos 850, Exynos 1080, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 1480, Exynos W920… |
CVE-2024-27387 | Medium | 6.7 | 2024-09-09 | An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_rx_range_done_ind()… |
CVE-2024-27383 | Medium | 6.7 | 2024-09-09 | An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_get_scan_extra_ies(… |
CVE-2024-44375 | High | 7.5 | 2024-09-09 | D-Link DI-8100 v16.07.26A1 has a stack overflow vulnerability in the dbsrv_asp function. |
CVE-2023-52916 | High | 7.8 | 2024-09-06 | In the Linux kernel, the following vulnerability has been resolved: media: aspeed: Fix memory overwrite if timing is 1600x900 When capturing 1600x900, system… |
CVE-2024-32668 | High | 8.2 | 2024-09-05 | An insufficient boundary validation in the USB code could lead to an out-of-bounds write on the heap, with data controlled by the caller. A malicious, privile… |
CVE-2024-45288 | High | 8.4 | 2024-09-05 | A missing null-termination character in the last element of an nvlist array string can lead to writing outside the allocated buffer. |
CVE-2024-41928 | High | 8.4 | 2024-09-05 | Malicious software running in a guest VM can exploit the buffer overflow to achieve code execution on the host in the bhyve userspace process, which typically… |
CVE-2024-44977 | High | 7.8 | 2024-09-04 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Validate TA binary size Add TA binary size validation to avoid OOB write. (c… |
CVE-2024-42642 | Medium | 6.7 | 2024-09-04 | Micron Crucial MX500 Series Solid State Drives M3CR046 is vulnerable to Buffer Overflow, which can be triggered by sending specially crafted ATA packets from t… |
CVE-2024-8408 | Medium | 6.3 | 2024-09-04 | A vulnerability was found in Linksys WRT54G 4.21.5. It has been rated as critical. Affected by this issue is the function validate_services_port of the file /a… |
CVE-2024-34660 | High | 7.3 | 2024-09-04 | Heap-based out-of-bounds write in Samsung Notes prior to version 4.4.21.62 allows local attackers to execute arbitrary code. |
CVE-2024-34657 | High | 8.6 | 2024-09-04 | Stack-based out-of-bounds write in Samsung Notes prior to version 4.4.21.62 allows remote attackers to execute arbitrary code. |
CVE-2024-7970 | High | 8.8 | 2024-09-03 | Out of bounds write in V8 in Google Chrome prior to 128.0.6613.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (C… |
CVE-2024-8389 | Critical | 9.8 | 2024-09-03 | Memory safety bugs present in Firefox 129. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could h… |
CVE-2024-8387 | Critical | 9.8 | 2024-09-03 | Memory safety bugs present in Firefox 129, Firefox ESR 128.1, and Thunderbird 128.1. Some of these bugs showed evidence of memory corruption and we presume tha… |
CVE-2024-8384 | Critical | 9.8 | 2024-09-03 | The JavaScript garbage collector could mis-color cross-compartment objects if OOM conditions were detected at the right point between two passes. This could ha… |
CVE-2024-45306 | Medium | 4.5 | 2024-09-02 | Vim is an open source, command line text editor. Patch v9.1.0038 optimized how the cursor position is calculated and removed a loop, that verified that the cur… |
CVE-2024-33054 | High | 7.8 | 2024-09-02 | Memory corruption during the handshake between the Primary Virtual Machine and Trusted Virtual Machine. |
CVE-2024-33052 | High | 7.8 | 2024-09-02 | Memory corruption when user provides data for FM HCI command control operations. |
CVE-2024-33045 | High | 8.4 | 2024-09-02 | Memory corruption when BTFM client sends new messages over Slimbus to ADSP. |
CVE-2024-33042 | High | 7.8 | 2024-09-02 | Memory corruption when Alternative Frequency offset value is set to 255. |
CVE-2024-33038 | High | 7.8 | 2024-09-02 | Memory corruption while passing untrusted/corrupted pointers from DSP to EVA. |
CVE-2024-39816 | High | 8.4 | 2024-09-02 | in OpenHarmony v4.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. |
CVE-2024-38386 | High | 8.4 | 2024-09-02 | in OpenHarmony v4.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. |
CVE-2024-20087 | Medium | 6.7 | 2024-09-02 | In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileg… |
CVE-2024-20086 | Medium | 6.7 | 2024-09-02 | In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileg… |
CVE-2024-45508 | Critical | 9.8 | 2024-09-01 | HTMLDOC before 1.9.19 has an out-of-bounds write in parse_paragraph in ps-pdf.cxx because of an attempt to strip leading whitespace from a whitespace-only node. |
CVE-2024-0110 | Medium | 4.4 | 2024-08-31 | NVIDIA CUDA Toolkit contains a vulnerability in command `cuobjdump` where a user may cause an out-of-bound write by passing in a malformed ELF file. A successf… |
CVE-2024-43700 | High | 7.8 | 2024-08-29 | xfpt versions prior to 1.01 fails to handle appropriately some parameters inside the input data, resulting in a stack-based buffer overflow vulnerability. When… |
CVE-2024-8250 | High | 7.8 | 2024-08-29 | NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via packet injection or crafted capture file |
CVE-2024-8198 | High | 8.8 | 2024-08-28 | Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.113 allowed a remote attacker who had compromised the renderer process to potentially exploit… |
CVE-2024-8193 | High | 8.8 | 2024-08-28 | Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.113 allowed a remote attacker who had compromised the renderer process to potentially exploit… |
CVE-2024-34195 | Critical | 9.8 | 2024-08-28 | TOTOLINK AC1200 Wireless Router A3002R Firmware V1.1.1-B20200824 is vulnerable to Buffer Overflow. In the boa server program's CGI handling function formWlEncr… |
CVE-2024-8231 | High | 8.8 | 2024-08-28 | A vulnerability classified as critical has been found in Tenda O6 1.0.0.7(2054). Affected is the function fromVirtualSet of the file /goform/setPortForward. Th… |
CVE-2024-8230 | High | 8.8 | 2024-08-28 | A vulnerability was found in Tenda O6 1.0.0.7(2054). It has been rated as critical. This issue affects the function fromSafeSetMacFilter of the file /goform/se… |
CVE-2024-8229 | High | 8.8 | 2024-08-28 | A vulnerability was found in Tenda O6 1.0.0.7(2054). It has been declared as critical. This vulnerability affects the function frommacFilterModify of the file… |
CVE-2024-8228 | High | 8.8 | 2024-08-28 | A vulnerability was found in Tenda O5 1.0.0.8(5017). It has been classified as critical. This affects the function fromSafeSetMacFilter of the file /goform/set… |
CVE-2024-8227 | High | 8.8 | 2024-08-28 | A vulnerability was found in Tenda O1 1.0.0.7(10648) and classified as critical. Affected by this issue is the function fromDhcpSetSer of the file /goform/Dhcp… |
CVE-2024-8226 | High | 8.8 | 2024-08-28 | A vulnerability has been found in Tenda O1 1.0.0.7(10648) and classified as critical. Affected by this vulnerability is the function formSetCfm of the file /go… |
CVE-2024-8225 | High | 8.8 | 2024-08-27 | A vulnerability, which was classified as critical, was found in Tenda G3 15.11.0.20. Affected is the function formSetSysTime of the file /goform/SetSysTimeCfg… |
CVE-2024-8224 | High | 8.8 | 2024-08-27 | A vulnerability, which was classified as critical, has been found in Tenda G3 15.11.0.20. This issue affects the function formSetDebugCfg of the file /goform/s… |
CVE-2024-42851 | High | 7.8 | 2024-08-27 | Buffer Overflow vulnerability in open source exiftags v.1.01 allows a local attacker to execute arbitrary code via the paresetag function. |
CVE-2024-44557 | Critical | 9.8 | 2024-08-26 | Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function setIptvInfo. |
CVE-2024-44555 | Critical | 9.8 | 2024-08-26 | Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function setIptvInfo. |
CVE-2024-44553 | Critical | 9.8 | 2024-08-26 | Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formGetIptv. |
CVE-2024-44552 | Critical | 9.8 | 2024-08-26 | Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function formGetIptv. |
CVE-2024-44551 | Critical | 9.8 | 2024-08-26 | Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function formGetIptv. |
CVE-2024-44550 | Critical | 9.8 | 2024-08-26 | Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function formGetIptv. |
CVE-2024-44549 | Critical | 9.8 | 2024-08-26 | Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function formGetIptv. |
CVE-2024-41285 | Critical | 9.8 | 2024-08-26 | A stack overflow in FAST FW300R v1.3.13 Build 141023 Rel.61347n allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via a crafted fil… |
CVE-2024-44558 | Critical | 9.8 | 2024-08-26 | Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function setIptvInfo. |
CVE-2024-44556 | Critical | 9.8 | 2024-08-26 | Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function setIptvInfo. |
CVE-2024-44938 | Medium | 5.5 | 2024-08-26 | In the Linux kernel, the following vulnerability has been resolved: jfs: Fix shift-out-of-bounds in dbDiscardAG When searching for the next smaller log2 bloc… |
CVE-2024-44565 | Critical | 9.8 | 2024-08-26 | Tenda AX1806 v1.0.0.1 contains a stack overflow via the serverName parameter in the function form_fast_setting_internet_set. |
CVE-2024-44563 | Critical | 9.8 | 2024-08-26 | Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function setIptvInfo. |
CVE-2024-41879 | High | 7.8 | 2024-08-26 | Acrobat Reader versions 127.0.2651.105 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the co… |
CVE-2024-44933 | High | 7.3 | 2024-08-26 | In the Linux kernel, the following vulnerability has been resolved: bnxt_en : Fix memory out-of-bounds in bnxt_fill_hw_rss_tbl() A recent commit has modified… |
CVE-2024-43910 | High | 7.8 | 2024-08-26 | In the Linux kernel, the following vulnerability has been resolved: bpf: add missing check_func_arg_reg_off() to prevent out-of-bounds memory accesses Curren… |
CVE-2024-38207 | Medium | 6.3 | 2024-08-23 | Microsoft Edge (HTML-based) Memory Corruption Vulnerability |
CVE-2024-44390 | High | 8.8 | 2024-08-23 | Tenda FH1206 V1.2.0.8(8155)_EN contains a Buffer Overflow vulnerability via the function formWrlsafeset. |
CVE-2024-44387 | Medium | 6.5 | 2024-08-23 | Tenda FH1206 V1.2.0.8(8155)_EN contains a Buffer Overflow vulnerability via the functino formWrlExtraGet. |
CVE-2022-48927 | High | 7.8 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: iio: adc: tsc2046: fix memory corruption by preventing array overflow On one side we have… |
CVE-2022-48923 | High | 7.8 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: btrfs: prevent copying too big compressed lzo segment Compressed length can be corrupted… |
CVE-2024-7973 | High | 8.8 | 2024-08-21 | Heap buffer overflow in PDFium in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file… |
CVE-2024-7967 | High | 8.8 | 2024-08-21 | Heap buffer overflow in Fonts in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… |
CVE-2024-7965 | High | 8.8 | 2024-08-21 | Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… |
CVE-2023-29929 | High | 7.5 | 2024-08-21 | Buffer Overflow vulnerability found in Kemptechnologies Loadmaster before v.7.2.60.0 allows a remote attacker to casue a denial of service via the libkemplink… |
CVE-2024-20375 | High | 8.6 | 2024-08-21 | A vulnerability in the SIP call processing function of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Manag… |
CVE-2024-6812 | High | 7.8 | 2024-08-21 | IrfanView WSQ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on aff… |
CVE-2024-6811 | High | 7.8 | 2024-08-21 | IrfanView WSQ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on aff… |
CVE-2024-37008 | High | 7.8 | 2024-08-21 | A maliciously crafted DWG file, when parsed in Revit, can force a stack-based buffer overflow. A malicious actor can leverage this vulnerability to execute arb… |
CVE-2024-30949 | Critical | 9.8 | 2024-08-20 | An issue in newlib v.4.3.0 allows an attacker to execute arbitrary code via the time unit scaling in the _gettimeofday function. |
CVE-2024-43688 | High | 7.3 | 2024-08-20 | cron/entry.c in vixie cron before 9cc8ab1, as used in OpenBSD 7.4 and 7.5, allows a heap-based buffer underflow and memory corruption. NOTE: this issue was int… |
CVE-2024-7305 | High | 7.8 | 2024-08-20 | A maliciously crafted DWF file, when parsed in AdDwfPdk.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may lev… |
CVE-2024-42815 | Critical | 9.8 | 2024-08-19 | In the TP-Link RE365 V1_180213, there is a buffer overflow vulnerability due to the lack of length verification for the USER_AGENT field in /usr/bin/httpd. Att… |
CVE-2024-44073 | High | 7.5 | 2024-08-19 | The Miniscript (aka rust-miniscript) library before 12.2.0 for Rust allows stack consumption because it does not properly track tree depth. |
CVE-2024-7909 | High | 8.8 | 2024-08-18 | A vulnerability has been found in TOTOLINK EX1200L 9.3.5u.6146_B20201023 and classified as critical. Affected by this vulnerability is the function setLanguage… |
CVE-2024-7908 | High | 8.8 | 2024-08-18 | A vulnerability, which was classified as critical, was found in TOTOLINK EX1200L 9.3.5u.6146_B20201023. Affected is the function setDefResponse of the file /ww… |
CVE-2024-43839 | High | 7.8 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: bna: adjust 'name' buf size of bna_tcb and bna_ccb structures To have enough space to wri… |
CVE-2024-43825 | High | 7.8 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: iio: Fix the sorting functionality in iio_gts_build_avail_time_table The sorting in iio_g… |
CVE-2024-42288 | High | 7.8 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix for possible memory corruption Init Control Block is dereferenced inco… |
CVE-2024-42987 | High | 7.5 | 2024-08-15 | Tenda FH1206 v02.03.01.35 was discovered to contain a stack-based buffer overflow vulnerability in the fromPptpUserAdd function. The vulnerability can be trigg… |
CVE-2024-42986 | High | 7.5 | 2024-08-15 | Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the PPPOEPassword parameter in the fromAdvSetWan function. This vulnerability allows a… |
CVE-2024-42985 | High | 7.5 | 2024-08-15 | Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromNatlimit function. This vulnerability allows attackers t… |
CVE-2024-42984 | High | 7.5 | 2024-08-15 | Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromP2pListFilter function. This vulnerability allows attack… |
CVE-2024-42983 | High | 7.5 | 2024-08-15 | Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the pptpPPW parameter in the fromAdvSetWan function. This vulnerability allows attacke… |
CVE-2024-42982 | High | 7.5 | 2024-08-15 | Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromVirtualSer function. This vulnerability allows attackers… |
CVE-2024-42981 | High | 7.5 | 2024-08-15 | Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the delno parameter in the fromPptpUserSetting function. This vulnerability allows att… |
CVE-2024-42980 | High | 7.5 | 2024-08-15 | Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the frmL7ImForm function. This vulnerability allows attackers to… |
CVE-2024-42979 | High | 7.5 | 2024-08-15 | Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the frmL7ProtForm function. This vulnerability allows attackers… |
CVE-2024-42977 | High | 7.5 | 2024-08-15 | Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the qos parameter in the fromqossetting function. This vulnerability allows attackers… |