CWE-787 · Out-of-bounds Write (page 39)
Page 39 of 100 — CVEs classified under CWE-787, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-21175 | High | 7.5 | 2024-07-16 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14… |
CVE-2024-6779 | Critical | 9.6 | 2024-07-16 | Out of bounds memory access in V8 in Google Chrome prior to 126.0.6478.182 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML… |
CVE-2024-6773 | High | 8.8 | 2024-07-16 | Inappropriate implementation in V8 in Google Chrome prior to 126.0.6478.182 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… |
CVE-2024-6772 | High | 8.8 | 2024-07-16 | Inappropriate implementation in V8 in Google Chrome prior to 126.0.6478.182 allowed a remote attacker to perform out of bounds memory access via a crafted HTML… |
CVE-2024-40130 | Critical | 9.8 | 2024-07-16 | open5gs v2.6.4 is vulnerable to Buffer Overflow. via /lib/core/abts.c. |
CVE-2024-40129 | Critical | 9.8 | 2024-07-16 | Open5GS v2.6.4 is vulnerable to Buffer Overflow. via /lib/pfcp/context.c. |
CVE-2024-33182 | Critical | 9.8 | 2024-07-16 | Tenda AC18 V15.03.3.10_EN was discovered to contain a stack-based buffer overflow vulnerability via the deviceId parameter at ip/goform/addWifiMacFilter. |
CVE-2024-33180 | Critical | 9.8 | 2024-07-16 | Tenda AC18 V15.03.3.10_EN was discovered to contain a stack-based buffer overflow vulnerability via the deviceId parameter at ip/goform/saveParentControlInfo. |
CVE-2022-48847 | High | 7.8 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: watch_queue: Fix filter limit check In watch_queue_set_filter(), there are a couple of pl… |
CVE-2024-40416 | Critical | 9.8 | 2024-07-15 | A vulnerability in /goform/SetVirtualServerCfg in the sub_6320C function in Tenda AX1806 1.0.0.1 firmware leads to stack-based buffer overflow. |
CVE-2024-40415 | Critical | 9.8 | 2024-07-15 | A vulnerability in /goform/SetStaticRouteCfg in the sub_519F4 function in Tenda AX1806 1.0.0.1 firmware leads to stack-based buffer overflow. |
CVE-2024-40414 | Critical | 9.8 | 2024-07-15 | A vulnerability in /goform/SetNetControlList in the sub_656BC function in Tenda AX1806 1.0.0.1 firmware leads to stack-based buffer overflow. |
CVE-2024-6744 | Critical | 9.8 | 2024-07-15 | The SMTP Listener of Secure Email Gateway from Cellopoint does not properly validate user input, leading to a Buffer Overflow vulnerability. An unauthenticated… |
CVE-2024-41003 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix reg_set_min_max corruption of fake_reg Juan reported that after doing some chang… |
CVE-2024-40987 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix UBSAN warning in kv_dpm.c Adds bounds check for sumo_vid_mapping_entry. |
CVE-2024-40974 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries: Enforce hcall result buffer validity and size plpar_hcall(), plpar_hcall… |
CVE-2024-40955 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists() We can trigger a… |
CVE-2024-40901 | High | 7.3 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory There is a potentia… |
CVE-2024-5679 | High | 7.1 | 2024-07-11 | CWE-787: Out-of-Bounds Write vulnerability exists that could cause local denial-of-service, or kernel memory leak when a malicious actor with local user access… |
CVE-2024-39556 | Medium | 6.4 | 2024-07-10 | A Stack-Based Buffer Overflow vulnerability in Juniper Networks Junos OS and Juniper Networks Junos OS Evolved may allow a local, low-privileged attacker with… |
CVE-2024-39518 | High | 7.5 | 2024-07-10 | A Heap-based Buffer Overflow vulnerability in the telemetry sensor process (sensord) of Juniper Networks Junos OS on MX240, MX480, MX960 platforms using MPC10E… |
CVE-2024-39927 | High | 8.2 | 2024-07-10 | Out-of-bounds write vulnerability exists in Ricoh MFPs and printers. If a remote attacker sends a specially crafted request to the affected products, the produ… |
CVE-2023-32472 | Medium | 5.7 | 2024-07-10 | Dell Edge Gateway BIOS, versions 3200 and 5200, contains an out-of-bounds write vulnerability. A local authenticated malicious user with high privileges could… |
CVE-2024-39883 | High | 8.8 | 2024-07-09 | Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. If a target v… |
CVE-2024-39881 | High | 8.8 | 2024-07-09 | Delta Electronics CNCSoft-G2 lacks proper validation of user-supplied data, which can result in a memory corruption condition. If a target visits a malicious p… |
CVE-2024-39880 | High | 7.8 | 2024-07-09 | Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. If a target… |
CVE-2024-31313 | High | 7.8 | 2024-07-09 | In availableToWriteBytes of MessageQueueBase.h, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation o… |
CVE-2024-31311 | High | 7.8 | 2024-07-09 | In increment_annotation_count of stats_event.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p… |
CVE-2024-23698 | High | 7.8 | 2024-07-09 | In RGXFWChangeOSidPriority of rgxfwutils.c, there is a possible arbitrary code execution due to a missing bounds check. This could lead to local escalation of… |
CVE-2024-20785 | High | 7.8 | 2024-07-09 | InDesign Desktop versions ID19.3, ID18.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution… |
CVE-2024-20783 | High | 7.8 | 2024-07-09 | InDesign Desktop versions ID19.3, ID18.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution… |
CVE-2024-20782 | High | 7.8 | 2024-07-09 | InDesign Desktop versions ID19.3, ID18.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in th… |
CVE-2024-20781 | High | 7.8 | 2024-07-09 | InDesign Desktop versions ID19.3, ID18.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution… |
CVE-2023-50807 | High | 8.1 | 2024-07-09 | A vulnerability was discovered in Samsung Wearable Processor and Modems with versions Exynos 9110, Exynos Modem 5123, Exynos Modem 5300 that allows an out-of-b… |
CVE-2023-50805 | High | 8.1 | 2024-07-09 | A vulnerability was discovered in Samsung Mobile Processor, Wearable Processor, and Modems with versions Exynos 9820, Exynos 9825, Exynos 980, Exynos 990, Exyn… |
CVE-2023-48194 | Critical | 9.8 | 2024-07-09 | Vulnerability in Tenda AC8v4 .V16.03.34.09 due to sscanf and the last digit of s8 being overwritten with \x0. After executing set_client_qos, control over the… |
CVE-2024-39118 | Medium | 5.5 | 2024-07-09 | Mommy Heather Advanced Backups up to v3.5.3 allows attackers to write arbitrary files via restoring a crafted back up. |
CVE-2024-38065 | Medium | 6.8 | 2024-07-09 | Secure Boot Security Feature Bypass Vulnerability |
CVE-2024-38060 | High | 8.8 | 2024-07-09 | Windows Imaging Component Remote Code Execution Vulnerability |
CVE-2024-38054 | High | 7.8 | 2024-07-09 | Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability |
CVE-2024-38051 | High | 7.8 | 2024-07-09 | Windows Graphics Component Remote Code Execution Vulnerability |
CVE-2024-38032 | High | 7.1 | 2024-07-09 | Microsoft Xbox Remote Code Execution Vulnerability |
CVE-2024-38025 | High | 7.2 | 2024-07-09 | Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability |
CVE-2024-6615 | High | 8.8 | 2024-07-09 | Memory safety bugs present in Firefox 127 and Thunderbird 127. Some of these bugs showed evidence of memory corruption and we presume that with enough effort s… |
CVE-2024-32056 | High | 7.8 | 2024-07-09 | A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected application contains an out of bounds write past the end of an allo… |
CVE-2024-21778 | High | 7.2 | 2024-07-08 | A heap-based buffer overflow vulnerability exists in the configuration file mib_init_value_array functionality of Realtek rtl819x Jungle SDK v3.4.11. A special… |
CVE-2023-50330 | High | 7.2 | 2024-07-08 | A stack-based buffer overflow vulnerability exists in the boa getInfo functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP r… |
CVE-2023-50244 | High | 7.2 | 2024-07-08 | Two stack-based buffer overflow vulnerabilities exist in the boa formIpQoS functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of H… |
CVE-2023-50243 | High | 7.2 | 2024-07-08 | Two stack-based buffer overflow vulnerabilities exist in the boa formIpQoS functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of H… |
CVE-2023-50240 | High | 7.2 | 2024-07-08 | Two stack-based buffer overflow vulnerabilities exist in the boa set_RadvdInterfaceParam functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially craft… |
CVE-2023-50239 | High | 7.2 | 2024-07-08 | Two stack-based buffer overflow vulnerabilities exist in the boa set_RadvdInterfaceParam functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially craft… |
CVE-2023-49867 | High | 7.2 | 2024-07-08 | A stack-based buffer overflow vulnerability exists in the boa formWsc functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP r… |
CVE-2023-49595 | High | 7.2 | 2024-07-08 | A stack-based buffer overflow vulnerability exists in the boa rollback_control_code functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted se… |
CVE-2023-49073 | High | 7.2 | 2024-07-08 | A stack-based buffer overflow vulnerability exists in the boa formFilter functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTT… |
CVE-2023-48270 | High | 7.2 | 2024-07-08 | A stack-based buffer overflow vulnerability exists in the boa formDnsv6 functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of netw… |
CVE-2023-47856 | High | 7.2 | 2024-07-08 | A stack-based buffer overflow vulnerability exists in the boa set_RadvdPrefixParam functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted ser… |
CVE-2023-45215 | High | 7.2 | 2024-07-08 | A stack-based buffer overflow vulnerability exists in the boa setRepeaterSsid functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series o… |
CVE-2023-41251 | High | 7.2 | 2024-07-08 | A stack-based buffer overflow vulnerability exists in the boa formRoute functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP… |
CVE-2024-27459 | High | 7.8 | 2024-07-08 | The interactive service in OpenVPN 2.6.9 and earlier allows an attacker to send data causing a stack overflow which can be used to execute arbitrary code with… |
CVE-2024-29509 | High | 8.8 | 2024-07-03 | Artifex Ghostscript before 10.03.0 has a heap-based overflow when PDFPassword (e.g., for runpdf) has a \000 byte in the middle. |
CVE-2024-29506 | High | 8.8 | 2024-07-03 | Artifex Ghostscript before 10.03.0 has a stack-based buffer overflow in the pdfi_apply_filter() function via a long PDF filter name. |
CVE-2022-25480 | High | 7.8 | 2024-07-02 | Vulnerability in Realtek RtsPer driver for PCIe Card Reader (RtsPer.sys) before 10.0.22000.21355 and Realtek RtsUer driver for USB Card Reader (RtsUer.sys) bef… |
CVE-2024-4467 | High | 7.8 | 2024-07-02 | A flaw was found in the QEMU disk image utility (qemu-img) 'info' command. A specially crafted image file containing a `json:{}` value describing block devices… |
CVE-2024-22104 | Medium | 5.5 | 2024-07-02 | Out-of-Bounds Write vulnerability in Jungo WinDriver before 12.5.1 allows local attackers to cause a Windows blue screen error and Denial of Service (DoS). |
CVE-2024-22103 | Medium | 5.5 | 2024-07-02 | Out-of-Bounds Write vulnerability in Jungo WinDriver before 12.6.0 allows local attackers to cause a Windows blue screen error and Denial of Service (DoS). |
CVE-2023-51778 | Medium | 5.5 | 2024-07-02 | Out-of-Bounds Write vulnerability in Jungo WinDriver before 12.1.0 allows local attackers to cause a Windows blue screen error and Denial of Service (DoS). |
CVE-2024-20901 | Medium | 5.9 | 2024-07-02 | Improper input validation in copying data to buffer cache in libsaped prior to SMR Jul-2024 Release 1 allows local attackers to write out-of-bounds memory. |
CVE-2024-20893 | Medium | 6.1 | 2024-07-02 | Improper input validation in libmediaextractorservice.so prior to SMR Jul-2024 Release 1 allows local attackers to trigger memory corruption. |
CVE-2024-37185 | High | 8.2 | 2024-07-02 | in OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through out-of-bounds write. |
CVE-2024-37077 | High | 8.2 | 2024-07-02 | in OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through out-of-bounds write. |
CVE-2024-36260 | High | 8.2 | 2024-07-02 | in OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through out-of-bounds write. |
CVE-2024-36243 | High | 8.2 | 2024-07-02 | in OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through out-of-bounds read and write. |
CVE-2024-21469 | High | 7.3 | 2024-07-01 | Memory corruption when an invoke call and a TEE call are bound for the same trusted application. |
CVE-2023-43554 | High | 8.4 | 2024-07-01 | Memory corruption while processing IOCTL handler in FastRPC. |
CVE-2024-39430 | Medium | 5.1 | 2024-07-01 | In faceid servive, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional executi… |
CVE-2024-39429 | Medium | 5.1 | 2024-07-01 | In faceid servive, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional executi… |
CVE-2024-39428 | Medium | 6.8 | 2024-07-01 | In trusty service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution priv… |
CVE-2024-39427 | Medium | 5.1 | 2024-07-01 | In trusty service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution priv… |
CVE-2024-20081 | Medium | 6.7 | 2024-07-01 | In gnss service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System executi… |
CVE-2024-20079 | Medium | 6.7 | 2024-07-01 | In gnss service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System executi… |
CVE-2024-39840 | High | 8.8 | 2024-06-29 | Factorio before 1.1.101 allows a crafted server to execute arbitrary code on clients via a custom map that leverages the ability of certain Lua base module fun… |
CVE-2024-38533 | Medium | 6.5 | 2024-06-28 | ZKsync Era is a layer 2 rollup that uses zero-knowledge proofs to scale Ethereum. There is possible invalid stack access due to the addresses used to access th… |
CVE-2024-6403 | Medium | 6.5 | 2024-06-28 | A vulnerability, which was classified as critical, has been found in Tenda A301 15.13.08.12. Affected by this issue is the function formWifiBasicSet of the fil… |
CVE-2024-6402 | Medium | 6.5 | 2024-06-28 | A vulnerability classified as critical was found in Tenda A301 15.13.08.12. Affected by this vulnerability is the function fromSetWirelessRepeat of the file /g… |
CVE-2024-29176 | High | 8.8 | 2024-06-26 | Dell PowerProtect DD, version(s) 8.0, 7.13.1.0, 7.10.1.30, 7.7.5.40, contain(s) an Out-of-bounds Write vulnerability. A low privileged attacker with remote acc… |
CVE-2024-37894 | Medium | 6.3 | 2024-06-25 | Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to an Out-of-bounds Write error when assigning ESI variables, Squid is suscepti… |
CVE-2024-37006 | High | 7.8 | 2024-06-25 | A maliciously crafted CATPRODUCT file, when parsed in CC5Dll.dll through Autodesk applications, can lead to a memory corruption vulnerability by write access v… |
CVE-2024-37003 | High | 7.8 | 2024-06-25 | A maliciously crafted DWG and SLDPRT file, when parsed in opennurbs.dll and ODXSW_DLL.dll through Autodesk applications, can be used to cause a Stack-based Ove… |
CVE-2024-36999 | High | 7.8 | 2024-06-25 | A maliciously crafted 3DM file, when parsed in opennurbs.dll through Autodesk applications, can force an Out-of-Bounds Write. A malicious actor can leverage th… |
CVE-2024-32855 | Low | 3.8 | 2024-06-25 | Dell Client Platform BIOS contains an Out-of-bounds Write vulnerability in an externally developed component. A high privileged attacker with local access coul… |
CVE-2024-23157 | High | 7.8 | 2024-06-25 | A maliciously crafted SLDASM or SLDPRT file, when parsed in ODXSW_DLL.dll through Autodesk applications, can lead to a memory corruption vulnerability by write… |
CVE-2024-23156 | High | 7.8 | 2024-06-25 | A maliciously crafted 3DM file, when parsed in opennurbs.dll and ASMkern229A.dll through Autodesk applications, can lead to a memory corruption vulnerability b… |
CVE-2024-23155 | High | 7.8 | 2024-06-25 | A maliciously crafted MODEL file, when parsed in atf_asm_interface.dll through Autodesk applications, can be used to cause a Heap-based Buffer Overflow. A mali… |
CVE-2024-23154 | High | 7.8 | 2024-06-25 | A maliciously crafted SLDPRT file, when parsed in ODXSW_DLL.dll through Autodesk applications, can be used to cause a Heap-based Overflow. A malicious actor ca… |
CVE-2024-23151 | High | 7.8 | 2024-06-25 | A maliciously crafted 3DM file, when parsed in ASMkern229A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may… |
CVE-2024-23150 | High | 7.8 | 2024-06-25 | A maliciously crafted PRT file, when parsed in odxug_dll.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may le… |
CVE-2024-37001 | High | 7.8 | 2024-06-25 | A maliciously crafted 3DM file, when parsed in opennurbs.dll through Autodesk applications, can be used to cause a Heap-based Overflow. A malicious actor can l… |
CVE-2024-37000 | High | 7.8 | 2024-06-25 | A maliciously crafted X_B file, when parsed in pskernel.DLL through Autodesk applications, can lead to a memory corruption vulnerability by write access violat… |
CVE-2024-23148 | High | 7.8 | 2024-06-25 | A maliciously crafted CATPRODUCT file, when parsed in CC5Dll.dll through Autodesk applications, can lead to a memory corruption vulnerability by write access v… |
CVE-2024-23147 | High | 7.8 | 2024-06-25 | A maliciously crafted CATPART, X_B and STEP, when parsed in ASMKERN228A.dll and ASMKERN229A.dll through Autodesk applications, can lead to a memory corruption… |