CWE-787 · Out-of-bounds Write (page 41)
Page 41 of 100 — CVEs classified under CWE-787, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-5493 | High | 8.8 | 2024-05-30 | Heap buffer overflow in WebRTC in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag… |
CVE-2024-36934 | High | 7.8 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: bna: ensure the copied buf is NUL terminated Currently, we allocate a nbytes-sized kernel… |
CVE-2024-36906 | High | 7.8 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: ARM: 9381/1: kasan: clear stale stack poison We found below OOB crash: [ 33.452494] ==… |
CVE-2024-36895 | High | 7.8 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uvc: use correct buffer size when parsing configfs lists This commit fixes u… |
CVE-2024-36018 | High | 7.8 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: nouveau/uvmm: fix addr/range calcs for remap operations dEQP-VK.sparse_resources.image_re… |
CVE-2024-36114 | High | 8.6 | 2024-05-29 | Aircompressor is a library with ports of the Snappy, LZO, LZ4, and Zstandard compression algorithms to Java. All decompressor implementations of Aircompressor… |
CVE-2024-32760 | Medium | 6.5 | 2024-05-29 | When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed HTTP/3 encoder instructions can cause NGINX worker processes to terminat… |
CVE-2024-31079 | Medium | 4.8 | 2024-05-29 | When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed HTTP/3 requests can cause NGINX worker processes to terminate or cause o… |
CVE-2024-24963 | Critical | 9.8 | 2024-05-28 | A stack-based buffer overflow vulnerability exists in the Programming Software Connection FileSelect functionality of AutomationDirect P3-550E 1.2.10.9. A spec… |
CVE-2024-24962 | Critical | 9.8 | 2024-05-28 | A stack-based buffer overflow vulnerability exists in the Programming Software Connection FileSelect functionality of AutomationDirect P3-550E 1.2.10.9. A spec… |
CVE-2024-24959 | High | 8.2 | 2024-05-28 | Several out-of-bounds write vulnerabilities exist in the Programming Software Connection FileSystem API functionality of AutomationDirect P3-550E 1.2.10.9. Spe… |
CVE-2024-24958 | High | 8.2 | 2024-05-28 | Several out-of-bounds write vulnerabilities exist in the Programming Software Connection FileSystem API functionality of AutomationDirect P3-550E 1.2.10.9. Spe… |
CVE-2024-24957 | High | 8.2 | 2024-05-28 | Several out-of-bounds write vulnerabilities exist in the Programming Software Connection FileSystem API functionality of AutomationDirect P3-550E 1.2.10.9. Spe… |
CVE-2024-24956 | High | 8.2 | 2024-05-28 | Several out-of-bounds write vulnerabilities exist in the Programming Software Connection FileSystem API functionality of AutomationDirect P3-550E 1.2.10.9. Spe… |
CVE-2024-24955 | High | 8.2 | 2024-05-28 | Several out-of-bounds write vulnerabilities exist in the Programming Software Connection FileSystem API functionality of AutomationDirect P3-550E 1.2.10.9. Spe… |
CVE-2024-24954 | High | 8.2 | 2024-05-28 | Several out-of-bounds write vulnerabilities exist in the Programming Software Connection FileSystem API functionality of AutomationDirect P3-550E 1.2.10.9. Spe… |
CVE-2024-24947 | High | 8.2 | 2024-05-28 | A heap-based buffer overflow vulnerability exists in the Programming Software Connection CurrDir functionality of AutomationDirect P3-550E 1.2.10.9. A speciall… |
CVE-2024-24946 | High | 8.2 | 2024-05-28 | A heap-based buffer overflow vulnerability exists in the Programming Software Connection CurrDir functionality of AutomationDirect P3-550E 1.2.10.9. A speciall… |
CVE-2024-24851 | High | 7.5 | 2024-05-28 | A heap-based buffer overflow vulnerability exists in the Programming Software Connection FiBurn functionality of AutomationDirect P3-550E 1.2.10.9. A specially… |
CVE-2024-24686 | High | 7.8 | 2024-05-28 | Multiple stack-based buffer overflow vulnerabilities exist in the readOFF functionality of libigl v2.5.0. A specially crafted .off file can lead to stack-based… |
CVE-2024-24685 | High | 7.8 | 2024-05-28 | Multiple stack-based buffer overflow vulnerabilities exist in the readOFF functionality of libigl v2.5.0. A specially crafted .off file can lead to stack-based… |
CVE-2024-24684 | High | 7.8 | 2024-05-28 | Multiple stack-based buffer overflow vulnerabilities exist in the readOFF functionality of libigl v2.5.0. A specially crafted .off file can lead to stack-based… |
CVE-2024-23951 | High | 8.8 | 2024-05-28 | Multiple improper array index validation vulnerabilities exist in the readMSH functionality of libigl v2.5.0. A specially crafted .msh file can lead to an out-… |
CVE-2024-23950 | High | 8.8 | 2024-05-28 | Multiple improper array index validation vulnerabilities exist in the readMSH functionality of libigl v2.5.0. A specially crafted .msh file can lead to an out-… |
CVE-2024-23949 | High | 8.8 | 2024-05-28 | Multiple improper array index validation vulnerabilities exist in the readMSH functionality of libigl v2.5.0. A specially crafted .msh file can lead to an out-… |
CVE-2024-23948 | High | 8.8 | 2024-05-28 | Multiple improper array index validation vulnerabilities exist in the readMSH functionality of libigl v2.5.0. A specially crafted .msh file can lead to an out-… |
CVE-2024-23947 | High | 8.8 | 2024-05-28 | Multiple improper array index validation vulnerabilities exist in the readMSH functionality of libigl v2.5.0. A specially crafted .msh file can lead to an out-… |
CVE-2024-22181 | High | 7.8 | 2024-05-28 | An out-of-bounds write vulnerability exists in the readNODE functionality of libigl v2.5.0. A specially crafted .node file can lead to an out-of-bounds write… |
CVE-2023-49600 | High | 8.1 | 2024-05-28 | An out-of-bounds write vulnerability exists in the PlyFile ply_cast_ascii functionality of libigl v2.5.0. A specially crafted .ply file can lead to a heap buff… |
CVE-2023-35953 | High | 7.8 | 2024-05-28 | Multiple stack-based buffer overflow vulnerabilities exist in the readOFF.cpp functionality of libigl v2.4.0. A specially-crafted .off file can lead to a buffe… |
CVE-2023-35952 | High | 7.8 | 2024-05-28 | Multiple stack-based buffer overflow vulnerabilities exist in the readOFF.cpp functionality of libigl v2.4.0. A specially-crafted .off file can lead to a buffe… |
CVE-2023-35951 | High | 7.8 | 2024-05-28 | Multiple stack-based buffer overflow vulnerabilities exist in the readOFF.cpp functionality of libigl v2.4.0. A specially-crafted .off file can lead to a buffe… |
CVE-2023-35950 | High | 7.8 | 2024-05-28 | Multiple stack-based buffer overflow vulnerabilities exist in the readOFF.cpp functionality of libigl v2.4.0. A specially-crafted .off file can lead to a buffe… |
CVE-2023-35949 | High | 7.8 | 2024-05-28 | Multiple stack-based buffer overflow vulnerabilities exist in the readOFF.cpp functionality of libigl v2.4.0. A specially-crafted .off file can lead to a buffe… |
CVE-2023-52548 | High | 7.8 | 2024-05-28 | Huawei Matebook D16(Model: CREM-WXX9, BIOS: v2.26) Arbitrary Memory Corruption in SMI Handler of ThisiServicesSmm SMM module. This can be leveraged by a malici… |
CVE-2023-52547 | High | 7.8 | 2024-05-28 | Huawei Matebook D16(Model: CREM-WXX9, BIOS: v2.26. Memory Corruption in SMI Handler of HddPassword SMM Module. This can be leveraged by a malicious OS attacker… |
CVE-2023-6349 | High | 7.5 | 2024-05-27 | A heap overflow vulnerability exists in libvpx - Encoding a frame that has larger dimensions than the originally configured size with VP9 may result in a heap… |
CVE-2024-3933 | Medium | 5.3 | 2024-05-27 | In Eclipse OpenJ9 release versions prior to 0.44.0 and after 0.13.0, when running with JVM option -Xgc:concurrentScavenge, the sequence generated for System.ar… |
CVE-2021-47566 | High | 7.8 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: proc/vmcore: fix clearing user buffer by properly using clear_user() To clear a user buff… |
CVE-2021-47536 | Critical | 9.8 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: net/smc: fix wrong list_del in smc_lgr_cleanup_early smc_lgr_cleanup_early() meant to del… |
CVE-2021-47535 | High | 7.8 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: drm/msm/a6xx: Allocate enough space for GMU registers In commit 142639a52a01 ("drm/msm/a6… |
CVE-2024-30279 | High | 7.8 | 2024-05-23 | Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code executi… |
CVE-2024-5160 | High | 8.8 | 2024-05-22 | Heap buffer overflow in Dawn in Google Chrome prior to 125.0.6422.76 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page… |
CVE-2021-47497 | High | 7.8 | 2024-05-22 | In the Linux kernel, the following vulnerability has been resolved: nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells If a cell has 'nbits' equal to… |
CVE-2021-47496 | Critical | 9.8 | 2024-05-22 | In the Linux kernel, the following vulnerability has been resolved: net/tls: Fix flipped sign in tls_err_abort() calls sk->sk_err appears to expect a positiv… |
CVE-2021-47489 | High | 7.8 | 2024-05-22 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix even more out of bound writes from debugfs CVE-2021-42327 was fixed by: … |
CVE-2021-47477 | High | 7.8 | 2024-05-22 | In the Linux kernel, the following vulnerability has been resolved: comedi: dt9812: fix DMA buffers on stack USB transfer buffers are typically mapped for DM… |
CVE-2021-47475 | High | 7.8 | 2024-05-22 | In the Linux kernel, the following vulnerability has been resolved: comedi: vmk80xx: fix transfer-buffer overflows The driver uses endpoint-sized USB transfe… |
CVE-2021-47474 | High | 7.8 | 2024-05-22 | In the Linux kernel, the following vulnerability has been resolved: comedi: vmk80xx: fix bulk-buffer overflow The driver is using endpoint-sized buffers but… |
CVE-2021-47458 | High | 7.1 | 2024-05-22 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: mount fails with buffer overflow in strlen Starting with kernel 5.11 built with CO… |
CVE-2021-47441 | High | 7.3 | 2024-05-22 | In the Linux kernel, the following vulnerability has been resolved: mlxsw: thermal: Fix out-of-bounds memory accesses Currently, mlxsw allows cooling states… |
CVE-2024-22273 | High | 8.1 | 2024-05-21 | The storage controllers on VMware ESXi, Workstation, and Fusion have out-of-bounds read/write vulnerability. A malicious actor with access to a virtual machine… |
CVE-2023-52868 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: thermal: core: prevent potential string overflow The dev->id value comes from ida_alloc()… |
CVE-2023-52867 | High | 7.1 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: drm/radeon: possible buffer overflow Buffer 'afmt_status' of size 6 could overflow, since… |
CVE-2023-52864 | High | 7.0 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: wmi: Fix opening of char device Since commit fa1f68db6ca7 ("drivers: misc… |
CVE-2023-52836 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: locking/ww_mutex/test: Fix potential workqueue corruption In some cases running with the… |
CVE-2023-52829 | High | 8.4 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix possible out-of-bound write in ath12k_wmi_ext_hal_reg_caps() reg_cap.ph… |
CVE-2023-52816 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix shift out-of-bounds issue [ 567.613292] shift exponent 255 is too large… |
CVE-2023-52796 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: ipvlan: add ipvlan_route_v6_outbound() helper Inspired by syzbot reports using a stack of… |
CVE-2023-52790 | High | 8.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: swiotlb: fix out-of-bounds TLB allocations with CONFIG_SWIOTLB_DYNAMIC Limit the free lis… |
CVE-2023-52775 | High | 8.2 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: net/smc: avoid data corruption caused by decline We found a data corruption issue during… |
CVE-2023-52764 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: media: gspca: cpia1: shift-out-of-bounds in set_flicker Syzkaller reported the following… |
CVE-2023-52755 | Critical | 9.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slab out of bounds write in smb_inherit_dacl() slab out-of-bounds write is cau… |
CVE-2023-52748 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: f2fs: avoid format-overflow warning With gcc and W=1 option, there's a warning like this… |
CVE-2021-47404 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: HID: betop: fix slab-out-of-bounds Write in betop_probe Syzbot reported slab-out-of-bound… |
CVE-2021-47366 | High | 7.1 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server AFS-3 has two data fetc… |
CVE-2021-47354 | High | 7.1 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: drm/sched: Avoid data corruptions Wait for all dependencies of a job to complete before … |
CVE-2021-47352 | High | 8.4 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: virtio-net: Add validation for used length This adds validation for used length (might co… |
CVE-2021-47351 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: ubifs: Fix races between xattr_{set|get} and listxattr operations UBIFS may occur some pr… |
CVE-2021-47322 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: NFSv4: Fix an Oops in pnfs_mark_request_commit() when doing O_DIRECT Fix an Oopsable cond… |
CVE-2021-47286 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: bus: mhi: core: Validate channel ID when processing command completions MHI reads the cha… |
CVE-2021-47282 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: spi: bcm2835: Fix out-of-bounds access with more than 4 slaves Commit 571e31fa60b3 ("spi… |
CVE-2024-4323 | Critical | 9.8 | 2024-05-20 | A memory corruption vulnerability in Fluent Bit versions 2.0.7 thru 3.0.3. This issue lies in the embedded http server’s parsing of trace requests and may resu… |
CVE-2024-36001 | High | 7.8 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix the pre-flush when appending to a file in writethrough mode In netfs_perform_w… |
CVE-2024-35976 | High | 7.1 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING syzbot reported an illegal c… |
CVE-2024-35949 | High | 7.8 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: btrfs: make sure that WRITTEN is set on all metadata blocks We previously would call btrf… |
CVE-2024-35911 | High | 7.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: ice: fix memory corruption bug with suspend and rebuild The ice driver would previously p… |
CVE-2024-35886 | High | 7.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix infinite recursion in fib6_dump_done(). syzkaller reported infinite recursive c… |
CVE-2024-35797 | High | 7.1 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: mm: cachestat: fix two shmem bugs When cachestat on shmem races with swapping and invalid… |
CVE-2023-52669 | High | 8.2 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: crypto: s390/aes - Fix buffer overread in CTR mode When processing the last block, the s3… |
CVE-2024-27436 | Medium | 5.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Stop parsing channels bits when all channels are found. If a usb audio d… |
CVE-2023-49614 | Medium | 5.7 | 2024-05-16 | Out of bounds write in firmware for some Intel(R) FPGA products before version 2.9.0 may allow escalation of privilege and information disclosure. |
CVE-2023-47282 | Low | 3.9 | 2024-05-16 | Out-of-bounds write in Intel(R) Media SDK all versions and some Intel(R) oneVPL software before version 23.3.5 may allow an authenticated user to potentially e… |
CVE-2024-30292 | High | 7.8 | 2024-05-16 | Adobe Framemaker versions 2020.5, 2022.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the… |
CVE-2024-30291 | High | 7.8 | 2024-05-16 | Adobe Framemaker versions 2020.5, 2022.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the… |
CVE-2024-30290 | High | 7.8 | 2024-05-16 | Adobe Framemaker versions 2020.5, 2022.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the… |
CVE-2024-30289 | High | 7.8 | 2024-05-16 | Adobe Framemaker versions 2020.5, 2022.3 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution… |
CVE-2024-30288 | High | 7.8 | 2024-05-16 | Adobe Framemaker versions 2020.5, 2022.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution i… |
CVE-2024-30307 | High | 7.8 | 2024-05-16 | Substance3D - Painter versions 9.1.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the cont… |
CVE-2024-30297 | High | 7.8 | 2024-05-16 | Animate versions 24.0.2, 23.0.5 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context o… |
CVE-2024-30296 | High | 7.8 | 2024-05-16 | Animate versions 24.0.2, 23.0.5 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context o… |
CVE-2024-30294 | High | 7.8 | 2024-05-16 | Animate versions 24.0.2, 23.0.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the con… |
CVE-2024-30293 | High | 7.8 | 2024-05-16 | Animate versions 24.0.2, 23.0.5 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the co… |
CVE-2024-30282 | High | 7.8 | 2024-05-16 | Animate versions 24.0.2, 23.0.5 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context o… |
CVE-2024-30274 | High | 7.8 | 2024-05-16 | Substance3D - Painter versions 9.1.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the cont… |
CVE-2024-4976 | Medium | 5.5 | 2024-05-15 | Out-of-bounds array write in Xpdf 4.05 and earlier, due to missing object type check in AcroForm field reference. |
CVE-2023-6322 | High | 7.2 | 2024-05-15 | A stack-based buffer overflow vulnerability exists in the message parsing functionality of the Roku Indoor Camera SE version 3.0.2.4679 and Wyze Cam v3 version… |
CVE-2024-30310 | High | 7.8 | 2024-05-15 | Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code executi… |
CVE-2020-26312 | High | 8.1 | 2024-05-14 | Dotmesh is a git-like command-line interface for capturing, organizing and sharing application states. In versions 0.8.1 and prior, the unsafe handling of symb… |
CVE-2024-4777 | High | 8.8 | 2024-05-14 | Memory safety bugs present in Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10. Some of these bugs showed evidence of memory corruption and we presume t… |