CWE-787 · Out-of-bounds Write (page 41)
Page 41 of 100 — CVEs classified under CWE-787, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-52351 | High | 7.8 | 2024-04-08 | In ril service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privile… |
CVE-2023-52350 | Medium | 4.4 | 2024-04-08 | In ril service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privile… |
CVE-2023-52349 | Medium | 4.4 | 2024-04-08 | In ril service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privile… |
CVE-2023-52348 | Medium | 4.4 | 2024-04-08 | In ril service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privile… |
CVE-2023-52347 | Medium | 5.5 | 2024-04-08 | In ril service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privile… |
CVE-2023-5912 | Medium | 6.7 | 2024-04-05 | A potential memory leakage vulnerability was reported in some Lenovo Notebook products that may allow a local attacker with elevated privileges to write to NV… |
CVE-2024-29753 | High | 7.7 | 2024-04-05 | In tmu_set_control_temp_step of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege… |
CVE-2024-29752 | High | 7.8 | 2024-04-05 | In tmu_set_tr_num_thresholds of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege… |
CVE-2024-29749 | High | 8.4 | 2024-04-05 | In tmu_set_tr_thresholds of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with… |
CVE-2024-29746 | High | 8.4 | 2024-04-05 | In lpm_req_handler of lpm.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no… |
CVE-2024-29743 | High | 7.7 | 2024-04-05 | In tmu_set_temp_lut of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no a… |
CVE-2024-29740 | High | 7.4 | 2024-04-05 | In tmu_set_table of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no addi… |
CVE-2024-21894 | Critical | 9.8 | 2024-04-04 | A heap overflow vulnerability in IPSec component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure allows an unauthenticated malicious user to send… |
CVE-2024-22053 | High | 8.2 | 2024-04-04 | A heap overflow vulnerability in IPSec component of Ivanti Connect Secure (9.x 22.x) and Ivanti Policy Secure allows an unauthenticated malicious user to send… |
CVE-2024-3299 | High | 7.8 | 2024-04-04 | Out-Of-Bounds Write, Use of Uninitialized Resource and Use-After-Free vulnerabilities exist in the file reading procedure in eDrawings from Release SOLIDWORKS… |
CVE-2024-3298 | High | 7.8 | 2024-04-04 | Out-Of-Bounds Write and Type Confusion vulnerabilities exist in the file reading procedure in eDrawings from Release SOLIDWORKS 2023 through Release SOLIDWORKS… |
CVE-2024-26807 | High | 7.8 | 2024-04-04 | In the Linux kernel, the following vulnerability has been resolved: Both cadence-quadspi ->runtime_suspend() and ->runtime_resume() implementations start with… |
CVE-2024-27344 | High | 7.8 | 2024-04-03 | Kofax Power PDF PDF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on… |
CVE-2024-27342 | High | 7.8 | 2024-04-03 | Kofax Power PDF PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code… |
CVE-2024-27341 | High | 7.8 | 2024-04-03 | Kofax Power PDF PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrar… |
CVE-2024-27340 | High | 7.8 | 2024-04-03 | Kofax Power PDF PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrar… |
CVE-2024-27339 | High | 7.8 | 2024-04-03 | Kofax Power PDF PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code… |
CVE-2024-27337 | High | 7.8 | 2024-04-03 | Kofax Power PDF TIF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitra… |
CVE-2024-26763 | High | 7.1 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: dm-crypt: don't modify the data when using authenticated encryption It was said that auth… |
CVE-2024-26759 | High | 7.8 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: mm/swap: fix race when skipping swapcache When skipping swapcache for SWP_SYNCHRONOUS_IO… |
CVE-2024-26753 | High | 7.8 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: crypto: virtio/akcipher - Fix stack overflow on memcpy sizeof(struct virtio_crypto_akciph… |
CVE-2024-26742 | High | 7.8 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: scsi: smartpqi: Fix disable_managed_interrupts Correct blk-mq registration issue with mod… |
CVE-2024-26736 | High | 8.1 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: afs: Increase buffer size in afs_update_volume_status() The max length of volume->vid val… |
CVE-2024-26733 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: arp: Prevent overflow in arp_req_get(). syzkaller reported an overflown write in arp_req_… |
CVE-2024-26730 | High | 7.3 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (nct6775) Fix access to temperature configuration registers The number of temperat… |
CVE-2024-26718 | High | 7.8 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: dm-crypt, dm-verity: disable tasklets Tasklets have an inherent problem with memory corru… |
CVE-2024-26706 | High | 7.8 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: parisc: Fix random data corruption from exception handler The current exception handler i… |
CVE-2024-26697 | High | 7.8 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix data corruption in dsync block recovery for small block sizes The helper func… |
CVE-2024-26692 | High | 8.3 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: smb: Fix regression in writes when non-standard maximum write size negotiated The convers… |
CVE-2024-26685 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential bug in end_buffer_async_write According to a syzbot report, end_buf… |
CVE-2024-30355 | High | 7.8 | 2024-04-02 | Foxit PDF Reader AcroForm Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affe… |
CVE-2024-30349 | High | 7.8 | 2024-04-02 | Foxit PDF Reader U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code… |
CVE-2024-30348 | High | 7.8 | 2024-04-02 | Foxit PDF Reader U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code… |
CVE-2024-30621 | Critical | 9.8 | 2024-04-02 | Tenda AX1803 v1.0.0.1 contains a stack overflow via the serverName parameter in the function fromAdvSetMacMtuWan. |
CVE-2024-30620 | Critical | 9.8 | 2024-04-02 | Tenda AX1803 v1.0.0.1 contains a stack overflow via the serviceName parameter in the function fromAdvSetMacMtuWan. |
CVE-2023-51456 | Medium | 6.8 | 2024-04-02 | A Improper Input Validation issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 could allow an attacker to trigger an ou… |
CVE-2023-51454 | Medium | 6.8 | 2024-04-02 | A Out-of-bounds Write issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 could allow an attacker to overwrite a pointer… |
CVE-2023-51453 | Low | 3.0 | 2024-04-02 | A Improper Input Validation issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 could allow an attacker to cause a crash… |
CVE-2023-51452 | Low | 3.0 | 2024-04-02 | A Improper Input Validation issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 could allow an attacker to cause a crash… |
CVE-2024-31002 | Critical | 9.8 | 2024-04-02 | Buffer Overflow vulnerability in Bento4 Bento v.1.6.0-641 allows a remote attacker to execute arbitrary code via the AP4 BitReader::ReadCache() at Ap4Utils.cpp… |
CVE-2024-26678 | Medium | 5.5 | 2024-04-02 | In the Linux kernel, the following vulnerability has been resolved: x86/efistub: Use 1:1 file:memory mapping for PE/COFF .compat section The .compat section… |
CVE-2024-26674 | High | 7.1 | 2024-04-02 | In the Linux kernel, the following vulnerability has been resolved: x86/lib: Revert to _ASM_EXTABLE_UA() for {get,put}_user() fixups During memory error inje… |
CVE-2024-26670 | Medium | 5.5 | 2024-04-02 | In the Linux kernel, the following vulnerability has been resolved: arm64: entry: fix ARM64_WORKAROUND_SPECULATIVE_UNPRIV_LOAD Currently the ARM64_WORKAROUND… |
CVE-2024-26669 | High | 7.1 | 2024-04-02 | In the Linux kernel, the following vulnerability has been resolved: net/sched: flower: Fix chain template offload When a qdisc is deleted from a net device t… |
CVE-2024-26664 | High | 7.8 | 2024-04-02 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (coretemp) Fix out-of-bounds memory access Fix a bug that pdata->cpu_map[] is set… |
CVE-2024-26659 | High | 7.8 | 2024-04-02 | In the Linux kernel, the following vulnerability has been resolved: xhci: handle isoc Babble and Buffer Overrun events properly xHCI 4.9 explicitly forbids a… |
CVE-2024-24581 | Medium | 6.5 | 2024-04-02 | in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution through out-of-bounds write. |
CVE-2023-52633 | Medium | 5.0 | 2024-04-02 | In the Linux kernel, the following vulnerability has been resolved: um: time-travel: fix time corruption In 'basic' time-travel mode (without =inf-cpu or =ex… |
CVE-2024-20849 | High | 7.3 | 2024-04-02 | Out-of-bound Write vulnerability in chunk parsing implementation of libsdffextractor prior to SMR Apr-2023 Release 1 allows local attackers to execute arbitrar… |
CVE-2024-20848 | Medium | 4.0 | 2024-04-02 | Improper Input Validation vulnerability in text parsing implementation of libsdffextractor prior to SMR Apr-2024 Release 1 allows local attackers to write out-… |
CVE-2024-20846 | Medium | 5.9 | 2024-04-02 | Out-of-bounds write vulnerability while decoding hcr of libsavsac.so prior to SMR Apr-2024 Release 1 allows local attacker to execute arbitrary code. |
CVE-2024-20845 | High | 8.4 | 2024-04-02 | Out-of-bounds write vulnerability while releasing memory in libsavsac.so prior to SMR Apr-2024 Release 1 allows local attacker to execute arbitrary code. |
CVE-2024-20844 | High | 8.4 | 2024-04-02 | Out-of-bounds write vulnerability while parsing remaining codewords in libsavsac.so prior to SMR Apr-2024 Release 1 allows local attacker to execute arbitrary… |
CVE-2024-20843 | Medium | 5.6 | 2024-04-02 | Out-of-bound write vulnerability in command parsing implementation of libIfaaCa prior to SMR Apr-2024 Release 1 allows local privileged attackers to execute ar… |
CVE-2024-20842 | Medium | 4.2 | 2024-04-02 | Improper Input Validation vulnerability in handling apdu of libsec-ril prior to SMR Apr-2024 Release 1 allows local privileged attackers to write out-of-bounds… |
CVE-2024-27327 | High | 7.8 | 2024-04-01 | PDF-XChange Editor PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary co… |
CVE-2024-1179 | High | 8.8 | 2024-04-01 | TP-Link Omada ER605 DHCPv6 Client Options Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers… |
CVE-2024-21473 | Critical | 9.8 | 2024-04-01 | Memory corruption while redirecting log file to any file location with any file name. |
CVE-2023-28547 | High | 8.4 | 2024-04-01 | Memory corruption in SPS Application while requesting for public key in sorter TA. |
CVE-2024-20054 | Medium | 6.6 | 2024-04-01 | In gnss, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with System execution priv… |
CVE-2024-20053 | High | 8.4 | 2024-04-01 | In flashc, there is a possible out of bounds write due to an uncaught exception. This could lead to local escalation of privilege with System execution privile… |
CVE-2024-20044 | Medium | 6.6 | 2024-04-01 | In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges… |
CVE-2024-20043 | Medium | 6.6 | 2024-04-01 | In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges… |
CVE-2024-20042 | Medium | 6.6 | 2024-04-01 | In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges… |
CVE-2024-20040 | High | 8.8 | 2024-04-01 | In wlan firmware, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege with no additiona… |
CVE-2024-20039 | High | 8.8 | 2024-04-01 | In modem protocol, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution… |
CVE-2024-30613 | Medium | 4.3 | 2024-03-29 | Tenda AC15 v15.03.05.18 has a stack overflow vulnerability in the time parameter from the setSmartPowerManagement function. |
CVE-2023-52628 | High | 7.8 | 2024-03-28 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: exthdr: fix 4-byte stack OOB write If priv->len is a multiple of 4… |
CVE-2024-3024 | Medium | 5.3 | 2024-03-28 | A vulnerability was found in appneta tcpreplay up to 4.4.4. It has been classified as problematic. This affects the function get_layer4_v6 of the file /tcprepl… |
CVE-2024-3012 | High | 8.8 | 2024-03-28 | A vulnerability was found in Tenda FH1205 2.0.0.7(775). It has been declared as critical. This vulnerability affects the function GetParentControlInfo of the f… |
CVE-2024-3011 | High | 8.8 | 2024-03-28 | A vulnerability was found in Tenda FH1205 2.0.0.7(775). It has been classified as critical. This affects the function formQuickIndex of the file /goform/QuickI… |
CVE-2024-3010 | High | 8.8 | 2024-03-28 | A vulnerability was found in Tenda FH1205 2.0.0.7(775) and classified as critical. Affected by this issue is the function formSetCfm of the file /goform/setcfm… |
CVE-2024-3008 | High | 8.8 | 2024-03-27 | A vulnerability, which was classified as critical, was found in Tenda FH1205 2.0.0.7(775). Affected is the function formexeCommand of the file /goform/execComm… |
CVE-2024-3007 | High | 8.8 | 2024-03-27 | A vulnerability, which was classified as critical, has been found in Tenda FH1205 2.0.0.7(775). This issue affects the function fromNatStaticSetting of the fil… |
CVE-2024-3006 | High | 8.8 | 2024-03-27 | A vulnerability classified as critical was found in Tenda FH1205 2.0.0.7(775). This vulnerability affects the function fromSetRouteStatic of the file /goform/f… |
CVE-2024-2994 | High | 8.8 | 2024-03-27 | A vulnerability was found in Tenda FH1203 2.0.1.6. It has been declared as critical. Affected by this vulnerability is the function GetParentControlInfo of the… |
CVE-2024-2993 | High | 8.8 | 2024-03-27 | A vulnerability was found in Tenda FH1203 2.0.1.6. It has been classified as critical. Affected is the function formQuickIndex of the file /goform/QuickIndex… |
CVE-2024-2992 | High | 8.8 | 2024-03-27 | A vulnerability was found in Tenda FH1203 2.0.1.6 and classified as critical. This issue affects the function formSetCfm of the file /goform/setcfm. The manipu… |
CVE-2024-2990 | High | 8.8 | 2024-03-27 | A vulnerability, which was classified as critical, was found in Tenda FH1203 2.0.1.6. This affects the function formexeCommand of the file /goform/execCommand… |
CVE-2024-2989 | High | 8.8 | 2024-03-27 | A vulnerability, which was classified as critical, has been found in Tenda FH1203 2.0.1.6. Affected by this issue is the function fromNatStaticSetting of the f… |
CVE-2024-2988 | High | 8.8 | 2024-03-27 | A vulnerability classified as critical was found in Tenda FH1203 2.0.1.6. Affected by this vulnerability is the function fromSetRouteStatic of the file /goform… |
CVE-2024-20308 | High | 8.6 | 2024-03-27 | A vulnerability in the IKEv1 fragmentation code of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a heap… |
CVE-2024-2987 | High | 8.8 | 2024-03-27 | A vulnerability classified as critical has been found in Tenda FH1202 1.2.0.14(408). Affected is the function GetParentControlInfo of the file /goform/GetParen… |
CVE-2024-2986 | High | 8.8 | 2024-03-27 | A vulnerability was found in Tenda FH1202 1.2.0.14(408). It has been rated as critical. This issue affects the function formSetSpeedWan of the file /goform/Set… |
CVE-2024-2985 | High | 8.8 | 2024-03-27 | A vulnerability was found in Tenda FH1202 1.2.0.14(408). It has been declared as critical. This vulnerability affects the function formQuickIndex of the file /… |
CVE-2024-20259 | High | 8.6 | 2024-03-27 | A vulnerability in the DHCP snooping feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload une… |
CVE-2024-2984 | High | 8.8 | 2024-03-27 | A vulnerability was found in Tenda FH1202 1.2.0.14(408). It has been classified as critical. This affects the function formSetCfm of the file /goform/setcfm. T… |
CVE-2024-2983 | High | 8.8 | 2024-03-27 | A vulnerability was found in Tenda FH1202 1.2.0.14(408) and classified as critical. Affected by this issue is the function formSetClientState of the file /gofo… |
CVE-2024-2981 | High | 8.8 | 2024-03-27 | A vulnerability, which was classified as critical, was found in Tenda FH1202 1.2.0.14(408). Affected is the function form_fast_setting_wifi_set of the file /go… |
CVE-2024-2980 | High | 8.8 | 2024-03-27 | A vulnerability, which was classified as critical, has been found in Tenda FH1202 1.2.0.14(408). This issue affects the function formexeCommand of the file /go… |
CVE-2024-2979 | High | 8.8 | 2024-03-27 | A vulnerability classified as critical was found in Tenda F1203 2.0.1.6. This vulnerability affects the function setSchedWifi of the file /goform/openSchedWifi… |
CVE-2024-2978 | High | 8.8 | 2024-03-27 | A vulnerability classified as critical has been found in Tenda F1203 2.0.1.6. This affects the function formSetCfm of the file /goform/setcfm. The manipulation… |
CVE-2024-2977 | High | 8.8 | 2024-03-27 | A vulnerability was found in Tenda F1203 2.0.1.6. It has been rated as critical. Affected by this issue is the function formQuickIndex of the file /goform/Quic… |
CVE-2024-2976 | High | 8.8 | 2024-03-27 | A vulnerability was found in Tenda F1203 2.0.1.6. It has been declared as critical. Affected by this vulnerability is the function R7WebsSecurityHandler of the… |
CVE-2024-2971 | Low | 2.9 | 2024-03-26 | Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by negative object number in indirect reference in the input PDF file. |