CWE-787 · Out-of-bounds Write (page 47)
Page 47 of 100 — CVEs classified under CWE-787, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-6858 | High | 8.8 | 2023-12-19 | Firefox was susceptible to a heap buffer overflow in `nsTextFragment` due to insufficient OOM handling. This vulnerability affects Firefox ESR < 115.6, Thunder… |
CVE-2023-6856 | High | 8.8 | 2023-12-19 | The WebGL `DrawElementsInstanced` method was susceptible to a heap buffer overflow when used on systems with the Mesa VM driver. This issue could allow an att… |
CVE-2023-6314 | High | 7.8 | 2023-12-19 | Stack-based buffer overflow in FPWin Pro version 7.7.0.0 and all previous versions may allow attackers to execute arbitrary code via a specially crafted projec… |
CVE-2023-6228 | Low | 3.3 | 2023-12-18 | An issue was found in the tiffcp utility distributed by the libtiff package where a crafted TIFF file on processing may cause a heap-based buffer overflow lead… |
CVE-2023-47038 | High | 7.0 | 2023-12-18 | A vulnerability was found in perl 5.30.0 through 5.38.0. This issue occurs when a crafted regular expression is compiled by perl, which can allow an attacker c… |
CVE-2023-3430 | High | 7.5 | 2023-12-18 | A vulnerability was found in OpenImageIO, where a heap buffer overflow exists in the src/gif.imageio/gifinput.cpp file. This flaw allows a remote attacker to p… |
CVE-2023-50965 | Critical | 9.8 | 2023-12-17 | In MicroHttpServer (aka Micro HTTP Server) through 4398570, _ReadStaticFiles in lib/middleware.c allows a stack-based buffer overflow and potentially remote co… |
CVE-2023-6888 | Medium | 6.3 | 2023-12-17 | A vulnerability classified as critical was found in PHZ76 RtspServer 1.0.0. This vulnerability affects the function ParseRequestLine of the file RtspMesaage.cp… |
CVE-2023-4020 | Critical | 9.0 | 2023-12-15 | An unvalidated input in a library function responsible for communicating between secure and non-secure memory in Silicon Labs TrustZone implementation allows r… |
CVE-2023-33222 | Medium | 6.8 | 2023-12-15 | When handling contactless cards, usage of a specific function to get additional information from the card which doesn't check the boundary on the dat… |
CVE-2023-33221 | Medium | 6.8 | 2023-12-15 | When reading DesFire keys, the function that reads the card isn't properly checking the boundaries when copying internally the data received. This al… |
CVE-2023-33220 | Critical | 9.1 | 2023-12-15 | During the retrofit validation process, the firmware doesn't properly check the boundaries while copying some attributes to check. This allows a stack-… |
CVE-2023-33219 | Critical | 9.1 | 2023-12-15 | The handler of the retrofit validation command doesn't properly check the boundaries when performing certain validation operations. This allows a stack-b… |
CVE-2023-33218 | Critical | 9.1 | 2023-12-15 | The Parameter Zone Read and Parameter Zone Write command handlers allow performing a Stack buffer overflow. This could potentially lead to a Remote Code ex… |
CVE-2023-50268 | Medium | 6.2 | 2023-12-13 | jq is a command-line JSON processor. Version 1.7 is vulnerable to stack-based buffer overflow in builds using decNumber. Version 1.7.1 contains a patch for thi… |
CVE-2023-50246 | Medium | 6.2 | 2023-12-13 | jq is a command-line JSON processor. Version 1.7 is vulnerable to heap-based buffer overflow. Version 1.7.1 contains a patch for this issue. |
CVE-2023-48639 | High | 7.8 | 2023-12-13 | Adobe Substance 3D Designer versions 13.0.0 (and earlier) and 13.1.0 (and earlier) are affected by an out-of-bounds write vulnerability that could result in ar… |
CVE-2023-48632 | High | 7.8 | 2023-12-13 | Adobe After Effects versions 24.0.3 (and earlier) and 23.6.0 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary… |
CVE-2023-48630 | High | 7.8 | 2023-12-13 | Adobe Substance 3D Sampler versions 4.2.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the… |
CVE-2023-48629 | High | 7.8 | 2023-12-13 | Adobe Substance 3D Sampler versions 4.2.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the… |
CVE-2023-48628 | High | 7.8 | 2023-12-13 | Adobe Substance 3D Sampler versions 4.2.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the… |
CVE-2023-48627 | High | 7.8 | 2023-12-13 | Adobe Substance 3D Sampler versions 4.2.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the… |
CVE-2023-48626 | High | 7.8 | 2023-12-13 | Adobe Substance 3D Sampler versions 4.2.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the… |
CVE-2023-48625 | High | 7.8 | 2023-12-13 | Adobe Substance 3D Sampler versions 4.2.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the… |
CVE-2023-47063 | High | 7.8 | 2023-12-13 | Adobe Illustrator versions 28.0 (and earlier) and 27.9 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code e… |
CVE-2023-43122 | Medium | 4.8 | 2023-12-13 | Samsung Mobile Processor and Wearable Processor (Exynos 980, 850, 1080, 2100, 2200, 1280, 1380, 1330, and W920) allow Information Disclosure in the Bootloader. |
CVE-2023-49992 | Medium | 5.3 | 2023-12-12 | Espeak-ng 1.52-dev was discovered to contain a Stack Buffer Overflow via the function RemoveEnding at dictionary.c. |
CVE-2023-49991 | Medium | 5.3 | 2023-12-12 | Espeak-ng 1.52-dev was discovered to contain a Stack Buffer Underflow via the function CountVowelPosition at synthdata.c. |
CVE-2023-46284 | High | 7.5 | 2023-12-12 | A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All vers… |
CVE-2023-42926 | High | 7.8 | 2023-12-12 | Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted fil… |
CVE-2023-42912 | High | 7.8 | 2023-12-12 | Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted fil… |
CVE-2023-42911 | High | 7.8 | 2023-12-12 | Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted fil… |
CVE-2023-42910 | High | 8.8 | 2023-12-12 | Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted fil… |
CVE-2023-42909 | High | 7.8 | 2023-12-12 | Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted fil… |
CVE-2023-42908 | High | 7.8 | 2023-12-12 | Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted fil… |
CVE-2023-42907 | High | 7.8 | 2023-12-12 | Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted fil… |
CVE-2023-42906 | High | 7.8 | 2023-12-12 | Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted fil… |
CVE-2023-42905 | High | 7.8 | 2023-12-12 | Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted fil… |
CVE-2023-42904 | High | 7.8 | 2023-12-12 | Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted fil… |
CVE-2023-42903 | High | 7.8 | 2023-12-12 | Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted fil… |
CVE-2023-42902 | High | 7.8 | 2023-12-12 | Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted fil… |
CVE-2023-42901 | High | 7.8 | 2023-12-12 | Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted fil… |
CVE-2023-42882 | High | 7.8 | 2023-12-12 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.2. Processing an image may lead to arbitrary code execution. |
CVE-2023-49418 | Critical | 9.8 | 2023-12-11 | TOTOLink A7000R V9.1.0u.6115_B20201022has a stack overflow vulnerability via setIpPortFilterRules. |
CVE-2023-49417 | Critical | 9.8 | 2023-12-11 | TOTOLink A7000R V9.1.0u.6115_B20201022 has a stack overflow vulnerability via setOpModeCfg. |
CVE-2023-49355 | High | 7.5 | 2023-12-11 | decToString in decNumber/decNumber.c in jq 88f01a7 has a one-byte out-of-bounds write via the " []-1.2e-1111111111" input. NOTE: this is not the same as CVE-20… |
CVE-2023-46932 | Critical | 9.8 | 2023-12-09 | Heap Buffer Overflow vulnerability in GPAC version 2.3-DEV-rev617-g671976fcc-master, allows attackers to execute arbitrary code and cause a denial of service (… |
CVE-2023-28527 | Medium | 6.2 | 2023-12-09 | IBM Informix Dynamic Server 12.10 and 14.10 cdr is vulnerable to a heap buffer overflow, caused by improper bounds checking which could allow a local user to… |
CVE-2023-28526 | Medium | 6.2 | 2023-12-09 | IBM Informix Dynamic Server 12.10 and 14.10 archecker is vulnerable to a heap buffer overflow, caused by improper bounds checking which could allow a local us… |
CVE-2023-28523 | High | 8.4 | 2023-12-09 | IBM Informix Dynamic Server 12.10 and 14.10 onsmsync is vulnerable to a heap buffer overflow, caused by improper bounds checking which could allow an attacker… |
CVE-2023-49800 | High | 7.5 | 2023-12-09 | `nuxt-api-party` is an open source module to proxy API requests. The library allows the user to send many options directly to `ofetch`. There is no filter on w… |
CVE-2023-48423 | Critical | 9.8 | 2023-12-08 | In dhcp4_SetPDNAddress of dhcp4_Main.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no… |
CVE-2023-48421 | High | 7.8 | 2023-12-08 | In gpu_pixel_handle_buffer_liveness_update_ioctl of private/google-modules/gpu/mali_kbase/platform/pixel/pixel_gpu_slc.c, there is a possible out of bounds wri… |
CVE-2023-48403 | High | 7.5 | 2023-12-08 | In sms_DecodeCodedTpMsg of sms_PduCodec.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosu… |
CVE-2023-49007 | Critical | 9.8 | 2023-12-08 | In Netgear Orbi RBR750 firmware before V7.2.6.21, there is a stack-based buffer overflow in /usr/sbin/httpd. |
CVE-2023-49468 | High | 8.8 | 2023-12-07 | Libde265 v1.0.14 was discovered to contain a global buffer overflow vulnerability in the read_coding_unit function at slice.cc. |
CVE-2023-49467 | High | 8.8 | 2023-12-07 | Libde265 v1.0.14 was discovered to contain a heap-buffer-overflow vulnerability in the derive_combined_bipredictive_merging_candidates function at motion.cc. |
CVE-2023-49465 | High | 8.8 | 2023-12-07 | Libde265 v1.0.14 was discovered to contain a heap-buffer-overflow vulnerability in the derive_spatial_luma_vector_prediction function at motion.cc. |
CVE-2023-49411 | Critical | 9.8 | 2023-12-07 | Tenda W30E V16.01.0.12(4843) contains a stack overflow vulnerability via the function formDeleteMeshNode. |
CVE-2023-49408 | Critical | 9.8 | 2023-12-07 | Tenda AX3 V16.03.12.11 was discovered to contain a stack overflow via the function set_device_name. |
CVE-2023-49405 | Critical | 9.8 | 2023-12-07 | Tenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function UploadCfg. |
CVE-2023-49404 | Critical | 9.8 | 2023-12-07 | Tenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function formAdvancedSetListSet. |
CVE-2023-50002 | Critical | 9.8 | 2023-12-07 | Tenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function formRebootMeshNode. |
CVE-2023-50001 | Critical | 9.8 | 2023-12-07 | Tenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function formUpgradeMeshOnline. |
CVE-2023-50000 | Critical | 9.8 | 2023-12-07 | Tenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function formResetMeshNode. |
CVE-2023-49999 | Critical | 9.8 | 2023-12-07 | Tenda W30E V16.01.0.12(4843) was discovered to contain a command injection vulnerability via the function setUmountUSBPartition. |
CVE-2023-49410 | Critical | 9.8 | 2023-12-07 | Tenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function via the function set_wan_status. |
CVE-2023-49403 | Critical | 9.8 | 2023-12-07 | Tenda W30E V16.01.0.12(4843) was discovered to contain a command injection vulnerability via the function setFixTools. |
CVE-2023-49402 | Critical | 9.8 | 2023-12-07 | Tenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function localMsg. |
CVE-2023-49434 | Critical | 9.8 | 2023-12-07 | Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'list' parameter at /goform/SetNetControlList. |
CVE-2023-49433 | Critical | 9.8 | 2023-12-07 | Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'list' parameter at /goform/SetVirtualServerCfg. |
CVE-2023-49432 | Critical | 9.8 | 2023-12-07 | Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'deviceList' parameter at /goform/setMacFilterCfg. |
CVE-2023-49430 | Critical | 9.8 | 2023-12-07 | Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'list' parameter at /goform/SetStaticRouteCfg. |
CVE-2023-49426 | Critical | 9.8 | 2023-12-07 | Tenda AX12 V22.03.01.46 was discovered to contain a stack overflow via the list parameter at /goform/SetStaticRouteCfg. |
CVE-2023-49425 | Critical | 9.8 | 2023-12-07 | Tenda AX12 V22.03.01.46 was discovered to contain a stack overflow via the deviceList parameter at /goform/setMacFilterCfg . |
CVE-2023-49424 | Critical | 9.8 | 2023-12-07 | Tenda AX12 V22.03.01.46 was discovered to contain a stack overflow via the list parameter at /goform/SetVirtualServerCfg. |
CVE-2023-41268 | Medium | 5.3 | 2023-12-06 | Improper input validation vulnerability in Samsung Open Source Escargot allows stack overflow and segmentation fault. This issue affects Escargot: from 3.0.0 t… |
CVE-2023-42567 | High | 7.3 | 2023-12-05 | Improper size check vulnerability in softsimd prior to SMR Dec-2023 Release 1 allows stack-based buffer overflow. |
CVE-2023-42566 | High | 7.3 | 2023-12-05 | Out-of-bound write vulnerability in libsavsvc prior to SMR Dec-2023 Release 1 allows local attackers to execute arbitrary code. |
CVE-2023-42561 | High | 7.1 | 2023-12-05 | Heap out-of-bounds write vulnerability in bootloader prior to SMR Dec-2023 Release 1 allows a physical attacker to execute arbitrary code. |
CVE-2023-42560 | High | 7.4 | 2023-12-05 | Heap out-of-bounds write vulnerability in dec_mono_audb of libsavsac.so prior to SMR Dec-2023 Release 1 allows an attacker to execute arbitrary code. |
CVE-2023-42558 | Medium | 6.0 | 2023-12-05 | Out of bounds write vulnerability in HDCP in HAL prior to SMR Dec-2023 Release 1 allows attacker to perform code execution. |
CVE-2023-42557 | Medium | 5.6 | 2023-12-05 | Out-of-bound write vulnerability in libIfaaCa prior to SMR Dec-2023 Release 1 allows local system attackers to execute arbitrary code. |
CVE-2023-28587 | High | 7.8 | 2023-12-05 | Memory corruption in BT controller while parsing debug commands with specific sub-opcodes at HCI interface level. |
CVE-2023-28580 | Medium | 6.7 | 2023-12-05 | Memory corruption in WLAN Host while setting the PMK length in PMK length in internal cache. |
CVE-2023-28551 | High | 7.8 | 2023-12-05 | Memory corruption in UTILS when modem processes memory specific Diag commands having arbitrary address values as input arguments. |
CVE-2023-28550 | High | 7.8 | 2023-12-05 | Memory corruption in MPP performance while accessing DSM watermark using external memory address. |
CVE-2023-22383 | Medium | 6.7 | 2023-12-05 | Memory Corruption in camera while installing a fd for a particular DMA buffer. |
CVE-2023-21634 | Medium | 6.7 | 2023-12-05 | Memory Corruption in Radio Interface Layer while sending an SMS or writing an SMS to SIM. |
CVE-2023-48697 | Medium | 6.4 | 2023-12-05 | Azure RTOS USBX is a USB host, device, and on-the-go (OTG) embedded stack, that is fully integrated with Azure RTOS ThreadX. An attacker can cause remote code… |
CVE-2023-48695 | High | 7.3 | 2023-12-05 | Azure RTOS USBX is a USB host, device, and on-the-go (OTG) embedded stack, that is fully integrated with Azure RTOS ThreadX. An attacker can cause remote code… |
CVE-2023-48692 | Critical | 9.0 | 2023-12-05 | Azure RTOS NetX Duo is a TCP/IP network stack designed specifically for deeply embedded real-time and IoT applications. An attacker can cause remote code execu… |
CVE-2023-48691 | High | 8.1 | 2023-12-05 | Azure RTOS NetX Duo is a TCP/IP network stack designed specifically for deeply embedded real-time and IoT applications. An attacker can cause an out-of-bounds… |
CVE-2023-48316 | Critical | 9.8 | 2023-12-05 | Azure RTOS NetX Duo is a TCP/IP network stack designed specifically for deeply embedded real-time and IoT applications. An attacker can cause remote code execu… |
CVE-2023-48315 | High | 8.8 | 2023-12-05 | Azure RTOS NetX Duo is a TCP/IP network stack designed specifically for deeply embedded real-time and IoT applications. An attacker can cause remote code execu… |
CVE-2023-5944 | High | 7.8 | 2023-12-04 | Delta Electronics DOPSoft is vulnerable to a stack-based buffer overflow, which may allow for arbitrary code execution if an attacker can lead a legitimate us… |
CVE-2023-45776 | High | 7.8 | 2023-12-04 | In CreateAudioBroadcast of broadcaster.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privil… |
CVE-2023-45775 | High | 7.8 | 2023-12-04 | In CreateAudioBroadcast of broadcaster.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privil… |
CVE-2023-45773 | High | 7.8 | 2023-12-04 | In multiple functions of btm_ble_gap.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privileg… |
CVE-2023-40465 | High | 8.3 | 2023-12-04 | Several versions of ALEOS, including ALEOS 4.16.0, include an opensource third-party component which can be exploited from the local area netwo… |