CWE-787 · Out-of-bounds Write (page 51)
Page 51 of 100 — CVEs classified under CWE-787, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-32971 | Low | 3.8 | 2023-10-06 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability… |
CVE-2023-3428 | Medium | 6.2 | 2023-10-04 | A heap-based buffer overflow vulnerability was found in coders/tiff.c in ImageMagick. This issue may allow a local attacker to trick the user into opening a s… |
CVE-2023-30733 | High | 7.8 | 2023-10-04 | Stack-based Buffer Overflow in vulnerability HDCP trustlet prior to SMR Oct-2023 Release 1 allows local privileged attackers to perform code execution. |
CVE-2023-4911 | High | 7.8 | 2023-10-03 | A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a… |
CVE-2023-34970 | Medium | 4.7 | 2023-10-03 | A local non-privileged user can make improper GPU processing operations to access a limited amount outside of buffer bounds or to exploit a software race condi… |
CVE-2023-33034 | High | 7.8 | 2023-10-03 | Memory corruption while parsing the ADSP response command. |
CVE-2023-33028 | Critical | 9.8 | 2023-10-03 | Memory corruption in WLAN Firmware while doing a memory copy of pmk cache. |
CVE-2023-24855 | Critical | 9.8 | 2023-10-03 | Memory corruption in Modem while processing security related configuration before AS Security Exchange. |
CVE-2023-24853 | High | 8.4 | 2023-10-03 | Memory Corruption in HLOS while registering for key provisioning notify. |
CVE-2023-22385 | High | 8.2 | 2023-10-03 | Memory Corruption in Data Modem while making a MO call or MT VOLTE call. |
CVE-2023-22384 | Medium | 6.7 | 2023-10-03 | Memory Corruption in VR Service while sending data using Fast Message Queue (FMQ). |
CVE-2023-43361 | High | 7.8 | 2023-10-02 | Buffer Overflow vulnerability in Vorbis-tools v.1.4.2 allows a local attacker to execute arbitrary code and cause a denial of service during the conversion of… |
CVE-2023-5344 | High | 7.5 | 2023-10-02 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1969. |
CVE-2023-32830 | Medium | 6.7 | 2023-10-02 | In TVAPI, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privile… |
CVE-2023-32827 | Medium | 6.7 | 2023-10-02 | In camera middleware, there is a possible out of bounds write due to a missing input validation. This could lead to local escalation of privilege with System e… |
CVE-2023-32826 | Medium | 6.7 | 2023-10-02 | In camera middleware, there is a possible out of bounds write due to a missing input validation. This could lead to local escalation of privilege with System e… |
CVE-2023-32822 | Medium | 6.7 | 2023-10-02 | In ftm, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-32821 | Medium | 6.7 | 2023-10-02 | In video, there is a possible out of bounds write due to a permissions bypass. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20819 | Critical | 9.8 | 2023-10-02 | In CDMA PPP protocol, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no addition… |
CVE-2023-3024 | Medium | 5.9 | 2023-09-29 | Forcing the Bluetooth LE stack to segment 'prepare write response' packets can lead to an out-of-bounds memory access. |
CVE-2023-5217 | High | 8.8 | 2023-09-28 | Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap… |
CVE-2023-43868 | High | 7.5 | 2023-09-28 | D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via websGetVar function. |
CVE-2023-43867 | High | 7.5 | 2023-09-28 | D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWanL2TP function. |
CVE-2023-43866 | High | 7.5 | 2023-09-28 | D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWAN_Wizard7 function. |
CVE-2023-43865 | High | 7.5 | 2023-09-28 | D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWanPPTP function. |
CVE-2023-43864 | High | 7.5 | 2023-09-28 | D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWAN_Wizard55 function. |
CVE-2023-43863 | High | 7.5 | 2023-09-28 | D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWanDhcpplus function. |
CVE-2023-43862 | High | 7.5 | 2023-09-28 | D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formLanguageChange function. |
CVE-2023-43861 | High | 7.5 | 2023-09-28 | D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWanPPPoE function. |
CVE-2023-43860 | High | 7.5 | 2023-09-28 | D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWanNonLogin function. |
CVE-2023-40307 | Medium | 6.3 | 2023-09-28 | An attacker with standard privileges on macOS when requesting administrator privileges from the application can submit input which causes a buffer overflow res… |
CVE-2023-43869 | Critical | 9.8 | 2023-09-28 | D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWAN_Wizard56 function. |
CVE-2023-20109 | Medium | 6.6 | 2023-09-27 | A vulnerability in the Cisco Group Encrypted Transport VPN (GET VPN) feature of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remo… |
CVE-2023-5176 | Critical | 9.8 | 2023-09-27 | Memory safety bugs present in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2. Some of these bugs showed evidence of memory corruption and we presume tha… |
CVE-2023-5169 | Medium | 6.5 | 2023-09-27 | A compromised content process could have provided malicious data in a `PathRecording` resulting in an out-of-bounds write, leading to a potentially exploitable… |
CVE-2023-5168 | Critical | 9.8 | 2023-09-27 | A compromised content process could have provided malicious data to `FilterNodeD2D1` resulting in an out-of-bounds write, leading to a potentially exploitable… |
CVE-2023-41307 | High | 7.5 | 2023-09-27 | Memory overwriting vulnerability in the security module. Successful exploitation of this vulnerability may affect availability. |
CVE-2023-35984 | Medium | 4.3 | 2023-09-27 | The issue was addressed with improved checks. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. An attacker in physical proxim… |
CVE-2023-42753 | High | 7.0 | 2023-09-25 | An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel. A missing macro could lead to a miscalculation of the `h->nets` array… |
CVE-2023-40163 | Critical | 9.8 | 2023-09-25 | An out-of-bounds write vulnerability exists in the allocate_buffer_for_jpeg_decoding functionality of Accusoft ImageGear 20.1. A specially crafted malformed fi… |
CVE-2023-32653 | Critical | 9.8 | 2023-09-25 | An out-of-bounds write vulnerability exists in the dcm_pixel_data_decode functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead… |
CVE-2023-32614 | High | 7.0 | 2023-09-25 | A heap-based buffer overflow vulnerability exists in the create_png_object functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lea… |
CVE-2023-32284 | High | 8.1 | 2023-09-25 | An out-of-bounds write vulnerability exists in the tiff_planar_adobe functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to m… |
CVE-2023-28393 | Medium | 5.6 | 2023-09-25 | A stack-based buffer overflow vulnerability exists in the tif_processing_dng_channel_count functionality of Accusoft ImageGear 20.1. A specially crafted malfor… |
CVE-2023-23567 | High | 8.1 | 2023-09-25 | A heap-based buffer overflow vulnerability exists in the CreateDIBfromPict functionality of Accusoft ImageGear 20.1. A specially crafted file can lead to arbit… |
CVE-2023-43338 | Critical | 9.8 | 2023-09-23 | Cesanta mjs v2.20.0 was discovered to contain a function pointer hijacking vulnerability via the function mjs_get_ptr(). This vulnerability allows attackers to… |
CVE-2023-34319 | High | 7.8 | 2023-09-22 | The fix for XSA-423 added logic to Linux'es netback driver to deal with a frontend splitting a packet in a way such that not all of the headers would come in o… |
CVE-2023-5068 | High | 7.8 | 2023-09-21 | Delta Electronics DIAScreen may write past the end of an allocated buffer while parsing a specially crafted input file. This could allow an attacker to execu… |
CVE-2023-4504 | High | 7.0 | 2023-09-21 | Due to failure in validating the length provided by an attacker-crafted PPD PostScript document, CUPS and libppd are susceptible to a heap-based buffer overflo… |
CVE-2023-43242 | Critical | 9.8 | 2023-09-21 | D-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter removeRuleList in form2IPQoSTcDel. |
CVE-2023-43241 | Critical | 9.8 | 2023-09-21 | D-Link DIR-823G v1.0.2B05 was discovered to contain a stack overflow via parameter TXPower and GuardInt in SetWLanRadioSecurity. |
CVE-2023-43240 | Critical | 9.8 | 2023-09-21 | D-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter sip_address in ipportFilter. |
CVE-2023-43239 | Critical | 9.8 | 2023-09-21 | D-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter flag_5G in showMACfilterMAC. |
CVE-2023-43238 | Critical | 9.8 | 2023-09-21 | D-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter nvmacaddr in form2Dhcpip.cgi. |
CVE-2023-43237 | Critical | 9.8 | 2023-09-21 | D-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter macCloneMac in setMAC. |
CVE-2023-43236 | Critical | 9.8 | 2023-09-21 | D-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter statuscheckpppoeuser in dir_setWanWifi. |
CVE-2023-43235 | Critical | 9.8 | 2023-09-21 | D-Link DIR-823G v1.0.2B05 was discovered to contain a stack overflow via parameter StartTime and EndTime in SetWifiDownSettings. |
CVE-2023-2262 | Critical | 9.8 | 2023-09-20 | A buffer overflow vulnerability exists in the Rockwell Automation select 1756-EN* communication devices. If exploited, a threat actor could potentially leve… |
CVE-2023-43203 | Critical | 9.8 | 2023-09-20 | D-LINK DWL-6610 FW_v_4.3.0.8B003C was discovered to contain a stack overflow vulnerability in the function update_users. |
CVE-2023-43201 | Critical | 9.8 | 2023-09-20 | D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a stack overflow via the hi_up parameter in the qos_ext.asp function. |
CVE-2023-43200 | Critical | 9.8 | 2023-09-20 | D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a stack overflow via the id parameter in the yyxz.data function. |
CVE-2023-43199 | Critical | 9.8 | 2023-09-20 | D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a stack overflow via the prev parameter in the H5/login.cgi function. |
CVE-2023-43198 | Critical | 9.8 | 2023-09-20 | D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a stack overflow via the popupId parameter in the H5/hi_block.asp function. |
CVE-2023-43197 | Critical | 9.8 | 2023-09-20 | D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a stack overflow via the fn parameter in the tgfile.asp function. |
CVE-2023-43196 | Critical | 9.8 | 2023-09-20 | D-Link DI-7200GV2.E1 v21.04.09E1 was discovered to contain a stack overflow via the zn_jb parameter in the arp_sys.asp function. |
CVE-2023-3341 | High | 7.5 | 2023-09-20 | The code that processes control channel messages sent to `named` calls certain functions recursively during packet parsing. Recursion depth is only limited by… |
CVE-2023-25528 | High | 8.8 | 2023-09-20 | NVIDIA DGX H100 baseboard management controller (BMC) contains a vulnerability in a web server plugin, where an unauthenticated attacker may cause a stack over… |
CVE-2023-42443 | High | 8.1 | 2023-09-18 | Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine (EVM). In version 0.3.9 and prior, under certain conditions, the memory used by th… |
CVE-2023-40018 | High | 7.5 | 2023-09-15 | FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on… |
CVE-2023-32643 | Medium | 5.3 | 2023-09-14 | A flaw was found in GLib. The GVariant deserialization code is vulnerable to a heap buffer overflow introduced by the fix for CVE-2023-32665. This bug does not… |
CVE-2023-3935 | Critical | 9.8 | 2023-09-13 | A heap buffer overflow vulnerability in Wibu CodeMeter Runtime network service up to version 7.60b allows an unauthenticated, remote attacker to achieve RCE an… |
CVE-2023-26369 | High | 7.8 | 2023-09-13 | Acrobat Reader versions 23.003.20284 (and earlier), 20.005.30516 (and earlier) and 20.005.30514 (and earlier) are affected by an out-of-bounds write vulnerabil… |
CVE-2023-4863 | High | 8.8 | 2023-09-12 | Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write v… |
CVE-2023-41033 | High | 7.8 | 2023-09-12 | A vulnerability has been identified in Parasolid V35.0 (All versions < V35.0.260), Parasolid V35.1 (All versions < V35.1.246), Parasolid V36.0 (All versions <… |
CVE-2023-41032 | High | 7.8 | 2023-09-12 | A vulnerability has been identified in Parasolid V34.1 (All versions < V34.1.258), Parasolid V35.0 (All versions < V35.0.253), Parasolid V35.1 (All versions <… |
CVE-2023-38076 | High | 7.8 | 2023-09-12 | A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), Teamcenter Visualization V… |
CVE-2023-38072 | High | 7.8 | 2023-09-12 | A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), Teamcenter Visualization V… |
CVE-2023-38071 | High | 7.8 | 2023-09-12 | A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), Teamcenter Visualization V… |
CVE-2023-38070 | High | 7.8 | 2023-09-12 | A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), Teamcenter Visualization V… |
CVE-2023-40308 | High | 7.5 | 2023-09-12 | SAP CommonCryptoLib allows an unauthenticated attacker to craft a request, which when submitted to an open port causes a memory corruption error in a library w… |
CVE-2023-35684 | High | 8.8 | 2023-09-11 | In avdt_msg_asmbl of avdt_msg.cc, there is a possible out of bounds write due to an integer overflow. This could lead to paired device escalation of privilege… |
CVE-2023-35681 | Critical | 9.8 | 2023-09-11 | In eatt_l2cap_reconfig_completed of eatt_impl.h, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution w… |
CVE-2020-19323 | High | 7.5 | 2023-09-11 | An issue was discovered in /bin/mini_upnpd on D-Link DIR-619L 2.06beta devices. There is a heap buffer overflow allowing remote attackers to restart router via… |
CVE-2020-19318 | High | 8.8 | 2023-09-11 | Buffer Overflow vulnerability in D-Link DIR-605L, hardware version AX, firmware version 1.17beta and below, allows authorized attackers execute arbitrary code… |
CVE-2022-28836 | High | 7.8 | 2023-09-11 | Adobe InCopy versions 17.1 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code exe… |
CVE-2022-28834 | High | 7.8 | 2023-09-11 | Adobe InCopy versions 17.1 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code exe… |
CVE-2022-28833 | High | 7.8 | 2023-09-11 | Adobe InDesign versions 17.1 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code ex… |
CVE-2022-28831 | High | 7.8 | 2023-09-11 | Adobe InDesign versions 17.1 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code ex… |
CVE-2019-16470 | High | 7.8 | 2023-09-11 | Adobe Acrobat Reader versions 2019.021.20056 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execut… |
CVE-2023-4585 | High | 8.8 | 2023-09-11 | Memory safety bugs present in Firefox 116, Firefox ESR 115.1, and Thunderbird 115.1. Some of these bugs showed evidence of memory corruption and we presume tha… |
CVE-2023-4584 | High | 8.8 | 2023-09-11 | Memory safety bugs present in Firefox 116, Firefox ESR 102.14, Firefox ESR 115.1, Thunderbird 102.14, and Thunderbird 115.1. Some of these bugs showed evidence… |
CVE-2023-36184 | High | 7.5 | 2023-09-08 | CMysten Labs Sui blockchain v1.2.0 was discovered to contain a stack overflow via the component /spec/openrpc.json. |
CVE-2021-33834 | High | 7.1 | 2023-09-08 | An issue was discovered in iscflashx64.sys 3.9.3.0 in Insyde H2OFFT 6.20.00. When handling IOCTL 0x22229a, the input used to allocate a buffer and copy memory… |
CVE-2023-4685 | High | 7.8 | 2023-09-07 | Delta Electronics' CNCSoft-B version 1.0.0.4 and DOPSoft versions 4.0.0.82 and prior are vulnerable to stack-based buffer overflow, which could allow an attack… |
CVE-2023-30800 | High | 7.5 | 2023-09-07 | The web server used by MikroTik RouterOS version 6 is affected by a heap memory corruption issue. A remote and unauthenticated attacker can corrupt the server'… |
CVE-2023-40942 | Critical | 9.8 | 2023-09-07 | Tenda AC9 V3.0BR_V15.03.06.42_multi_TD01 was discovered stack overflow via parameter 'firewall_value' at url /goform/SetFirewallCfg. |
CVE-2022-30646 | High | 7.8 | 2023-09-07 | Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary co… |
CVE-2022-30645 | High | 7.8 | 2023-09-07 | Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary co… |
CVE-2022-30643 | High | 7.8 | 2023-09-07 | Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary co… |
CVE-2022-30642 | High | 7.8 | 2023-09-07 | Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary co… |