CWE-787 · Out-of-bounds Write (page 52)
Page 52 of 100 — CVEs classified under CWE-787, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-30641 | High | 7.8 | 2023-09-07 | Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary co… |
CVE-2022-30640 | High | 7.8 | 2023-09-07 | Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary co… |
CVE-2022-30639 | High | 7.8 | 2023-09-07 | Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary co… |
CVE-2022-30638 | High | 7.8 | 2023-09-07 | Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary co… |
CVE-2022-30637 | High | 7.8 | 2023-09-07 | Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary co… |
CVE-2021-43018 | High | 7.8 | 2023-09-07 | Adobe Photoshop versions 23.0.2 and 22.5.4 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in… |
CVE-2023-38485 | High | 8.0 | 2023-09-06 | Vulnerabilities exist in the BIOS implementation of Aruba 9200 and 9000 Series Controllers and Gateways that could allow an attacker to execute arbitrary code… |
CVE-2023-20250 | Medium | 6.5 | 2023-09-06 | A vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote at… |
CVE-2023-28581 | Critical | 9.8 | 2023-09-05 | Memory corruption in WLAN Firmware while parsing receieved GTK Keys in GTK KDE. |
CVE-2023-28573 | High | 7.8 | 2023-09-05 | Memory corruption in WLAN HAL while parsing WMI command parameters. |
CVE-2023-28567 | High | 7.8 | 2023-09-05 | Memory corruption in WLAN HAL while handling command through WMI interfaces. |
CVE-2023-28565 | High | 7.8 | 2023-09-05 | Memory corruption in WLAN HAL while handling command streams through WMI interfaces. |
CVE-2023-28564 | High | 7.8 | 2023-09-05 | Memory corruption in WLAN HAL while passing command parameters through WMI interfaces. |
CVE-2023-28562 | Critical | 9.8 | 2023-09-05 | Memory corruption while handling payloads from remote ESL. |
CVE-2023-28560 | High | 7.8 | 2023-09-05 | Memory corruption in WLAN HAL while processing devIndex from untrusted WMI payload. |
CVE-2023-28559 | High | 7.8 | 2023-09-05 | Memory corruption in WLAN FW while processing command parameters from untrusted WMI payload. |
CVE-2023-28558 | High | 7.8 | 2023-09-05 | Memory corruption in WLAN handler while processing PhyID in Tx status handler. |
CVE-2023-28538 | High | 8.4 | 2023-09-05 | Memory corruption in WIN Product while invoking WinAcpi update driver in the UEFI region. |
CVE-2023-21664 | High | 7.8 | 2023-09-05 | Memory Corruption in Core Platform while printing the response buffer in log. |
CVE-2023-21663 | Medium | 6.7 | 2023-09-05 | Memory Corruption while accessing metadata in Display. |
CVE-2023-21654 | Medium | 6.7 | 2023-09-05 | Memory corruption in Audio during playback session with audio effects enabled. |
CVE-2023-4756 | Medium | 5.5 | 2023-09-04 | Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3-DEV. |
CVE-2023-4754 | Medium | 5.5 | 2023-09-04 | Out-of-bounds Write in GitHub repository gpac/gpac prior to 2.3-DEV. |
CVE-2023-32813 | Medium | 4.4 | 2023-09-04 | In gnss service, there is a possible out of bounds write due to improper input validation. This could lead to local information disclosure with System executio… |
CVE-2023-32812 | Medium | 6.7 | 2023-09-04 | In gnss service, there is a possible out of bounds write due to improper input validation. This could lead to local esclation of privileges with System executi… |
CVE-2023-32811 | Medium | 6.7 | 2023-09-04 | In connectivity system driver, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with… |
CVE-2023-32806 | Medium | 6.7 | 2023-09-04 | In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System executio… |
CVE-2023-32805 | Medium | 6.5 | 2023-09-04 | In power, there is a possible out of bounds write due to an insecure default value. This could lead to local escalation of privilege with System execution priv… |
CVE-2023-20850 | Medium | 6.5 | 2023-09-04 | In imgsys_cmdq, there is a possible out of bounds write due to a missing valid range checking. This could lead to local escalation of privilege with System exe… |
CVE-2023-20842 | Medium | 6.5 | 2023-09-04 | In imgsys_cmdq, there is a possible out of bounds write due to a missing valid range checking. This could lead to local escalation of privilege with System exe… |
CVE-2023-20841 | Medium | 6.5 | 2023-09-04 | In imgsys, there is a possible out of bounds write due to a missing valid range checking. This could lead to local escalation of privilege with System executio… |
CVE-2023-20840 | Medium | 6.5 | 2023-09-04 | In imgsys, there is a possible out of bounds read and write due to a missing valid range checking. This could lead to local escalation of privilege with System… |
CVE-2023-20837 | Medium | 6.7 | 2023-09-04 | In seninf, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privil… |
CVE-2023-20832 | Medium | 6.7 | 2023-09-04 | In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20831 | Medium | 6.7 | 2023-09-04 | In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20830 | Medium | 6.7 | 2023-09-04 | In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20829 | Medium | 6.7 | 2023-09-04 | In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20828 | Medium | 6.7 | 2023-09-04 | In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20822 | Medium | 6.7 | 2023-09-04 | In netdagent, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution pri… |
CVE-2023-20821 | Medium | 6.7 | 2023-09-04 | In nvram, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privile… |
CVE-2023-38554 | Medium | 5.5 | 2023-09-04 | In wcn bsp driver, there is a possible out of bounds write due to a missing bounds check.This could lead to local denial of service with no additional executio… |
CVE-2023-38553 | Medium | 6.7 | 2023-09-04 | In gnss service, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution… |
CVE-2023-38468 | Medium | 4.4 | 2023-09-04 | In urild service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privi… |
CVE-2023-38467 | Medium | 4.4 | 2023-09-04 | In urild service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privi… |
CVE-2022-48453 | Medium | 4.4 | 2023-09-04 | In camera driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privi… |
CVE-2023-4744 | Critical | 9.8 | 2023-09-04 | A vulnerability was found in Tenda AC8 16.03.34.06_cn_TDC01. It has been declared as critical. Affected by this vulnerability is the function formSetDeviceName… |
CVE-2023-4751 | High | 7.8 | 2023-09-03 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1331. |
CVE-2023-4738 | High | 7.8 | 2023-09-02 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1848. |
CVE-2023-4735 | High | 7.8 | 2023-09-02 | Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1847. |
CVE-2023-40574 | Medium | 6.5 | 2023-08-31 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an Out-Of-Bounds Wri… |
CVE-2023-40569 | Medium | 6.5 | 2023-08-31 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an Out-Of-Bounds Wri… |
CVE-2023-40567 | Medium | 6.5 | 2023-08-31 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an Out-Of-Bounds Wri… |
CVE-2023-40186 | Medium | 6.5 | 2023-08-31 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an IntegerOverflow l… |
CVE-2023-39352 | Medium | 5.3 | 2023-08-31 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an invalid offset va… |
CVE-2023-40848 | Critical | 9.8 | 2023-08-30 | Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via the function "sub_7D858." |
CVE-2023-40847 | Critical | 9.8 | 2023-08-30 | Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via the function "initIpAddrInfo." In the function, it reads in a user-prov… |
CVE-2023-40845 | Critical | 9.8 | 2023-08-30 | Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function 'sub_34FD0.' In the function, it reads user provided parameter… |
CVE-2023-40844 | Critical | 9.8 | 2023-08-30 | Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function 'formWifiBasicSet.' |
CVE-2023-40843 | Critical | 9.8 | 2023-08-30 | Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function "sub_73004." |
CVE-2023-40842 | Critical | 9.8 | 2023-08-30 | Tengda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function "R7WebsSecurityHandler." |
CVE-2023-40841 | Critical | 9.8 | 2023-08-30 | Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function "add_white_node," |
CVE-2023-40840 | Critical | 9.8 | 2023-08-30 | Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function "fromGetWirelessRepeat." |
CVE-2023-41563 | Critical | 9.8 | 2023-08-30 | Tenda AC9 V3.0 V15.03.06.42_multi and Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 were discovered to contain a stack overflow via parameter mac at url /goform/GetPare… |
CVE-2023-41562 | Critical | 9.8 | 2023-08-30 | Tenda AC7 V1.0 V15.03.06.44, Tenda AC9 V3.0 V15.03.06.42_multi, and Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 were discovered to contain a stack overflow via parame… |
CVE-2023-41561 | Critical | 9.8 | 2023-08-30 | Tenda AC9 V3.0 V15.03.06.42_multi and Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 were discovered to contain a stack overflow via parameter startIp and endIp at url /… |
CVE-2023-41560 | Critical | 9.8 | 2023-08-30 | Tenda AC9 V3.0 V15.03.06.42_multi was discovered to contain a stack overflow via parameter firewallEn at url /goform/SetFirewallCfg. |
CVE-2023-41559 | Critical | 9.8 | 2023-08-30 | Tenda AC7 V1.0 V15.03.06.44, Tenda AC9 V3.0 V15.03.06.42_multi, and Tenda AC5 V1.0RTL_V15.03.06.28 were discovered to contain a stack overflow via parameter pa… |
CVE-2023-41558 | Critical | 9.8 | 2023-08-30 | Tenda AC7 V1.0 V15.03.06.44 was discovered to contain a stack overflow via parameter timeZone at url /goform/SetSysTimeCfg. |
CVE-2023-41557 | Critical | 9.8 | 2023-08-30 | Tenda AC7 V1.0 V15.03.06.44 and Tenda AC5 V1.0RTL_V15.03.06.28 were discovered to contain a stack overflow via parameter entrys and mitInterface at url /goform… |
CVE-2023-41556 | Critical | 9.8 | 2023-08-30 | Tenda AC7 V1.0 V15.03.06.44, Tenda AC9 V3.0 V15.03.06.42_multi, and Tenda AC5 V1.0RTL_V15.03.06.28 were discovered to contain a stack overflow via parameter li… |
CVE-2023-41555 | Critical | 9.8 | 2023-08-30 | Tenda AC7 V1.0 V15.03.06.44 was discovered to contain a stack overflow via parameter security_5g at url /goform/WifiBasicSet. |
CVE-2023-41554 | Critical | 9.8 | 2023-08-30 | Tenda AC9 V3.0 V15.03.06.42_multi was discovered to contain a stack overflow via parameter wpapsk_crypto at url /goform/WifiExtraSet. |
CVE-2023-41553 | Critical | 9.8 | 2023-08-30 | Tenda AC9 V3.0 V15.03.06.42_multi and Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 were discovered to contain a stack overflow via parameter list at url /goform/SetSta… |
CVE-2023-41552 | Critical | 9.8 | 2023-08-30 | Tenda AC7 V1.0 V15.03.06.44 and Tenda AC9 V3.0 V15.03.06.42_multi were discovered to contain a stack overflow via parameter ssid at url /goform/fast_setting_wi… |
CVE-2023-39268 | Medium | 4.5 | 2023-08-29 | A memory corruption vulnerability in ArubaOS-Switch could lead to unauthenticated remote code execution by receiving specially crafted packets. Successful expl… |
CVE-2023-40890 | Critical | 9.8 | 2023-08-29 | A stack-based buffer overflow vulnerability exists in the lookup_sequence function of ZBar 0.23.90. Specially crafted QR codes may lead to information disclosu… |
CVE-2023-40889 | Critical | 9.8 | 2023-08-29 | A heap-based buffer overflow exists in the qr_reader_match_centers function of ZBar 0.23.90. Specially crafted QR codes may lead to information disclosure and/… |
CVE-2023-40857 | High | 8.8 | 2023-08-28 | Buffer Overflow vulnerability in VirusTotal yara v.4.3.2 allows a remote attacker to execute arbtirary code via the yr_execute_cod function in the exe.c compon… |
CVE-2023-40781 | Medium | 6.5 | 2023-08-28 | Buffer Overflow vulnerability in Libming Libming v.0.4.8 allows a remote attacker to cause a denial of service via a crafted .swf file to the makeswf function. |
CVE-2023-40846 | Critical | 9.8 | 2023-08-28 | Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function sub_90998. |
CVE-2023-40915 | High | 7.5 | 2023-08-25 | Tenda AX3 v16.03.12.11 has a stack buffer overflow vulnerability detected at function form_fast_setting_wifi_set. This vulnerability allows attackers to cause… |
CVE-2023-40802 | Medium | 6.5 | 2023-08-25 | The get_parentControl_list_Info function does not verify the parameters entered by the user, causing a post-authentication heap overflow vulnerability in Tenda… |
CVE-2023-40799 | Critical | 9.8 | 2023-08-25 | Tenda AC23 Vv16.03.07.45_cn is vulnerable to Buffer Overflow via sub_450A4C function. |
CVE-2023-40904 | Critical | 9.8 | 2023-08-24 | Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter macFilterType and parameter deviceList at /goform/setMacFi… |
CVE-2023-40902 | Critical | 9.8 | 2023-08-24 | Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter list and bindnum at /goform/SetIpMacBind. |
CVE-2023-40901 | Critical | 9.8 | 2023-08-24 | Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter macFilterType and parameter deviceList at url /goform/setM… |
CVE-2023-40900 | Critical | 9.8 | 2023-08-24 | Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter list at /goform/SetNetControlList. |
CVE-2023-40899 | Critical | 9.8 | 2023-08-24 | Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter macFilterType and parameter deviceList at /goform/setMacFilt… |
CVE-2023-40898 | Critical | 9.8 | 2023-08-24 | Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter timeZone at /goform/SetSysTimeCfg. |
CVE-2023-40897 | Critical | 9.8 | 2023-08-24 | Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter mac at /goform/GetParentControlInfo. |
CVE-2023-40896 | Critical | 9.8 | 2023-08-24 | Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter list and bindnum at /goform/SetIpMacBind. |
CVE-2023-40895 | Critical | 9.8 | 2023-08-24 | Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter list at /goform/SetVirtualServerCfg. |
CVE-2023-40894 | Critical | 9.8 | 2023-08-24 | Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter list at /goform/SetStaticRouteCfg. |
CVE-2023-40893 | Critical | 9.8 | 2023-08-24 | Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter time at /goform/PowerSaveSet. |
CVE-2023-40892 | Critical | 9.8 | 2023-08-24 | Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter schedStartTime and schedEndTime at /goform/openSchedWifi. |
CVE-2023-40891 | Critical | 9.8 | 2023-08-24 | Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter firewallEn at /goform/SetFirewallCfg. |
CVE-2023-41028 | Critical | 9.0 | 2023-08-23 | A stack-based buffer overflow exists in Juplink RX4-1500, a WiFi router, in versions 1.0.2 through 1.0.5. An authenticated attacker can exploit this vulnerabil… |
CVE-2023-4042 | Medium | 5.5 | 2023-08-23 | A flaw was found in ghostscript. The fix for CVE-2020-16305 in ghostscript was not included in RHSA-2021:1852-06 advisory as it was claimed to be. This issue o… |
CVE-2023-4041 | Critical | 9.8 | 2023-08-23 | Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Out-of-bounds Write, Download of Code Without Integrity Check vulnerability in Silicon… |
CVE-2023-3495 | High | 7.8 | 2023-08-23 | ** UNSUPPORTED WHEN ASSIGNED ** Out-of-bounds Write vulnerability in Hitachi EH-VIEW (KeypadDesigner) allows local attackers to potentially execute arbitray co… |