CWE-787 · Out-of-bounds Write (page 54)
Page 54 of 100 — CVEs classified under CWE-787, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-40042 | Critical | 9.8 | 2023-08-08 | TOTOLINK T10_v2 5.9c.5061_B20200511 has a stack-based buffer overflow in setStaticDhcpConfig in /lib/cste_modules/lan.so. Attackers can send crafted data in an… |
CVE-2023-40041 | Critical | 9.8 | 2023-08-08 | TOTOLINK T10_v2 5.9c.5061_B20200511 has a stack-based buffer overflow in setWiFiWpsConfig in /lib/cste_modules/wps.so. Attackers can send crafted data in an MQ… |
CVE-2023-3894 | Medium | 5.8 | 2023-08-08 | Those using jackson-dataformats-text to parse TOML data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input… |
CVE-2023-36532 | Medium | 5.9 | 2023-08-08 | Buffer overflow in Zoom Clients before 5.14.5 may allow an unauthenticated user to enable a denial of service via network access. |
CVE-2023-20555 | High | 7.8 | 2023-08-08 | Insufficient input validation in CpmDisplayFeatureSmm may allow an attacker to corrupt SMM memory by overwriting an arbitrary bit in an attacker-controlled poi… |
CVE-2023-39419 | High | 7.8 | 2023-08-08 | A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7). The affected applications contain an out of bounds write past the en… |
CVE-2023-39181 | High | 7.8 | 2023-08-08 | A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7). The affected application contains an out of bounds write past the en… |
CVE-2023-38683 | High | 7.8 | 2023-08-08 | A vulnerability has been identified in JT2Go (All versions < V14.2.0.5), Teamcenter Visualization V13.2 (All versions < V13.2.0.14), Teamcenter Visualization V… |
CVE-2023-38681 | High | 7.8 | 2023-08-08 | A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0… |
CVE-2023-38680 | High | 7.8 | 2023-08-08 | A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0… |
CVE-2023-38679 | High | 7.8 | 2023-08-08 | A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0… |
CVE-2023-38528 | High | 7.8 | 2023-08-08 | A vulnerability has been identified in Parasolid V34.1 (All versions < V34.1.258), Parasolid V35.0 (All versions < V35.0.254), Parasolid V35.1 (All versions <… |
CVE-2023-28561 | Critical | 9.8 | 2023-08-08 | Memory corruption in QESL while processing payload from external ESL device to firmware. |
CVE-2023-28537 | High | 8.4 | 2023-08-08 | Memory corruption while allocating memory in COmxApeDec module in Audio. |
CVE-2023-22666 | High | 8.4 | 2023-08-08 | Memory Corruption in Audio while playing amrwbplus clips with modified content. |
CVE-2023-21650 | Medium | 6.7 | 2023-08-08 | Memory Corruption in GPS HLOS Driver when injectFdclData receives data with invalid data length. |
CVE-2023-21649 | Medium | 6.7 | 2023-08-08 | Memory corruption in WLAN while running doDriverCmd for an unspecific command. |
CVE-2023-21648 | Medium | 6.7 | 2023-08-08 | Memory corruption in RIL while trying to send apdu packet. |
CVE-2023-21643 | Critical | 9.1 | 2023-08-08 | Memory corruption due to untrusted pointer dereference in automotive during system call. |
CVE-2022-40510 | Critical | 9.8 | 2023-08-08 | Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder. |
CVE-2023-38940 | Critical | 9.8 | 2023-08-07 | Tenda F1203 V2.0.1.6, FH1203 V2.0.1.6 and FH1205 V2.0.0.7(775) were discovered to contain a stack overflow via the ssid parameter in the form_fast_setting_wifi… |
CVE-2023-38939 | Critical | 9.8 | 2023-08-07 | Tenda F1202 V1.2.0.9 and FH1202 V1.2.0.9 were discovered to contain a stack overflow via the mit_ssid parameter in the formWrlsafeset function. |
CVE-2023-38938 | Critical | 9.8 | 2023-08-07 | Tenda F1202 V1.2.0.9, PA202 V1.1.2.5, PW201A V1.1.2.5 and FH1202 V1.2.0.9 were discovered to contain a stack overflow via the page parameter at /L7Im. |
CVE-2023-38937 | Critical | 9.8 | 2023-08-07 | Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5 V1.0 V15.03.06.28, AC9 V3.0 V15.03.06… |
CVE-2023-38936 | Critical | 9.8 | 2023-08-07 | Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6, AC9 V3.0 V15.03.06.42_… |
CVE-2023-38935 | Critical | 9.8 | 2023-08-07 | Tenda AC1206 V15.03.06.23, AC8 V4 V16.03.34.06, AC5 V1.0 V15.03.06.28, AC10 v4.0 V16.03.10.13 and AC9 V3.0 V15.03.06.42_multi were discovered to contain a tack… |
CVE-2023-38934 | Critical | 9.8 | 2023-08-07 | Tenda F1203 V2.0.1.6, FH1203 V2.0.1.6 and FH1205 V2.0.0.7(775) was discovered to contain a stack overflow via the deviceId parameter in the formSetDeviceName f… |
CVE-2023-38933 | Critical | 9.8 | 2023-08-07 | Tenda AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6 and AC9 V3.0 V15.03.06.42_multi, and FH1205 V2.0.0.7… |
CVE-2023-38932 | Critical | 9.8 | 2023-08-07 | Tenda F1202 V1.2.0.9, PA202 V1.1.2.5, PW201A V1.1.2.5 and FH1202 V1.2.0.9 were discovered to contain a stack overflow via the page parameter in the SafeEmailFi… |
CVE-2023-38931 | Critical | 9.8 | 2023-08-07 | Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, AC… |
CVE-2023-38930 | Critical | 9.8 | 2023-08-07 | Tenda AC7 V1.0,V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0,V15.03.06.28, AC9 V3.0,V15.03.06.42_multi and FH1205 V2.0.0.7(775) were discovered to contain a stack ove… |
CVE-2023-38929 | Critical | 9.8 | 2023-08-07 | Tenda 4G300 v1.01.42 was discovered to contain a stack overflow via the page parameter at /VirtualSer. |
CVE-2023-20817 | Medium | 6.7 | 2023-08-07 | In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System executi… |
CVE-2023-20816 | Medium | 6.7 | 2023-08-07 | In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System executi… |
CVE-2023-20815 | Medium | 6.7 | 2023-08-07 | In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System executi… |
CVE-2023-20814 | Medium | 6.7 | 2023-08-07 | In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System executi… |
CVE-2023-20812 | Medium | 4.4 | 2023-08-07 | In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to local information disclosure with System execution… |
CVE-2023-20811 | Medium | 6.7 | 2023-08-07 | In IOMMU, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privile… |
CVE-2023-20809 | Medium | 6.7 | 2023-08-07 | In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileg… |
CVE-2023-20808 | Medium | 6.7 | 2023-08-07 | In OPTEE, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privile… |
CVE-2023-20807 | Medium | 6.7 | 2023-08-07 | In dpe, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20806 | Medium | 6.7 | 2023-08-07 | In hcp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20805 | Medium | 6.7 | 2023-08-07 | In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privil… |
CVE-2023-20804 | Medium | 6.7 | 2023-08-07 | In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privil… |
CVE-2023-20803 | Medium | 6.5 | 2023-08-07 | In imgsys, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution privi… |
CVE-2023-20802 | Medium | 6.5 | 2023-08-07 | In imgsys, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution privi… |
CVE-2023-20797 | Medium | 6.7 | 2023-08-07 | In camera middleware, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execu… |
CVE-2023-20796 | Medium | 4.4 | 2023-08-07 | In power, there is a possible memory corruption due to an incorrect bounds check. This could lead to local denial of service with System execution privileges n… |
CVE-2023-20795 | Medium | 6.7 | 2023-08-07 | In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20793 | Medium | 4.4 | 2023-08-07 | In apu, there is a possible memory corruption due to a missing bounds check. This could lead to local denial of service with System execution privileges needed… |
CVE-2023-20790 | Medium | 4.4 | 2023-08-07 | In nvram, there is a possible out of bounds write due to a missing bounds check. This could lead to local information disclosure with System execution privileg… |
CVE-2023-20786 | Medium | 6.7 | 2023-08-07 | In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20785 | Medium | 6.4 | 2023-08-07 | In audio, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privile… |
CVE-2023-20784 | Medium | 6.7 | 2023-08-07 | In keyinstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution pr… |
CVE-2023-20783 | Medium | 6.7 | 2023-08-07 | In keyinstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution pr… |
CVE-2023-20781 | Medium | 4.4 | 2023-08-07 | In keyinstall, there is a possible memory corruption due to a missing bounds check. This could lead to local denial of service with System execution privileges… |
CVE-2023-33913 | High | 7.2 | 2023-08-07 | In DRM/oemcrypto, there is a possible out of bounds write due to an incorrect calculation of buffer size.This could lead to remote escalation of privilege with… |
CVE-2023-33375 | Critical | 9.8 | 2023-08-04 | Connected IO v2.1.0 and prior has a stack-based buffer overflow vulnerability in its communication protocol, enabling attackers to take control over devices. |
CVE-2023-3180 | Medium | 6.0 | 2023-08-03 | A flaw was found in the QEMU virtual crypto device while handling data encryption/decryption requests in virtio_crypto_handle_sym_req. There is no check for th… |
CVE-2023-37557 | Medium | 6.5 | 2023-08-03 | After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted remote communication requests can cause the CmpAp… |
CVE-2023-38747 | High | 7.8 | 2023-08-03 | Heap-based buffer overflow vulnerability exists in CX-Programmer Included in CX-One CXONE-AL[][]D-V4 V9.80 and earlier. By having a user open a specially craft… |
CVE-2023-4072 | High | 8.8 | 2023-08-03 | Out of bounds read and write in WebGL in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted H… |
CVE-2023-4071 | High | 8.8 | 2023-08-03 | Heap buffer overflow in Visuals in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa… |
CVE-2023-4016 | Low | 2.5 | 2023-08-02 | Under some circumstances, this weakness allows a user who has access to run the “ps” utility on a machine, the ability to write almost unlimited amounts of unf… |
CVE-2023-3732 | High | 8.8 | 2023-08-01 | Out of bounds memory access in Mojo in Google Chrome prior to 115.0.5790.98 allowed a remote attacker who had compromised the renderer process to potentially e… |
CVE-2023-34552 | High | 8.8 | 2023-08-01 | In certain EZVIZ products, two stack based buffer overflows in mulicast_parse_sadp_packet and mulicast_get_pack_type functions of the SADP multicast protocol c… |
CVE-2023-34551 | High | 8.0 | 2023-08-01 | In certain EZVIZ products, two stack buffer overflows in netClientSetWlanCfg function of the EZVIZ SDK command server can allow an authenticated attacker prese… |
CVE-2023-4058 | Critical | 9.8 | 2023-08-01 | Memory safety bugs present in Firefox 115. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could h… |
CVE-2023-4057 | Critical | 9.8 | 2023-08-01 | Memory safety bugs present in Firefox 115, Firefox ESR 115.0, and Thunderbird 115.0. Some of these bugs showed evidence of memory corruption and we presume tha… |
CVE-2023-4056 | Critical | 9.8 | 2023-08-01 | Memory safety bugs present in Firefox 115, Firefox ESR 115.0, Firefox ESR 102.13, Thunderbird 115.0, and Thunderbird 102.13. Some of these bugs showed evidence… |
CVE-2023-4050 | High | 7.5 | 2023-08-01 | In some cases, an untrusted input stream was copied to a stack buffer without checking its size. This resulted in a potentially exploitable crash which could h… |
CVE-2023-31710 | Critical | 9.8 | 2023-08-01 | TP-Link Archer AX21(US)_V3_1.1.4 Build 20230219 and AX21(US)_V3.6_1.1.4 Build 20230219 are vulnerable to Buffer Overflow. |
CVE-2023-3825 | High | 7.5 | 2023-07-31 | PTC’s KEPServerEX Versions 6.0 to 6.14.263 are vulnerable to being made to read a recursively defined object that leads to uncontrolled resource consumption… |
CVE-2022-4920 | Critical | 9.6 | 2023-07-29 | Heap buffer overflow in Blink in Google Chrome prior to 101.0.4951.41 allowed a remote attacker who convinced a user to engage in specific UI gestures to poten… |
CVE-2022-4914 | High | 8.8 | 2023-07-29 | Heap buffer overflow in PrintPreview in Google Chrome prior to 104.0.5112.79 allowed an attacker who convinced a user to install a malicious extension to poten… |
CVE-2023-3598 | High | 8.8 | 2023-07-28 | Out of bounds read and write in ANGLE in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HT… |
CVE-2023-38604 | Critical | 9.8 | 2023-07-28 | An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in watchOS 9.6, macOS Big Sur 11.7.9, iOS 15.7.8 and iPadOS 15.7… |
CVE-2023-33308 | Critical | 9.8 | 2023-07-26 | A stack-based overflow vulnerability [CWE-124] in Fortinet FortiOS version 7.0.0 through 7.0.10 and 7.2.0 through 7.2.3 and FortiProxy version 7.0.0 through 7… |
CVE-2023-38671 | High | 8.3 | 2023-07-26 | Heap buffer overflow in paddle.trace in PaddlePaddle before 2.5.0. This flaw can lead to a denial of service, information disclosure, or more damage is possibl… |
CVE-2022-4608 | High | 7.5 | 2023-07-26 | A vulnerability exists in HCI IEC 60870-5-104 function included in certain versions of the RTU500 series product. The vulnerability can only be exploited, if t… |
CVE-2023-39130 | Medium | 5.5 | 2023-07-25 | GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap buffer overflow via the function pe_as16() at /gdb/coff-pe-read.c. |
CVE-2023-39128 | Medium | 5.5 | 2023-07-25 | GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a stack overflow via the function ada_decode at /gdb/ada-lang.c. |
CVE-2023-21406 | High | 7.1 | 2023-07-25 | Ariel Harush and Roy Hodir from OTORIO have found a flaw in the AXIS A1001 when communicating over OSDP. A heap-based buffer overflow was found in the pacsiod… |
CVE-2023-22363 | Medium | 6.5 | 2023-07-25 | A stack-based buffer overflow in the Command Centre Server allows an attacker to cause a denial of service attack via assigning cardholders to an Access Group… |
CVE-2023-3812 | High | 7.8 | 2023-07-24 | An out-of-bounds memory access flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user generates a malicious (too big) networkin… |
CVE-2023-3745 | Medium | 5.5 | 2023-07-24 | A heap-based buffer overflow issue was found in ImageMagick's PushCharPixel() function in quantum-private.h. This issue may allow a local attacker to trick the… |
CVE-2023-3611 | High | 7.8 | 2023-07-21 | An out-of-bounds write vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve local privilege escalation. The qfq_change… |
CVE-2023-35077 | High | 7.5 | 2023-07-21 | An out-of-bounds write vulnerability on windows operating systems causes the Ivanti AntiVirus Product to crash. Update to Ivanti AV Product version 7.9.1.285 o… |
CVE-2022-46295 | Critical | 9.8 | 2023-07-21 | Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open Babel 3.1.1 and master… |
CVE-2022-46294 | Critical | 9.8 | 2023-07-21 | Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open Babel 3.1.1 and master… |
CVE-2022-46293 | Critical | 9.8 | 2023-07-21 | Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open Babel 3.1.1 and master… |
CVE-2022-46292 | Critical | 9.8 | 2023-07-21 | Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open Babel 3.1.1 and master… |
CVE-2022-46291 | Critical | 9.8 | 2023-07-21 | Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open Babel 3.1.1 and master… |
CVE-2022-46290 | Critical | 9.8 | 2023-07-21 | Multiple out-of-bounds write vulnerabilities exist in the ORCA format nAtoms functionality of Open Babel 3.1.1 and master commit 530dbfa3. A specially-crafted… |
CVE-2022-46289 | Critical | 9.8 | 2023-07-21 | Multiple out-of-bounds write vulnerabilities exist in the ORCA format nAtoms functionality of Open Babel 3.1.1 and master commit 530dbfa3. A specially-crafted… |
CVE-2022-43607 | High | 8.1 | 2023-07-21 | An out-of-bounds write vulnerability exists in the MOL2 format attribute and value functionality of Open Babel 3.1.1 and master commit 530dbfa3. A specially cr… |
CVE-2022-43467 | Critical | 9.8 | 2023-07-21 | An out-of-bounds write vulnerability exists in the PQS format coord_file functionality of Open Babel 3.1.1 and master commit 530dbfa3. A specially crafted malf… |
CVE-2022-41793 | Critical | 9.8 | 2023-07-21 | An out-of-bounds write vulnerability exists in the CSR format title functionality of Open Babel 3.1.1 and master commit 530dbfa3. A specially crafted malformed… |
CVE-2022-37331 | High | 7.3 | 2023-07-21 | An out-of-bounds write vulnerability exists in the Gaussian format orientation functionality of Open Babel 3.1.1 and master commit 530dbfa3. A specially crafte… |
CVE-2023-28730 | High | 7.8 | 2023-07-21 | A memory corruption vulnerability Panasonic Control FPWIN Pro versions 7.6.0.3 and all previous versions may allow arbitrary code execution when opening specia… |