CWE-787 · Out-of-bounds Write (page 57)
Page 57 of 100 — CVEs classified under CWE-787, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-48486 | High | 7.5 | 2023-06-19 | Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. |
CVE-2023-34417 | Critical | 9.8 | 2023-06-19 | Memory safety bugs present in Firefox 113. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could h… |
CVE-2023-34416 | Critical | 9.8 | 2023-06-19 | Memory safety bugs present in Firefox 113, Firefox ESR 102.11, and Thunderbird 102.12. Some of these bugs showed evidence of memory corruption and we presume t… |
CVE-2023-32216 | Critical | 9.8 | 2023-06-19 | Mozilla developers and community members Ronald Crane, Andrew McCreight, Randell Jesup and the Mozilla Fuzzing Team reported memory safety bugs present in Fire… |
CVE-2023-32209 | High | 7.5 | 2023-06-19 | A maliciously crafted favicon could have led to an out of memory crash. This vulnerability affects Firefox < 113. |
CVE-2023-29531 | Critical | 9.8 | 2023-06-19 | An attacker could have caused an out of bounds memory access using WebGL APIs, leading to memory corruption and a potentially exploitable crash. *This bug onl… |
CVE-2023-32538 | High | 7.8 | 2023-06-19 | Stack-based buffer overflow vulnerability exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted SIM2 file may lead to information d… |
CVE-2023-32276 | High | 7.8 | 2023-06-19 | Stack-based buffer overflow vulnerability exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted V8 file may lead to information dis… |
CVE-2023-32273 | High | 7.8 | 2023-06-19 | Stack-based buffer overflow vulnerability exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted SIM2 file may lead to information d… |
CVE-2023-32201 | High | 7.8 | 2023-06-19 | Stack-based buffer overflow vulnerability exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted SIM2 file may lead to information d… |
CVE-2014-125106 | Critical | 9.8 | 2023-06-17 | Nanopb before 0.3.1 allows size_t overflows in pb_dec_bytes and pb_dec_string. |
CVE-2023-35788 | High | 7.8 | 2023-06-16 | An issue was discovered in fl_set_geneve_opt in net/sched/cls_flower.c in the Linux kernel before 6.3.7. It allows an out-of-bounds write in the flower classif… |
CVE-2023-3195 | Medium | 5.5 | 2023-06-16 | A stack-based buffer overflow issue was found in ImageMagick's coders/tiff.c. This flaw allows an attacker to trick the user into opening a specially crafted m… |
CVE-2023-34474 | Medium | 5.5 | 2023-06-16 | A heap-based buffer overflow issue was discovered in ImageMagick's ReadTIM2ImageData() function in coders/tim2.c. A local attacker could trick the user in open… |
CVE-2022-48330 | High | 8.0 | 2023-06-16 | A Huawei sound box product has an out-of-bounds write vulnerability. Attackers can exploit this vulnerability to cause buffer overflow. Affected product versio… |
CVE-2023-3291 | Low | 3.3 | 2023-06-16 | Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.2.2. |
CVE-2021-0945 | Critical | 9.8 | 2023-06-15 | In _PMRCreate of the PowerVR kernel driver, a missing bounds check means it is possible to overwrite heap memory via PhysmemNewRamBackedPMR. This could lead to… |
CVE-2023-26965 | Medium | 5.5 | 2023-06-14 | loadImage() in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based use after free via a crafted TIFF image. |
CVE-2023-34095 | Critical | 9.8 | 2023-06-14 | cpdb-libs provides frontend and backend libraries for the Common Printing Dialog Backends (CPDB) project. In versions 1.0 through 2.0b4, cpdb-libs is vulnerabl… |
CVE-2023-35110 | High | 7.5 | 2023-06-14 | An issue was discovered jjson thru 0.1.7 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic depende… |
CVE-2023-34824 | Medium | 5.5 | 2023-06-14 | fdkaac before 1.0.5 was discovered to contain a heap buffer overflow in caf_info function in caf_reader.c. |
CVE-2023-34823 | Medium | 5.5 | 2023-06-14 | fdkaac before 1.0.5 was discovered to contain a stack overflow in read_callback function in src/main.c. |
CVE-2023-34624 | High | 7.5 | 2023-06-14 | An issue was discovered htmlcleaner thru = 2.28 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic… |
CVE-2023-34623 | High | 7.5 | 2023-06-14 | An issue was discovered jtidy thru r938 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependen… |
CVE-2023-34620 | High | 7.5 | 2023-06-14 | An issue was discovered hjson thru 3.0.0 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic depende… |
CVE-2023-34617 | High | 7.5 | 2023-06-14 | An issue was discovered genson thru 1.6 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependen… |
CVE-2023-34616 | High | 7.5 | 2023-06-14 | An issue was discovered pbjson thru 0.4.0 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic depend… |
CVE-2023-34615 | High | 7.5 | 2023-06-14 | An issue was discovered JSONUtil thru 5.0 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic depend… |
CVE-2023-34614 | High | 7.5 | 2023-06-14 | An issue was discovered jmarsden/jsonij thru 0.5.2 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cycl… |
CVE-2023-34613 | High | 7.5 | 2023-06-14 | An issue was discovered sojo thru 1.1.1 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependen… |
CVE-2023-34612 | High | 7.5 | 2023-06-14 | An issue was discovered ph-json thru 9.5.5 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic depen… |
CVE-2023-34611 | High | 7.5 | 2023-06-14 | An issue was discovered mjson thru 1.4.1 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic depende… |
CVE-2023-34610 | High | 7.5 | 2023-06-14 | An issue was discovered json-io thru 4.14.0 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic depe… |
CVE-2023-34609 | High | 7.5 | 2023-06-14 | An issue was discovered flexjson thru 3.3 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic depend… |
CVE-2023-2569 | High | 7.8 | 2023-06-14 | A CWE-787: Out-of-Bounds Write vulnerability exists that could cause local denial-of-service, elevation of privilege, and potentially kernel execution when a… |
CVE-2023-29562 | Critical | 9.8 | 2023-06-13 | TP-Link TL-WPA7510 (EU)_V2_190125 was discovered to contain a stack overflow via the operation parameter at /admin/locale. |
CVE-2022-28550 | Critical | 9.8 | 2023-06-13 | Matthias-Wandel/jhead jhead 3.06 is vulnerable to Buffer Overflow via shellescape(), jhead.c, jhead. jhead copies strings to a stack buffer when it detects a &… |
CVE-2023-29160 | High | 7.8 | 2023-06-13 | Stack-based buffer overflow vulnerability exists in FRENIC RHC Loader v1.1.0.3. If a user opens a specially crafted FNE file, sensitive information on the syst… |
CVE-2023-33124 | High | 7.8 | 2023-06-13 | A vulnerability has been identified in JT2Go (All versions < V14.2.0.3), Teamcenter Visualization V13.2 (All versions < V13.2.0.13), Teamcenter Visualization V… |
CVE-2023-27997 | Critical | 9.8 | 2023-06-13 | A heap-based buffer overflow vulnerability [CWE-122] in FortiOS version 7.2.4 and below, version 7.0.11 and below, version 6.4.12 and below, version 6.0.16 and… |
CVE-2023-22639 | Medium | 6.7 | 2023-06-13 | A out-of-bounds write in Fortinet FortiOS version 7.2.0 through 7.2.3, FortiOS version 7.0.0 through 7.0.10, FortiOS version 6.4.0 through 6.4.12, FortiOS all… |
CVE-2023-34942 | High | 7.5 | 2023-06-12 | Asus RT-N10LX Router v2.0.0.39 was discovered to contain a stack overflow via the mac parameter at /start-apply.html. NOTE: This vulnerability only affects pro… |
CVE-2023-34940 | High | 7.5 | 2023-06-12 | Asus RT-N10LX Router v2.0.0.39 was discovered to contain a stack overflow via the url parameter at /start-apply.html. NOTE: This vulnerability only affects pro… |
CVE-2023-33626 | Critical | 9.8 | 2023-06-12 | D-Link DIR-600 Hardware Version B5, Firmware Version 2.18 was discovered to contain a stack overflow via the gena.cgi binary. |
CVE-2023-28478 | High | 8.8 | 2023-06-12 | TP-Link EC-70 devices through 2.3.4 Build 20220902 rel.69498 have a Buffer Overflow. |
CVE-2023-34488 | High | 7.8 | 2023-06-12 | NanoMQ 0.17.5 has a one-byte heap-based buffer over-read in the conn_handler function of mqtt_parser.c when it processes malformed messages. |
CVE-2023-34364 | Critical | 9.8 | 2023-06-09 | A buffer overflow was discovered in Progress DataDirect Connect for ODBC before 08.02.2770 for Oracle. An overly large value for certain options of a connectio… |
CVE-2023-34571 | Medium | 6.7 | 2023-06-08 | Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter shareSpeed at /goform/WifiGuestSet. |
CVE-2023-34570 | Medium | 6.7 | 2023-06-08 | Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter devName at /goform/SetOnlineDevName. |
CVE-2023-34569 | Medium | 6.7 | 2023-06-08 | Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter list at /goform/SetNetControlList. |
CVE-2023-34568 | Medium | 6.7 | 2023-06-08 | Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter time at /goform/PowerSaveSet. |
CVE-2023-34567 | Medium | 6.7 | 2023-06-08 | Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter list at /goform/SetVirtualServerCfg. |
CVE-2023-34566 | Critical | 9.8 | 2023-06-08 | Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter time at /goform/saveParentControlInfo. |
CVE-2023-33660 | High | 7.5 | 2023-06-08 | A heap buffer overflow vulnerability exists in NanoMQ 0.17.2. The vulnerability can be triggered by calling the function copyn_str() in the file mqtt_parser.c… |
CVE-2023-33658 | High | 7.5 | 2023-06-08 | A heap buffer overflow vulnerability exists in NanoMQ 0.17.2. The vulnerability can be triggered by calling the function nni_msg_get_pub_pid() in the file mess… |
CVE-2023-24014 | High | 7.8 | 2023-06-07 | Delta Electronics' CNCSoft-B DOPSoft versions 1.0.0.4 and prior are vulnerable to heap-based buffer overflow, which could allow an attacker to execute arbitr… |
CVE-2023-1709 | High | 7.8 | 2023-06-07 | Datalogics Library APDFLThe v18.0.4PlusP1e and prior contains a stack-based buffer overflow due to documents containing corrupted fonts, which could allow an… |
CVE-2023-1388 | Medium | 6.3 | 2023-06-07 | A heap-based overflow vulnerability in TA prior to version 5.7.9 allows a remote user to alter the page heap in the macmnsvc process memory block, resulting i… |
CVE-2023-0668 | Medium | 6.5 | 2023-06-07 | Due to failure in validating the length provided by an attacker-crafted IEEE-C37.118 packet, Wireshark version 4.0.5 and prior, by default, is susceptible to a… |
CVE-2023-0667 | Medium | 6.5 | 2023-06-07 | Due to failure in validating the length provided by an attacker-crafted MSMMS packet, Wireshark version 4.0.5 and prior, in an unusual configuration, is suscep… |
CVE-2023-0666 | Medium | 6.5 | 2023-06-07 | Due to failure in validating the length provided by an attacker-crafted RTPS packet, Wireshark version 4.0.5 and prior, by default, is susceptible to a heap-ba… |
CVE-2023-2157 | Medium | 5.5 | 2023-06-06 | A heap-based buffer overflow vulnerability was found in the ImageMagick package that can lead to the application crashing. |
CVE-2023-33613 | Medium | 5.5 | 2023-06-06 | axTLS v2.1.5 was discovered to contain a heap buffer overflow in the bi_import function in axtls-code/crypto/bigint.c. This vulnerability allows attackers to c… |
CVE-2023-32203 | High | 7.8 | 2023-06-06 | Horner Automation Cscape lacks proper validation of user-supplied data when parsing project files (e.g., HMI). This could lead to an out-of-bounds write at CSc… |
CVE-2023-32539 | High | 7.8 | 2023-06-06 | Horner Automation Cscape lacks proper validation of user-supplied data when parsing project files (e.g., HMI). This could lead to an out-of-bounds write at CSc… |
CVE-2023-20752 | Medium | 6.7 | 2023-06-06 | In keymange, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution priv… |
CVE-2023-20751 | Medium | 6.7 | 2023-06-06 | In keymange, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution priv… |
CVE-2023-20750 | Medium | 4.1 | 2023-06-06 | In swpm, there is a possible out of bounds write due to a race condition. This could lead to local information disclosure with System execution privileges need… |
CVE-2023-20749 | Medium | 6.7 | 2023-06-06 | In swpm, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileg… |
CVE-2023-20740 | Medium | 6.7 | 2023-06-06 | In vcu, there is a possible memory corruption due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. U… |
CVE-2023-20739 | Medium | 6.7 | 2023-06-06 | In vcu, there is a possible memory corruption due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. U… |
CVE-2023-20738 | Medium | 6.7 | 2023-06-06 | In vcu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20736 | Medium | 6.4 | 2023-06-06 | In vcu, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with System execution privileges need… |
CVE-2023-20735 | Medium | 6.7 | 2023-06-06 | In vcu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20734 | Medium | 6.7 | 2023-06-06 | In vcu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20732 | Medium | 6.7 | 2023-06-06 | In wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges… |
CVE-2023-20725 | Medium | 6.7 | 2023-06-06 | In preloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution pri… |
CVE-2023-20716 | Medium | 6.7 | 2023-06-06 | In wlan, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileg… |
CVE-2023-20715 | Medium | 6.7 | 2023-06-06 | In wlan, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileg… |
CVE-2023-20712 | Medium | 6.7 | 2023-06-06 | In wlan, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileg… |
CVE-2023-33659 | High | 7.5 | 2023-06-06 | A heap buffer overflow vulnerability exists in NanoMQ 0.17.2. The vulnerability can be triggered by calling the function nmq_subinfo_decode() in the file mqtt_… |
CVE-2023-21632 | High | 8.4 | 2023-06-06 | Memory corruption in Automotive GPU while querying a gsl memory node. |
CVE-2023-21628 | High | 8.4 | 2023-06-06 | Memory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command. |
CVE-2022-33267 | Medium | 6.7 | 2023-06-06 | Memory corruption in Linux while sending DRM request. |
CVE-2022-33264 | High | 7.9 | 2023-06-06 | Memory corruption in modem due to stack based buffer overflow while parsing OTASP Key Generation Request Message. |
CVE-2022-48439 | Medium | 4.4 | 2023-06-06 | In cp_dump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution priv… |
CVE-2022-48438 | Medium | 4.4 | 2023-06-06 | In cp_dump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution priv… |
CVE-2022-48188 | Medium | 6.7 | 2023-06-05 | A buffer overflow vulnerability in the SecureBootDXE BIOS driver of some Lenovo Desktop and ThinkStation models could allow an attacker with local access to el… |
CVE-2022-48181 | Medium | 6.7 | 2023-06-05 | An ErrorMessage driver stack-based buffer overflow vulnerability in BIOS of some ThinkPad models could allow an attacker with local access to elevate their pri… |
CVE-2023-33693 | Medium | 5.5 | 2023-06-05 | A buffer overflow in EasyPlayerPro-Win v3.2.19.0106 to v3.6.19.0823 allows attackers to cause a Denial of Service (DoS) via a crafted XML file. |
CVE-2023-33675 | Critical | 9.8 | 2023-06-02 | Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the time parameter in the get_parentControl_list_Info function. |
CVE-2023-33673 | Critical | 9.8 | 2023-06-02 | Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the firewallEn parameter in the formSetFirewallCfg function. |
CVE-2023-33672 | High | 7.5 | 2023-06-02 | Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the shareSpeed parameter in the fromSetWifiGusetBasic function. |
CVE-2023-33671 | Critical | 9.8 | 2023-06-02 | Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the deviceId parameter in the saveParentControlInfo function. |
CVE-2023-33670 | Critical | 9.8 | 2023-06-02 | Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the time parameter in the sub_4a79ec function. |
CVE-2023-33669 | Critical | 9.8 | 2023-06-02 | Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the timeZone parameter in the sub_44db3c function. |
CVE-2023-32215 | High | 8.8 | 2023-06-02 | Mozilla developers and community members Gabriele Svelto, Andrew Osmond, Emily McDonough, Sebastian Hengst, Andrew McCreight and the Mozilla Fuzzing Team repor… |
CVE-2023-29551 | High | 8.8 | 2023-06-02 | Memory safety bugs present in Firefox 111. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could h… |
CVE-2023-28177 | High | 8.8 | 2023-06-02 | Memory safety bugs present in Firefox 110. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could h… |
CVE-2023-28176 | High | 8.8 | 2023-06-02 | Memory safety bugs present in Firefox 110 and Firefox ESR 102.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort… |