CWE-787 · Out-of-bounds Write (page 58)
Page 58 of 100 — CVEs classified under CWE-787, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-28068 | High | 7.5 | 2023-08-22 | A heap buffer overflow in r_sleb128 function in radare2 5.4.2 and 5.4.0. |
CVE-2022-26592 | High | 8.8 | 2023-08-22 | Stack Overflow vulnerability in libsass 3.6.5 via the CompoundSelector::has_real_parent_ref function. |
CVE-2021-46174 | High | 7.5 | 2023-08-22 | Heap-based Buffer Overflow in function bfd_getl32 in Binutils objdump 3.37. |
CVE-2021-40265 | High | 8.8 | 2023-08-22 | A heap overflow bug exists FreeImage before 1.18.0 via ofLoad function in PluginJPEG.cpp. |
CVE-2021-40263 | High | 8.8 | 2023-08-22 | A heap overflow vulnerability in FreeImage 1.18.0 via the ofLoad function in PluginTIFF.cpp. |
CVE-2021-40262 | Medium | 6.5 | 2023-08-22 | A stack exhaustion issue was discovered in FreeImage before 1.18.0 via the Validate function in PluginRAW.cpp. |
CVE-2021-34193 | High | 7.5 | 2023-08-22 | Stack overflow vulnerability in OpenSC smart card middleware before 0.23 via crafted responses to APDUs. |
CVE-2021-33388 | Critical | 9.8 | 2023-08-22 | dpic 2021.04.10 has a Heap Buffer Overflow in themakevar() function in dpic.y |
CVE-2021-32420 | High | 7.5 | 2023-08-22 | dpic 2021.01.01 has a Heap-based Buffer Overflow in thestorestring function in dpic.y. |
CVE-2021-32292 | Critical | 9.8 | 2023-08-22 | An issue was discovered in json-c from 20200420 (post 0.14 unreleased code) through 0.15-20200726. A stack-buffer-overflow exists in the auxiliary sample progr… |
CVE-2021-29390 | High | 7.1 | 2023-08-22 | libjpeg-turbo version 2.0.90 has a heap-based buffer over-read (2 bytes) in decompress_smooth_data in jdcoefct.c. |
CVE-2020-22218 | High | 7.5 | 2023-08-22 | An issue was discovered in function _libssh2_packet_add in libssh2 1.10.0 allows attackers to access out of bounds memory. |
CVE-2020-21890 | High | 7.8 | 2023-08-22 | Buffer Overflow vulnerability in clj_media_size function in devices/gdevclj.c in Artifex Ghostscript 9.50 allows remote attackers to cause a denial of service… |
CVE-2020-21724 | High | 7.8 | 2023-08-22 | Buffer Overflow vulnerability in ExtractorInformation function in streamExtractor.cpp in oggvideotools 0.9.1 allows remaote attackers to run arbitrary code via… |
CVE-2020-21723 | Medium | 5.5 | 2023-08-22 | A Segmentation Fault issue discovered StreamSerializer::extractStreams function in streamSerializer.cpp in oggvideotools 0.9.1 allows remote attackers to cause… |
CVE-2020-21687 | Medium | 5.5 | 2023-08-22 | Buffer Overflow vulnerability in scan function in stdscan.c in nasm 2.15rc0 allows remote attackers to cause a denial of service via crafted asm file. |
CVE-2020-21685 | Medium | 5.5 | 2023-08-22 | Buffer Overflow vulnerability in hash_findi function in hashtbl.c in nasm 2.15rc0 allows remote attackers to cause a denial of service via crafted asm file. |
CVE-2020-21679 | Medium | 5.5 | 2023-08-22 | Buffer Overflow vulnerability in WritePCXImage function in pcx.c in GraphicsMagick 1.4 allows remote attackers to cause a denial of service via converting of c… |
CVE-2020-21047 | Medium | 5.5 | 2023-08-22 | The libcpu component which is used by libasm of elfutils version 0.177 (git 47780c9e), suffers from denial-of-service vulnerability caused by application crash… |
CVE-2020-19190 | Medium | 6.5 | 2023-08-22 | Buffer Overflow vulnerability in _nc_find_entry in tinfo/comp_hash.c:70 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command. |
CVE-2020-19189 | Medium | 6.5 | 2023-08-22 | Buffer Overflow vulnerability in postprocess_terminfo function in tinfo/parse_entry.c:997 in ncurses 6.1 allows remote attackers to cause a denial of service v… |
CVE-2020-19188 | Medium | 6.5 | 2023-08-22 | Buffer Overflow vulnerability in fmt_entry function in progs/dump_entry.c:1116 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted… |
CVE-2020-19187 | Medium | 6.5 | 2023-08-22 | Buffer Overflow vulnerability in fmt_entry function in progs/dump_entry.c:1100 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted… |
CVE-2020-19186 | Medium | 6.5 | 2023-08-22 | Buffer Overflow vulnerability in _nc_find_entry function in tinfo/comp_hash.c:66 in ncurses 6.1 allows remote attackers to cause a denial of service via crafte… |
CVE-2020-19185 | Medium | 6.5 | 2023-08-22 | Buffer Overflow vulnerability in one_one_mapping function in progs/dump_entry.c:1373 in ncurses 6.1 allows remote attackers to cause a denial of service via cr… |
CVE-2020-18839 | Medium | 6.5 | 2023-08-22 | Buffer Overflow vulnerability in HtmlOutputDev::page in poppler 0.75.0 allows attackers to cause a denial of service. |
CVE-2020-18831 | High | 7.8 | 2023-08-22 | Buffer Overflow vulnerability in tEXtToDataBuf function in pngimage.cpp in Exiv2 0.27.1 allows remote attackers to cause a denial of service and other unspecif… |
CVE-2020-18781 | Medium | 5.5 | 2023-08-22 | Heap buffer overflow vulnerability in FilePOSIX::read in File.cpp in audiofile 0.3.6 may cause denial-of-service via a crafted wav file, this bug can be trigge… |
CVE-2020-18768 | Medium | 5.5 | 2023-08-22 | There exists one heap buffer overflow in _TIFFmemcpy in tif_unix.c in libtiff 4.0.10, which allows an attacker to cause a denial-of-service through a crafted t… |
CVE-2020-18652 | Medium | 6.5 | 2023-08-22 | Buffer Overflow vulnerability in WEBP_Support.cpp in exempi 2.5.0 and earlier allows remote attackers to cause a denial of service via opening of crafted webp… |
CVE-2020-18651 | Medium | 6.5 | 2023-08-22 | Buffer Overflow vulnerability in function ID3_Support::ID3v2Frame::getFrameValue in exempi 2.5.0 and earlier allows remote attackers to cause a denial of servi… |
CVE-2020-18494 | High | 8.8 | 2023-08-22 | Buffer Overflow vulnerability in function H5S_close in H5S.c in HDF5 1.10.4 allows remote attackers to run arbitrary code via creation of crafted file. |
CVE-2020-18382 | Medium | 6.5 | 2023-08-22 | Heap-buffer-overflow in /src/wasm/wasm-binary.cpp in wasm::WasmBinaryBuilder::visitBlock(wasm::Block*) in Binaryen 1.38.26. A crafted wasm input can cause a se… |
CVE-2020-18232 | High | 8.8 | 2023-08-22 | Buffer Overflow vulnerability in function H5S_close in H5S.c in HDF5 1.10.4 allows remote attackers to run arbitrary code via creation of crafted file. |
CVE-2023-38961 | Critical | 9.8 | 2023-08-21 | Buffer Overflwo vulnerability in JerryScript Project jerryscript v.3.0.0 allows a remote attacker to execute arbitrary code via the scanner_is_context_needed c… |
CVE-2023-39751 | Critical | 9.8 | 2023-08-21 | TP-Link TL-WR941ND V6 were discovered to contain a buffer overflow via the pSize parameter at /userRpm/PingIframeRpm. |
CVE-2023-39786 | High | 7.5 | 2023-08-21 | Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the time parameter in the sscanf function. |
CVE-2023-39785 | High | 7.5 | 2023-08-21 | Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the list parameter in the set_qosMib_list function. |
CVE-2023-39784 | High | 7.5 | 2023-08-21 | Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the list parameter in the save_virtualser_data function. |
CVE-2023-40711 | High | 7.5 | 2023-08-20 | Veilid before 0.1.9 does not check the size of uncompressed data during decompression upon an envelope receipt, which allows remote attackers to cause a denial… |
CVE-2023-39125 | High | 7.5 | 2023-08-18 | NTSC-CRT 2.2.1 has an integer overflow and out-of-bounds write in loadBMP in bmp_rw.c because a file's width, height, and BPP are not validated. NOTE: the vend… |
CVE-2023-39741 | Medium | 5.5 | 2023-08-17 | lrzip v0.651 was discovered to contain a heap overflow via the libzpaq::PostProcessor::write(int) function at /libzpaq/libzpaq.cpp. This vulnerability allows a… |
CVE-2023-29182 | Medium | 6.4 | 2023-08-17 | A stack-based buffer overflow vulnerability [CWE-121] in Fortinet FortiOS before 7.0.3 allows a privileged attacker to execute arbitrary code via specially cra… |
CVE-2023-4362 | High | 8.8 | 2023-08-15 | Heap buffer overflow in Mojom IDL in Google Chrome prior to 116.0.5845.96 allowed a remote attacker who had compromised the renderer process and gained control… |
CVE-2023-4355 | High | 8.8 | 2023-08-15 | Out of bounds memory access in V8 in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… |
CVE-2023-4354 | High | 8.8 | 2023-08-15 | Heap buffer overflow in Skia in Google Chrome prior to 116.0.5845.96 allowed a remote attacker who had compromised the renderer process to potentially exploit… |
CVE-2023-4353 | High | 8.8 | 2023-08-15 | Heap buffer overflow in ANGLE in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… |
CVE-2023-38858 | Medium | 6.5 | 2023-08-15 | Buffer Overflow vulnerability infaad2 v.2.10.1 allows a remote attacker to execute arbitrary code and cause a denial of service via the mp4info function in mp4… |
CVE-2023-38857 | Medium | 5.5 | 2023-08-15 | Buffer Overflow vulnerability infaad2 v.2.10.1 allows a remote attacker to execute arbitrary code and cause a denial of service via the stcoin function in mp4r… |
CVE-2023-38856 | Medium | 6.5 | 2023-08-15 | Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted XLS file to the g… |
CVE-2023-38855 | Medium | 6.5 | 2023-08-15 | Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted XLS file to the g… |
CVE-2023-38854 | Medium | 6.5 | 2023-08-15 | Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted XLS file to the t… |
CVE-2023-38853 | Medium | 6.5 | 2023-08-15 | Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted XLS file to the x… |
CVE-2023-38852 | Medium | 6.5 | 2023-08-15 | Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted XLS file to the u… |
CVE-2023-38851 | Medium | 6.5 | 2023-08-15 | Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted XLS file to the x… |
CVE-2023-21282 | High | 8.8 | 2023-08-14 | In TRANSPOSER_SETTINGS of lpp_tran.h, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with n… |
CVE-2023-21273 | High | 8.8 | 2023-08-14 | In SDP_AddAttribute of sdp_db.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) code… |
CVE-2023-39829 | High | 7.5 | 2023-08-14 | Tenda A18 V15.13.07.09 was discovered to contain a stack overflow via the wpapsk_crypto2_4g parameter in the fromSetWirelessRepeat function. |
CVE-2023-39828 | High | 7.5 | 2023-08-14 | Tenda A18 V15.13.07.09 was discovered to contain a stack overflow via the security parameter in the formWifiBasicSet function. |
CVE-2023-39827 | High | 7.5 | 2023-08-14 | Tenda A18 V15.13.07.09 was discovered to contain a stack overflow via the rule_info parameter in the formAddMacfilterRule function. |
CVE-2023-4322 | Critical | 9.8 | 2023-08-14 | Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.9.0. |
CVE-2023-30187 | Critical | 9.8 | 2023-08-14 | An out of bounds memory access vulnerability in ONLYOFFICE DocumentServer 4.0.3 through 7.3.2 allows remote attackers to run arbitrary code via crafted JavaScr… |
CVE-2023-40305 | Medium | 5.5 | 2023-08-14 | GNU indent 2.2.13 has a heap-based buffer overflow in search_brace in indent.c via a crafted file. |
CVE-2023-40296 | High | 7.5 | 2023-08-14 | async-sockets-cpp through 0.3.1 has a stack-based buffer overflow in ReceiveFrom and Receive in udpsocket.hpp when processing malformed UDP packets. |
CVE-2023-40295 | High | 8.8 | 2023-08-14 | libboron in Boron 2.0.8 has a heap-based buffer overflow in ur_strInitUtf8 at string.c. |
CVE-2023-40294 | Medium | 6.5 | 2023-08-14 | libboron in Boron 2.0.8 has a heap-based buffer overflow in ur_parseBlockI at i_parse_blk.c. |
CVE-2023-39405 | Critical | 9.8 | 2023-08-13 | Vulnerability of out-of-bounds parameter read/write in the Wi-Fi module. Successful exploitation of this vulnerability may cause other apps to be executed with… |
CVE-2023-39947 | High | 8.2 | 2023-08-11 | eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.11.1, 2.10.2, 2.9.2, an… |
CVE-2023-39946 | High | 8.2 | 2023-08-11 | eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.11.1, 2.10.2, 2.9.2, an… |
CVE-2023-33877 | Low | 3.3 | 2023-08-11 | Out-of-bounds write in some Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA in version 0.25.0 may allow an authenticated user to potential… |
CVE-2023-32560 | Critical | 9.8 | 2023-08-10 | An attacker can send a specially crafted message to the Wavelink Avalanche Manager, which could result in service disruption or arbitrary code execution. Than… |
CVE-2023-38233 | High | 7.8 | 2023-08-10 | Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier) are affected by an out-of-bounds write vulnerability that could result… |
CVE-2023-38231 | High | 7.8 | 2023-08-10 | Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier) are affected by an out-of-bounds write vulnerability that could result… |
CVE-2023-30702 | Medium | 6.7 | 2023-08-10 | Stack overflow vulnerability in SSHDCPAPP TA prior to "SAMSUNG ELECTONICS, CO, LTD. - System Hardware Update - 7/13/2023" in Windows Update for Galax… |
CVE-2023-30699 | High | 7.5 | 2023-08-10 | Out-of-bounds write vulnerability in parser_hvcC function of libsimba library prior to SMR Aug-2023 Release 1 allows code execution by remote attackers. |
CVE-2023-30697 | Medium | 4.4 | 2023-08-10 | An improper input validation in IpcTxCfgSetSimlockPayload in libsec-ril prior to SMR Aug-2023 Release 1 allows attacker to cause out-of-bounds write. |
CVE-2023-30696 | Medium | 4.4 | 2023-08-10 | An improper input validation in IpcTxGetVerifyAkey in libsec-ril prior to SMR Aug-2023 Release 1 allows attacker to cause out-of-bounds write. |
CVE-2023-30695 | Medium | 6.7 | 2023-08-10 | Out-of-bounds Write vulnerability in SSHDCPAPP TA prior to "SAMSUNG ELECTONICS, CO, LTD. - System Hardware Update - 7/13/2023" in Windows Update for… |
CVE-2023-30694 | Medium | 6.7 | 2023-08-10 | Out-of-bounds Write in IpcTxPcscTransmitApdu of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code. |
CVE-2023-30693 | Medium | 6.7 | 2023-08-10 | Out-of-bounds Write in DoOemFactorySendFactoryBypassCommand of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code. |
CVE-2023-30689 | Medium | 6.7 | 2023-08-10 | Out-of-bounds Write in BuildOemEmbmsGetSigStrengthResponse of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code. |
CVE-2023-30688 | Medium | 6.7 | 2023-08-10 | Out-of-bounds Write in MakeUiccAuthForOem of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code. |
CVE-2023-30687 | Medium | 6.7 | 2023-08-10 | Out-of-bounds Write in RmtUimApdu of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code. |
CVE-2023-30686 | Medium | 6.7 | 2023-08-10 | Out-of-bounds Write in ReqDataRaw of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code. |
CVE-2023-30681 | Medium | 4.4 | 2023-08-10 | An improper input validation vulnerability within initialize function in HAL VaultKeeper prior to SMR Aug-2023 Release 1 allows attacker to cause out-of-bounds… |
CVE-2023-4273 | Medium | 6.0 | 2023-08-09 | A flaw was found in the exFAT driver of the Linux kernel. The vulnerability exists in the implementation of the file name reconstruction function, which is res… |
CVE-2023-2905 | High | 8.8 | 2023-08-09 | Due to a failure in validating the length of a provided MQTT_CMD_PUBLISH parsed message with a variable length header, Cesanta Mongoose, an embeddable web serv… |
CVE-2023-40042 | Critical | 9.8 | 2023-08-08 | TOTOLINK T10_v2 5.9c.5061_B20200511 has a stack-based buffer overflow in setStaticDhcpConfig in /lib/cste_modules/lan.so. Attackers can send crafted data in an… |
CVE-2023-40041 | Critical | 9.8 | 2023-08-08 | TOTOLINK T10_v2 5.9c.5061_B20200511 has a stack-based buffer overflow in setWiFiWpsConfig in /lib/cste_modules/wps.so. Attackers can send crafted data in an MQ… |
CVE-2023-3894 | Medium | 5.8 | 2023-08-08 | Those using jackson-dataformats-text to parse TOML data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input… |
CVE-2023-36532 | Medium | 5.9 | 2023-08-08 | Buffer overflow in Zoom Clients before 5.14.5 may allow an unauthenticated user to enable a denial of service via network access. |
CVE-2023-20555 | High | 7.8 | 2023-08-08 | Insufficient input validation in CpmDisplayFeatureSmm may allow an attacker to corrupt SMM memory by overwriting an arbitrary bit in an attacker-controlled poi… |
CVE-2023-39419 | High | 7.8 | 2023-08-08 | A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7). The affected applications contain an out of bounds write past the en… |
CVE-2023-39181 | High | 7.8 | 2023-08-08 | A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7). The affected application contains an out of bounds write past the en… |
CVE-2023-38683 | High | 7.8 | 2023-08-08 | A vulnerability has been identified in JT2Go (All versions < V14.2.0.5), Teamcenter Visualization V13.2 (All versions < V13.2.0.14), Teamcenter Visualization V… |
CVE-2023-38681 | High | 7.8 | 2023-08-08 | A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0… |
CVE-2023-38680 | High | 7.8 | 2023-08-08 | A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0… |
CVE-2023-38679 | High | 7.8 | 2023-08-08 | A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0… |
CVE-2023-38528 | High | 7.8 | 2023-08-08 | A vulnerability has been identified in Parasolid V34.1 (All versions < V34.1.258), Parasolid V35.0 (All versions < V35.0.254), Parasolid V35.1 (All versions <… |
CVE-2023-28561 | Critical | 9.8 | 2023-08-08 | Memory corruption in QESL while processing payload from external ESL device to firmware. |