CWE-787 · Out-of-bounds Write (page 59)
Page 59 of 100 — CVEs classified under CWE-787, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-31556 | Medium | 6.5 | 2023-05-10 | podofoinfo 0.10.0 was discovered to contain a segmentation violation via the function PoDoFo::PdfDictionary::findKeyParent. |
CVE-2023-31910 | High | 7.8 | 2023-05-10 | Jerryscript 3.0 (commit 05dbbd1) was discovered to contain a heap-buffer-overflow via the component parser_parse_function_statement at /jerry-core/parser/js/js… |
CVE-2023-31908 | High | 7.8 | 2023-05-10 | Jerryscript 3.0 (commit 05dbbd1) was discovered to contain a heap-buffer-overflow via the component ecma_builtin_typedarray_prototype_sort. |
CVE-2023-31907 | High | 7.8 | 2023-05-10 | Jerryscript 3.0.0 was discovered to contain a heap-buffer-overflow via the component scanner_literal_is_created at /jerry-core/parser/js/js-scanner-util.c. |
CVE-2023-31906 | High | 7.8 | 2023-05-10 | Jerryscript 3.0.0(commit 1a2c047) was discovered to contain a heap-buffer-overflow via the component lexer_compare_identifier_to_chars at /jerry-core/parser/js… |
CVE-2023-28410 | High | 8.8 | 2023-05-10 | Improper restriction of operations within the bounds of a memory buffer in some Intel(R) i915 Graphics drivers for linux before kernel version 6.2.10 may allow… |
CVE-2023-23910 | Low | 3.9 | 2023-05-10 | Out-of-bounds write for some Intel(R) Trace Analyzer and Collector software before version 2021.8.0 published Dec 2022 may allow an authenticated user to poten… |
CVE-2023-23580 | Medium | 4.8 | 2023-05-10 | Stack-based buffer overflow for some Intel(R) Trace Analyzer and Collector software before version 2021.8.0 published Dec 2022 may allow an authenticated user… |
CVE-2023-23569 | High | 7.8 | 2023-05-10 | Stack-based buffer overflow for some Intel(R) Trace Analyzer and Collector software before version 2021.8.0 published Dec 2022 may allow an authenticated user… |
CVE-2023-22442 | High | 7.9 | 2023-05-10 | Out of bounds write in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable escalation of privilege via local acce… |
CVE-2022-21804 | High | 8.4 | 2023-05-10 | Out-of-bounds write in software for the Intel QAT Driver for Windows before version 1.9.0-0008 may allow an authenticated user to potentially enable escalation… |
CVE-2023-27385 | High | 7.8 | 2023-05-10 | Heap-based buffer overflow vulnerability exists in CX-Drive All models all versions. By having a user open a specially crafted SDD file, arbitrary code may be… |
CVE-2021-46759 | Medium | 6.1 | 2023-05-09 | Improper syscall input validation in AMD TEE (Trusted Execution Environment) may allow an attacker with physical access and control of a Uapp that runs under t… |
CVE-2023-20524 | High | 7.5 | 2023-05-09 | An attacker with a compromised ASP could possibly send malformed commands to an ASP on another CPU, resulting in an out of bounds write, potentially leading to… |
CVE-2023-20520 | Critical | 9.8 | 2023-05-09 | Improper access control settings in ASP Bootloader may allow an attacker to corrupt the return address causing a stack-based buffer overrun potentially leading… |
CVE-2021-46764 | High | 7.5 | 2023-05-09 | Improper validation of DRAM addresses in SMU may allow an attacker to overwrite sensitive memory locations within the ASP potentially resulting in a denial of… |
CVE-2021-46763 | High | 7.5 | 2023-05-09 | Insufficient input validation in the SMU may enable a privileged attacker to write beyond the intended bounds of a shared memory buffer potentially leading to… |
CVE-2023-30087 | Medium | 5.5 | 2023-05-09 | Buffer Overflow vulnerability found in Cesanta MJS v.1.26 allows a local attacker to cause a denial of service via the mjs_mk_string function in mjs.c. |
CVE-2023-30086 | Medium | 5.5 | 2023-05-09 | Buffer Overflow vulnerability found in Libtiff V.4.0.7 allows a local attacker to cause a denial of service via the tiffcp function in tiffcp.c. |
CVE-2023-31982 | High | 7.8 | 2023-05-09 | Sngrep v1.6.0 was discovered to contain a heap buffer overflow via the function capture_packet_reasm_ip at /src/capture.c. |
CVE-2023-31981 | High | 7.8 | 2023-05-09 | Sngrep v1.6.0 was discovered to contain a stack buffer overflow via the function packet_set_payload at /src/packet.c. |
CVE-2023-31976 | High | 8.8 | 2023-05-09 | libming v0.4.8 was discovered to contain a stack buffer overflow via the function makeswf_preprocess at /util/makeswf_utils.c. |
CVE-2023-29462 | High | 7.8 | 2023-05-09 | An arbitrary code execution vulnerability contained in Rockwell Automation's Arena Simulation software was reported that could potentially allow a malicious us… |
CVE-2023-30986 | High | 7.8 | 2023-05-09 | A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 3), Solid Edge SE2023 (All versions < V223.0 Update 2). Affected applica… |
CVE-2023-32111 | High | 7.5 | 2023-05-09 | In SAP PowerDesigner (Proxy) - version 16.7, an attacker can send a crafted request from a remote host to the proxy machine and crash the proxy server, due to… |
CVE-2022-48389 | Medium | 4.4 | 2023-05-09 | In modem control device, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System executio… |
CVE-2022-48387 | Medium | 4.4 | 2023-05-09 | the apipe driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privi… |
CVE-2022-48385 | Medium | 4.4 | 2023-05-09 | In cp_dump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution priv… |
CVE-2022-48382 | Medium | 4.4 | 2023-05-09 | In log service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privile… |
CVE-2022-48381 | Medium | 4.4 | 2023-05-09 | In modem control device, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System executio… |
CVE-2022-48380 | Medium | 4.4 | 2023-05-09 | In modem control device, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System executio… |
CVE-2022-48374 | Medium | 4.4 | 2023-05-09 | In tee service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privile… |
CVE-2022-48373 | Medium | 4.4 | 2023-05-09 | In tee service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privile… |
CVE-2022-48372 | Medium | 4.4 | 2023-05-09 | In bootcp service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution priv… |
CVE-2022-48240 | Medium | 4.4 | 2023-05-09 | In camera driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privi… |
CVE-2022-48239 | Medium | 4.4 | 2023-05-09 | In camera driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privi… |
CVE-2022-48238 | Medium | 4.4 | 2023-05-09 | In Image filter, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privil… |
CVE-2022-48237 | Medium | 4.4 | 2023-05-09 | In Image filter, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privil… |
CVE-2022-48235 | Medium | 4.4 | 2023-05-09 | In MP3 encoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privile… |
CVE-2022-48234 | Medium | 5.5 | 2023-05-09 | In FM service , there is a possible missing params check. This could lead to local denial of service in FM service . |
CVE-2022-48233 | Medium | 5.5 | 2023-05-09 | In FM service , there is a possible missing params check. This could lead to local denial of service in FM service . |
CVE-2022-48232 | Medium | 5.5 | 2023-05-09 | In FM service , there is a possible missing params check. This could lead to local denial of service in FM service . |
CVE-2022-47486 | Medium | 4.4 | 2023-05-09 | In ext4fsfilter driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution… |
CVE-2022-47485 | Medium | 4.4 | 2023-05-09 | In modem control device, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System executio… |
CVE-2022-47470 | Medium | 4.4 | 2023-05-09 | In ext4fsfilter driver, there is a possible out of bounds read due to a missing bounds check. This could local denial of service with System execution privileg… |
CVE-2022-47469 | Medium | 4.4 | 2023-05-09 | In ext4fsfilter driver, there is a possible out of bounds read due to a missing bounds check. This could local denial of service with System execution privileg… |
CVE-2022-47340 | Medium | 5.5 | 2023-05-09 | In h265 codec firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional ex… |
CVE-2023-27970 | High | 7.8 | 2023-05-08 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 16.4 and iPadOS 16.4. An app may be able to execute arbitr… |
CVE-2023-27965 | High | 7.8 | 2023-05-08 | A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Studio Display Firmware Update 16.4. An app… |
CVE-2023-27959 | High | 7.8 | 2023-05-08 | The issue was addressed with improved memory handling. This issue is fixed in iOS 16.4 and iPadOS 16.4. An app may be able to execute arbitrary code with kerne… |
CVE-2023-27953 | Critical | 9.8 | 2023-05-08 | The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. A remote user ma… |
CVE-2023-27936 | High | 7.8 | 2023-05-08 | An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3, iOS 15.7.4 and iPadOS 15.7.4, macOS Monte… |
CVE-2023-27933 | Medium | 6.7 | 2023-05-08 | The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Monterey 12.6.4, tvOS 16.4, w… |
CVE-2022-32885 | High | 8.8 | 2023-05-08 | A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5, Safari 15.6. Processing… |
CVE-2023-29696 | Critical | 9.8 | 2023-05-08 | H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function version_set. |
CVE-2023-29693 | Critical | 9.8 | 2023-05-08 | H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function set_tftp_upgrad. |
CVE-2023-2575 | High | 8.8 | 2023-05-08 | Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by a Stack-based Buffer Overflow vulnerability, which can be triggered by authenticate… |
CVE-2023-21509 | Medium | 6.7 | 2023-05-04 | Out-of-bounds Write vulnerability while processing BC_TUI_CMD_UPDATE_SCREEN in bc_tui trustlet from Samsung Blockchain Keystore prior to version 1.3.12.1 allow… |
CVE-2023-21508 | Medium | 6.7 | 2023-05-04 | Out-of-bounds Write vulnerability while processing BC_TUI_CMD_SEND_RESOURCE_DATA command in bc_tui trustlet from Samsung Blockchain Keystore prior to version 1… |
CVE-2023-21506 | Medium | 6.7 | 2023-05-04 | Out-of-bounds Write vulnerability while processing BC_TUI_CMD_SEND_RESOURCE_DATA_ARRAY command in bc_tui trustlet from Samsung Blockchain Keystore prior to ver… |
CVE-2023-21499 | High | 8.2 | 2023-05-04 | Out-of-bounds write vulnerability in TA_Communication_mpos_encrypt_pin in mPOS TUI trustlet prior to SMR May-2023 Release 1 allows local attackers to execute a… |
CVE-2023-21489 | High | 7.1 | 2023-05-04 | Heap out-of-bounds write vulnerability in bootloader prior to SMR May-2023 Release 1 allows a physical attacker to execute arbitrary code. |
CVE-2023-31284 | High | 7.8 | 2023-05-04 | illumos illumos-gate before 676abcb has a stack buffer overflow in /dev/net, leading to privilege escalation via a stat on a long file name in /dev/net. |
CVE-2023-29995 | High | 7.5 | 2023-05-04 | In NanoMQ v0.15.0-0, a Heap overflow occurs in copyn_utf8_str function of mqtt_parser.c |
CVE-2023-29994 | High | 7.5 | 2023-05-04 | In NanoMQ v0.15.0-0, Heap overflow occurs in read_byte function of mqtt_code.c. |
CVE-2023-24958 | High | 8.8 | 2023-05-04 | A vulnerability in the IBM TS7700 Management Interface 8.51.2.12, 8.52.200.111, 8.52.102.13, and 8.53.0.63 could allow an authenticated user to submit a specia… |
CVE-2023-22640 | High | 7.5 | 2023-05-03 | A out-of-bounds write in Fortinet FortiOS version 7.2.0 through 7.2.3, FortiOS version 7.0.0 through 7.0.10, FortiOS version 6.4.0 through 6.4.11, FortiOS vers… |
CVE-2023-31470 | Critical | 9.8 | 2023-04-28 | SmartDNS through 41 before 56d0332 allows an out-of-bounds write because of a stack-based buffer overflow in the _dns_encode_domain function in the dns.c file… |
CVE-2023-27973 | Critical | 9.8 | 2023-04-28 | Certain HP LaserJet Pro print products are potentially vulnerable to Heap Overflow and/or Remote Code Execution. |
CVE-2023-31436 | High | 7.8 | 2023-04-28 | qfq_change_class in net/sched/sch_qfq.c in the Linux kernel before 6.2.13 allows an out-of-bounds write because lmax can exceed QFQ_MIN_LMAX. |
CVE-2023-29950 | Medium | 5.5 | 2023-04-27 | swfrender v0.9.2 was discovered to contain a heap buffer overflow in the function enumerateUsedIDs_fillstyle at modules/swftools.c |
CVE-2023-20869 | High | 8.2 | 2023-04-25 | VMware Workstation (17.x) and VMware Fusion (13.x) contain a stack-based buffer-overflow vulnerability that exists in the functionality for sharing host Blueto… |
CVE-2023-20872 | High | 8.8 | 2023-04-25 | VMware Workstation and Fusion contain an out-of-bounds read/write vulnerability in SCSI CD/DVD device emulation. |
CVE-2023-30402 | Medium | 5.5 | 2023-04-25 | YASM v1.3.0 was discovered to contain a heap overflow via the function handle_dot_label at /nasm/nasm-token.re. Note: This has been disputed by third parties w… |
CVE-2023-30414 | Medium | 5.5 | 2023-04-24 | Jerryscript commit 1a2c047 was discovered to contain a stack overflow via the component vm_loop at /jerry-core/vm/vm.c. |
CVE-2023-30410 | Medium | 5.5 | 2023-04-24 | Jerryscript commit 1a2c047 was discovered to contain a stack overflow via the component ecma_op_function_construct at /operations/ecma-function-object.c. |
CVE-2023-24823 | Critical | 9.8 | 2023-04-24 | RIOT-OS, an operating system that supports Internet of Things devices, contains a network stack with the ability to process 6LoWPAN frames. Prior to version 20… |
CVE-2023-24821 | High | 7.5 | 2023-04-24 | RIOT-OS, an operating system that supports Internet of Things devices, contains a network stack with the ability to process 6LoWPAN frames. Prior to version 20… |
CVE-2023-30378 | Critical | 9.8 | 2023-04-24 | In Tenda AC15 V15.03.05.19, the function "sub_8EE8" contains a stack-based buffer overflow vulnerability. |
CVE-2023-30376 | Critical | 9.8 | 2023-04-24 | In Tenda AC15 V15.03.05.19, the function "henan_pppoe_user" contains a stack-based buffer overflow vulnerability. |
CVE-2023-30375 | Critical | 9.8 | 2023-04-24 | In Tenda AC15 V15.03.05.19, the function "getIfIp" contains a stack-based buffer overflow vulnerability. |
CVE-2023-30373 | Critical | 9.8 | 2023-04-24 | In Tenda AC15 V15.03.05.19, the function "xian_pppoe_user" contains a stack-based buffer overflow vulnerability. |
CVE-2023-30372 | Critical | 9.8 | 2023-04-24 | In Tenda AC15 V15.03.05.19, The function "xkjs_ver32" contains a stack-based buffer overflow vulnerability. |
CVE-2023-30371 | Critical | 9.8 | 2023-04-24 | In Tenda AC15 V15.03.05.19, the function "sub_ED14" contains a stack-based buffer overflow vulnerability. |
CVE-2023-30370 | Critical | 9.8 | 2023-04-24 | In Tenda AC15 V15.03.05.19, the function GetValue contains a stack-based buffer overflow vulnerability. |
CVE-2023-24820 | High | 7.5 | 2023-04-24 | RIOT-OS, an operating system that supports Internet of Things devices, contains a network stack with the ability to process 6LoWPAN frames. An attacker can sen… |
CVE-2023-24819 | Critical | 9.8 | 2023-04-24 | RIOT-OS, an operating system that supports Internet of Things devices, contains a network stack with the ability to process 6LoWPAN frames. Prior to version 20… |
CVE-2023-30369 | Critical | 9.8 | 2023-04-24 | Tenda AC15 V15.03.05.19 is vulnerable to Buffer Overflow. |
CVE-2023-30368 | Critical | 9.8 | 2023-04-24 | Tenda AC5 V15.03.06.28 is vulnerable to Buffer Overflow via the initWebs function. |
CVE-2023-29583 | Medium | 5.5 | 2023-04-24 | yasm 1.3.0.55.g101bc was discovered to contain a stack overflow via the function parse_expr5 at /nasm/nasm-parse.c. Note: This has been disputed by third parti… |
CVE-2023-29582 | Medium | 5.5 | 2023-04-24 | yasm 1.3.0.55.g101bc was discovered to contain a stack overflow via the function parse_expr1 at /nasm/nasm-parse.c. Note: This has been disputed by third parti… |
CVE-2023-29579 | Medium | 5.5 | 2023-04-24 | yasm 1.3.0.55.g101bc was discovered to contain a stack overflow via the component yasm/yasm+0x43b466 in vsprintf. Note: This has been disputed by third parties… |
CVE-2023-29578 | High | 8.8 | 2023-04-24 | mp4v2 v2.0.0 was discovered to contain a heap buffer overflow via the mp4v2::impl::MP4StringProperty::~MP4StringProperty() function at src/mp4property.cpp. |
CVE-2023-2241 | Medium | 5.3 | 2023-04-22 | A vulnerability, which was classified as critical, was found in PoDoFo 0.10.0. Affected is the function readXRefStreamEntry of the file PdfXRefStreamParserObje… |
CVE-2023-25506 | High | 7.5 | 2023-04-22 | NVIDIA DGX-1 contains a vulnerability in Ofbd in AMI SBIOS, where a preconditioned heap can allow a user with elevated privileges to cause an access beyond the… |
CVE-2023-0201 | Medium | 6.7 | 2023-04-22 | NVIDIA DGX-2 SBIOS contains a vulnerability in Bds, where a user with high privileges can cause a write beyond the bounds of an indexable resource, which may l… |
CVE-2023-0200 | High | 7.5 | 2023-04-22 | NVIDIA DGX-2 contains a vulnerability in OFBD where a user with high privileges and a pre-conditioned heap can cause an access beyond a buffers end, which may… |
CVE-2023-0199 | Medium | 6.1 | 2023-04-22 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer handler, where an out-of-bounds write can lead to denial of s… |
CVE-2023-29917 | Medium | 4.9 | 2023-04-21 | H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via go parameter at /goform/aspForm. |
CVE-2023-29916 | Medium | 4.9 | 2023-04-21 | H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the UpdateWanParams interface at /goform/aspForm. |