CWE-787 · Out-of-bounds Write (page 60)
Page 60 of 100 — CVEs classified under CWE-787, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-29915 | Medium | 4.9 | 2023-04-21 | H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via CMD parameter at /goform/aspForm. |
CVE-2023-29914 | Medium | 4.9 | 2023-04-21 | H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the DeltriggerList interface at /goform/aspForm. |
CVE-2023-29913 | Medium | 4.9 | 2023-04-21 | H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the SetAPWifiorLedInfoById interface at /goform/aspForm. |
CVE-2023-29912 | Medium | 4.9 | 2023-04-21 | H3C Magic R200 R200V100R004 was discovered to contain a stack overflow via the DelvsList interface at /goform/aspForm. |
CVE-2023-29911 | Medium | 4.9 | 2023-04-21 | H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the AddMacList interface at /goform/aspForm. |
CVE-2023-29910 | Medium | 4.9 | 2023-04-21 | H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the UpdateMacClone interface at /goform/aspForm. |
CVE-2023-29909 | Medium | 4.9 | 2023-04-21 | H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the AddWlanMacList interface at /goform/aspForm. |
CVE-2023-29908 | Medium | 4.9 | 2023-04-21 | H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the SetMobileAPInfoById interface at /goform/aspForm. |
CVE-2023-29907 | Medium | 4.9 | 2023-04-21 | H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the Edit_BasicSSID_5G interface at /goform/aspForm. |
CVE-2023-29906 | Medium | 4.9 | 2023-04-21 | H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the Edit_BasicSSID interface at /goform/aspForm. |
CVE-2023-29905 | Medium | 4.9 | 2023-04-21 | H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the UpdateSnat interface at /goform/aspForm. |
CVE-2023-2194 | Medium | 6.7 | 2023-04-20 | An out-of-bounds write vulnerability was found in the Linux kernel's SLIMpro I2C device driver. The userspace "data->block[0]" variable was not capped to a num… |
CVE-2023-23579 | High | 7.8 | 2023-04-20 | Datakit CrossCadWare_x64.dll contains an out-of-bounds write past the end of an allocated buffer while parsing a specially crafted SLDPRT file. This c… |
CVE-2022-36788 | High | 8.1 | 2023-04-20 | A heap-based buffer overflow vulnerability exists in the TriangleMesh clone functionality of Slic3r libslic3r 1.3.0 and Master Commit b1a5500. A specially-craf… |
CVE-2023-21100 | High | 7.8 | 2023-04-19 | In inflate of inflate.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additi… |
CVE-2023-21085 | High | 8.8 | 2023-04-19 | In nci_snd_set_routing_cmd of nci_hmsgs.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote (proximal/adjacent… |
CVE-2023-20967 | High | 7.8 | 2023-04-19 | In avdt_scb_hdl_pkt_no_frag of avdt_scb_act.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation o… |
CVE-2023-20941 | Medium | 6.6 | 2023-04-19 | In acc_ctrlrequest_composite of f_accessory.c, there is a possible out of bounds write due to a missing bounds check. This could lead to physical escalation of… |
CVE-2023-2137 | High | 8.8 | 2023-04-19 | Heap buffer overflow in sqlite in Google Chrome prior to 112.0.5615.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag… |
CVE-2023-2134 | High | 8.8 | 2023-04-19 | Out of bounds memory access in Service Worker API in Google Chrome prior to 112.0.5615.137 allowed a remote attacker to potentially exploit heap corruption via… |
CVE-2023-2133 | High | 8.8 | 2023-04-19 | Out of bounds memory access in Service Worker API in Google Chrome prior to 112.0.5615.137 allowed a remote attacker to potentially exploit heap corruption via… |
CVE-2023-27911 | High | 7.8 | 2023-04-17 | A user may be tricked into opening a malicious FBX file that may exploit a heap buffer overflow vulnerability in Autodesk® FBX® SDK 2020 or prior which may lea… |
CVE-2023-27910 | High | 7.8 | 2023-04-17 | A user may be tricked into opening a malicious FBX file that may exploit a stack buffer overflow vulnerability in Autodesk® FBX® SDK 2020 or prior which may le… |
CVE-2023-27909 | High | 7.8 | 2023-04-17 | An Out-Of-Bounds Write Vulnerability in Autodesk® FBX® SDK version 2020 or prior may lead to code execution through maliciously crafted FBX files or informatio… |
CVE-2023-27907 | High | 7.8 | 2023-04-17 | A malicious actor may convince a victim to open a malicious USD file that may trigger an out-of-bounds write vulnerability which may result in code execution. |
CVE-2023-29665 | Critical | 9.8 | 2023-04-17 | D-Link DIR823G_V1.0.2B05 was discovered to contain a stack overflow via the NewPassword parameters in SetPasswdSettings. |
CVE-2023-30770 | High | 7.1 | 2023-04-17 | A stack-based buffer overflow vulnerability was found in the ASUSTOR Data Master (ADM) due to the lack of data size validation. An attacker can exploit this vu… |
CVE-2022-48312 | Critical | 9.1 | 2023-04-16 | The HwPCAssistant module has the out-of-bounds read/write vulnerability. Successful exploitation of this vulnerability may affect confidentiality and integrity. |
CVE-2021-45464 | High | 8.8 | 2023-04-15 | kvmtool through 39181fc allows an out-of-bounds write, related to virtio/balloon.c and virtio/pci.c. This allows a guest OS user to execute arbitrary code on t… |
CVE-2021-43612 | High | 7.5 | 2023-04-15 | In lldpd before 1.0.13, when decoding SONMP packets in the sonmp_decode function, it's possible to trigger an out-of-bounds heap read via short SONMP packets. |
CVE-2023-22670 | High | 7.8 | 2023-04-15 | A heap-based buffer overflow exists in the DXF file reading procedure in Open Design Alliance Drawings SDK before 2023.6. The specific flaw exists within the p… |
CVE-2023-22669 | High | 7.8 | 2023-04-15 | Parsing of DWG files in Open Design Alliance Drawings SDK before 2023.6 lacks proper validation of the length of user-supplied XRecord data prior to copying it… |
CVE-2023-29091 | Medium | 6.8 | 2023-04-14 | An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor and Modem for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, E… |
CVE-2023-29090 | Medium | 6.8 | 2023-04-14 | An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor and Modem for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, E… |
CVE-2023-29088 | Medium | 6.8 | 2023-04-14 | An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor and Modem for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, E… |
CVE-2023-29087 | Medium | 6.8 | 2023-04-14 | An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor and Modem for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, E… |
CVE-2023-29086 | Medium | 6.8 | 2023-04-14 | An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor and Modem for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, E… |
CVE-2023-29085 | Medium | 6.8 | 2023-04-14 | An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor and Modem for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, E… |
CVE-2023-29067 | High | 7.8 | 2023-04-14 | A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 could lead to memory corruption vulnerability by write access violation. This vulner… |
CVE-2023-27915 | High | 7.8 | 2023-04-14 | A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 could lead to memory corruption vulnerability by read access violation. This vulnera… |
CVE-2023-27914 | High | 7.8 | 2023-04-14 | A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 can be used to write beyond the allocated buffer causing a Stack Buffer Overflow. A… |
CVE-2023-29584 | High | 8.8 | 2023-04-14 | mp4v2 v2.0.0 was discovered to contain a heap buffer overflow via the MP4GetVideoProfileLevel function at /src/mp4.cpp. |
CVE-2023-29491 | High | 7.8 | 2023-04-14 | ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malformed data in a termi… |
CVE-2023-26416 | High | 7.8 | 2023-04-13 | Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code executio… |
CVE-2023-26415 | High | 7.8 | 2023-04-13 | Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in t… |
CVE-2023-26413 | High | 7.8 | 2023-04-13 | Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code executio… |
CVE-2023-26412 | High | 7.8 | 2023-04-13 | Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code executi… |
CVE-2022-25740 | Critical | 9.8 | 2023-04-13 | Memory corruption in modem due to buffer overwrite while building an IPv6 multicast address based on the MAC address of the iface |
CVE-2022-25678 | Critical | 9.8 | 2023-04-13 | Memory correction in modem due to buffer overwrite during coap connection |
CVE-2023-26394 | High | 7.8 | 2023-04-12 | Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution i… |
CVE-2023-26390 | High | 7.8 | 2023-04-12 | Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution… |
CVE-2023-26383 | High | 7.8 | 2023-04-12 | Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution… |
CVE-2023-21582 | High | 7.8 | 2023-04-12 | Adobe Digital Editions version 4.5.11.187303 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in… |
CVE-2023-1906 | Medium | 5.5 | 2023-04-12 | A heap-based buffer overflow issue was discovered in ImageMagick's ImportMultiSpectralQuantum() function in MagickCore/quantum-import.c. An attacker could pass… |
CVE-2023-26395 | High | 7.8 | 2023-04-12 | Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by an out-of-bounds write vulnerability that could result… |
CVE-2023-26373 | High | 7.8 | 2023-04-12 | Adobe Dimension version 3.4.8 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of… |
CVE-2023-26372 | High | 7.8 | 2023-04-12 | Adobe Dimension version 3.4.8 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of… |
CVE-2023-28488 | Medium | 6.5 | 2023-04-12 | client.c in gdhcp in ConnMan through 1.41 could be used by network-adjacent attackers (operating a crafted DHCP server) to cause a stack-based buffer overflow… |
CVE-2023-22613 | High | 8.8 | 2023-04-11 | An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. It is possible to write to an attacker-controlled address. An attacker cou… |
CVE-2023-28252 | High | 7.8 | 2023-04-11 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
CVE-2023-26555 | Medium | 6.4 | 2023-04-11 | praecis_parse in ntpd/refclock_palisade.c in NTP 4.2.8p15 has an out-of-bounds write. Any attack method would be complex, e.g., with a manipulated GPS receiver. |
CVE-2023-26554 | Medium | 5.6 | 2023-04-11 | mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when adding a '\0' character. An adversary may be able to attack a client ntpq process… |
CVE-2023-26553 | Medium | 5.6 | 2023-04-11 | mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when copying the trailing number. An adversary may be able to attack a client ntpq proce… |
CVE-2023-26552 | Medium | 5.6 | 2023-04-11 | mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when adding a decimal point. An adversary may be able to attack a client ntpq process, b… |
CVE-2023-26551 | Medium | 5.6 | 2023-04-11 | mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write in the cp<cpdec while loop. An adversary may be able to attack a client ntpq process, bu… |
CVE-2023-22615 | High | 8.4 | 2023-04-11 | An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. IHISI subfunction execution may corrupt SMRAM. An attacker can pass an add… |
CVE-2023-22614 | High | 8.8 | 2023-04-11 | An issue was discovered in ChipsetSvcSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. There is insufficient input validation in BIOS Guard updates. An atta… |
CVE-2023-22612 | High | 8.8 | 2023-04-11 | An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. A malicious host OS can invoke an Insyde SMI handler with malformed argume… |
CVE-2021-46879 | High | 7.8 | 2023-04-11 | An issue was discovered in Treasure Data Fluent Bit 1.7.1, a wrong variable is used to get the msgpack data resulting in a heap overflow in flb_msgpack_gelf_va… |
CVE-2022-47337 | Medium | 5.5 | 2023-04-11 | In media service, there is a missing permission check. This could lead to local denial of service in media service. |
CVE-2023-26064 | Critical | 9.8 | 2023-04-10 | Certain Lexmark devices through 2023-02-19 have an Out-of-bounds Write. |
CVE-2023-28206 | High | 8.6 | 2023-04-10 | An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.6.5, iOS 16.4.1 and iPadOS 16.4.1, macOS Ve… |
CVE-2022-46709 | Critical | 9.8 | 2023-04-10 | A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Ventura 13, iOS 16. An app may be able to execute arbitrar… |
CVE-2022-42858 | High | 7.8 | 2023-04-10 | A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Ventura 13.1. An app may be able to execute arbitrary code… |
CVE-2021-45985 | High | 7.5 | 2023-04-10 | In Lua 5.4.3, an erroneous finalizer called during a tail call leads to a heap-based buffer over-read. |
CVE-2023-27720 | Critical | 9.8 | 2023-04-09 | D-Link DIR878 1.30B08 was discovered to contain a stack overflow in the sub_48d630 function. This vulnerability allows attackers to cause a Denial of Service (… |
CVE-2023-27719 | Critical | 9.8 | 2023-04-09 | D-Link DIR878 1.30B08 was discovered to contain a stack overflow in the sub_478360 function. This vulnerability allows attackers to cause a Denial of Service (… |
CVE-2023-27718 | Critical | 9.8 | 2023-04-09 | D-Link DIR878 1.30B08 was discovered to contain a stack overflow in the sub_498308 function. This vulnerability allows attackers to cause a Denial of Service (… |
CVE-2023-1801 | Medium | 6.5 | 2023-04-07 | The SMB protocol decoder in tcpdump version 4.99.3 can perform an out-of-bounds write when decoding a crafted network packet. |
CVE-2023-27810 | Medium | 4.9 | 2023-04-07 | H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the ipqos_lanip_editlist interface at /goform/aspForm. This vulnerability allows… |
CVE-2023-27808 | Medium | 4.9 | 2023-04-07 | H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the DeltriggerList interface at /goform/aspForm. This vulnerability allows attac… |
CVE-2023-27807 | Medium | 4.9 | 2023-04-07 | H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the Delstlist interface at /goform/aspForm. This vulnerability allows attackers… |
CVE-2023-27806 | Medium | 4.9 | 2023-04-07 | H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the ipqos_lanip_dellist interface at /goform/aspForm. This vulnerability allows… |
CVE-2023-27805 | Medium | 4.9 | 2023-04-07 | H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the EditSTList interface at /goform/aspForm. This vulnerability allows attackers… |
CVE-2023-27804 | Medium | 4.9 | 2023-04-07 | H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the DelvsList interface at /goform/aspForm. This vulnerability allows attackers… |
CVE-2023-27803 | Medium | 4.9 | 2023-04-07 | H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the EdittriggerList interface at /goform/aspForm. This vulnerability allows atta… |
CVE-2023-27802 | Medium | 4.9 | 2023-04-07 | H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the EditvsList parameter at /goform/aspForm. This vulnerability allows attackers… |
CVE-2023-27801 | Medium | 4.9 | 2023-04-07 | H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the DelDNSHnList interface at /goform/aspForm. This vulnerability allows attacke… |
CVE-2023-27021 | Critical | 9.8 | 2023-04-07 | Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the formSetFirewallCfg function. This vulnerability allows attackers to… |
CVE-2023-27020 | Critical | 9.8 | 2023-04-07 | Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the saveParentControlInfo function. This vulnerability allows attackers… |
CVE-2023-27019 | Critical | 9.8 | 2023-04-07 | Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the sub_458FBC function. This vulnerability allows attackers to cause a… |
CVE-2023-27018 | Critical | 9.8 | 2023-04-07 | Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the sub_45EC1C function. This vulnerability allows attackers to cause a… |
CVE-2023-27017 | Critical | 9.8 | 2023-04-07 | Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the sub_45DC58 function. This vulnerability allows attackers to cause a… |
CVE-2023-27016 | Critical | 9.8 | 2023-04-07 | Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the R7WebsSecurityHandler function. This vulnerability allows attackers… |
CVE-2023-27015 | Critical | 9.8 | 2023-04-07 | Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the sub_4A75C0 function. This vulnerability allows attackers to cause a… |
CVE-2023-27014 | Critical | 9.8 | 2023-04-07 | Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the sub_46AC38 function. This vulnerability allows attackers to cause a… |
CVE-2023-27013 | Critical | 9.8 | 2023-04-07 | Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the get_parentControl_list_Info function. This vulnerability allows att… |
CVE-2023-27012 | Critical | 9.8 | 2023-04-07 | Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the setSchedWifi function. This vulnerability allows attackers to cause… |
CVE-2023-25220 | Critical | 9.8 | 2023-04-07 | Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the add_white_node function. This vulnerability allows attackers to cause a… |
CVE-2023-25219 | Critical | 9.8 | 2023-04-07 | Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the fromDhcpListClient function. This vulnerability allows attackers to cau… |