CWE-787 · Out-of-bounds Write (page 64)
Page 64 of 100 — CVEs classified under CWE-787, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-48389 | Medium | 4.4 | 2023-05-09 | In modem control device, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System executio… |
CVE-2022-48387 | Medium | 4.4 | 2023-05-09 | the apipe driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privi… |
CVE-2022-48385 | Medium | 4.4 | 2023-05-09 | In cp_dump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution priv… |
CVE-2022-48382 | Medium | 4.4 | 2023-05-09 | In log service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privile… |
CVE-2022-48381 | Medium | 4.4 | 2023-05-09 | In modem control device, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System executio… |
CVE-2022-48380 | Medium | 4.4 | 2023-05-09 | In modem control device, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System executio… |
CVE-2022-48374 | Medium | 4.4 | 2023-05-09 | In tee service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privile… |
CVE-2022-48373 | Medium | 4.4 | 2023-05-09 | In tee service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privile… |
CVE-2022-48372 | Medium | 4.4 | 2023-05-09 | In bootcp service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution priv… |
CVE-2022-48240 | Medium | 4.4 | 2023-05-09 | In camera driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privi… |
CVE-2022-48239 | Medium | 4.4 | 2023-05-09 | In camera driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privi… |
CVE-2022-48238 | Medium | 4.4 | 2023-05-09 | In Image filter, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privil… |
CVE-2022-48237 | Medium | 4.4 | 2023-05-09 | In Image filter, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privil… |
CVE-2022-48235 | Medium | 4.4 | 2023-05-09 | In MP3 encoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privile… |
CVE-2022-48234 | Medium | 5.5 | 2023-05-09 | In FM service , there is a possible missing params check. This could lead to local denial of service in FM service . |
CVE-2022-48233 | Medium | 5.5 | 2023-05-09 | In FM service , there is a possible missing params check. This could lead to local denial of service in FM service . |
CVE-2022-48232 | Medium | 5.5 | 2023-05-09 | In FM service , there is a possible missing params check. This could lead to local denial of service in FM service . |
CVE-2022-47486 | Medium | 4.4 | 2023-05-09 | In ext4fsfilter driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution… |
CVE-2022-47485 | Medium | 4.4 | 2023-05-09 | In modem control device, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System executio… |
CVE-2022-47470 | Medium | 4.4 | 2023-05-09 | In ext4fsfilter driver, there is a possible out of bounds read due to a missing bounds check. This could local denial of service with System execution privileg… |
CVE-2022-47469 | Medium | 4.4 | 2023-05-09 | In ext4fsfilter driver, there is a possible out of bounds read due to a missing bounds check. This could local denial of service with System execution privileg… |
CVE-2022-47340 | Medium | 5.5 | 2023-05-09 | In h265 codec firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional ex… |
CVE-2023-27970 | High | 7.8 | 2023-05-08 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 16.4 and iPadOS 16.4. An app may be able to execute arbitr… |
CVE-2023-27965 | High | 7.8 | 2023-05-08 | A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Studio Display Firmware Update 16.4. An app… |
CVE-2023-27959 | High | 7.8 | 2023-05-08 | The issue was addressed with improved memory handling. This issue is fixed in iOS 16.4 and iPadOS 16.4. An app may be able to execute arbitrary code with kerne… |
CVE-2023-27953 | Critical | 9.8 | 2023-05-08 | The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. A remote user ma… |
CVE-2023-27936 | High | 7.8 | 2023-05-08 | An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3, iOS 15.7.4 and iPadOS 15.7.4, macOS Monte… |
CVE-2023-27933 | Medium | 6.7 | 2023-05-08 | The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Monterey 12.6.4, tvOS 16.4, w… |
CVE-2022-32885 | High | 8.8 | 2023-05-08 | A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5, Safari 15.6. Processing… |
CVE-2023-29696 | Critical | 9.8 | 2023-05-08 | H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function version_set. |
CVE-2023-29693 | Critical | 9.8 | 2023-05-08 | H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function set_tftp_upgrad. |
CVE-2023-2575 | High | 8.8 | 2023-05-08 | Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by a Stack-based Buffer Overflow vulnerability, which can be triggered by authenticate… |
CVE-2023-21509 | Medium | 6.7 | 2023-05-04 | Out-of-bounds Write vulnerability while processing BC_TUI_CMD_UPDATE_SCREEN in bc_tui trustlet from Samsung Blockchain Keystore prior to version 1.3.12.1 allow… |
CVE-2023-21508 | Medium | 6.7 | 2023-05-04 | Out-of-bounds Write vulnerability while processing BC_TUI_CMD_SEND_RESOURCE_DATA command in bc_tui trustlet from Samsung Blockchain Keystore prior to version 1… |
CVE-2023-21506 | Medium | 6.7 | 2023-05-04 | Out-of-bounds Write vulnerability while processing BC_TUI_CMD_SEND_RESOURCE_DATA_ARRAY command in bc_tui trustlet from Samsung Blockchain Keystore prior to ver… |
CVE-2023-21499 | High | 8.2 | 2023-05-04 | Out-of-bounds write vulnerability in TA_Communication_mpos_encrypt_pin in mPOS TUI trustlet prior to SMR May-2023 Release 1 allows local attackers to execute a… |
CVE-2023-21489 | High | 7.1 | 2023-05-04 | Heap out-of-bounds write vulnerability in bootloader prior to SMR May-2023 Release 1 allows a physical attacker to execute arbitrary code. |
CVE-2023-31284 | High | 7.8 | 2023-05-04 | illumos illumos-gate before 676abcb has a stack buffer overflow in /dev/net, leading to privilege escalation via a stat on a long file name in /dev/net. |
CVE-2023-29995 | High | 7.5 | 2023-05-04 | In NanoMQ v0.15.0-0, a Heap overflow occurs in copyn_utf8_str function of mqtt_parser.c |
CVE-2023-29994 | High | 7.5 | 2023-05-04 | In NanoMQ v0.15.0-0, Heap overflow occurs in read_byte function of mqtt_code.c. |
CVE-2023-24958 | High | 8.8 | 2023-05-04 | A vulnerability in the IBM TS7700 Management Interface 8.51.2.12, 8.52.200.111, 8.52.102.13, and 8.53.0.63 could allow an authenticated user to submit a specia… |
CVE-2023-22640 | High | 7.5 | 2023-05-03 | A out-of-bounds write in Fortinet FortiOS version 7.2.0 through 7.2.3, FortiOS version 7.0.0 through 7.0.10, FortiOS version 6.4.0 through 6.4.11, FortiOS vers… |
CVE-2023-31470 | Critical | 9.8 | 2023-04-28 | SmartDNS through 41 before 56d0332 allows an out-of-bounds write because of a stack-based buffer overflow in the _dns_encode_domain function in the dns.c file… |
CVE-2023-27973 | Critical | 9.8 | 2023-04-28 | Certain HP LaserJet Pro print products are potentially vulnerable to Heap Overflow and/or Remote Code Execution. |
CVE-2023-31436 | High | 7.8 | 2023-04-28 | qfq_change_class in net/sched/sch_qfq.c in the Linux kernel before 6.2.13 allows an out-of-bounds write because lmax can exceed QFQ_MIN_LMAX. |
CVE-2023-29950 | Medium | 5.5 | 2023-04-27 | swfrender v0.9.2 was discovered to contain a heap buffer overflow in the function enumerateUsedIDs_fillstyle at modules/swftools.c |
CVE-2023-20869 | High | 8.2 | 2023-04-25 | VMware Workstation (17.x) and VMware Fusion (13.x) contain a stack-based buffer-overflow vulnerability that exists in the functionality for sharing host Blueto… |
CVE-2023-20872 | High | 8.8 | 2023-04-25 | VMware Workstation and Fusion contain an out-of-bounds read/write vulnerability in SCSI CD/DVD device emulation. |
CVE-2023-30402 | Medium | 5.5 | 2023-04-25 | YASM v1.3.0 was discovered to contain a heap overflow via the function handle_dot_label at /nasm/nasm-token.re. Note: This has been disputed by third parties w… |
CVE-2023-30414 | Medium | 5.5 | 2023-04-24 | Jerryscript commit 1a2c047 was discovered to contain a stack overflow via the component vm_loop at /jerry-core/vm/vm.c. |
CVE-2023-30410 | Medium | 5.5 | 2023-04-24 | Jerryscript commit 1a2c047 was discovered to contain a stack overflow via the component ecma_op_function_construct at /operations/ecma-function-object.c. |
CVE-2023-24823 | Critical | 9.8 | 2023-04-24 | RIOT-OS, an operating system that supports Internet of Things devices, contains a network stack with the ability to process 6LoWPAN frames. Prior to version 20… |
CVE-2023-24821 | High | 7.5 | 2023-04-24 | RIOT-OS, an operating system that supports Internet of Things devices, contains a network stack with the ability to process 6LoWPAN frames. Prior to version 20… |
CVE-2023-30378 | Critical | 9.8 | 2023-04-24 | In Tenda AC15 V15.03.05.19, the function "sub_8EE8" contains a stack-based buffer overflow vulnerability. |
CVE-2023-30376 | Critical | 9.8 | 2023-04-24 | In Tenda AC15 V15.03.05.19, the function "henan_pppoe_user" contains a stack-based buffer overflow vulnerability. |
CVE-2023-30375 | Critical | 9.8 | 2023-04-24 | In Tenda AC15 V15.03.05.19, the function "getIfIp" contains a stack-based buffer overflow vulnerability. |
CVE-2023-30373 | Critical | 9.8 | 2023-04-24 | In Tenda AC15 V15.03.05.19, the function "xian_pppoe_user" contains a stack-based buffer overflow vulnerability. |
CVE-2023-30372 | Critical | 9.8 | 2023-04-24 | In Tenda AC15 V15.03.05.19, The function "xkjs_ver32" contains a stack-based buffer overflow vulnerability. |
CVE-2023-30371 | Critical | 9.8 | 2023-04-24 | In Tenda AC15 V15.03.05.19, the function "sub_ED14" contains a stack-based buffer overflow vulnerability. |
CVE-2023-30370 | Critical | 9.8 | 2023-04-24 | In Tenda AC15 V15.03.05.19, the function GetValue contains a stack-based buffer overflow vulnerability. |
CVE-2023-24820 | High | 7.5 | 2023-04-24 | RIOT-OS, an operating system that supports Internet of Things devices, contains a network stack with the ability to process 6LoWPAN frames. An attacker can sen… |
CVE-2023-24819 | Critical | 9.8 | 2023-04-24 | RIOT-OS, an operating system that supports Internet of Things devices, contains a network stack with the ability to process 6LoWPAN frames. Prior to version 20… |
CVE-2023-30369 | Critical | 9.8 | 2023-04-24 | Tenda AC15 V15.03.05.19 is vulnerable to Buffer Overflow. |
CVE-2023-30368 | Critical | 9.8 | 2023-04-24 | Tenda AC5 V15.03.06.28 is vulnerable to Buffer Overflow via the initWebs function. |
CVE-2023-29583 | Medium | 5.5 | 2023-04-24 | yasm 1.3.0.55.g101bc was discovered to contain a stack overflow via the function parse_expr5 at /nasm/nasm-parse.c. Note: This has been disputed by third parti… |
CVE-2023-29582 | Medium | 5.5 | 2023-04-24 | yasm 1.3.0.55.g101bc was discovered to contain a stack overflow via the function parse_expr1 at /nasm/nasm-parse.c. Note: This has been disputed by third parti… |
CVE-2023-29579 | Medium | 5.5 | 2023-04-24 | yasm 1.3.0.55.g101bc was discovered to contain a stack overflow via the component yasm/yasm+0x43b466 in vsprintf. Note: This has been disputed by third parties… |
CVE-2023-29578 | High | 8.8 | 2023-04-24 | mp4v2 v2.0.0 was discovered to contain a heap buffer overflow via the mp4v2::impl::MP4StringProperty::~MP4StringProperty() function at src/mp4property.cpp. |
CVE-2023-2241 | Medium | 5.3 | 2023-04-22 | A vulnerability, which was classified as critical, was found in PoDoFo 0.10.0. Affected is the function readXRefStreamEntry of the file PdfXRefStreamParserObje… |
CVE-2023-25506 | High | 7.5 | 2023-04-22 | NVIDIA DGX-1 contains a vulnerability in Ofbd in AMI SBIOS, where a preconditioned heap can allow a user with elevated privileges to cause an access beyond the… |
CVE-2023-0201 | Medium | 6.7 | 2023-04-22 | NVIDIA DGX-2 SBIOS contains a vulnerability in Bds, where a user with high privileges can cause a write beyond the bounds of an indexable resource, which may l… |
CVE-2023-0200 | High | 7.5 | 2023-04-22 | NVIDIA DGX-2 contains a vulnerability in OFBD where a user with high privileges and a pre-conditioned heap can cause an access beyond a buffers end, which may… |
CVE-2023-0199 | Medium | 6.1 | 2023-04-22 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer handler, where an out-of-bounds write can lead to denial of s… |
CVE-2023-29917 | Medium | 4.9 | 2023-04-21 | H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via go parameter at /goform/aspForm. |
CVE-2023-29916 | Medium | 4.9 | 2023-04-21 | H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the UpdateWanParams interface at /goform/aspForm. |
CVE-2023-29915 | Medium | 4.9 | 2023-04-21 | H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via CMD parameter at /goform/aspForm. |
CVE-2023-29914 | Medium | 4.9 | 2023-04-21 | H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the DeltriggerList interface at /goform/aspForm. |
CVE-2023-29913 | Medium | 4.9 | 2023-04-21 | H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the SetAPWifiorLedInfoById interface at /goform/aspForm. |
CVE-2023-29912 | Medium | 4.9 | 2023-04-21 | H3C Magic R200 R200V100R004 was discovered to contain a stack overflow via the DelvsList interface at /goform/aspForm. |
CVE-2023-29911 | Medium | 4.9 | 2023-04-21 | H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the AddMacList interface at /goform/aspForm. |
CVE-2023-29910 | Medium | 4.9 | 2023-04-21 | H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the UpdateMacClone interface at /goform/aspForm. |
CVE-2023-29909 | Medium | 4.9 | 2023-04-21 | H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the AddWlanMacList interface at /goform/aspForm. |
CVE-2023-29908 | Medium | 4.9 | 2023-04-21 | H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the SetMobileAPInfoById interface at /goform/aspForm. |
CVE-2023-29907 | Medium | 4.9 | 2023-04-21 | H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the Edit_BasicSSID_5G interface at /goform/aspForm. |
CVE-2023-29906 | Medium | 4.9 | 2023-04-21 | H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the Edit_BasicSSID interface at /goform/aspForm. |
CVE-2023-29905 | Medium | 4.9 | 2023-04-21 | H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the UpdateSnat interface at /goform/aspForm. |
CVE-2023-2194 | Medium | 6.7 | 2023-04-20 | An out-of-bounds write vulnerability was found in the Linux kernel's SLIMpro I2C device driver. The userspace "data->block[0]" variable was not capped to a num… |
CVE-2023-23579 | High | 7.8 | 2023-04-20 | Datakit CrossCadWare_x64.dll contains an out-of-bounds write past the end of an allocated buffer while parsing a specially crafted SLDPRT file. This c… |
CVE-2022-36788 | High | 8.1 | 2023-04-20 | A heap-based buffer overflow vulnerability exists in the TriangleMesh clone functionality of Slic3r libslic3r 1.3.0 and Master Commit b1a5500. A specially-craf… |
CVE-2023-21100 | High | 7.8 | 2023-04-19 | In inflate of inflate.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additi… |
CVE-2023-21085 | High | 8.8 | 2023-04-19 | In nci_snd_set_routing_cmd of nci_hmsgs.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote (proximal/adjacent… |
CVE-2023-20967 | High | 7.8 | 2023-04-19 | In avdt_scb_hdl_pkt_no_frag of avdt_scb_act.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation o… |
CVE-2023-20941 | Medium | 6.6 | 2023-04-19 | In acc_ctrlrequest_composite of f_accessory.c, there is a possible out of bounds write due to a missing bounds check. This could lead to physical escalation of… |
CVE-2023-2137 | High | 8.8 | 2023-04-19 | Heap buffer overflow in sqlite in Google Chrome prior to 112.0.5615.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag… |
CVE-2023-2134 | High | 8.8 | 2023-04-19 | Out of bounds memory access in Service Worker API in Google Chrome prior to 112.0.5615.137 allowed a remote attacker to potentially exploit heap corruption via… |
CVE-2023-2133 | High | 8.8 | 2023-04-19 | Out of bounds memory access in Service Worker API in Google Chrome prior to 112.0.5615.137 allowed a remote attacker to potentially exploit heap corruption via… |
CVE-2023-27911 | High | 7.8 | 2023-04-17 | A user may be tricked into opening a malicious FBX file that may exploit a heap buffer overflow vulnerability in Autodesk® FBX® SDK 2020 or prior which may lea… |
CVE-2023-27910 | High | 7.8 | 2023-04-17 | A user may be tricked into opening a malicious FBX file that may exploit a stack buffer overflow vulnerability in Autodesk® FBX® SDK 2020 or prior which may le… |
CVE-2023-27909 | High | 7.8 | 2023-04-17 | An Out-Of-Bounds Write Vulnerability in Autodesk® FBX® SDK version 2020 or prior may lead to code execution through maliciously crafted FBX files or informatio… |
CVE-2023-27907 | High | 7.8 | 2023-04-17 | A malicious actor may convince a victim to open a malicious USD file that may trigger an out-of-bounds write vulnerability which may result in code execution. |