CWE-787 · Out-of-bounds Write (page 66)
Page 66 of 100 — CVEs classified under CWE-787, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-33265 | High | 7.3 | 2023-01-09 | Memory corruption due to information exposure in Powerline Communication Firmware while sending different MMEs from a single, unassociated device. |
CVE-2022-33255 | High | 8.2 | 2023-01-09 | Information disclosure due to buffer over-read in Bluetooth HOST while processing GetFolderItems and GetItemAttribute Cmds from peer device. |
CVE-2022-33218 | High | 8.2 | 2023-01-09 | Memory corruption in Automotive due to improper input validation. |
CVE-2022-22088 | Critical | 9.8 | 2023-01-09 | Memory corruption in Bluetooth HOST due to buffer overflow while parsing the command response received from remote |
CVE-2022-45126 | Medium | 4.0 | 2023-01-09 | Kernel subsystem within OpenHarmony-v3.1.4 and prior versions in kernel_liteos_a has a kernel stack overflow vulnerability when call SysClockGettime. 4 bytes p… |
CVE-2022-43662 | Medium | 4.0 | 2023-01-09 | Kernel subsystem within OpenHarmony-v3.1.4 and prior versions in kernel_liteos_a has a kernel stack overflow vulnerability when call SysTimerGettime. 4 bytes p… |
CVE-2022-4378 | High | 7.8 | 2023-01-05 | A stack overflow flaw was found in the Linux kernel's SYSCTL subsystem in how a user changes certain kernel parameters and variables. This flaw allows a local… |
CVE-2022-47661 | High | 7.8 | 2023-01-05 | GPAC MP4Box 2.1-DEV-rev649-ga8f438d20 is vulnerable to Buffer Overflow via media_tools/av_parsers.c:4988 in gf_media_nalu_add_emulation_bytes |
CVE-2022-47659 | High | 7.8 | 2023-01-05 | GPAC MP4box 2.1-DEV-rev644-g5c4df2a67 is vulnerable to Buffer Overflow in gf_bs_read_data |
CVE-2022-47655 | High | 7.8 | 2023-01-05 | Libde265 1.0.9 is vulnerable to Buffer Overflow in function void put_qpel_fallback<unsigned short> |
CVE-2022-47086 | Medium | 5.5 | 2023-01-05 | GPAC MP4Box v2.1-DEV-rev574-g9d5bb184b contains a segmentation violation via the function gf_sm_load_init_swf at scene_manager/swf_parse.c |
CVE-2022-3715 | High | 7.8 | 2023-01-05 | A flaw was found in the bash package, where a heap-buffer overflow can occur in valid parameter_transform. This issue may lead to memory problems. |
CVE-2023-0054 | High | 7.8 | 2023-01-04 | Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1145. |
CVE-2022-44431 | Medium | 5.5 | 2023-01-04 | In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services. |
CVE-2022-44430 | Medium | 5.5 | 2023-01-04 | In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services. |
CVE-2022-44429 | Medium | 5.5 | 2023-01-04 | In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services. |
CVE-2022-44428 | Medium | 5.5 | 2023-01-04 | In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services. |
CVE-2022-44427 | Medium | 5.5 | 2023-01-04 | In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services. |
CVE-2022-39118 | Medium | 5.5 | 2023-01-04 | In sprd_sysdump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. |
CVE-2022-39116 | Medium | 5.5 | 2023-01-04 | In sprd_sysdump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. |
CVE-2022-32647 | Medium | 6.7 | 2023-01-03 | In ccu, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privil… |
CVE-2022-32646 | Medium | 6.7 | 2023-01-03 | In gpu drm, there is a possible stack overflow due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges… |
CVE-2022-32640 | Medium | 6.7 | 2023-01-03 | In meta wifi, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution pri… |
CVE-2022-32637 | Medium | 6.7 | 2023-01-03 | In hevc decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution… |
CVE-2022-32636 | Medium | 6.7 | 2023-01-03 | In keyinstall, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privi… |
CVE-2022-32635 | High | 7.8 | 2023-01-03 | In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution pr… |
CVE-2022-32623 | Medium | 6.7 | 2023-01-03 | In mdp, there is a possible out of bounds write due to incorrect error handling. This could lead to local escalation of privilege with System execution privile… |
CVE-2022-47908 | High | 7.8 | 2023-01-03 | Stack-based buffer overflow vulnerability in V-Server v4.0.12.0 and earlier allows a local attacker to obtain the information and/or execute arbitrary code by… |
CVE-2022-47317 | High | 7.8 | 2023-01-03 | Out-of-bounds write vulnerability in V-Server v4.0.12.0 and earlier allows a local attacker to obtain the information and/or execute arbitrary code by having a… |
CVE-2022-43448 | High | 7.8 | 2023-01-03 | Out-of-bounds write vulnerability in V-SFT v6.1.7.0 and earlier and TELLUS v4.0.12.0 and earlier allows a local attacker to obtain the information and/or execu… |
CVE-2022-42475 | Critical | 9.8 | 2023-01-02 | A heap-based buffer overflow vulnerability [CWE-122] in FortiOS SSL-VPN 7.2.0 through 7.2.2, 7.0.0 through 7.0.8, 6.4.0 through 6.4.10, 6.2.0 through 6.2.11, 6… |
CVE-2022-42270 | High | 7.8 | 2022-12-30 | NVIDIA distributions of Linux contain a vulnerability in nvdla_emu_task_submit, where unvalidated input may allow a local attacker to cause stack-based buffer… |
CVE-2022-42262 | High | 7.1 | 2022-12-30 | NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where an input index is not validated, which may lead to buffer overrun… |
CVE-2022-42255 | Medium | 5.3 | 2022-12-30 | NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an out-of-bounds array access may lead to denial of se… |
CVE-2022-34671 | High | 8.5 | 2022-12-30 | NVIDIA GPU Display Driver for Windows contains a vulnerability in the user-mode layer, where an unprivileged user can cause an out-of-bounds write, which may l… |
CVE-2022-47128 | Critical | 9.8 | 2022-12-30 | Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wepkey2 parameter at /goform/WifiBasicSet. |
CVE-2022-47127 | Critical | 9.8 | 2022-12-30 | Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wrlPwd parameter at /goform/WifiBasicSet. |
CVE-2022-47126 | Critical | 9.8 | 2022-12-30 | Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wrlEn parameter at /goform/WifiBasicSet. |
CVE-2022-47125 | Critical | 9.8 | 2022-12-30 | Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wrlEn_5g parameter at /goform/WifiBasicSet. |
CVE-2022-47124 | Critical | 9.8 | 2022-12-30 | Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wepkey4 parameter at /goform/WifiBasicSet. |
CVE-2022-47123 | Critical | 9.8 | 2022-12-30 | Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wepkey3 parameter at /goform/WifiBasicSet. |
CVE-2022-47122 | Critical | 9.8 | 2022-12-30 | Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wrlPwd_5g parameter at /goform/WifiBasicSet. |
CVE-2022-47121 | Critical | 9.8 | 2022-12-30 | Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wepkey parameter at /goform/WifiBasicSet. |
CVE-2022-47120 | Critical | 9.8 | 2022-12-30 | Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the security_5g parameter at /goform/WifiBasicSet. |
CVE-2022-47119 | Critical | 9.8 | 2022-12-30 | Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the ssid parameter at /goform/WifiBasicSet. |
CVE-2022-47118 | Critical | 9.8 | 2022-12-30 | Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wepkey1 parameter at /goform/WifiBasicSet. |
CVE-2022-47117 | Critical | 9.8 | 2022-12-30 | Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the security parameter at /goform/WifiBasicSet. |
CVE-2022-47116 | High | 7.5 | 2022-12-30 | Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the SYSPS parameter at /goform/SysToolChangePwd. |
CVE-2022-47115 | Critical | 9.8 | 2022-12-30 | Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wepauth parameter at /goform/WifiBasicSet. |
CVE-2022-46601 | Critical | 9.8 | 2022-12-30 | TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the setbg_num parameter in the icp_setbg_img (sub_41DD68) function. |
CVE-2022-46600 | Critical | 9.8 | 2022-12-30 | TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the wps_sta_enrollee_pin parameter in the action set_sta_enrollee_pin_24g function. |
CVE-2022-46599 | Critical | 9.8 | 2022-12-30 | TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the setlogo_num parameter in the icp_setlogo_img (sub_41DBF4) function. |
CVE-2022-46596 | Critical | 9.8 | 2022-12-30 | TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the del_num parameter in the icp_delete_img (sub_41DEDC) function. |
CVE-2022-46594 | Critical | 9.8 | 2022-12-30 | TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the update_file_name parameter in the auto_up_fw (sub_420A04) function. |
CVE-2022-46593 | Critical | 9.8 | 2022-12-30 | TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the wps_sta_enrollee_pin parameter in the do_sta_enrollee_wifi function. |
CVE-2022-46592 | Critical | 9.8 | 2022-12-30 | TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the wps_sta_enrollee_pin parameter in the set_sta_enrollee_pin_5g function. |
CVE-2022-46591 | Critical | 9.8 | 2022-12-30 | TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the reject_url parameter in the reject (sub_41BD60) function. |
CVE-2022-46590 | Critical | 9.8 | 2022-12-30 | TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the cameo.cameo.netstat_rsname parameter in the tools_netstat (sub_41E730) function. |
CVE-2022-46589 | Critical | 9.8 | 2022-12-30 | TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the cameo.cameo.netstat_option parameter in the tools_netstat (sub_41E730) function. |
CVE-2022-46588 | Critical | 9.8 | 2022-12-30 | TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the sys_service parameter in the setup_wizard_mydlink (sub_4104B8) function. |
CVE-2022-46586 | Critical | 9.8 | 2022-12-30 | TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the qcawifi.wifi%d_vap%d.maclist parameter in the kick_ban_wifi_mac_allow (sub_415B00)… |
CVE-2022-46585 | Critical | 9.8 | 2022-12-30 | TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the REMOTE_USER parameter in the get_access (sub_45AC2C) function. |
CVE-2022-46584 | Critical | 9.8 | 2022-12-30 | TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the qcawifi.wifi%d_vap%d.maclist parameter in the kick_ban_wifi_mac_deny (sub_415D7C)… |
CVE-2022-46583 | Critical | 9.8 | 2022-12-30 | TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the reboot_type parameter in the wizard_ipv6 (sub_41C380) function. |
CVE-2022-46582 | Critical | 9.8 | 2022-12-30 | TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the login_name parameter in the do_graph_auth (sub_4061E0) function. |
CVE-2022-46581 | Critical | 9.8 | 2022-12-30 | TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the cameo.cameo.nslookup_target parameter in the tools_nslookup function. |
CVE-2022-46580 | Critical | 9.8 | 2022-12-30 | TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the user_edit_page parameter in the wifi_captive_portal function. |
CVE-2014-125026 | Critical | 9.8 | 2022-12-27 | LZ4 bindings use a deprecated C API that is vulnerable to memory corruption, which could lead to arbitrary code execution if called with untrusted user input. |
CVE-2022-46570 | High | 7.2 | 2022-12-23 | D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a stack overflow via the Password parameter in the SetWan3Settings module. |
CVE-2022-46569 | High | 7.2 | 2022-12-23 | D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a stack overflow via the Key parameter in the SetWLanRadioSecurity module. |
CVE-2022-46568 | High | 7.2 | 2022-12-23 | D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a stack overflow via the AccountPassword parameter in the SetSysEmailSett… |
CVE-2022-46566 | High | 7.2 | 2022-12-23 | D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a stack overflow via the Password parameter in the SetQuickVPNSettings mo… |
CVE-2022-46563 | High | 7.2 | 2022-12-23 | D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a stack overflow via the Password parameter in the SetDynamicDNSSettings… |
CVE-2022-46562 | High | 7.2 | 2022-12-23 | D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a stack overflow via the PSK parameter in the SetQuickVPNSettings module. |
CVE-2022-46561 | High | 7.2 | 2022-12-23 | D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a stack overflow via the Password parameter in the SetWanSettings module. |
CVE-2022-46560 | High | 7.2 | 2022-12-23 | D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a stack overflow via the Password parameter in the SetWan2Settings module. |
CVE-2022-47942 | High | 8.8 | 2022-12-23 | An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. There is a heap-based buffer overflow in set_ntacl_dacl, related to use o… |
CVE-2022-43598 | High | 8.1 | 2022-12-22 | Multiple memory corruption vulnerabilities exist in the IFFOutput alignment padding functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially craf… |
CVE-2022-41981 | High | 8.1 | 2022-12-22 | A stack-based buffer overflow vulnerability exists in the TGA file format parser of OpenImageIO v2.3.19.0. A specially-crafted targa file can lead to out of bo… |
CVE-2022-41838 | Critical | 9.8 | 2022-12-22 | A code execution vulnerability exists in the DDS scanline parsing functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially-crafted .dds can lead… |
CVE-2022-41837 | Critical | 9.8 | 2022-12-22 | An out-of-bounds write vulnerability exists in the OpenImageIO::add_exif_item_to_spec functionality of OpenImageIO Project OpenImageIO v2.4.4.2. Specially-craf… |
CVE-2022-41794 | Critical | 9.8 | 2022-12-22 | A heap based buffer overflow vulnerability exists in the PSD thumbnail resource parsing code of OpenImageIO 2.3.19.0. A specially-crafted PSD file can lead to… |
CVE-2022-41639 | Critical | 9.8 | 2022-12-22 | A heap based buffer overflow vulnerability exists in tile decoding code of TIFF image parser in OpenImageIO master-branch-9aeece7a and v2.3.19.0. A specially-c… |
CVE-2022-38143 | Critical | 9.8 | 2022-12-22 | A heap out-of-bounds write vulnerability exists in the way OpenImageIO v2.3.19.0 processes RLE encoded BMP images. A specially-crafted bmp file can write to ar… |
CVE-2022-46885 | High | 8.8 | 2022-12-22 | Mozilla developers Timothy Nikkel, Ashley Hale, and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 105. Some of these bugs showed evid… |
CVE-2022-46883 | High | 8.8 | 2022-12-22 | Mozilla developers Gabriele Svelto, Yulia Startsev, Andrew McCreight and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 106. Some of t… |
CVE-2022-46881 | High | 8.8 | 2022-12-22 | An optimization in WebGL was incorrect in some cases, and could have led to memory corruption and a potentially exploitable crash. *Note*: This advisory was ad… |
CVE-2022-46879 | High | 8.8 | 2022-12-22 | Mozilla developers and community members Lukas Bernhard, Gabriele Svelto, Randell Jesup, and the Mozilla Fuzzing Team reported memory safety bugs present in Fi… |
CVE-2022-46878 | High | 8.8 | 2022-12-22 | Mozilla developers Randell Jesup, Valentin Gosu, Olli Pettay, and the Mozilla Fuzzing Team reported memory safety bugs present in Thunderbird 102.5. Some of th… |
CVE-2022-45421 | High | 8.8 | 2022-12-22 | Mozilla developers Andrew McCreight and Gabriele Svelto reported memory safety bugs present in Thunderbird 102.4. Some of these bugs showed evidence of memory… |
CVE-2022-42932 | High | 8.8 | 2022-12-22 | Mozilla developers Ashley Hale and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 105 and Firefox ESR 102.3. Some of these bugs showed… |
CVE-2022-40962 | High | 8.8 | 2022-12-22 | Mozilla developers Nika Layzell, Timothy Nikkel, Sebastian Hengst, Andreas Pehrson, and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox… |
CVE-2022-40961 | Medium | 6.5 | 2022-12-22 | During startup, a graphics driver with an unexpected name could lead to a stack-buffer overflow causing a potentially exploitable crash.<br>*This issue only af… |
CVE-2022-38478 | High | 8.8 | 2022-12-22 | Members the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 103, Firefox ESR 102.1, and Firefox ESR 91.12. Some of these bugs showed eviden… |
CVE-2022-38477 | High | 8.8 | 2022-12-22 | Mozilla developer Nika Layzell and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 103 and Firefox ESR 102.1. Some of these bugs showed… |
CVE-2022-36320 | Critical | 9.8 | 2022-12-22 | Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 102. Some of these bugs showed evidence of memory corruption and… |
CVE-2022-34485 | Critical | 9.8 | 2022-12-22 | Mozilla developers Bryce Seager van Dyk and the Mozilla Fuzzing Team reported potential vulnerabilities present in Firefox 101. Some of these bugs showed evide… |
CVE-2022-31747 | Critical | 9.8 | 2022-12-22 | Mozilla developers Andrew McCreight, Nicolas B. Pierron, and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 100 and Firefox ESR 91.9… |
CVE-2022-31737 | Critical | 9.8 | 2022-12-22 | A malicious webpage could have caused an out-of-bounds write in WebGL, leading to memory corruption and a potentially exploitable crash. This vulnerability aff… |
CVE-2022-2505 | High | 8.8 | 2022-12-22 | Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 102. Some of these bugs showed evidence of memory corruption and… |