CWE-787 · Out-of-bounds Write (page 67)
Page 67 of 100 — CVEs classified under CWE-787, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-21038 | Medium | 6.7 | 2023-03-24 | In cs40l2x_cp_trigger_queue_show of cs40l2x.c, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privileg… |
CVE-2023-21022 | High | 7.8 | 2023-03-24 | In BufferBlock of Suballocation.cpp, there is a possible out of bounds write due to memory corruption. This could lead to local escalation of privilege with no… |
CVE-2023-20994 | Medium | 6.7 | 2023-03-24 | In _ufdt_output_property_to_fdt of ufdt_convert.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalatio… |
CVE-2023-20985 | High | 7.8 | 2023-03-24 | In BTA_GATTS_HandleValueIndication of bta_gatts_api.cc, there is a possible out of bounds write due to improper input validation. This could lead to local esca… |
CVE-2023-20966 | High | 7.8 | 2023-03-24 | In inflate of inflate.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additi… |
CVE-2023-20956 | Medium | 4.4 | 2023-03-24 | In Import of C2SurfaceSyncObj.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local information disclosure with… |
CVE-2023-20954 | Critical | 9.8 | 2023-03-24 | In SDP_AddAttribute of sdp_db.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no ad… |
CVE-2023-20952 | Medium | 5.5 | 2023-03-24 | In A2DP_BuildCodecHeaderSbc of a2dp_sbc.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local information disclos… |
CVE-2023-20951 | Critical | 9.8 | 2023-03-24 | In gatt_process_prep_write_rsp of gatt_cl.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution w… |
CVE-2023-20936 | High | 7.8 | 2023-03-24 | In bta_av_rc_disc_done of bta_av_act.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privileg… |
CVE-2023-20931 | High | 7.8 | 2023-03-24 | In avdt_scb_hdl_write_req of avdt_scb_act.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of pri… |
CVE-2022-42499 | Critical | 9.8 | 2023-03-24 | In sms_SendMmCpErrMsg of sms_MmConManagement.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution… |
CVE-2022-42498 | Critical | 9.8 | 2023-03-24 | In Pixel cellular firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional… |
CVE-2021-43317 | High | 7.5 | 2023-03-24 | A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func get_le32(). The problem is essent… |
CVE-2021-43316 | High | 7.5 | 2023-03-24 | A heap-based buffer overflow was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func get_le64(). |
CVE-2021-43315 | High | 7.5 | 2023-03-24 | A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func get_le32(). The problem is essent… |
CVE-2021-43314 | High | 7.5 | 2023-03-24 | A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func get_le32(). The problem is essent… |
CVE-2021-43313 | High | 7.5 | 2023-03-24 | A heap-based buffer overflow was discovered in upx, during the variable 'bucket' points to an inaccessible address. The issue is being triggered in the functio… |
CVE-2021-43312 | High | 7.5 | 2023-03-24 | A heap-based buffer overflow was discovered in upx, during the variable 'bucket' points to an inaccessible address. The issue is being triggered in the functio… |
CVE-2021-43311 | High | 7.5 | 2023-03-24 | A heap-based buffer overflow was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func get_le32(). The problem is essenti… |
CVE-2023-28445 | Critical | 9.9 | 2023-03-24 | Deno is a runtime for JavaScript and TypeScript that uses V8 and is built in Rust. Resizable ArrayBuffers passed to asynchronous functions that are shrunk duri… |
CVE-2023-24295 | High | 7.8 | 2023-03-23 | A stack overfow in SoftMaker Software GmbH FlexiPDF v3.0.3.0 allows attackers to execute arbitrary code after opening a crafted PDF file. |
CVE-2023-20081 | Medium | 6.8 | 2023-03-23 | A vulnerability in the IPv6 DHCP (DHCPv6) client module of Cisco Adaptive Security Appliance (ASA) Software, Cisco Firepower Threat Defense (FTD) Software, Cis… |
CVE-2023-27077 | High | 7.5 | 2023-03-23 | Stack Overflow vulnerability found in 360 D901 allows a remote attacker to cause a Distributed Denial of Service (DDOS) via a crafted HTTP package. |
CVE-2023-27249 | Medium | 5.5 | 2023-03-23 | swfdump v0.9.2 was discovered to contain a heap buffer overflow in the function swf_GetPlaceObject at swfobject.c. |
CVE-2023-26496 | High | 8.6 | 2023-03-23 | An issue was discovered in Samsung Baseband Modem Chipset for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, and Exynos Auto T5124. Memory corr… |
CVE-2023-26498 | High | 8.6 | 2023-03-23 | An issue was discovered in Samsung Baseband Modem Chipset for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, Exynos Auto T5126. Memory corrupti… |
CVE-2023-27754 | Medium | 5.5 | 2023-03-22 | vox2mesh 1.0 has stack-overflow in main.cpp, this is stack-overflow caused by incorrect use of memcpy() funciton. The flow allows an attacker to cause a denial… |
CVE-2023-25861 | High | 7.8 | 2023-03-22 | Illustrator version 26.5.2 (and earlier) and 27.2.0 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code exec… |
CVE-2023-25860 | High | 7.8 | 2023-03-22 | Illustrator version 26.5.2 (and earlier) and 27.2.0 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code exec… |
CVE-2023-26497 | High | 8.6 | 2023-03-21 | An issue was discovered in Samsung Baseband Modem Chipset for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, and Exynos Auto T5125. Memory corr… |
CVE-2023-1529 | Critical | 9.8 | 2023-03-21 | Out of bounds memory access in WebHID in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit heap corruption via a malicious… |
CVE-2022-48423 | High | 7.8 | 2023-03-19 | In the Linux kernel before 6.1.3, fs/ntfs3/record.c does not validate resident attribute names. An out-of-bounds write may occur. |
CVE-2023-26806 | Critical | 9.8 | 2023-03-19 | Tenda W20E v15.11.0.6(US_W20EV4.0br_v15.11.0.6(1068_1546_841 is vulnerable to Buffer Overflow via function formSetSysTime, |
CVE-2023-26805 | Critical | 9.8 | 2023-03-19 | Tenda W20E v15.11.0.6 (US_W20EV4.0br_v15.11.0.6(1068_1546_841)_CN_TDC) is vulnerable to Buffer Overflow via function formIPMacBindModify. |
CVE-2023-28116 | High | 8.1 | 2023-03-17 | Contiki-NG is an open-source, cross-platform operating system for internet of things (IoT) devices. In versions 4.8 and prior, an out-of-bounds write can occur… |
CVE-2022-43605 | Critical | 10.0 | 2023-03-16 | An out-of-bounds write vulnerability exists in the SetAttributeList attribute_count_request functionality of EIP Stack Group OpENer development commit 58ee13c… |
CVE-2022-43604 | Critical | 10.0 | 2023-03-16 | An out-of-bounds write vulnerability exists in the GetAttributeList attribute_count_request functionality of EIP Stack Group OpENer development commit 58ee13c… |
CVE-2023-25281 | High | 7.5 | 2023-03-16 | A stack overflow vulnerability exists in pingV4Msg component in D-Link DIR820LA1_FW105B03, allows attackers to cause a denial of service via the nextPage param… |
CVE-2023-25267 | High | 8.8 | 2023-03-15 | An issue was discovered in GFI Kerio Connect 9.4.1 patch 1 (fixed in 10.0.0). There is a stack-based Buffer Overflow in the webmail component's 2FASetup functi… |
CVE-2023-25282 | Medium | 6.5 | 2023-03-15 | A heap overflow vulnerability in D-Link DIR820LA1_FW106B02 allows attackers to cause a denial of service via the config.log_to_syslog and log_opt_dropPackets p… |
CVE-2023-27781 | High | 7.8 | 2023-03-15 | jpegoptim v1.5.2 was discovered to contain a heap overflow in the optimize function at jpegoptim.c. |
CVE-2023-27103 | High | 8.8 | 2023-03-15 | Libde265 v1.0.11 was discovered to contain a heap buffer overflow via the function derive_collocated_motion_vectors at motion.cc. |
CVE-2023-27239 | Critical | 9.8 | 2023-03-15 | Tenda AX3 V16.03.12.11 was discovered to contain a stack overflow via the shareSpeed parameter at /goform/WifiGuestSet. |
CVE-2023-27590 | High | 7.8 | 2023-03-14 | Rizin is a UNIX-like reverse engineering framework and command-line toolset. In version 0.5.1 and prior, converting a GDB registers profile file into a Rizin r… |
CVE-2023-27406 | High | 7.8 | 2023-03-14 | A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application is vulnerable to stack-based buffer wh… |
CVE-2023-27404 | High | 7.8 | 2023-03-14 | A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application is vulnerable to stack-based buffer wh… |
CVE-2023-27403 | High | 7.8 | 2023-03-14 | A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains a memory corruption vulnerabi… |
CVE-2023-27400 | High | 7.8 | 2023-03-14 | A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past t… |
CVE-2023-27399 | High | 7.8 | 2023-03-14 | A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past t… |
CVE-2023-27398 | High | 7.8 | 2023-03-14 | A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past t… |
CVE-2023-26073 | High | 7.6 | 2023-03-13 | An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 850, Exynos 980, Exynos 1080, Exynos 1280, Exynos 2200, Exynos Modem 51… |
CVE-2023-26074 | High | 7.6 | 2023-03-13 | An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 850, Exynos 980, Exynos 1080, Exynos 1280, Exynos 2200, Exynos Modem 51… |
CVE-2023-26072 | High | 7.6 | 2023-03-13 | An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 850, Exynos 980, Exynos 1080, Exynos 1280, Exynos 2200, Exynos Modem 51… |
CVE-2023-25283 | High | 7.5 | 2023-03-13 | A stack overflow vulnerability in D-Link DIR820LA1_FW106B02 allows attackers to cause a denial of service via the reserveDHCP_HostName_1.1.1.0 parameter to lan… |
CVE-2022-47459 | Medium | 5.5 | 2023-03-10 | In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services. |
CVE-2022-47457 | Medium | 5.5 | 2023-03-10 | In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services. |
CVE-2022-33260 | Medium | 5.9 | 2023-03-10 | Memory corruption due to stack based buffer overflow in core while sending command from USB of large size. |
CVE-2023-27117 | High | 7.8 | 2023-03-10 | WebAssembly v1.0.29 was discovered to contain a heap overflow via the component component wabt::Node::operator. |
CVE-2023-0623 | High | 7.8 | 2023-03-09 | Cscape Envision RV version 4.60 is vulnerable to an out-of-bounds write vulnerability when parsing project (i.e. HMI) files. The product lacks proper validatio… |
CVE-2023-0622 | High | 7.8 | 2023-03-09 | Cscape Envision RV version 4.60 is vulnerable to an out-of-bounds write vulnerability when parsing project (i.e. HMI) files. The product lacks proper validatio… |
CVE-2023-26489 | Critical | 9.9 | 2023-03-08 | wasmtime is a fast and secure runtime for WebAssembly. In affected versions wasmtime's code generator, Cranelift, has a bug on x86_64 targets where address-mod… |
CVE-2023-1222 | High | 8.8 | 2023-03-07 | Heap buffer overflow in Web Audio API in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HT… |
CVE-2023-1220 | High | 8.8 | 2023-03-07 | Heap buffer overflow in UMA in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to potentially exploit h… |
CVE-2023-1219 | High | 8.8 | 2023-03-07 | Heap buffer overflow in Metrics in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to potentially explo… |
CVE-2023-1217 | Medium | 6.5 | 2023-03-07 | Stack buffer overflow in Crash reporting in Google Chrome on Windows prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process… |
CVE-2023-20632 | Medium | 6.7 | 2023-03-07 | In usb, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20630 | Medium | 6.7 | 2023-03-07 | In usb, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20626 | Medium | 6.7 | 2023-03-07 | In msdc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privi… |
CVE-2023-0330 | Medium | 5.3 | 2023-03-06 | A vulnerability in the lsi53c895a device affects the latest version of qemu. A DMA-MMIO reentrancy problem may lead to memory corruption bugs like stack overfl… |
CVE-2023-27566 | High | 7.8 | 2023-03-03 | Cubism Core in Live2D Cubism Editor 4.2.03 allows out-of-bounds write via a crafted Section Offset Table or Count Info Table in an MOC3 file. |
CVE-2023-20079 | Critical | 9.8 | 2023-03-03 | Multiple vulnerabilities in the web-based management interface of certain Cisco IP Phones could allow an unauthenticated, remote attacker to execute arbitrary… |
CVE-2023-20078 | Critical | 9.8 | 2023-03-03 | Multiple vulnerabilities in the web-based management interface of certain Cisco IP Phones could allow an unauthenticated, remote attacker to execute arbitrary… |
CVE-2022-47665 | High | 7.8 | 2023-03-03 | Libde265 1.0.9 has a heap buffer overflow vulnerability in de265_image::set_SliceAddrRS(int, int, int) |
CVE-2023-0656 | High | 7.5 | 2023-03-02 | A Stack-based buffer overflow vulnerability in the SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS), which could cause an impa… |
CVE-2023-26470 | Medium | 5.7 | 2023-03-02 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible to make the farm unusable by adding an o… |
CVE-2023-24127 | Medium | 6.5 | 2023-03-01 | Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wepkey1 parameter at /goform/WifiBasicSet. |
CVE-2023-24126 | Medium | 6.5 | 2023-03-01 | Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wepkey4_5g parameter at /goform/WifiBasicSet. |
CVE-2023-24125 | Medium | 6.5 | 2023-03-01 | Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wepkey2_5g parameter at /goform/WifiBasicSet. |
CVE-2023-24124 | Medium | 6.5 | 2023-03-01 | Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wrlEn parameter at /goform/WifiBasicSet. |
CVE-2023-24123 | Medium | 6.5 | 2023-03-01 | Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wepauth parameter at /goform/WifiBasicSet. |
CVE-2023-24122 | Medium | 6.5 | 2023-03-01 | Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the ssid_5g parameter at /goform/WifiBasicSet. |
CVE-2023-24121 | Medium | 6.5 | 2023-03-01 | Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the security_5g parameter at /goform/WifiBasicSet. |
CVE-2023-24120 | Medium | 6.5 | 2023-03-01 | Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wrlEn_5g parameter at /goform/WifiBasicSet. |
CVE-2023-24119 | Medium | 6.5 | 2023-03-01 | Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the ssid parameter at /goform/WifiBasicSet. |
CVE-2023-24118 | Medium | 6.5 | 2023-03-01 | Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the security parameter at /goform/WifiBasicSet. |
CVE-2023-24117 | Medium | 6.5 | 2023-03-01 | Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wepauth_5g parameter at /goform/WifiBasicSet. |
CVE-2023-24134 | Medium | 6.5 | 2023-03-01 | Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wepkey3 parameter at /goform/WifiBasicSet. |
CVE-2023-24133 | Medium | 6.5 | 2023-03-01 | Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wepkey_5g parameter at /goform/WifiBasicSet. |
CVE-2023-24132 | Medium | 6.5 | 2023-03-01 | Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wepkey3_5g parameter at /goform/WifiBasicSet. |
CVE-2023-24131 | Medium | 6.5 | 2023-03-01 | Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wepkey1_5g parameter at /goform/WifiBasicSet. |
CVE-2023-24130 | Medium | 6.5 | 2023-03-01 | Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wepkey parameter at /goform/WifiBasicSet. |
CVE-2023-24129 | Medium | 6.5 | 2023-03-01 | Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wepkey4 parameter at /goform/WifiBasicSet. |
CVE-2023-24128 | Medium | 6.5 | 2023-03-01 | Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wepkey2 parameter at /goform/WifiBasicSet. |
CVE-2023-25222 | High | 8.8 | 2023-03-01 | A heap-based buffer overflow vulnerability exits in GNU LibreDWG v0.12.5 via the bit_read_RC function at bits.c. |
CVE-2023-25221 | High | 7.8 | 2023-03-01 | Libde265 v1.0.10 was discovered to contain a heap-buffer-overflow vulnerability in the derive_spatial_luma_vector_prediction function in motion.cc. |
CVE-2023-22752 | Critical | 9.8 | 2023-03-01 | There are stack-based buffer overflow vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to… |
CVE-2023-22751 | Critical | 9.8 | 2023-03-01 | There are stack-based buffer overflow vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to… |
CVE-2023-20032 | Critical | 9.8 | 2023-03-01 | On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the HFS+ partition file parser of ClamAV ver… |
CVE-2022-37937 | Critical | 9.8 | 2023-03-01 | Pre-auth memory corruption in HPE Serviceguard |