CWE-787 · Out-of-bounds Write (page 69)
Page 69 of 100 — CVEs classified under CWE-787, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-44253 | High | 8.8 | 2022-11-23 | TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via parameter ip in the setDiagnosisCfg function. |
CVE-2022-36337 | High | 8.2 | 2022-11-23 | An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. A stack buffer overflow vulnerability in the MebxConfiguration driver leads to arbitra… |
CVE-2022-44807 | Critical | 9.8 | 2022-11-22 | D-Link DIR-882 1.10B02 and 1.20B06 is vulnerable to Buffer Overflow via webGetVarString. |
CVE-2022-44806 | Critical | 9.8 | 2022-11-22 | D-Link DIR-882 1.10B02 and 1.20B06 is vulnerable to Buffer Overflow. |
CVE-2022-44804 | Critical | 9.8 | 2022-11-22 | D-Link DIR-882 1.10B02 and1.20B06 is vulnerable to Buffer Overflow via the websRedirect function. |
CVE-2022-44202 | Critical | 9.8 | 2022-11-22 | D-Link DIR878 1.02B04 and 1.02B05 are vulnerable to Buffer Overflow. |
CVE-2022-44184 | Critical | 9.8 | 2022-11-22 | Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow in /usr/sbin/httpd via parameter wan_dns1_sec. |
CVE-2022-44200 | Critical | 9.8 | 2022-11-22 | Netgear R7000P V1.3.0.8, V1.3.1.64 is vulnerable to Buffer Overflow via parameters: stamode_dns1_pri and stamode_dns1_sec. |
CVE-2022-44199 | Critical | 9.8 | 2022-11-22 | Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow via parameter openvpn_server_ip. |
CVE-2022-44198 | Critical | 9.8 | 2022-11-22 | Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow via parameter openvpn_push1. |
CVE-2022-44197 | Critical | 9.8 | 2022-11-22 | Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow via parameter openvpn_server_ip. |
CVE-2022-44196 | Critical | 9.8 | 2022-11-22 | Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow via parameter openvpn_push1. |
CVE-2022-44194 | Critical | 9.8 | 2022-11-22 | Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow via parameters apmode_dns1_pri and apmode_dns1_sec. |
CVE-2022-44193 | Critical | 9.8 | 2022-11-22 | Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow in /usr/sbin/httpd via parameters: starthour, startminute , endhour, and endminute. |
CVE-2022-44191 | Critical | 9.8 | 2022-11-22 | Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow via parameters KEY1 and KEY2. |
CVE-2022-44190 | Critical | 9.8 | 2022-11-22 | Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow via parameter enable_band_steering. |
CVE-2022-44188 | Critical | 9.8 | 2022-11-22 | Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow in /usr/sbin/httpd via parameter enable_band_steering. |
CVE-2022-44187 | Critical | 9.8 | 2022-11-22 | Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow via wan_dns1_pri. |
CVE-2022-44186 | Critical | 9.8 | 2022-11-22 | Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow in /usr/sbin/httpd via parameter wan_dns1_pri. |
CVE-2022-35407 | High | 7.8 | 2022-11-22 | An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. A stack buffer overflow leads to arbitrary code execution in the SetupUtility driver o… |
CVE-2022-35897 | Medium | 6.8 | 2022-11-21 | An stack buffer overflow vulnerability leads to arbitrary code execution issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. If the attacker… |
CVE-2022-44163 | High | 7.5 | 2022-11-21 | Tenda AC21 V16.03.08.15 is vulnerable to Buffer Overflow via function formSetMacFilterCfg. |
CVE-2022-44158 | High | 7.5 | 2022-11-21 | Tenda AC21 V16.03.08.15 is vulnerable to Buffer Overflow via function via set_device_name. |
CVE-2022-44156 | High | 7.5 | 2022-11-21 | Tenda AC15 V15.03.05.19 is vulnerable to Buffer Overflow via function formSetIpMacBind. |
CVE-2022-44169 | High | 7.5 | 2022-11-21 | Tenda AC15 V15.03.05.18 is vulnerable to Buffer Overflow via function formSetVirtualSer. |
CVE-2022-44168 | High | 7.5 | 2022-11-21 | Tenda AC15 V15.03.05.18 is vulnerable to Buffer Overflow via function fromSetRouteStatic.. |
CVE-2022-44167 | High | 7.5 | 2022-11-21 | Tenda AC15 V15.03.05.18 is avulnerable to Buffer Overflow via function formSetPPTPServer. |
CVE-2022-34667 | Medium | 4.4 | 2022-11-19 | NVIDIA CUDA Toolkit SDK contains a stack-based buffer overflow vulnerability in cuobjdump, where an unprivileged remote attacker could exploit this buffer over… |
CVE-2022-31610 | High | 7.8 | 2022-11-19 | NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys), where a local user with basic capabilities can cause an… |
CVE-2022-31606 | High | 7.8 | 2022-11-19 | NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where a failure to properly v… |
CVE-2022-41900 | High | 7.1 | 2022-11-18 | TensorFlow is an open source platform for machine learning. The security vulnerability results in FractionalMax(AVG)Pool with illegal pooling_ratio. Attackers… |
CVE-2022-24939 | Medium | 5.7 | 2022-11-18 | A malformed packet containing an invalid destination address, causes a stack overflow in the Ember ZNet stack. This causes an assert which leads to a reset… |
CVE-2022-43171 | Medium | 6.5 | 2022-11-17 | A heap buffer overflow in the LIEF::MachO::BinaryParser::parse_dyldinfo_generic_bind function of LIEF v0.12.1 allows attackers to cause a Denial of Service (Do… |
CVE-2022-20460 | Medium | 6.7 | 2022-11-17 | In (TBD) mprot_unmap? of (TBD), there is a possible way to corrupt the memory mapping due to improper input validation. This could lead to local escalation of… |
CVE-2022-20428 | Medium | 6.7 | 2022-11-17 | In (TBD) of (TBD), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System executio… |
CVE-2022-20427 | Medium | 6.7 | 2022-11-17 | In (TBD) of (TBD), there is a possible way to corrupt memory due to improper input validation. This could lead to local escalation of privilege with System exe… |
CVE-2022-29277 | High | 8.8 | 2022-11-15 | Incorrect pointer checks within the the FwBlockServiceSmm driver can allow arbitrary RAM modifications During review of the FwBlockServiceSmm driver, certain i… |
CVE-2022-29276 | High | 8.2 | 2022-11-15 | SMI functions in AhciBusDxe use untrusted inputs leading to corruption of SMRAM. SMI functions in AhciBusDxe use untrusted inputs leading to corruption of SMRA… |
CVE-2022-30772 | High | 8.2 | 2022-11-15 | Manipulation of the input address in PnpSmm function 0x52 could be used by malware to overwrite SMRAM or OS kernel memory. Function 0x52 of the PnpSmm driver i… |
CVE-2022-30771 | High | 8.2 | 2022-11-15 | Initialization function in PnpSmm could lead to SMRAM corruption when using subsequent PNP SMI functions Initialization function in PnpSmm could lead to SMRAM… |
CVE-2022-24942 | Critical | 9.1 | 2022-11-15 | Heap based buffer overflow in HTTP Server functionality in Micrium uC-HTTP 3.01.01 allows remote code execution via HTTP request. |
CVE-2022-20946 | High | 8.6 | 2022-11-15 | A vulnerability in the generic routing encapsulation (GRE) tunnel decapsulation feature of Cisco Firepower Threat Defense (FTD) Software could allow an unauthe… |
CVE-2022-43071 | Medium | 5.5 | 2022-11-15 | A stack overflow in the Catalog::readPageLabelTree2(Object*) function of XPDF v4.04 allows attackers to cause a Denial of Service (DoS) via a crafted PDF file. |
CVE-2022-33234 | High | 7.3 | 2022-11-15 | Memory corruption in video due to configuration weakness. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… |
CVE-2022-42060 | High | 7.5 | 2022-11-15 | Tenda AC1200 Router Model W15Ev2 V15.11.0.10(1576) was discovered to contain a stack overflow via the setWanPpoe function. This vulnerability allows attackers… |
CVE-2022-42058 | Critical | 9.8 | 2022-11-15 | Tenda AC1200 Router Model W15Ev2 V15.11.0.10(1576) was discovered to contain a stack overflow via the setRemoteWebManage function. This vulnerability allows at… |
CVE-2022-43294 | Critical | 9.8 | 2022-11-14 | Tasmota before commit 066878da4d4762a9b6cb169fdf353e804d735cfd was discovered to contain a stack overflow via the ClientPortPtr parameter at lib/libesp32/rtsp/… |
CVE-2022-32266 | Medium | 6.4 | 2022-11-14 | DMA attacks on the parameter buffer used by a software SMI handler used by the driver PcdSmmDxe could lead to a TOCTOU attack on the SMI handler and lead to co… |
CVE-2022-43295 | Medium | 5.5 | 2022-11-14 | XPDF v4.04 was discovered to contain a stack overflow via the function FileStream::copy() at xpdf/Stream.cc:795. |
CVE-2022-24938 | Medium | 6.5 | 2022-11-14 | A malformed packet causes a stack overflow in the Ember ZNet stack. This causes an assert which leads to a reset, immediately clearing the error. |
CVE-2022-0137 | High | 7.5 | 2022-11-14 | A heap buffer overflow in image_set_mask function of HTMLDOC before 1.9.15 allows an attacker to write outside the buffer boundaries. |
CVE-2022-0324 | High | 8.1 | 2022-11-14 | There is a vulnerability in DHCPv6 packet parsing code that could be explored by remote attacker to craft a packet that could cause buffer overflow in a memcpy… |
CVE-2022-3974 | Medium | 6.3 | 2022-11-13 | A vulnerability classified as critical was found in Axiomatic Bento4. Affected by this vulnerability is the function AP4_StdcFileByteStream::ReadPartial of the… |
CVE-2022-45188 | High | 7.8 | 2022-11-12 | Netatalk through 3.1.13 has an afp_getappl heap-based buffer overflow resulting in code execution via a crafted .appl file. This provides remote root access on… |
CVE-2022-28667 | Medium | 6.5 | 2022-11-11 | Out-of-bounds write for some Intel(R) PROSet/Wireless WiFi software before version 22.140 may allow an unauthenticated user to potentially enable denial of ser… |
CVE-2022-26513 | High | 8.0 | 2022-11-11 | Out-of-bounds write in some Intel(R) XMM(TM) 7560 Modem software before version M2_7560_R_01.2146.00 may allow an unauthenticated user to potentially enable es… |
CVE-2022-41854 | Medium | 5.8 | 2022-11-11 | Those using Snakeyaml to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an a… |
CVE-2022-41873 | Medium | 4.2 | 2022-11-11 | Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. Versions prior to 4.9 are vulnerable to an Out-of-bounds read. W… |
CVE-2022-39394 | Low | 3.8 | 2022-11-10 | Wasmtime is a standalone runtime for WebAssembly. Prior to version 2.0.2, there is a bug in Wasmtime's C API implementation where the definition of the `wasmti… |
CVE-2022-39392 | Medium | 5.9 | 2022-11-10 | Wasmtime is a standalone runtime for WebAssembly. Prior to version 2.0.2, there is a bug in Wasmtime's implementation of its pooling instance allocator when th… |
CVE-2021-40226 | High | 7.5 | 2022-11-10 | xpdfreader 4.03 is vulnerable to Buffer Overflow. |
CVE-2022-41128 | High | 8.8 | 2022-11-09 | Windows Scripting Languages Remote Code Execution Vulnerability |
CVE-2022-41125 | High | 7.8 | 2022-11-09 | Windows CNG Key Isolation Service Elevation of Privilege Vulnerability |
CVE-2022-41073 | High | 7.8 | 2022-11-09 | Windows Print Spooler Elevation of Privilege Vulnerability |
CVE-2022-39891 | Medium | 4.3 | 2022-11-09 | Heap overflow vulnerability in parse_pce function in libsavsaudio.so in Editor Lite prior to version 4.0.41.3 allows attacker to get information. |
CVE-2022-39882 | High | 8.0 | 2022-11-09 | Heap overflow vulnerability in sflacf_fal_bytes_peek function in libsmat.so library prior to SMR Nov-2022 Release 1 allows local attacker to execute arbitrary… |
CVE-2021-26392 | High | 7.8 | 2022-11-09 | Insufficient verification of missing size check in 'LoadModule' may lead to an out-of-bounds write potentially allowing an attacker with privileges to gain cod… |
CVE-2022-3446 | High | 8.8 | 2022-11-09 | Heap buffer overflow in WebSQL in Google Chrome prior to 106.0.5249.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag… |
CVE-2022-32588 | High | 7.8 | 2022-11-09 | An out-of-bounds write vulnerability exists in the PICT parsing pctwread_14841 functionality of Accusoft ImageGear 20.0. A specially-crafted malformed file can… |
CVE-2021-34569 | Critical | 9.8 | 2022-11-09 | In WAGO I/O-Check Service in multiple products an attacker can send a specially crafted packet containing OS commands to crash the diagnostic tool and write me… |
CVE-2022-3890 | Critical | 9.6 | 2022-11-09 | Heap buffer overflow in Crashpad in Google Chrome on Android prior to 107.0.5304.106 allowed a remote attacker who had compromised the renderer process to pote… |
CVE-2022-41211 | High | 7.0 | 2022-11-08 | Due to lack of proper memory management, when a victim opens manipulated file received from untrusted sources in SAP 3D Visual Enterprise Author and SAP 3D Vis… |
CVE-2022-20462 | High | 7.8 | 2022-11-08 | In phNxpNciHal_write_unlocked of phNxpNciHal.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of… |
CVE-2021-39661 | High | 7.8 | 2022-11-08 | In _PMRLogicalOffsetToPhysicalOffset of the PowerVR kernel driver, there is a possible out of bounds write due to a missing bounds check. This could lead to lo… |
CVE-2021-1050 | High | 7.8 | 2022-11-08 | In MMU_UnmapPages of the PowerVR kernel driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p… |
CVE-2022-32611 | Medium | 6.7 | 2022-11-08 | In isp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2022-32605 | Medium | 6.7 | 2022-11-08 | In isp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privil… |
CVE-2022-32603 | Medium | 6.7 | 2022-11-08 | In gpu drm, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution pr… |
CVE-2022-44321 | Medium | 5.5 | 2022-11-08 | PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the LexSkipComment function in lex.c when called from LexScanGetToken. |
CVE-2022-44320 | Medium | 5.5 | 2022-11-08 | PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the ExpressionCoerceFP function in expression.c when called from ExpressionParseFunctio… |
CVE-2022-44319 | Medium | 5.5 | 2022-11-08 | PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StdioBasePrintf function in cstdlib/string.c when called from ExpressionParseFuncti… |
CVE-2022-44318 | Medium | 5.5 | 2022-11-08 | PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StringStrcat function in cstdlib/string.c when called from ExpressionParseFunctionC… |
CVE-2022-44317 | Medium | 5.5 | 2022-11-08 | PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StdioOutPutc function in cstdlib/stdio.c when called from ExpressionParseFunctionCa… |
CVE-2022-44316 | Medium | 5.5 | 2022-11-08 | PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the LexGetStringConstant function in lex.c when called from LexScanGetToken. |
CVE-2022-44315 | Medium | 5.5 | 2022-11-08 | PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the ExpressionAssign function in expression.c when called from ExpressionParseFunctionC… |
CVE-2022-44314 | Medium | 5.5 | 2022-11-08 | PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StringStrncpy function in cstdlib/string.c when called from ExpressionParseFunction… |
CVE-2022-44313 | Medium | 5.5 | 2022-11-08 | PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the ExpressionCoerceUnsignedInteger function in expression.c when called from Expressio… |
CVE-2022-44312 | Medium | 5.5 | 2022-11-08 | PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the ExpressionCoerceInteger function in expression.c when called from ExpressionInfixOp… |
CVE-2022-43397 | High | 7.8 | 2022-11-08 | A vulnerability has been identified in Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions <… |
CVE-2022-41664 | High | 7.8 | 2022-11-08 | A vulnerability has been identified in JT2Go (All versions < V14.1.0.4), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), Teamcenter Visualization… |
CVE-2022-41660 | High | 7.8 | 2022-11-08 | A vulnerability has been identified in JT2Go (All versions < V14.1.0.4), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), Teamcenter Visualization… |
CVE-2022-39136 | High | 7.8 | 2022-11-08 | A vulnerability has been identified in JT2Go (All versions < V14.1.0.4), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), Teamcenter Visualization… |
CVE-2022-42920 | Critical | 9.8 | 2022-11-07 | Apache Commons BCEL has a number of APIs that would normally only allow changing specific class characteristics. However, due to an out-of-bounds writing issue… |
CVE-2022-38582 | Medium | 6.5 | 2022-11-04 | Incorrect access control in the anti-virus driver wsdkd.sys of Watchdog Antivirus v1.4.158 allows attackers to write arbitrary files. |
CVE-2022-43108 | Critical | 9.8 | 2022-11-03 | Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the firewallEn parameter in the formSetFirewallCfg function. |
CVE-2022-43107 | Critical | 9.8 | 2022-11-03 | Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the time parameter in the setSmartPowerManagement function. |
CVE-2022-43106 | Critical | 9.8 | 2022-11-03 | Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the schedStartTime parameter in the setSchedWifi function. |
CVE-2022-43105 | Critical | 9.8 | 2022-11-03 | Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the shareSpeed parameter in the fromSetWifiGusetBasic function. |
CVE-2022-43104 | Critical | 9.8 | 2022-11-03 | Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the wpapsk_crypto parameter in the fromSetWirelessRepeat function. |
CVE-2022-43103 | Critical | 9.8 | 2022-11-03 | Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the list parameter in the formSetQosBand function. |