CWE-787 · Out-of-bounds Write (page 70)
Page 70 of 100 — CVEs classified under CWE-787, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-40717 | High | 8.8 | 2023-01-26 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected D-Link DIR-2150 4.0.1 routers. Authentication is not required to exp… |
CVE-2023-24099 | High | 8.8 | 2023-01-23 | TrendNet Wireless AC Easy-Upgrader TEW-820AP v1.0R, firmware version 1.01.B01 was discovered to contain a stack overflow via the username parameter at /formWiz… |
CVE-2023-24098 | High | 8.8 | 2023-01-23 | TrendNet Wireless AC Easy-Upgrader TEW-820AP v1.0R, firmware version 1.01.B01 was discovered to contain a stack overflow via the submit-url parameter at /formS… |
CVE-2023-24097 | High | 8.8 | 2023-01-23 | TrendNet Wireless AC Easy-Upgrader TEW-820AP v1.0R, firmware version 1.01.B01 was discovered to contain a stack overflow via the submit-url parameter at /formP… |
CVE-2023-24096 | High | 8.8 | 2023-01-23 | TrendNet Wireless AC Easy-Upgrader TEW-820AP v1.0R, firmware version 1.01.B01 was discovered to contain a stack overflow via the newpass parameter at /formPass… |
CVE-2023-24095 | High | 8.8 | 2023-01-23 | TrendNet Wireless AC Easy-Upgrader TEW-820AP v1.0R, firmware version 1.01.B01 was discovered to contain a stack overflow via the submit-url parameter at /formS… |
CVE-2022-47065 | High | 8.8 | 2023-01-23 | TrendNet Wireless AC Easy-Upgrader TEW-820AP v1.0R, firmware version 1.01.B01 was discovered to contain a stack overflow via the submit-url parameter at /formN… |
CVE-2022-48281 | Medium | 5.5 | 2023-01-23 | processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow (e.g., "WRITE of size 307203") via a crafted TIFF image. |
CVE-2023-24056 | Medium | 5.5 | 2023-01-22 | In pkgconf through 1.9.3, variable duplication can cause unbounded string expansion due to incorrect checks in libpkgconf/tuple.c:pkgconf_tuple_parse. For exam… |
CVE-2023-24039 | High | 7.8 | 2023-01-21 | A stack-based buffer overflow in ParseColors in libXm in Common Desktop Environment 1.6 can be exploited by local low-privileged users via the dtprintinfo setu… |
CVE-2022-31901 | Medium | 6.5 | 2023-01-19 | Buffer overflow in function Notepad_plus::addHotSpot in Notepad++ v8.4.3 and earlier allows attackers to crash the application via two crafted files. |
CVE-2023-22741 | Critical | 9.8 | 2023-01-19 | Sofia-SIP is an open-source SIP User-Agent library, compliant with the IETF RFC3261 specification. In affected versions Sofia-SIP **lacks both message length a… |
CVE-2023-21609 | High | 7.8 | 2023-01-18 | Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by an out-of-bounds write vuln… |
CVE-2023-21606 | High | 7.8 | 2023-01-18 | Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by an out-of-bounds write vuln… |
CVE-2022-34401 | High | 7.5 | 2023-01-18 | Dell BIOS contains a stack based buffer overflow vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SM… |
CVE-2022-41989 | Critical | 9.0 | 2023-01-18 | Sewio’s Real-Time Location System (RTLS) Studio version 2.0.0 up to and including version 2.6.2 does not validate the length of RTLS report payloads during com… |
CVE-2022-46475 | Critical | 9.8 | 2023-01-17 | D-Link DIR 645A1 1.06B01_Beta01 was discovered to contain a stack overflow via the service= variable in the genacgi_main function. |
CVE-2006-20001 | High | 7.5 | 2023-01-17 | A carefully crafted If: request header can cause a memory read, or write of a single zero byte, in a pool (heap) memory location beyond the header value sent… |
CVE-2022-3087 | High | 7.8 | 2023-01-17 | Fuji Electric Tellus Lite V-Simulator versions 4.0.12.0 and prior are vulnerable to an out-of-bounds write which may allow an attacker to execute arbitrary co… |
CVE-2023-21597 | High | 7.8 | 2023-01-13 | Adobe InCopy versions 18.0 (and earlier), 17.4 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution… |
CVE-2023-21595 | High | 7.8 | 2023-01-13 | Adobe InCopy versions 18.0 (and earlier), 17.4 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution… |
CVE-2023-21590 | High | 7.8 | 2023-01-13 | Adobe InDesign version 18.0 (and earlier), 17.4 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code executio… |
CVE-2023-21589 | High | 7.8 | 2023-01-13 | Adobe InDesign version 18.0 (and earlier), 17.4 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code executio… |
CVE-2022-42281 | Medium | 6.7 | 2023-01-13 | NVIDIA DGX A100 contains a vulnerability in SBIOS in the FsRecovery, which may allow a highly privileged local attacker to cause an out-of-bounds write, which… |
CVE-2022-3161 | High | 7.8 | 2023-01-13 | The APDFL.dll contains a memory corruption vulnerability while parsing specially crafted PDF files. This could allow an attacker to execute code in the con… |
CVE-2022-3160 | High | 7.8 | 2023-01-13 | The APDFL.dll contains an out-of-bounds write past the fixed-length heap-based buffer while parsing specially crafted PDF files. This could allow an attacke… |
CVE-2022-3159 | High | 7.8 | 2023-01-13 | The APDFL.dll contains a stack-based buffer overflow vulnerability that could be triggered while parsing specially crafted PDF files. This could allow an att… |
CVE-2023-22415 | High | 7.5 | 2023-01-13 | An Out-of-Bounds Write vulnerability in the H.323 ALG of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to cause Denial of Service… |
CVE-2023-22411 | High | 7.5 | 2023-01-13 | An Out-of-Bounds Write vulnerability in Flow Processing Daemon (flowd) of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to cause… |
CVE-2023-22404 | Medium | 6.5 | 2023-01-13 | An Out-of-bounds Write vulnerability in the Internet Key Exchange Protocol daemon (iked) of Juniper Networks Junos OS on SRX series and MX with SPC3 allows an… |
CVE-2023-23456 | Medium | 5.3 | 2023-01-12 | A heap-based buffer overflow issue was discovered in UPX in PackTmt::pack() in p_tmt.cpp file. The flow allows an attacker to cause a denial of service (abort)… |
CVE-2017-16329 | Critical | 9.9 | 2023-01-11 | Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Spe… |
CVE-2017-16326 | Critical | 9.9 | 2023-01-11 | Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Spe… |
CVE-2017-16318 | Critical | 9.9 | 2023-01-11 | Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Spe… |
CVE-2017-16302 | Critical | 9.9 | 2023-01-11 | Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Spe… |
CVE-2017-16301 | Critical | 9.9 | 2023-01-11 | Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Spe… |
CVE-2017-16292 | Critical | 9.9 | 2023-01-11 | Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Spe… |
CVE-2017-16281 | Critical | 9.9 | 2023-01-11 | Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Spe… |
CVE-2017-16273 | Critical | 9.9 | 2023-01-11 | Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Spe… |
CVE-2017-16270 | Critical | 9.9 | 2023-01-11 | Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Spe… |
CVE-2017-16269 | Critical | 9.9 | 2023-01-11 | Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Spe… |
CVE-2017-16268 | Critical | 9.9 | 2023-01-11 | Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Spe… |
CVE-2017-16267 | Critical | 9.9 | 2023-01-11 | Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Spe… |
CVE-2017-16266 | Critical | 9.9 | 2023-01-11 | Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Spe… |
CVE-2017-16265 | Critical | 9.9 | 2023-01-11 | Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Spe… |
CVE-2017-16264 | Critical | 9.9 | 2023-01-11 | Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Spe… |
CVE-2017-16263 | Critical | 9.9 | 2023-01-11 | Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Spe… |
CVE-2017-16262 | Critical | 9.9 | 2023-01-11 | Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Spe… |
CVE-2017-16261 | High | 8.8 | 2023-01-11 | Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Spe… |
CVE-2017-16260 | Critical | 9.9 | 2023-01-11 | Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Spe… |
CVE-2017-16259 | Critical | 9.9 | 2023-01-11 | Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Spe… |
CVE-2017-16258 | Critical | 9.9 | 2023-01-11 | Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Spe… |
CVE-2017-16257 | Critical | 9.9 | 2023-01-11 | Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Spe… |
CVE-2017-16256 | Critical | 9.9 | 2023-01-11 | Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Spe… |
CVE-2022-4873 | Critical | 9.8 | 2023-01-11 | On Netcomm router models NF20MESH, NF20, and NL1902 a stack based buffer overflow affects the sessionKey parameter. By providing a specific number of bytes, th… |
CVE-2022-4498 | Critical | 9.8 | 2023-01-11 | In TP-Link routers, Archer C5 and WR710N-V1, running the latest available code, when receiving HTTP Basic Authentication the httpd service can be sent a crafte… |
CVE-2021-46791 | Medium | 5.5 | 2023-01-11 | Insufficient input validation during parsing of the System Management Mode (SMM) binary may allow a maliciously crafted SMM executable binary to corrupt Dynami… |
CVE-2021-46779 | High | 7.1 | 2023-01-11 | Insufficient input validation in SVC_ECC_PRIMITIVE system call in a compromised user application or ABL may allow an attacker to corrupt ASP (AMD Secure Proces… |
CVE-2021-26402 | High | 7.1 | 2023-01-11 | Insufficient bounds checking in ASP (AMD Secure Processor) firmware while handling BIOS mailbox commands, may allow an attacker to write partially-controlled d… |
CVE-2021-26398 | High | 7.8 | 2023-01-11 | Insufficient input validation in SYS_KEY_DERIVE system call in a compromised user application or ABL may allow an attacker to corrupt ASP (AMD Secure Processor… |
CVE-2022-46449 | High | 7.5 | 2023-01-10 | An issue in MPD (Music Player Daemon) v0.23.10 allows attackers to cause a Denial of Service (DoS) via a crafted input. |
CVE-2023-0138 | High | 8.8 | 2023-01-10 | Heap buffer overflow in libphonenumber in Google Chrome prior to 109.0.5414.74 allowed a remote attacker to potentially exploit heap corruption via a crafted H… |
CVE-2023-0137 | High | 8.8 | 2023-01-10 | Heap buffer overflow in Platform Apps in Google Chrome on Chrome OS prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious exte… |
CVE-2023-0129 | High | 8.8 | 2023-01-10 | Heap buffer overflow in Network Service in Google Chrome prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious extension to po… |
CVE-2022-47967 | High | 7.8 | 2023-01-10 | A vulnerability has been identified in Solid Edge (All versions < V2023 MP1). The DOCMGMT.DLL contains a memory corruption vulnerability that could be triggere… |
CVE-2022-47935 | High | 7.8 | 2023-01-10 | A vulnerability has been identified in JT Open (All versions < V11.1.1.0), JT Utilities (All versions < V13.1.1.0), Solid Edge (All versions < V2023). The Jt10… |
CVE-2022-43970 | High | 7.2 | 2023-01-09 | A buffer overflow vulnerability exists in Linksys WRT54GL Wireless-G Broadband Router with firmware <= 4.30.18.006. A stack-based buffer overflow in the Start_… |
CVE-2022-40520 | High | 8.4 | 2023-01-09 | Memory corruption due to stack-based buffer overflow in Core |
CVE-2022-40517 | High | 8.4 | 2023-01-09 | Memory corruption in core due to stack-based buffer overflow |
CVE-2022-40516 | High | 8.4 | 2023-01-09 | Memory corruption in Core due to stack-based buffer overflow. |
CVE-2022-33300 | High | 8.4 | 2023-01-09 | Memory corruption in Automotive Android OS due to improper input validation. |
CVE-2022-33286 | High | 7.5 | 2023-01-09 | Transient DOS due to buffer over-read in WLAN while processing 802.11 management frames. |
CVE-2022-33285 | High | 7.5 | 2023-01-09 | Transient DOS due to buffer over-read in WLAN while parsing WLAN CSA action frames. |
CVE-2022-33284 | High | 8.2 | 2023-01-09 | Information disclosure due to buffer over-read in WLAN while parsing BTM action frame. |
CVE-2022-33283 | High | 8.2 | 2023-01-09 | Information disclosure due to buffer over-read in WLAN while WLAN frame parsing due to missing frame length check. |
CVE-2022-33265 | High | 7.3 | 2023-01-09 | Memory corruption due to information exposure in Powerline Communication Firmware while sending different MMEs from a single, unassociated device. |
CVE-2022-33255 | High | 8.2 | 2023-01-09 | Information disclosure due to buffer over-read in Bluetooth HOST while processing GetFolderItems and GetItemAttribute Cmds from peer device. |
CVE-2022-33218 | High | 8.2 | 2023-01-09 | Memory corruption in Automotive due to improper input validation. |
CVE-2022-22088 | Critical | 9.8 | 2023-01-09 | Memory corruption in Bluetooth HOST due to buffer overflow while parsing the command response received from remote |
CVE-2022-45126 | Medium | 4.0 | 2023-01-09 | Kernel subsystem within OpenHarmony-v3.1.4 and prior versions in kernel_liteos_a has a kernel stack overflow vulnerability when call SysClockGettime. 4 bytes p… |
CVE-2022-43662 | Medium | 4.0 | 2023-01-09 | Kernel subsystem within OpenHarmony-v3.1.4 and prior versions in kernel_liteos_a has a kernel stack overflow vulnerability when call SysTimerGettime. 4 bytes p… |
CVE-2022-4378 | High | 7.8 | 2023-01-05 | A stack overflow flaw was found in the Linux kernel's SYSCTL subsystem in how a user changes certain kernel parameters and variables. This flaw allows a local… |
CVE-2022-47661 | High | 7.8 | 2023-01-05 | GPAC MP4Box 2.1-DEV-rev649-ga8f438d20 is vulnerable to Buffer Overflow via media_tools/av_parsers.c:4988 in gf_media_nalu_add_emulation_bytes |
CVE-2022-47659 | High | 7.8 | 2023-01-05 | GPAC MP4box 2.1-DEV-rev644-g5c4df2a67 is vulnerable to Buffer Overflow in gf_bs_read_data |
CVE-2022-47655 | High | 7.8 | 2023-01-05 | Libde265 1.0.9 is vulnerable to Buffer Overflow in function void put_qpel_fallback<unsigned short> |
CVE-2022-47086 | Medium | 5.5 | 2023-01-05 | GPAC MP4Box v2.1-DEV-rev574-g9d5bb184b contains a segmentation violation via the function gf_sm_load_init_swf at scene_manager/swf_parse.c |
CVE-2022-3715 | High | 7.8 | 2023-01-05 | A flaw was found in the bash package, where a heap-buffer overflow can occur in valid parameter_transform. This issue may lead to memory problems. |
CVE-2023-0054 | High | 7.8 | 2023-01-04 | Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1145. |
CVE-2022-44431 | Medium | 5.5 | 2023-01-04 | In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services. |
CVE-2022-44430 | Medium | 5.5 | 2023-01-04 | In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services. |
CVE-2022-44429 | Medium | 5.5 | 2023-01-04 | In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services. |
CVE-2022-44428 | Medium | 5.5 | 2023-01-04 | In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services. |
CVE-2022-44427 | Medium | 5.5 | 2023-01-04 | In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services. |
CVE-2022-39118 | Medium | 5.5 | 2023-01-04 | In sprd_sysdump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. |
CVE-2022-39116 | Medium | 5.5 | 2023-01-04 | In sprd_sysdump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. |
CVE-2022-32647 | Medium | 6.7 | 2023-01-03 | In ccu, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privil… |
CVE-2022-32646 | Medium | 6.7 | 2023-01-03 | In gpu drm, there is a possible stack overflow due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges… |
CVE-2022-32640 | Medium | 6.7 | 2023-01-03 | In meta wifi, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution pri… |
CVE-2022-32637 | Medium | 6.7 | 2023-01-03 | In hevc decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution… |
CVE-2022-32636 | Medium | 6.7 | 2023-01-03 | In keyinstall, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privi… |