CWE-787 · Out-of-bounds Write (page 71)
Page 71 of 100 — CVEs classified under CWE-787, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-41741 | High | 7.0 | 2022-10-19 | NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1 and R1 P1, and NGINX Plus before versions R27 P1 and… |
CVE-2022-43029 | Critical | 9.8 | 2022-10-19 | Tenda TX3 US_TX3V1.0br_V16.03.13.11_multi_TDE01 was discovered to contain a stack overflow via the time parameter at /goform/SetSysTimeCfg. |
CVE-2022-43028 | Critical | 9.8 | 2022-10-19 | Tenda TX3 US_TX3V1.0br_V16.03.13.11_multi_TDE01 was discovered to contain a stack overflow via the timeZone parameter at /goform/SetSysTimeCfg. |
CVE-2022-43027 | Critical | 9.8 | 2022-10-19 | Tenda TX3 US_TX3V1.0br_V16.03.13.11_multi_TDE01 was discovered to contain a stack overflow via the firewallEn parameter at /goform/SetFirewallCfg. |
CVE-2022-43026 | Critical | 9.8 | 2022-10-19 | Tenda TX3 US_TX3V1.0br_V16.03.13.11_multi_TDE01 was discovered to contain a stack overflow via the endIp parameter at /goform/SetPptpServerCfg. |
CVE-2022-43025 | Critical | 9.8 | 2022-10-19 | Tenda TX3 US_TX3V1.0br_V16.03.13.11_multi_TDE01 was discovered to contain a stack overflow via the startIp parameter at /goform/SetPptpServerCfg. |
CVE-2022-43024 | Critical | 9.8 | 2022-10-19 | Tenda TX3 US_TX3V1.0br_V16.03.13.11_multi_TDE01 was discovered to contain a stack overflow via the list parameter at /goform/SetVirtualServerCfg. |
CVE-2022-42227 | High | 7.5 | 2022-10-19 | jsonlint 1.0 is vulnerable to heap-buffer-overflow via /home/hjsz/jsonlint/src/lexer. |
CVE-2022-1523 | Medium | 6.1 | 2022-10-19 | Fuji Electric D300win prior to version 3.7.1.17 is vulnerable to a write-what-where condition, which could allow an attacker to overwrite program memory to man… |
CVE-2022-43045 | Medium | 5.5 | 2022-10-19 | GPAC 2.1-DEV-rev368-gfd054169b-master was discovered to contain a segmentation violation via the function gf_dump_vrml_sffield at /scene_manager/scene_dump.c. |
CVE-2022-43044 | Medium | 5.5 | 2022-10-19 | GPAC 2.1-DEV-rev368-gfd054169b-master was discovered to contain a segmentation violation via the function gf_isom_get_meta_item_info at /isomedia/meta.c. |
CVE-2022-43042 | High | 7.8 | 2022-10-19 | GPAC 2.1-DEV-rev368-gfd054169b-master was discovered to contain a heap buffer overflow via the function FixSDTPInTRAF at isomedia/isom_intern.c. |
CVE-2022-43040 | High | 7.8 | 2022-10-19 | GPAC 2.1-DEV-rev368-gfd054169b-master was discovered to contain a heap buffer overflow via the function gf_isom_box_dump_start_ex at /isomedia/box_funcs.c. |
CVE-2022-43039 | Medium | 5.5 | 2022-10-19 | GPAC 2.1-DEV-rev368-gfd054169b-master was discovered to contain a segmentation violation via the function gf_isom_meta_restore_items_ref at /isomedia/meta.c. |
CVE-2022-43038 | Medium | 6.5 | 2022-10-19 | Bento4 v1.6.0-639 was discovered to contain a heap overflow via the AP4_BitReader::ReadCache() function in mp42ts. |
CVE-2022-43035 | Medium | 6.5 | 2022-10-19 | An issue was discovered in Bento4 v1.6.0-639. There is a heap-buffer-overflow in AP4_Dec3Atom::AP4_Dec3Atom at Ap4Dec3Atom.cpp, leading to a Denial of Service… |
CVE-2022-43034 | Medium | 6.5 | 2022-10-19 | An issue was discovered in Bento4 v1.6.0-639. There is a heap buffer overflow vulnerability in the AP4_BitReader::SkipBits(unsigned int) function in mp42ts. |
CVE-2022-41415 | Critical | 9.8 | 2022-10-19 | Acer Altos W2000h-W570h F4 R01.03.0018 was discovered to contain a stack overflow in the RevserveMem component. This vulnerability allows attackers to cause a… |
CVE-2022-39260 | High | 8.5 | 2022-10-19 | Git is an open source, scalable, distributed revision control system. `git shell` is a restricted login shell that can be used to implement Git's push/pull fun… |
CVE-2022-43260 | Critical | 9.8 | 2022-10-18 | Tenda AC18 V15.03.05.19(6318) was discovered to contain a stack overflow via the time parameter in the fromSetSysTime function. |
CVE-2022-43259 | High | 7.5 | 2022-10-18 | Tenda AC15 V15.03.05.18 was discovered to contain a stack overflow via the timeZone parameter in the form_fast_setting_wifi_set function. |
CVE-2022-42171 | Critical | 9.8 | 2022-10-17 | Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/saveParentControlInfo. |
CVE-2022-42170 | Critical | 9.8 | 2022-10-17 | Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formWifiWpsStart. |
CVE-2022-42169 | Critical | 9.8 | 2022-10-17 | Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/addWifiMacFilter. |
CVE-2022-42168 | Critical | 9.8 | 2022-10-17 | Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/fromSetIpMacBind. |
CVE-2022-42167 | Critical | 9.8 | 2022-10-17 | Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formSetFirewallCfg. |
CVE-2022-42166 | Critical | 9.8 | 2022-10-17 | Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formSetSpeedWan. |
CVE-2022-42165 | Critical | 9.8 | 2022-10-17 | Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formSetDeviceName. |
CVE-2022-42164 | Critical | 9.8 | 2022-10-17 | Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formSetClientState. |
CVE-2022-42163 | Critical | 9.8 | 2022-10-17 | Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/fromNatStaticSetting. |
CVE-2017-20149 | Critical | 9.8 | 2022-10-15 | The Mikrotik RouterOS web server allows memory corruption in releases before Stable 6.38.5 and Long-term 6.37.5, aka Chimay-Red. A remote and unauthenticated u… |
CVE-2022-42339 | High | 7.8 | 2022-10-14 | Adobe Acrobat Reader versions 22.002.20212 (and earlier) and 20.005.30381 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability that could… |
CVE-2022-38450 | High | 7.8 | 2022-10-14 | Adobe Acrobat Reader versions 22.002.20212 (and earlier) and 20.005.30381 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability that could… |
CVE-2022-35712 | Critical | 9.8 | 2022-10-14 | Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in ar… |
CVE-2022-35711 | Critical | 9.8 | 2022-10-14 | Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in ar… |
CVE-2022-35710 | Critical | 9.8 | 2022-10-14 | Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability that could result in a… |
CVE-2022-35690 | Critical | 9.8 | 2022-10-14 | Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability that could result in a… |
CVE-2022-39128 | Medium | 5.5 | 2022-10-14 | In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. |
CVE-2022-39127 | Medium | 5.5 | 2022-10-14 | In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. |
CVE-2022-39126 | Medium | 5.5 | 2022-10-14 | In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. |
CVE-2022-39125 | Medium | 5.5 | 2022-10-14 | In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. |
CVE-2022-39124 | Medium | 5.5 | 2022-10-14 | In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. |
CVE-2022-39123 | Medium | 5.5 | 2022-10-14 | In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. |
CVE-2022-39122 | Medium | 5.5 | 2022-10-14 | In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. |
CVE-2022-39121 | Medium | 5.5 | 2022-10-14 | In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. |
CVE-2022-39120 | Medium | 5.5 | 2022-10-14 | In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. |
CVE-2022-39105 | Medium | 5.5 | 2022-10-14 | In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. |
CVE-2022-38676 | Medium | 5.5 | 2022-10-14 | In gpu driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. |
CVE-2022-38673 | Medium | 5.5 | 2022-10-14 | In face detect driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. |
CVE-2022-38672 | Medium | 5.5 | 2022-10-14 | In face detect driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. |
CVE-2022-38671 | Medium | 5.5 | 2022-10-14 | In camera driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. |
CVE-2022-2984 | Medium | 5.5 | 2022-10-14 | In jpg driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. |
CVE-2022-41308 | High | 7.8 | 2022-10-14 | A maliciously crafted PKT file when consumed through SubassemblyComposer.exe application could lead to memory corruption vulnerability by read access violation… |
CVE-2022-41307 | High | 7.8 | 2022-10-14 | A maliciously crafted PKT file when consumed through SubassemblyComposer.exe application could lead to memory corruption vulnerability by read access violation… |
CVE-2022-41306 | High | 7.8 | 2022-10-14 | A maliciously crafted PCT file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation. This… |
CVE-2022-41305 | High | 7.8 | 2022-10-14 | A maliciously crafted PKT file when consumed through SubassemblyComposer.exe application could lead to memory corruption vulnerability by write access violatio… |
CVE-2022-41304 | High | 7.8 | 2022-10-14 | An Out-Of-Bounds Write Vulnerability in Autodesk FBX SDK 2020 version and prior may lead to code execution through maliciously crafted FBX files or information… |
CVE-2022-20397 | High | 7.8 | 2022-10-14 | In SitRilClient_OnResponse of SitRilSe.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privi… |
CVE-2021-0699 | High | 7.8 | 2022-10-14 | In HTBLogKM of TBD, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the kernel with… |
CVE-2022-41603 | Low | 3.4 | 2022-10-14 | The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of… |
CVE-2022-41602 | Low | 3.4 | 2022-10-14 | The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of… |
CVE-2022-41601 | Low | 3.4 | 2022-10-14 | The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of… |
CVE-2022-41600 | Low | 3.4 | 2022-10-14 | The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of… |
CVE-2022-41598 | Low | 3.4 | 2022-10-14 | The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of… |
CVE-2022-41597 | Low | 3.4 | 2022-10-14 | The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of… |
CVE-2022-41595 | Low | 3.4 | 2022-10-14 | The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of… |
CVE-2022-41594 | Low | 3.4 | 2022-10-14 | The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of… |
CVE-2022-41593 | Low | 3.4 | 2022-10-14 | The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of… |
CVE-2022-41592 | Low | 3.4 | 2022-10-14 | The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of… |
CVE-2022-41578 | Critical | 9.8 | 2022-10-14 | The MPTCP module has an out-of-bounds write vulnerability.Successful exploitation of this vulnerability may cause root privilege escalation attacks implemented… |
CVE-2022-38986 | Critical | 9.1 | 2022-10-14 | The HIPP module has a vulnerability of bypassing the check of the data transferred in the kernel space.Successful exploitation of this vulnerability may cause… |
CVE-2022-38980 | Critical | 9.8 | 2022-10-14 | The HwAirlink module has a heap overflow vulnerability in processing data packets of the proprietary protocol.Successful exploitation of this vulnerability may… |
CVE-2022-38977 | High | 7.5 | 2022-10-14 | The HwAirlink module has a heap overflow vulnerability.Successful exploitation of this vulnerability may cause out-of-bounds writes, resulting in modification… |
CVE-2022-41686 | Medium | 5.1 | 2022-10-14 | OpenHarmony-v3.1.2 and prior versions, 3.0.6 and prior versions have an Out-of-bound memory read and write vulnerability in /dev/mmz_userdev device driver. The… |
CVE-2022-35059 | Medium | 6.5 | 2022-10-14 | OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6c0414. |
CVE-2022-35058 | Medium | 6.5 | 2022-10-14 | OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b05ce. |
CVE-2022-35056 | Medium | 6.5 | 2022-10-14 | OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b0478. |
CVE-2022-35055 | Medium | 6.5 | 2022-10-14 | OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6c0473. |
CVE-2022-35054 | Medium | 6.5 | 2022-10-14 | OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6171b2. |
CVE-2022-35053 | Medium | 6.5 | 2022-10-14 | OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x61731f. |
CVE-2022-35052 | Medium | 6.5 | 2022-10-14 | OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b84b1. |
CVE-2022-35051 | Medium | 6.5 | 2022-10-14 | OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b55af. |
CVE-2022-35050 | Medium | 6.5 | 2022-10-14 | OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b04de. |
CVE-2022-35049 | Medium | 6.5 | 2022-10-14 | OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b03b5. |
CVE-2022-35048 | Medium | 6.5 | 2022-10-14 | OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b0b2c. |
CVE-2022-35047 | Medium | 6.5 | 2022-10-14 | OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b05aa. |
CVE-2022-35046 | Medium | 6.5 | 2022-10-14 | OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b0466. |
CVE-2022-35045 | Medium | 6.5 | 2022-10-14 | OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b0d63. |
CVE-2022-35044 | Medium | 6.5 | 2022-10-14 | OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x617087. |
CVE-2022-35043 | Medium | 6.5 | 2022-10-14 | OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6c08a6. |
CVE-2022-35042 | Medium | 6.5 | 2022-10-14 | OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x4adb11. |
CVE-2022-35041 | Medium | 6.5 | 2022-10-14 | OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b558f. |
CVE-2022-35040 | Medium | 6.5 | 2022-10-14 | OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b5567. |
CVE-2022-41674 | High | 8.1 | 2022-10-14 | An issue was discovered in the Linux kernel before 5.19.16. Attackers able to inject WLAN frames could cause a buffer overflow in the ieee80211_bss_info_update… |
CVE-2022-35081 | Medium | 5.5 | 2022-10-13 | SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via png_read_header at /src/png2swf.c. |
CVE-2022-35080 | Medium | 5.5 | 2022-10-13 | SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via png_load at /lib/png.c. |
CVE-2022-42901 | High | 7.8 | 2022-10-13 | Bentley MicroStation and MicroStation-based applications may be affected by out-of-bounds and stack overflow issues when opening crafted XMT files. Exploiting… |
CVE-2022-32493 | Medium | 6.0 | 2022-10-12 | Dell BIOS contains an Stack-Based Buffer Overflow vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SM… |
CVE-2022-42081 | High | 7.5 | 2022-10-12 | Tenda AC1206 US_AC1206V1.0RTL_V15.03.06.23_multi_TD01 was discovered to contain a stack overflow via sched_end_time parameter. |
CVE-2022-42080 | High | 7.5 | 2022-10-12 | Tenda AC1206 US_AC1206V1.0RTL_V15.03.06.23_multi_TD01 was discovered to contain a heap overflow via sched_start_time parameter. |