CWE-787 · Out-of-bounds Write (page 72)
Page 72 of 100 — CVEs classified under CWE-787, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-44755 | Critical | 9.8 | 2022-12-19 | HCL Notes is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView. This could allow a remote unauthenticated attacker… |
CVE-2022-44754 | Critical | 9.8 | 2022-12-19 | HCL Domino is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView. This could allow a remote unauthenticated attacke… |
CVE-2022-44753 | Critical | 9.8 | 2022-12-19 | HCL Notes is susceptible to a stack based buffer overflow vulnerability in wp6sr.dll in Micro Focus KeyView. This could allow a remote unauthenticated attacke… |
CVE-2022-44752 | Critical | 9.8 | 2022-12-19 | HCL Domino is susceptible to a stack based buffer overflow vulnerability in wp6sr.dll in Micro Focus KeyView. This could allow a remote unauthenticated attack… |
CVE-2022-44751 | Critical | 9.8 | 2022-12-19 | HCL Notes is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView. This could allow a remote unauthenticated attacker… |
CVE-2022-44750 | Critical | 9.8 | 2022-12-19 | HCL Domino is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView. This could allow a remote unauthenticated attacke… |
CVE-2022-47521 | High | 7.8 | 2022-12-18 | An issue was discovered in the Linux kernel before 6.0.11. Missing validation of IEEE80211_P2P_ATTR_CHANNEL_LIST in drivers/net/wireless/microchip/wilc1000/cfg… |
CVE-2022-47519 | High | 7.8 | 2022-12-18 | An issue was discovered in the Linux kernel before 6.0.11. Missing validation of IEEE80211_P2P_ATTR_OPER_CHANNEL in drivers/net/wireless/microchip/wilc1000/cfg… |
CVE-2022-47518 | High | 7.8 | 2022-12-18 | An issue was discovered in the Linux kernel before 6.0.11. Missing validation of the number of channels in drivers/net/wireless/microchip/wilc1000/cfg80211.c i… |
CVE-2022-46109 | High | 7.5 | 2022-12-16 | Tenda AC15 V15.03.06.23 is vulnerable to Buffer Overflow via function formSetClientState. |
CVE-2022-41992 | High | 7.8 | 2022-12-16 | A memory corruption vulnerability exists in the VHD File Format parsing CXSPARSE record functionality of PowerISO PowerISO 8.3. A specially-crafted file can le… |
CVE-2022-42542 | Medium | 6.7 | 2022-12-16 | In phNxpNciHal_core_initialized of phNxpNciHal.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation o… |
CVE-2022-42526 | Medium | 6.7 | 2022-12-16 | In ConvertUtf8ToUcs2 of radio_hal_utils.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of priv… |
CVE-2022-42525 | Medium | 6.7 | 2022-12-16 | In fillSetupDataCallInfo_V1_6 of ril_service_1_6.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escala… |
CVE-2022-42523 | Medium | 6.7 | 2022-12-16 | In fillSetupDataCallInfo_V1_6 of ril_service_1_6.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escala… |
CVE-2022-42521 | Medium | 6.7 | 2022-12-16 | In encode of wlandata.cpp, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with Syst… |
CVE-2022-42519 | Medium | 6.7 | 2022-12-16 | In CdmaBroadcastSmsConfigsRequestData::encode of cdmasmsdata.cpp, there is a possible stack clash leading to memory corruption. This could lead to local escala… |
CVE-2022-42518 | Medium | 6.7 | 2022-12-16 | In BroadcastSmsConfigsRequestData::encode of smsdata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escal… |
CVE-2022-42513 | Medium | 6.7 | 2022-12-16 | In ProtocolEmbmsBuilder::BuildSetSession of protocolembmsbuilder.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to… |
CVE-2022-42511 | Medium | 6.7 | 2022-12-16 | In EmbmsSessionData::encode of embmsdata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pri… |
CVE-2022-42509 | Medium | 6.7 | 2022-12-16 | In CallDialReqData::encode of callreqdata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr… |
CVE-2022-42508 | Medium | 6.7 | 2022-12-16 | In ProtocolCallBuilder::BuildSendUssd of protocolcallbuilder.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to loc… |
CVE-2022-42507 | Medium | 6.7 | 2022-12-16 | In ProtocolSimBuilder::BuildSimUpdatePb3gEntry of protocolsimbuilder.cpp, there is a possible out of bounds write due to a missing bounds check. This could lea… |
CVE-2022-42506 | Medium | 6.7 | 2022-12-16 | In SimUpdatePbEntry::encode of simdata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privi… |
CVE-2022-42505 | Medium | 6.7 | 2022-12-16 | In ProtocolMiscBuilder::BuildSetSignalReportCriteria of protocolmiscbuilder.cpp, there is a possible out of bounds write due to an incorrect bounds check. This… |
CVE-2022-42504 | Medium | 6.7 | 2022-12-16 | In CallDialReqData::encodeCallNumber of callreqdata.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local esc… |
CVE-2022-42503 | Medium | 6.7 | 2022-12-16 | In ProtocolMiscBuilder::BuildSetLinkCapaReportCriteria of protocolmiscbuilder.cpp, there is a possible out of bounds write due to a missing bounds check. This… |
CVE-2022-42502 | Medium | 6.7 | 2022-12-16 | In FacilityLock::Parse of simdata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege… |
CVE-2022-42501 | Medium | 6.7 | 2022-12-16 | In HexString2Value of util.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with Sy… |
CVE-2022-20607 | High | 8.8 | 2022-12-16 | In the Pixel cellular firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with LTE authen… |
CVE-2022-20603 | High | 7.2 | 2022-12-16 | In SetDecompContextDb of RohcDeCompContextOfRbId.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code exe… |
CVE-2022-20600 | High | 7.8 | 2022-12-16 | In TBD of TBD, there is a possible out of bounds write due to memory corruption. This could lead to local escalation of privilege with System execution privile… |
CVE-2022-20596 | Medium | 6.7 | 2022-12-16 | In sendChunk of WirelessCharger.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege wi… |
CVE-2022-20594 | Medium | 6.7 | 2022-12-16 | In updateStart of WirelessCharger.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege… |
CVE-2022-20583 | Medium | 6.7 | 2022-12-16 | In ppmp_unprotect_mfcfw_buf of drm_fw.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privi… |
CVE-2022-20582 | High | 7.8 | 2022-12-16 | In ppmp_unprotect_mfcfw_buf of drm_fw.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privi… |
CVE-2022-20580 | Medium | 6.7 | 2022-12-16 | In ufdt_do_one_fixup of ufdt_overlay.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privil… |
CVE-2022-20579 | Medium | 6.7 | 2022-12-16 | In RadioImpl::setCdmaBroadcastConfig of ril_service_legacy.cpp, there is a possible stack clash leading to memory corruption. This could lead to local escalati… |
CVE-2022-20578 | Medium | 6.7 | 2022-12-16 | In RadioImpl::setGsmBroadcastConfig of ril_service_legacy.cpp, there is a possible stack clash leading to memory corruption. This could lead to local escalatio… |
CVE-2022-20577 | Medium | 6.7 | 2022-12-16 | In OemSimAuthRequest::encode of wlandata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pri… |
CVE-2022-20576 | Medium | 6.7 | 2022-12-16 | In externalOnRequest of rilapplication.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privi… |
CVE-2022-20569 | Medium | 6.7 | 2022-12-16 | In thermal_cooling_device_stats_update of thermal_sysfs.c, there is a possible out of bounds write due to improper input validation. This could lead to local e… |
CVE-2022-20564 | Medium | 6.7 | 2022-12-16 | In _ufdt_output_strtab_to_fdt of ufdt_convert.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation… |
CVE-2022-20549 | Medium | 6.7 | 2022-12-16 | In authToken2AidlVec of KeyMintUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of priv… |
CVE-2022-20548 | High | 7.8 | 2022-12-16 | In setParameter of EqualizerEffect.cpp, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privil… |
CVE-2022-20546 | Medium | 6.7 | 2022-12-16 | In getCurrentConfigImpl of Effect.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege… |
CVE-2022-20539 | Medium | 6.7 | 2022-12-16 | In parameterToHal of Effect.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the… |
CVE-2022-20526 | Low | 3.3 | 2022-12-16 | In CanvasContext::draw of CanvasContext.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of priv… |
CVE-2022-20509 | Medium | 6.7 | 2022-12-16 | In mapGrantorDescr of MessageQueueBase.h, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privile… |
CVE-2022-46393 | Critical | 9.8 | 2022-12-15 | An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0. There is a potential heap-based buffer overflow and heap-based buffer over-read in DTLS… |
CVE-2022-46700 | High | 8.8 | 2022-12-15 | A memory corruption issue was addressed with improved input validation. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 15.7.2 and iPadO… |
CVE-2022-46699 | High | 8.8 | 2022-12-15 | A memory corruption issue was addressed with improved state management. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 16.2 and iPadOS… |
CVE-2022-46697 | High | 7.8 | 2022-12-15 | An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in macOS Ventura 13.1. An app may be able to execute arbitrary c… |
CVE-2022-46696 | High | 8.8 | 2022-12-15 | A memory corruption issue was addressed with improved input validation. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 16.2 and iPadOS… |
CVE-2022-46694 | High | 7.8 | 2022-12-15 | An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 16.2 and iPadOS 16.2, iOS 15.7.2 and iPadOS 15.7.2, tvOS… |
CVE-2022-46693 | High | 7.8 | 2022-12-15 | An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in tvOS 16.2, iCloud for Windows 14.1, macOS Ventura 13.1, iOS 1… |
CVE-2022-46691 | High | 8.8 | 2022-12-15 | A memory consumption issue was addressed with improved memory handling. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 15.7.2 and iPadO… |
CVE-2022-46690 | High | 7.8 | 2022-12-15 | An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1, tvOS 16.2, watc… |
CVE-2022-42863 | High | 8.8 | 2022-12-15 | A memory corruption issue was addressed with improved state management. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 16.2 and iPadOS… |
CVE-2022-42850 | High | 7.8 | 2022-12-15 | The issue was addressed with improved memory handling. This issue is fixed in iOS 16.2 and iPadOS 16.2. An app may be able to execute arbitrary code with kerne… |
CVE-2022-42847 | High | 7.8 | 2022-12-15 | An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Ventura 13.1. An app may be able to execute arbitrary c… |
CVE-2022-42845 | High | 7.2 | 2022-12-15 | The issue was addressed with improved memory handling. This issue is fixed in tvOS 16.2, macOS Monterey 12.6.2, macOS Ventura 13.1, macOS Big Sur 11.7.2, iOS 1… |
CVE-2022-42842 | Critical | 9.8 | 2022-12-15 | The issue was addressed with improved memory handling. This issue is fixed in tvOS 16.2, macOS Monterey 12.6.2, macOS Ventura 13.1, macOS Big Sur 11.7.2, iOS 1… |
CVE-2022-42840 | High | 7.8 | 2022-12-15 | The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.2, macOS Ventura 13.1, macOS Big Sur 11.7.2, iOS 15.7.2 and i… |
CVE-2022-32860 | High | 7.8 | 2022-12-15 | An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5, macOS Big Sur 11.6.8… |
CVE-2022-22063 | High | 8.4 | 2022-12-15 | Memory corruption in Core due to improper configuration in boot remapper. |
CVE-2022-46341 | High | 8.8 | 2022-12-14 | A vulnerability was found in X.Org. This security flaw occurs because the handler for the XIPassiveUngrab request accesses out-of-bounds memory when invoked wi… |
CVE-2022-46340 | High | 8.8 | 2022-12-14 | A vulnerability was found in X.Org. This security flaw occurs becuase the swap handler for the XTestFakeInput request of the XTest extension may corrupt the st… |
CVE-2022-2601 | High | 8.6 | 2022-12-14 | A buffer overflow was found in grub_font_construct_glyph(). A malicious crafted pf2 font can lead to an overflow when calculating the max_glyph_size value, all… |
CVE-2022-31705 | High | 8.2 | 2022-12-14 | VMware ESXi, Workstation, and Fusion contain a heap out-of-bounds write vulnerability in the USB 2.0 controller (EHCI). A malicious actor with local administra… |
CVE-2022-44910 | High | 7.8 | 2022-12-14 | Binbloom 2.0 was discovered to contain a heap buffer overflow via the read_pointer function at /binbloom-master/src/helpers.c. |
CVE-2022-44898 | High | 7.8 | 2022-12-14 | The MsIo64.sys component in Asus Aura Sync through v1.07.79 does not properly validate input to IOCTL 0x80102040, 0x80102044, 0x80102050, and 0x80102054, allow… |
CVE-2022-44874 | Medium | 5.5 | 2022-12-13 | wasm3 commit 7890a2097569fde845881e0b352d813573e371f9 was discovered to contain a segmentation fault via the component op_CallIndirect at /m3_exec.h. |
CVE-2022-46348 | High | 7.8 | 2022-12-13 | A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.264), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions <… |
CVE-2022-46347 | High | 7.8 | 2022-12-13 | A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.264), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions <… |
CVE-2022-46346 | High | 7.8 | 2022-12-13 | A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.264), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions <… |
CVE-2022-46345 | High | 7.8 | 2022-12-13 | A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.264), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions <… |
CVE-2022-41286 | High | 7.8 | 2022-12-13 | A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), Teamcenter Visualization V… |
CVE-2022-41283 | High | 7.8 | 2022-12-13 | A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), Teamcenter Visualization V… |
CVE-2022-31699 | Low | 3.3 | 2022-12-13 | VMware ESXi contains a heap-overflow vulnerability. A malicious local actor with restricted privileges within a sandbox process may exploit this issue to achie… |
CVE-2022-31696 | High | 8.8 | 2022-12-13 | VMware ESXi contains a memory corruption vulnerability that exists in the way it handles a network socket. A malicious actor with local access to ESXi may expl… |
CVE-2022-25698 | High | 8.4 | 2022-12-13 | Memory corruption in SPI buses due to improper input validation while reading address configuration from spi buses in Snapdragon Mobile, Snapdragon Wearables |
CVE-2022-25697 | High | 8.4 | 2022-12-13 | Memory corruption in i2c buses due to improper input validation while reading address configuration from i2c driver in Snapdragon Mobile, Snapdragon Wearables |
CVE-2022-20469 | High | 8.8 | 2022-12-13 | In avct_lcb_msg_asmbl of avct_lcb_act.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privile… |
CVE-2022-20411 | High | 8.8 | 2022-12-13 | In avdt_msg_asmbl of avdt_msg.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over Bluetoot… |
CVE-2022-45693 | High | 7.5 | 2022-12-13 | Jettison before v1.5.2 was discovered to contain a stack overflow via the map parameter. This vulnerability allows attackers to cause a Denial of Service (DoS)… |
CVE-2022-45690 | High | 7.5 | 2022-12-13 | A stack overflow in the org.json.JSONTokener.nextValue::JSONTokener.java component of hutool-json v5.8.10 allows attackers to cause a Denial of Service (DoS) v… |
CVE-2022-45689 | High | 7.5 | 2022-12-13 | hutool-json v5.8.10 was discovered to contain an out of memory error. |
CVE-2022-45688 | High | 7.5 | 2022-12-13 | A stack overflow in the XML.toJSONObject component of hutool-json v5.8.10 allows attackers to cause a Denial of Service (DoS) via crafted JSON or XML data. |
CVE-2022-45685 | High | 7.5 | 2022-12-13 | A stack overflow in Jettison before v1.5.2 allows attackers to cause a Denial of Service (DoS) via crafted JSON data. |
CVE-2022-45979 | High | 7.5 | 2022-12-12 | Tenda AX12 v22.03.01.21_CN was discovered to contain a stack overflow via the ssid parameter at /goform/fast_setting_wifi_set . |
CVE-2022-45957 | High | 7.5 | 2022-12-12 | ZTE ZXHN-H108NS router with firmware version H108NSV1.0.7u_ZRD_GR2_A68 is vulnerable to remote stack buffer overflow. |
CVE-2022-44650 | High | 7.8 | 2022-12-12 | A memory corruption vulnerability in the Unauthorized Change Prevention service of Trend Micro Apex One and Apex One as a Service could allow a local attacker… |
CVE-2022-44649 | High | 7.8 | 2022-12-12 | An out-of-bounds access vulnerability in the Unauthorized Change Prevention service of Trend Micro Apex One and Apex One as a Service could allow a local attac… |
CVE-2022-37903 | High | 7.2 | 2022-12-12 | A vulnerability exists that allows an authenticated attacker to overwrite an arbitrary file with attacker-controlled content via the web interface. Successful… |
CVE-2022-20968 | High | 8.1 | 2022-12-12 | A vulnerability in the Cisco Discovery Protocol processing feature of Cisco IP Phone 7800 and 8800 Series firmware could allow an unauthenticated, adjacent att… |
CVE-2022-23478 | Critical | 9.1 | 2022-12-09 | xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 contain a Out… |
CVE-2022-45525 | High | 7.5 | 2022-12-08 | Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the downaction parameter at /goform/CertListInfo. |
CVE-2022-45524 | High | 7.5 | 2022-12-08 | Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the opttype parameter at /goform/IPSECsave. |
CVE-2022-45523 | High | 7.5 | 2022-12-08 | Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/L7Im. |