CWE-787 · Out-of-bounds Write (page 72)
Page 72 of 100 — CVEs classified under CWE-787, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-42079 | High | 7.5 | 2022-10-12 | Tenda AC1206 US_AC1206V1.0RTL_V15.03.06.23_multi_TD01 was discovered to contain a stack overflow via the function formWifiBasicSet. |
CVE-2022-41202 | High | 7.8 | 2022-10-11 | Due to lack of proper memory management, when a victim opens a manipulated Visual Design Stream (.vds, vds.x3d) file received from untrusted sources in SAP 3D… |
CVE-2022-41201 | High | 7.8 | 2022-10-11 | Due to lack of proper memory management, when a victim opens a manipulated Right Hemisphere Binary (.rh, rh.x3d) file received from untrusted sources in SAP 3D… |
CVE-2022-41200 | High | 7.8 | 2022-10-11 | Due to lack of proper memory management, when a victim opens a manipulated Scalable Vector Graphic (.svg, svg.x3d) file received from untrusted sources in SAP… |
CVE-2022-41199 | High | 7.8 | 2022-10-11 | Due to lack of proper memory management, when a victim opens a manipulated Open Inventor File (.iv, vrml.x3d) file received from untrusted sources in SAP 3D Vi… |
CVE-2022-41198 | High | 7.8 | 2022-10-11 | Due to lack of proper memory management, when a victim opens a manipulated SketchUp (.skp, SketchUp.x3d) file received from untrusted sources in SAP 3D Visual… |
CVE-2022-41196 | High | 7.8 | 2022-10-11 | Due to lack of proper memory management, when a victim opens a manipulated VRML Worlds (.wrl, vrml.x3d) file received from untrusted sources in SAP 3D Visual E… |
CVE-2022-41195 | High | 7.8 | 2022-10-11 | Due to lack of proper memory management, when a victim opens a manipulated EAAmiga Interchange File Format (.iff, 2d.x3d) file received from untrusted sources… |
CVE-2022-41193 | High | 7.8 | 2022-10-11 | Due to lack of proper memory management, when a victim opens a manipulated Encapsulated Post Script (.eps, ai.x3d) file received from untrusted sources in SAP… |
CVE-2022-41191 | High | 7.8 | 2022-10-11 | Due to lack of proper memory management, when a victim opens a manipulated Jupiter Tesselation (.jt, JTReader.x3d) file received from untrusted sources in SAP… |
CVE-2022-41190 | High | 7.8 | 2022-10-11 | Due to lack of proper memory management, when a victim opens a manipulated AutoCAD (.dxf, TeighaTranslator.exe) file received from untrusted sources in SAP 3D… |
CVE-2022-41189 | High | 7.8 | 2022-10-11 | Due to lack of proper memory management, when a victim opens a manipulated AutoCAD (.dwg, TeighaTranslator.exe) file received from untrusted sources in SAP 3D… |
CVE-2022-41187 | High | 7.8 | 2022-10-11 | Due to lack of proper memory management, when a victim opens a manipulated Wavefront Object (.obj, ObjTranslator.exe) file received from untrusted sources in S… |
CVE-2022-41186 | High | 7.8 | 2022-10-11 | Due to lack of proper memory management, when a victim opens manipulated Computer Graphics Metafile (.cgm, CgmCore.dll) file received from untrusted sources in… |
CVE-2022-41185 | High | 7.8 | 2022-10-11 | Due to lack of proper memory management, when a victim opens a manipulated Visual Design Stream (.vds, MataiPersistence.dll) file received from untrusted sourc… |
CVE-2022-41184 | High | 7.8 | 2022-10-11 | Due to lack of proper memory management, when a victim opens a manipulated Windows Cursor File (.cur, ico.x3d) file received from untrusted sources in SAP 3D V… |
CVE-2022-41180 | High | 7.8 | 2022-10-11 | Due to lack of proper memory management, when a victim opens a manipulated Portable Document Format (.pdf, PDFPublishing.dll) file received from untrusted sour… |
CVE-2022-41179 | High | 7.8 | 2022-10-11 | Due to lack of proper memory management, when a victim opens a manipulated Jupiter Tesselation (.jt, JtTranslator.exe) file received from untrusted sources in… |
CVE-2022-41177 | High | 7.8 | 2022-10-11 | Due to lack of proper memory management, when a victim opens a manipulated Iges Part and Assembly (.igs, .iges, CoreCadTranslator.exe) file received from untru… |
CVE-2022-41175 | High | 7.8 | 2022-10-11 | Due to lack of proper memory management, when a victim opens a manipulated Enhanced Metafile (.emf, emf.x3d) file received from untrusted sources in SAP 3D Vis… |
CVE-2022-41172 | High | 7.8 | 2022-10-11 | Due to lack of proper memory management, when a victim opens a manipulated AutoCAD (.dxf, TeighaTranslator.exe) file received from untrusted sources in SAP 3D… |
CVE-2022-41170 | High | 7.8 | 2022-10-11 | Due to lack of proper memory management, when a victim opens a manipulated CATIA4 Part (.model, CatiaTranslator.exe) file received from untrusted sources in SA… |
CVE-2022-41168 | High | 7.8 | 2022-10-11 | Due to lack of proper memory management, when a victim opens a manipulated CATIA5 Part (.catpart, CatiaTranslator.exe) file received from untrusted sources in… |
CVE-2022-41167 | High | 7.8 | 2022-10-11 | Due to lack of proper memory management, when a victim opens a manipulated AutoCAD (.dwg, TeighaTranslator.exe) file received from untrusted sources in SAP 3D… |
CVE-2022-39808 | High | 7.8 | 2022-10-11 | Due to lack of proper memory management, when a victim opens a manipulated Wavefront Object (.obj, ObjTranslator.exe) file received from untrusted sources in S… |
CVE-2022-39806 | High | 7.8 | 2022-10-11 | Due to lack of proper memory management, when a victim opens a manipulated SolidWorks Drawing (.slddrw, CoreCadTranslator.exe) file received from untrusted sou… |
CVE-2022-39805 | High | 7.8 | 2022-10-11 | Due to lack of proper memory management, when a victim opens a manipulated Computer Graphics Metafile (.cgm, CgmTranslator.exe) file received from untrusted so… |
CVE-2022-39804 | High | 7.8 | 2022-10-11 | Due to lack of proper memory management, when a victim opens a manipulated SolidWorks Part (.sldprt, CoreCadTranslator.exe) file received from untrusted source… |
CVE-2022-39803 | High | 7.8 | 2022-10-11 | Due to lack of proper memory management, when a victim opens a manipulated ACIS Part and Assembly (.sat, CoreCadTranslator.exe) file received from untrusted so… |
CVE-2022-20417 | High | 7.8 | 2022-10-11 | In audioTransportsToHal of HidlUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of priv… |
CVE-2022-20416 | High | 7.8 | 2022-10-11 | In audioTransportsToHal of HidlUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of priv… |
CVE-2022-37864 | High | 7.8 | 2022-10-11 | A vulnerability has been identified in Solid Edge (All Versions < SE2022MP9). The affected application contains an out of bounds write past the fixed-length he… |
CVE-2022-32234 | Critical | 9.8 | 2022-10-11 | An out of bounds write in hermes, while handling large arrays, prior to commit 06eaec767e376bfdb883d912cb15e987ddf2bda1 allows attackers to potentially execute… |
CVE-2022-32593 | Medium | 6.7 | 2022-10-07 | In vowe, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileg… |
CVE-2022-32592 | Medium | 6.7 | 2022-10-07 | In cpu dvfs, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution priv… |
CVE-2022-26475 | Medium | 6.7 | 2022-10-07 | In wlan, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileg… |
CVE-2021-40165 | High | 7.8 | 2022-10-07 | A maliciously crafted TIFF, PICT, TGA, or RLC file in Autodesk Image Processing component may be used to write beyond the allocated buffer while parsing TIFF… |
CVE-2021-40164 | High | 7.8 | 2022-10-07 | A heap-based buffer overflow could occur while parsing TIFF, PICT, TGA, or RLC files. This vulnerability may be exploited to execute arbitrary code. |
CVE-2021-40163 | High | 7.8 | 2022-10-07 | A Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL files through Autodesk Image Processing component. |
CVE-2022-39852 | High | 8.0 | 2022-10-07 | A heap-based overflow vulnerability in makeContactAGIF in libagifencoder.quram.so library prior to SMR Oct-2022 Release 1 allows attacker to perform code execu… |
CVE-2022-41528 | High | 8.8 | 2022-10-06 | TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the text parameter in the setSmsCfg function. |
CVE-2022-41527 | High | 8.8 | 2022-10-06 | TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the pppoeUser parameter in the setOpModeCfg function. |
CVE-2022-41526 | High | 8.8 | 2022-10-06 | TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the ip parameter in the setDiagnosisCfg function. |
CVE-2022-41524 | High | 8.8 | 2022-10-06 | TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the week, sTime, and eTime parameters in the setParentalR… |
CVE-2022-41523 | High | 8.8 | 2022-10-06 | TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the command parameter in the setTracerouteCfg function. |
CVE-2022-41522 | Critical | 9.8 | 2022-10-06 | TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an unauthenticated stack overflow via the "main" function. |
CVE-2022-41521 | High | 8.8 | 2022-10-06 | TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the sPort/ePort parameter in the setIpPortFilterRules fun… |
CVE-2022-41520 | High | 8.8 | 2022-10-06 | TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the File parameter in the UploadCustomModule function. |
CVE-2022-41517 | High | 8.8 | 2022-10-06 | TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain a stack overflow in the lang parameter in the setLanguageCfg function |
CVE-2022-40160 | Medium | 6.5 | 2022-10-06 | ** DISPUTED ** This record was originally reported by the oss-fuzz project who failed to consider the security context in which JXPath is intended to be used a… |
CVE-2022-40159 | Medium | 6.5 | 2022-10-06 | ** DISPUTED ** This record was originally reported by the oss-fuzz project who failed to consider the security context in which JXPath is intended to be used a… |
CVE-2022-3398 | High | 7.8 | 2022-10-06 | OMRON CX-Programmer 9.78 and prior is vulnerable to an Out-of-Bounds Write, which may allow an attacker to execute arbitrary code. |
CVE-2022-3397 | High | 7.8 | 2022-10-06 | OMRON CX-Programmer 9.78 and prior is vulnerable to an Out-of-Bounds Write, which may allow an attacker to execute arbitrary code. |
CVE-2022-3396 | High | 7.8 | 2022-10-06 | OMRON CX-Programmer 9.78 and prior is vulnerable to an Out-of-Bounds Write, which may allow an attacker to execute arbitrary code. |
CVE-2021-40556 | High | 8.8 | 2022-10-06 | A stack overflow vulnerability exists in the httpd service in ASUS RT-AX56U Router Version 3.0.0.4.386.44266. This vulnerability is caused by the strcat functi… |
CVE-2022-41301 | High | 7.8 | 2022-10-03 | A maliciously crafted PKT file when consumed through SubassemblyComposer.exe application could lead to memory corruption vulnerability by read access violation… |
CVE-2022-33890 | High | 7.8 | 2022-10-03 | A maliciously crafted PCT or DWF file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation… |
CVE-2022-33889 | High | 7.8 | 2022-10-03 | A maliciously crafted GIF or JPEG files when parsed through Autodesk Design Review 2018, and AutoCAD 2023 and 2022 could be used to write beyond the allocated… |
CVE-2022-33888 | High | 7.8 | 2022-10-03 | A malicious crafted Dwg2Spd file when processed through Autodesk DWG application could lead to memory corruption vulnerability by write access violation. This… |
CVE-2022-33885 | High | 7.8 | 2022-10-03 | A maliciously crafted X_B, CATIA, and PDF file when parsed through Autodesk AutoCAD 2023 and 2022 can be used to write beyond the allocated buffer. This vulner… |
CVE-2022-33883 | High | 7.8 | 2022-10-03 | A malicious crafted file consumed through Moldflow Synergy, Moldflow Adviser, Moldflow Communicator, and Advanced Material Exchange applications could lead to… |
CVE-2022-41430 | High | 8.8 | 2022-10-03 | Bento4 v1.6.0-639 was discovered to contain a heap overflow via the AP4_BitReader::ReadBit function in mp4mux. |
CVE-2022-41429 | High | 8.8 | 2022-10-03 | Bento4 v1.6.0-639 was discovered to contain a heap overflow via the AP4_Atom::TypeFromString function in mp4tag. |
CVE-2022-41428 | High | 8.8 | 2022-10-03 | Bento4 v1.6.0-639 was discovered to contain a heap overflow via the AP4_BitReader::ReadBits function in mp4mux. |
CVE-2022-41420 | Medium | 5.5 | 2022-10-03 | nasm v2.16 was discovered to contain a stack overflow in the Ndisasm component |
CVE-2022-42002 | Critical | 9.1 | 2022-10-01 | SonicJS through 0.6.0 allows file overwrite. It has the following mutations that are used for updating files: fileCreate and fileUpdate. Both of these mutation… |
CVE-2022-20769 | High | 7.4 | 2022-09-30 | A vulnerability in the authentication functionality of Cisco Wireless LAN Controller (WLC) AireOS Software could allow an unauthenticated, adjacent attacker to… |
CVE-2022-41844 | Medium | 5.5 | 2022-09-30 | An issue was discovered in Xpdf 4.04. There is a crash in XRef::fetch(int, int, Object*, int) in xpdf/XRef.cc, a different vulnerability than CVE-2018-16369 an… |
CVE-2022-41842 | Medium | 5.5 | 2022-09-30 | An issue was discovered in Xpdf 4.04. There is a crash in gfseek(_IO_FILE*, long, int) in goo/gfile.cc. |
CVE-2022-40363 | Medium | 5.5 | 2022-09-29 | A buffer overflow in the component nfc_device_load_mifare_ul_data of Flipper Devices Inc., Flipper Zero before v0.65.2 allows attackers to cause a Denial of Se… |
CVE-2016-2338 | Critical | 9.8 | 2022-09-29 | An exploitable heap overflow vulnerability exists in the Psych::Emitter start_document function of Ruby. In Psych::Emitter start_document function heap buffer… |
CVE-2022-39173 | High | 7.5 | 2022-09-29 | In wolfSSL before 5.5.1, malicious clients can cause a buffer overflow during a TLS 1.3 handshake. This occurs when an attacker supposedly resumes a previous T… |
CVE-2022-34424 | High | 7.5 | 2022-09-28 | Networking OS10, versions 10.5.1.x, 10.5.2.x, and 10.5.3.x contain a vulnerability that could allow an attacker to cause a system crash by running particular s… |
CVE-2022-1270 | High | 7.8 | 2022-09-28 | In GraphicsMagick, a heap buffer overflow was found when parsing MIFF. |
CVE-2022-40942 | Critical | 9.8 | 2022-09-28 | Tenda TX3 US_TX3V1.0br_V16.03.13.11 is vulnerable to stack overflow via compare_parentcontrol_time. |
CVE-2022-3349 | Medium | 6.8 | 2022-09-28 | A vulnerability was found in Sony PS4 and PS5. It has been classified as critical. This affects the function UVFAT_readupcasetable of the component exFAT Handl… |
CVE-2022-3324 | High | 7.8 | 2022-09-27 | Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0598. |
CVE-2022-38932 | High | 7.8 | 2022-09-27 | readelf in ToaruOS 2.0.1 has a global overflow allowing RCE when parsing a crafted ELF file. |
CVE-2022-23006 | Low | 1.8 | 2022-09-27 | A stack-based buffer overflow vulnerability was found on Western Digital My Cloud Home, My Cloud Home Duo, and SanDisk ibi that could allow an attacker accessi… |
CVE-2022-40784 | High | 8.8 | 2022-09-26 | Unlimited strcpy on user input when setting a locale file leads to stack buffer overflow in mIPC camera firmware 5.3.1.2003161406. |
CVE-2022-3200 | High | 8.8 | 2022-09-26 | Heap buffer overflow in Internals in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… |
CVE-2022-3195 | High | 8.8 | 2022-09-26 | Out of bounds write in Storage in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML p… |
CVE-2022-3052 | High | 8.8 | 2022-09-26 | Heap buffer overflow in Window Manager in Google Chrome on Chrome OS, Lacros prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in… |
CVE-2022-3051 | High | 8.8 | 2022-09-26 | Heap buffer overflow in Exosphere in Google Chrome on Chrome OS, Lacros prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in spec… |
CVE-2022-3050 | High | 8.8 | 2022-09-26 | Heap buffer overflow in WebUI in Google Chrome on Chrome OS prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specific UI inte… |
CVE-2022-3045 | High | 8.8 | 2022-09-26 | Insufficient validation of untrusted input in V8 in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a… |
CVE-2022-3043 | High | 8.8 | 2022-09-26 | Heap buffer overflow in Screen Capture in Google Chrome on Chrome OS prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specifi… |
CVE-2022-3040 | High | 8.8 | 2022-09-26 | Use after free in Layout in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-2853 | High | 8.8 | 2022-09-26 | Heap buffer overflow in Downloads in Google Chrome on Android prior to 104.0.5112.101 allowed a remote attacker who had compromised the renderer process to pot… |
CVE-2022-3296 | High | 7.8 | 2022-09-25 | Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0577. |
CVE-2022-22629 | High | 8.8 | 2022-09-23 | A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.3, Safari 15.4, watchOS 8.5, iTunes 12.12.3 for W… |
CVE-2022-40107 | High | 7.5 | 2022-09-23 | Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the formexeCommand function. This vulnerability allows attackers to cause a Denial of S… |
CVE-2022-40106 | High | 7.5 | 2022-09-23 | Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the set_local_time function. This vulnerability allows attackers to cause a Denial of S… |
CVE-2022-40105 | High | 7.5 | 2022-09-23 | Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the formWifiMacFilterGet function. This vulnerability allows attackers to cause a Denia… |
CVE-2022-40104 | High | 7.5 | 2022-09-23 | Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the formwrlSSIDget function. This vulnerability allows attackers to cause a Denial of S… |
CVE-2022-40103 | Medium | 5.5 | 2022-09-23 | Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the formSetAutoPing function. This vulnerability allows attackers to cause a Denial of… |
CVE-2022-40102 | High | 7.5 | 2022-09-23 | Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the formwrlSSIDset function. This vulnerability allows attackers to cause a Denial of S… |
CVE-2022-40101 | High | 7.5 | 2022-09-23 | Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the formWifiMacFilterSet function. This vulnerability allows attackers to cause a Denia… |
CVE-2022-32843 | High | 7.1 | 2022-09-23 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Security Update 2022-005 Catalina, macOS Big Sur 11.6.8, macOS… |
CVE-2022-32821 | High | 7.8 | 2022-09-23 | A memory corruption issue was addressed with improved validation. This issue is fixed in watchOS 8.7, tvOS 15.6, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5… |