CWE-787 · Out-of-bounds Write (page 76)
Page 76 of 100 — CVEs classified under CWE-787, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-37095 | Critical | 9.8 | 2022-08-25 | H3C H200 H200V100R004 was discovered to contain a stack overflow via the function UpdateWanParams. |
CVE-2022-37094 | Critical | 9.8 | 2022-08-25 | H3C H200 H200V100R004 was discovered to contain a stack overflow via the function Edit_BasicSSID_5G. |
CVE-2022-37093 | Critical | 9.8 | 2022-08-25 | H3C H200 H200V100R004 was discovered to contain a stack overflow via the function AddMacList. |
CVE-2022-37092 | Critical | 9.8 | 2022-08-25 | H3C H200 H200V100R004 was discovered to contain a stack overflow via the function SetAPWifiorLedInfoById. |
CVE-2022-37091 | Critical | 9.8 | 2022-08-25 | H3C H200 H200V100R004 was discovered to contain a stack overflow via the function EditWlanMacList. |
CVE-2022-37090 | Critical | 9.8 | 2022-08-25 | H3C H200 H200V100R004 was discovered to contain a stack overflow via the function Edit_BasicSSID. |
CVE-2022-37089 | Critical | 9.8 | 2022-08-25 | H3C H200 H200V100R004 was discovered to contain a stack overflow via the function EditMacList. |
CVE-2022-37088 | Critical | 9.8 | 2022-08-25 | H3C H200 H200V100R004 was discovered to contain a stack overflow via the function SetAP5GWifiById. |
CVE-2022-37087 | Critical | 9.8 | 2022-08-25 | H3C H200 H200V100R004 was discovered to contain a stack overflow via the function SetMobileAPInfoById. |
CVE-2022-37086 | Critical | 9.8 | 2022-08-25 | H3C H200 H200V100R004 was discovered to contain a stack overflow via the function Asp_SetTimingtimeWifiAndLed. |
CVE-2022-37085 | Critical | 9.8 | 2022-08-25 | H3C H200 H200V100R004 was discovered to contain a stack overflow via the AddWlanMacList function. |
CVE-2022-37084 | High | 7.8 | 2022-08-25 | TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the sPort parameter at the addEffect function. |
CVE-2022-37080 | High | 7.8 | 2022-08-25 | TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the command parameter at setting/setTracerouteCfg. |
CVE-2022-37078 | High | 7.8 | 2022-08-25 | TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a command injection vulnerability via the lang parameter at /setting/setLanguageCfg. |
CVE-2022-37077 | High | 7.8 | 2022-08-25 | TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the pppoeUser parameter. |
CVE-2022-37075 | High | 7.8 | 2022-08-25 | TOTOLink A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the ip parameter in the function setDiagnosisCfg. |
CVE-2022-37074 | High | 7.8 | 2022-08-25 | H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function switch_debug_info_set. |
CVE-2022-37073 | Critical | 9.8 | 2022-08-25 | H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateWanModeMulti. |
CVE-2022-37072 | Critical | 9.8 | 2022-08-25 | H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateWanLinkspyMulti. |
CVE-2022-37071 | Critical | 9.8 | 2022-08-25 | H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateOne2One. |
CVE-2022-37069 | Critical | 9.8 | 2022-08-25 | H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateSnat. |
CVE-2022-37068 | Critical | 9.8 | 2022-08-25 | H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateMacCloneFinal. |
CVE-2022-37067 | Critical | 9.8 | 2022-08-25 | H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateWanParamsMulti. |
CVE-2022-37066 | Critical | 9.8 | 2022-08-25 | H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateDDNS. |
CVE-2022-36520 | Critical | 9.8 | 2022-08-25 | H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function DEleteusergroup. |
CVE-2022-36519 | Critical | 9.8 | 2022-08-25 | H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function AddWlanMacList. |
CVE-2022-36518 | Critical | 9.8 | 2022-08-25 | H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function EditWlanMacList. |
CVE-2022-36517 | Critical | 9.8 | 2022-08-25 | H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function debug_wlan_advance. |
CVE-2022-36516 | Critical | 9.8 | 2022-08-25 | H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function ap_version_check. |
CVE-2022-36515 | Critical | 9.8 | 2022-08-25 | H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function addactionlist. |
CVE-2022-36514 | Critical | 9.8 | 2022-08-25 | H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function WanModeSetMultiWan. |
CVE-2022-36513 | Critical | 9.8 | 2022-08-25 | H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function edditactionlist. |
CVE-2022-36511 | Critical | 9.8 | 2022-08-25 | H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function EditApAdvanceInfo. |
CVE-2022-36508 | High | 7.8 | 2022-08-25 | H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function SetAPInfoById. |
CVE-2022-36507 | High | 7.8 | 2022-08-25 | H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function AddWlanMacList. |
CVE-2022-36506 | High | 7.8 | 2022-08-25 | H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function SetMacAccessMode. |
CVE-2022-36505 | High | 7.8 | 2022-08-25 | H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function EDitusergroup. |
CVE-2022-36504 | High | 7.8 | 2022-08-25 | H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function Edit_BasicSSID. |
CVE-2022-36503 | High | 7.8 | 2022-08-25 | H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function UpdateMacClone. |
CVE-2022-36502 | High | 7.8 | 2022-08-25 | H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function UpdateWanParams. |
CVE-2022-36501 | High | 7.8 | 2022-08-25 | H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function UpdateSnat. |
CVE-2022-36500 | High | 7.8 | 2022-08-25 | H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function EditWlanMacList. |
CVE-2022-36499 | High | 7.8 | 2022-08-25 | H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function DEleteusergroup. |
CVE-2022-36498 | High | 7.8 | 2022-08-25 | H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function Asp_SetTimingtimeWifiAndLed. |
CVE-2022-36497 | High | 7.8 | 2022-08-25 | H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function Edit_BasicSSID_5G. |
CVE-2022-36496 | High | 7.8 | 2022-08-25 | H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function SetMobileAPInfoById. |
CVE-2022-36495 | High | 7.8 | 2022-08-25 | H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function addactionlist. |
CVE-2022-36494 | High | 7.8 | 2022-08-25 | H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function edditactionlist. |
CVE-2022-36493 | High | 7.8 | 2022-08-25 | H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function SetAPWifiorLedInfoById. |
CVE-2022-36492 | High | 7.8 | 2022-08-25 | H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function AddMacList. |
CVE-2022-36491 | High | 7.8 | 2022-08-25 | H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function UpdateIpv6Params. |
CVE-2022-36490 | High | 7.8 | 2022-08-25 | H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function EditMacList. |
CVE-2022-36489 | High | 7.8 | 2022-08-25 | H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function EnableIpv6. |
CVE-2022-36488 | High | 7.8 | 2022-08-25 | TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a stack overflow via the sPort parameter in the function setIpPortFilterRules. |
CVE-2022-36484 | High | 7.8 | 2022-08-25 | TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a stack overflow via the function setDiagnosisCfg. |
CVE-2022-36483 | High | 7.8 | 2022-08-25 | TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a stack overflow via the pppoeUser parameter. |
CVE-2022-36482 | High | 7.8 | 2022-08-25 | TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a command injection vulnerability via the lang parameter in the function setLanguageCfg. |
CVE-2022-36480 | High | 7.8 | 2022-08-25 | TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a stack overflow via the command parameter in the function setTracerouteCfg. |
CVE-2022-36478 | High | 7.8 | 2022-08-25 | H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function Edit_BasicSSID. |
CVE-2022-36477 | High | 7.8 | 2022-08-25 | H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function AddWlanMacList. |
CVE-2022-36475 | High | 7.8 | 2022-08-25 | H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function AddMacList. |
CVE-2022-36474 | High | 7.8 | 2022-08-25 | H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function WlanWpsSet. |
CVE-2022-36473 | High | 7.8 | 2022-08-25 | H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function Edit_BasicSSID_5G. |
CVE-2022-36472 | High | 7.8 | 2022-08-25 | H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function SetMobileAPInfoById. |
CVE-2022-36471 | High | 7.8 | 2022-08-25 | H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function SetMacAccessMode. |
CVE-2022-36470 | High | 7.8 | 2022-08-25 | H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function SetAP5GWifiById. |
CVE-2022-36469 | High | 7.8 | 2022-08-25 | H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function SetAPWifiorLedInfoById. |
CVE-2022-36468 | High | 7.8 | 2022-08-25 | H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function Asp_SetTimingtimeWifiAndLed. |
CVE-2022-36467 | High | 7.8 | 2022-08-25 | H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function EditMacList.d. |
CVE-2022-36466 | High | 7.8 | 2022-08-25 | TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the ip parameter in the function setDiagnosisCfg. |
CVE-2022-36465 | High | 7.8 | 2022-08-25 | TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the pppoeUser parameter. |
CVE-2022-36464 | High | 7.8 | 2022-08-25 | TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the sPort parameter in the function setIpPortFilterRules. |
CVE-2022-36463 | High | 7.8 | 2022-08-25 | TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the command parameter in the function setTracerouteCfg. |
CVE-2022-36462 | High | 7.8 | 2022-08-25 | TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the lang parameter in the function setLanguageCfg. |
CVE-2022-32894 | High | 7.8 | 2022-08-24 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6.1 and iPadOS 15.6.1, macOS Monterey 12.5.1. An applic… |
CVE-2022-32893 | High | 8.8 | 2022-08-24 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6.1 and iPadOS 15.6.1, macOS Monterey 12.5.1, Safari 15… |
CVE-2022-32837 | High | 7.8 | 2022-08-24 | This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.5, tvOS 15.6, iOS 15.6 and iPadOS 15.6. An app may be able to cause une… |
CVE-2022-32813 | High | 7.8 | 2022-08-24 | The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.5, macOS Big Sur 11.6.8, Security Update 2022-005 Catalina, iOS… |
CVE-2022-32812 | High | 7.8 | 2022-08-24 | The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.5, macOS Big Sur 11.6.8, Security Update 2022-005 Catalina. An… |
CVE-2022-32810 | High | 7.8 | 2022-08-24 | The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.5, watchOS 8.7, iOS 15.6 and iPadOS 15.6. An app may be able to… |
CVE-2022-32793 | High | 7.5 | 2022-08-24 | Multiple out-of-bounds write issues were addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.5, watchOS 8.7, tvOS 15.6, iOS 15.6… |
CVE-2021-4214 | Medium | 5.5 | 2022-08-24 | A heap overflow flaw was found in libpngs' pngimage.c program. This flaw allows an attacker with local network access to pass a specially crafted PNG file to t… |
CVE-2021-4040 | Medium | 5.3 | 2022-08-24 | A flaw was found in AMQ Broker. This issue can cause a partial interruption to the availability of AMQ Broker via an Out of memory (OOM) condition. This flaw a… |
CVE-2022-25903 | High | 7.5 | 2022-08-24 | The package opcua from 0.0.0 are vulnerable to Denial of Service (DoS) via the ExtensionObjects and Variants objects, when it allows unlimited nesting levels… |
CVE-2021-3839 | High | 7.5 | 2022-08-23 | A flaw was found in the vhost library in DPDK. Function vhost_user_set_inflight_fd() does not validate `msg->payload.inflight.num_queues`, possibly causing out… |
CVE-2021-20298 | High | 7.5 | 2022-08-23 | A flaw was found in OpenEXR's B44Compressor. This flaw allows an attacker who can submit a crafted file to be processed by OpenEXR, to exhaust all memory acces… |
CVE-2022-26061 | High | 7.8 | 2022-08-22 | A heap-based buffer overflow vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execu… |
CVE-2022-25972 | High | 7.8 | 2022-08-22 | An out-of-bounds write vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution… |
CVE-2022-36233 | Medium | 5.5 | 2022-08-19 | Tenda AC9 V15.03.2.13 is vulnerable to Buffer Overflow via httpd, form_fast_setting_wifi_set. httpd. |
CVE-2022-37175 | Critical | 9.8 | 2022-08-19 | Tenda ac15 firmware V15.03.05.18 httpd server has stack buffer overflow in /goform/formWifiBasicSet. |
CVE-2022-36947 | Critical | 9.8 | 2022-08-18 | Unsafe Parsing of a PNG tRNS chunk in FastStone Image Viewer through 7.5 results in a stack buffer overflow. |
CVE-2022-37049 | High | 7.8 | 2022-08-18 | The component tcpprep in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer overflow in parse_mpls at common/get.c:150. NOTE: this is different fro… |
CVE-2022-37048 | High | 7.8 | 2022-08-18 | The component tcprewrite in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer overflow in get_l2len_protocol at common/get.c:344. NOTE: this is di… |
CVE-2022-37047 | High | 7.8 | 2022-08-18 | The component tcprewrite in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer overflow in get_ipv6_next at common/get.c:713. NOTE: this is differe… |
CVE-2022-21172 | Medium | 6.7 | 2022-08-18 | Out of bounds write for some Intel(R) PROSet/Wireless WiFi products may allow a privileged user to potentially enable escalation of privilege via local access. |
CVE-2021-33060 | High | 7.8 | 2022-08-18 | Out-of-bounds write in the BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via local a… |
CVE-2022-2869 | Medium | 5.5 | 2022-08-17 | libtiff's tiffcrop tool has a uint32_t underflow which leads to out of bounds read and write in the extractContigSamples8bits routine. An attacker who supplies… |
CVE-2022-2867 | Medium | 5.5 | 2022-08-17 | libtiff's tiffcrop utility has a uint32_t underflow that can lead to out of bounds read and write. An attacker who supplies a crafted file to tiffcrop (likely… |
CVE-2022-36191 | Medium | 5.5 | 2022-08-17 | A heap-buffer-overflow had occurred in function gf_isom_dovi_config_get of isomedia/avc_ext.c:2490, as demonstrated by MP4Box. This vulnerability was fixed in… |
CVE-2022-38238 | High | 7.8 | 2022-08-16 | XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::lookChar() at /xpdf/Stream.cc. |