CWE-787 · Out-of-bounds Write (page 78)
Page 78 of 100 — CVEs classified under CWE-787, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-40861 | High | 7.2 | 2022-09-23 | Tenda AC18 router V15.03.05.19 contains a stack overflow vulnerability in the formSetQosBand->FUN_0007db78 function with the request /goform/SetNetControlList/ |
CVE-2022-40855 | Critical | 9.8 | 2022-09-23 | Tenda W20E router V15.11.0.6 contains a stack overflow in the function formSetPortMapping with post request 'goform/setPortMapping/'. This vulnerability allows… |
CVE-2022-40854 | Critical | 9.8 | 2022-09-23 | Tenda AC18 router contained a stack overflow vulnerability in /goform/fast_setting_wifi_set |
CVE-2022-40851 | Critical | 9.8 | 2022-09-23 | Tenda AC15 V15.03.05.19 contained a stack overflow via the function fromAddressNat. |
CVE-2022-40869 | Critical | 9.8 | 2022-09-23 | Tenda AC15 and AC18 routers V15.03.05.19 contain stack overflow vulnerabilities in the function fromDhcpListClient with a combined parameter "list*" ("%s%d","l… |
CVE-2022-40865 | Critical | 9.8 | 2022-09-23 | Tenda AC15 and AC18 routers V15.03.05.19 contain heap overflow vulnerabilities in the function setSchedWifi with the request /goform/openSchedWifi/ |
CVE-2022-40864 | Critical | 9.8 | 2022-09-23 | Tenda AC15 and AC18 routers V15.03.05.19 contain stack overflow vulnerabilities in the function setSmartPowerManagement with the request /goform/PowerSaveSet |
CVE-2022-40862 | Critical | 9.8 | 2022-09-23 | Tenda AC15 and AC18 router V15.03.05.19 contains stack overflow vulnerability in the function fromNatStaticSetting with the request /goform/NatStaticSetting |
CVE-2022-40860 | Critical | 9.8 | 2022-09-23 | Tenda AC15 router V15.03.05.19 contains a stack overflow vulnerability in the function formSetQosBand->FUN_0007dd20 with request /goform/SetNetControlList |
CVE-2022-40853 | Critical | 9.8 | 2022-09-23 | Tenda AC15 router V15.03.05.19 contains a stack overflow via the list parameter at /goform/fast_setting_wifi_set |
CVE-2022-2347 | High | 7.7 | 2022-09-23 | There exists an unchecked length field in UBoot. The U-Boot DFU implementation does not bound the length field in USB DFU download setup packets, and it does n… |
CVE-2022-37235 | Critical | 9.8 | 2022-09-23 | Netgear Nighthawk AC1900 Smart WiFi Dual Band Gigabit Router R7000-V1.0.11.134_10.2.119 is vulnerable to Buffer Overflow via the wl binary in firmware. There i… |
CVE-2022-37232 | Critical | 9.8 | 2022-09-23 | Netgear N300 wireless router wnr2000v4-V1.0.0.70 is vulnerable to Buffer Overflow via uhttpd. There is a stack overflow vulnerability caused by strcpy. |
CVE-2022-30426 | High | 7.8 | 2022-09-23 | There is a stack buffer overflow vulnerability, which could lead to arbitrary code execution in UEFI DXE driver on some Acer products. An attack could exploit… |
CVE-2022-31937 | Critical | 9.8 | 2022-09-22 | Netgear N300 wireless router wnr2000v4-V1.0.0.70 was discovered to contain a stack overflow via strcpy in uhttpd. |
CVE-2022-37234 | High | 7.8 | 2022-09-22 | Netgear Nighthawk AC1900 Smart WiFi Dual Band Gigabit Router R7000-V1.0.11.134_10.2.119 is vulnerable to Buffer Overflow via the wl binary in firmware. There i… |
CVE-2022-35039 | Medium | 6.5 | 2022-09-22 | OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6e20a0. |
CVE-2022-35038 | Medium | 6.5 | 2022-09-22 | OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b064d. |
CVE-2022-35037 | Medium | 6.5 | 2022-09-22 | OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6adb1e. |
CVE-2022-35036 | Medium | 6.5 | 2022-09-22 | OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6e1fc8. |
CVE-2022-35035 | Medium | 6.5 | 2022-09-22 | OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b559f. |
CVE-2022-35034 | Medium | 6.5 | 2022-09-22 | OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6e7e3d. |
CVE-2022-35031 | Medium | 6.5 | 2022-09-22 | OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x703969. |
CVE-2022-35030 | Medium | 6.5 | 2022-09-22 | OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x4fe954. |
CVE-2022-35029 | Medium | 6.5 | 2022-09-22 | OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x6babea. |
CVE-2022-35028 | Medium | 6.5 | 2022-09-22 | OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x4fbbb6. |
CVE-2022-35027 | Medium | 6.5 | 2022-09-22 | OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x4fe9a7. |
CVE-2022-35026 | Medium | 6.5 | 2022-09-22 | OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x4fbc0b. |
CVE-2022-35025 | Medium | 6.5 | 2022-09-22 | OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x5266a8. |
CVE-2022-35023 | Medium | 6.5 | 2022-09-22 | OTFCC commit 617837b was discovered to contain a segmentation violation via /lib/x86_64-linux-gnu/libc.so.6+0xbb384. |
CVE-2022-35022 | Medium | 6.5 | 2022-09-22 | OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x6badae. |
CVE-2022-35895 | High | 8.2 | 2022-09-21 | An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. The FwBlockSericceSmm driver does not properly validate input parameters for a softwar… |
CVE-2022-41220 | Critical | 9.8 | 2022-09-21 | md2roff 1.9 has a stack-based buffer overflow via a Markdown file, a different vulnerability than CVE-2022-34913. NOTE: the vendor's position is that the produ… |
CVE-2022-35090 | Medium | 5.5 | 2022-09-21 | SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via __asan_memcpy at /asan/asan_interceptors_memintrinsics.cpp:. |
CVE-2022-35088 | Medium | 5.5 | 2022-09-21 | SWFTools commit 772e55a2 was discovered to contain a heap buffer-overflow via getGifDelayTime at /home/bupt/Desktop/swftools/src/src/gif2swf.c. |
CVE-2022-35087 | Medium | 5.5 | 2022-09-21 | SWFTools commit 772e55a2 was discovered to contain a segmentation violation via MovieAddFrame at /src/gif2swf.c. |
CVE-2022-35086 | Medium | 5.5 | 2022-09-21 | SWFTools commit 772e55a2 was discovered to contain a segmentation violation via /multiarch/memmove-vec-unaligned-erms.S. |
CVE-2022-32917 | High | 7.8 | 2022-09-20 | The issue was addressed with improved bounds checks. This issue is fixed in macOS Monterey 12.6, iOS 15.7 and iPadOS 15.7, iOS 16, macOS Big Sur 11.7. An appli… |
CVE-2022-32911 | High | 7.8 | 2022-09-20 | The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6, iOS 15.7 and iPadOS 15.7, iOS 16, macOS Big Sur 11.7. An app… |
CVE-2022-32908 | High | 7.8 | 2022-09-20 | A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.6, iOS 15.7 and iPadOS 15.7, iOS 16, macOS Big… |
CVE-2022-32886 | High | 8.8 | 2022-09-20 | A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Safari 16, iOS 16, iOS 15.7 and iPadOS 15.7. Processing maliciously… |
CVE-2022-32863 | Critical | 9.8 | 2022-09-20 | A memory corruption issue was addressed with improved state management. This issue is fixed in Safari 15.6, macOS Monterey 12.5. Processing maliciously crafted… |
CVE-2022-40008 | Critical | 9.8 | 2022-09-20 | SWFTools commit 772e55a was discovered to contain a heap-buffer overflow via the function readU8 at /lib/ttf.c. |
CVE-2020-36602 | Medium | 6.1 | 2022-09-20 | There is an out-of-bounds read and write vulnerability in some headset products. An unauthenticated attacker gets the device physically and crafts malformed me… |
CVE-2022-40262 | High | 8.2 | 2022-09-20 | A potential attacker can execute an arbitrary code at the time of the PEI phase and influence the subsequent boot stages. This can lead to the mitigations bypa… |
CVE-2022-40250 | High | 8.8 | 2022-09-20 | An attacker can exploit this vulnerability to elevate privileges from ring 0 to ring -2, execute arbitrary code in System Management Mode - an environment more… |
CVE-2022-40246 | High | 7.2 | 2022-09-20 | A potential attacker can write one byte by arbitrary address at the time of the PEI phase (only during S3 resume boot mode) and influence the subsequent boot s… |
CVE-2022-26873 | High | 8.2 | 2022-09-20 | A potential attacker can execute an arbitrary code at the time of the PEI phase and influence the subsequent boot stages. This can lead to the mitigations bypa… |
CVE-2022-35070 | Medium | 6.5 | 2022-09-19 | OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x65fc97. |
CVE-2022-35069 | Medium | 6.5 | 2022-09-19 | OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b544e. |
CVE-2022-35068 | Medium | 6.5 | 2022-09-19 | OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6e420d. |
CVE-2022-35067 | Medium | 6.5 | 2022-09-19 | OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6e41b0. |
CVE-2022-35066 | Medium | 6.5 | 2022-09-19 | OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6e41b8. |
CVE-2022-35065 | Medium | 6.5 | 2022-09-19 | OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x65f724. |
CVE-2022-35064 | Medium | 6.5 | 2022-09-19 | OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x4adcdb in __asan_memset. |
CVE-2022-35063 | Medium | 6.5 | 2022-09-19 | OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6e41a8. |
CVE-2022-35062 | Medium | 6.5 | 2022-09-19 | OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6c0bc3. |
CVE-2022-35061 | Medium | 6.5 | 2022-09-19 | OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6e412a. |
CVE-2022-35060 | Medium | 6.5 | 2022-09-19 | OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6c0a32. |
CVE-2022-3213 | Medium | 5.5 | 2022-09-19 | A heap buffer overflow issue was found in ImageMagick. When an application processes a malformed TIFF file, it could lead to undefined behavior or a crash caus… |
CVE-2022-35701 | High | 7.8 | 2022-09-19 | Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code exe… |
CVE-2022-35700 | High | 7.8 | 2022-09-19 | Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code exe… |
CVE-2022-35699 | High | 7.8 | 2022-09-19 | Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code exe… |
CVE-2022-40076 | High | 7.5 | 2022-09-19 | Tenda AC21 V16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: fromSetWifiGusetBasic. |
CVE-2022-40075 | High | 7.5 | 2022-09-19 | Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, form_fast_setting_wifi_set. |
CVE-2022-40074 | High | 7.5 | 2022-09-19 | Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, setSchedWifi. |
CVE-2022-40073 | High | 7.5 | 2022-09-19 | Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, saveParentControlInfo. |
CVE-2022-40072 | High | 7.5 | 2022-09-19 | Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: setSmartPowerManagement. |
CVE-2022-40071 | High | 7.5 | 2022-09-19 | Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, formSetDeviceName. |
CVE-2022-40070 | High | 7.5 | 2022-09-19 | Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via bin/httpd, function: formSetFirewallCfg. |
CVE-2022-40069 | High | 7.5 | 2022-09-19 | ]Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: fromSetSysTime. |
CVE-2022-40068 | High | 7.5 | 2022-09-19 | Tenda AC21 V16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: formSetQosBand. |
CVE-2022-40067 | High | 7.5 | 2022-09-19 | Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: formSetVirtualSer. |
CVE-2022-3234 | High | 7.8 | 2022-09-17 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0483. |
CVE-2022-35939 | High | 7.0 | 2022-09-16 | TensorFlow is an open source platform for machine learning. The `ScatterNd` function takes an input argument that determines the indices of of the output tenso… |
CVE-2022-38433 | High | 7.8 | 2022-09-16 | Adobe Photoshop versions 22.5.8 (and earlier) and 23.4.2 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrar… |
CVE-2022-38432 | High | 7.8 | 2022-09-16 | Adobe Photoshop versions 22.5.8 (and earlier) and 23.4.2 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrar… |
CVE-2022-38415 | High | 7.8 | 2022-09-16 | Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary c… |
CVE-2022-38414 | High | 7.8 | 2022-09-16 | Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary c… |
CVE-2022-38413 | High | 7.8 | 2022-09-16 | Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary c… |
CVE-2022-38405 | High | 7.8 | 2022-09-16 | Adobe InCopy version 17.3 (and earlier) and 16.4.2 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code… |
CVE-2022-38404 | High | 7.8 | 2022-09-16 | Adobe InCopy version 17.3 (and earlier) and 16.4.2 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code… |
CVE-2022-38401 | High | 7.8 | 2022-09-16 | Adobe InCopy version 17.3 (and earlier) and 16.4.2 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code… |
CVE-2022-35713 | High | 7.8 | 2022-09-16 | Adobe Photoshop versions 22.5.8 (and earlier) and 23.4.2 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code… |
CVE-2022-28853 | High | 7.8 | 2022-09-16 | Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code ex… |
CVE-2022-28852 | High | 7.8 | 2022-09-16 | Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by by an out-of-bounds write vulnerability that could result in arbitrary code… |
CVE-2020-36601 | High | 7.5 | 2022-09-16 | Out-of-bounds write vulnerability in the kernel modules. Successful exploitation of this vulnerability may cause a panic reboot. |
CVE-2020-36600 | High | 7.5 | 2022-09-16 | Out-of-bounds write vulnerability in the power consumption module. Successful exploitation of this vulnerability may cause the system to restart. |
CVE-2022-38411 | High | 7.8 | 2022-09-16 | Adobe Animate version 21.0.11 (and earlier) and 22.0.7 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary… |
CVE-2022-40152 | Medium | 6.5 | 2022-09-16 | Those using Woodstox to parse XML data may be vulnerable to Denial of Service attacks (DOS) if DTD support is enabled. If the parser is running on user supplie… |
CVE-2022-40151 | Medium | 6.5 | 2022-09-16 | Those using Xstream to seralize XML data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may… |
CVE-2022-40149 | Medium | 6.5 | 2022-09-16 | Those using Jettison to parse untrusted XML or JSON data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input… |
CVE-2022-25654 | Medium | 6.7 | 2022-09-16 | Memory corruption in kernel due to improper input validation while processing ION commands in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT… |
CVE-2020-23560 | High | 7.8 | 2022-09-16 | IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x000000000001bcab. |
CVE-2020-23559 | High | 7.8 | 2022-09-16 | IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x0000000000007d7f. |
CVE-2020-23558 | High | 7.8 | 2022-09-16 | IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x0000000000007f4b. |
CVE-2020-23557 | High | 7.8 | 2022-09-16 | IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x000000000000755d. |
CVE-2020-23556 | High | 7.8 | 2022-09-16 | IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e28. |
CVE-2020-23555 | High | 7.8 | 2022-09-16 | IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e6e. |
CVE-2020-23554 | High | 7.8 | 2022-09-16 | IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e20. |