CWE-787 · Out-of-bounds Write (page 78)
Page 78 of 100 — CVEs classified under CWE-787, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-26443 | Medium | 6.7 | 2022-08-01 | In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution p… |
CVE-2022-26442 | Medium | 6.7 | 2022-08-01 | In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution p… |
CVE-2022-26441 | Medium | 6.7 | 2022-08-01 | In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution p… |
CVE-2022-26440 | Medium | 6.7 | 2022-08-01 | In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution p… |
CVE-2022-26439 | Medium | 6.7 | 2022-08-01 | In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution p… |
CVE-2022-26438 | Medium | 6.7 | 2022-08-01 | In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution p… |
CVE-2022-26435 | Medium | 6.7 | 2022-08-01 | In mailbox, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege with System execution privileges ne… |
CVE-2022-26434 | Medium | 6.7 | 2022-08-01 | In mailbox, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privi… |
CVE-2022-26432 | Medium | 6.7 | 2022-08-01 | In mailbox, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privi… |
CVE-2022-26431 | Medium | 6.7 | 2022-08-01 | In mailbox, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privi… |
CVE-2022-26430 | Medium | 6.7 | 2022-08-01 | In mailbox, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege with System execution privileges ne… |
CVE-2022-26427 | Medium | 6.7 | 2022-08-01 | In camera isp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution pr… |
CVE-2022-26426 | Medium | 6.7 | 2022-08-01 | In camera isp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution pr… |
CVE-2022-21792 | Medium | 6.7 | 2022-08-01 | In camera isp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution pr… |
CVE-2022-34528 | High | 8.8 | 2022-07-29 | D-Link DSL-3782 v1.03 and below was discovered to contain a stack overflow via the function getAttrValue. |
CVE-2022-34526 | Medium | 6.5 | 2022-07-29 | A stack overflow was discovered in the _TIFFVGetField function of Tiffsplit v4.4.0. This vulnerability allows attackers to cause a Denial of Service (DoS) via… |
CVE-2022-27865 | High | 7.8 | 2022-07-29 | A maliciously crafted TGA or PCX file may be used to write beyond the allocated buffer through DesignReview.exe application while parsing TGA and PCX files. Th… |
CVE-2022-36752 | Medium | 5.5 | 2022-07-28 | png2webp v1.0.4 was discovered to contain an out-of-bounds write via the function w2p. This vulnerability is exploitable via a crafted png file. |
CVE-2022-31627 | High | 7.7 | 2022-07-28 | In PHP versions 8.1.x below 8.1.8, when fileinfo functions, such as finfo_buffer, due to incorrect patch applied to the third party code from libmagic, incorre… |
CVE-2022-2294 | High | 8.8 | 2022-07-28 | Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag… |
CVE-2022-36998 | Medium | 6.3 | 2022-07-28 | An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBa… |
CVE-2022-2415 | High | 8.8 | 2022-07-28 | Heap buffer overflow in WebGL in Google Chrome prior to 103.0.5060.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-1876 | High | 8.8 | 2022-07-27 | Heap buffer overflow in DevTools in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to potential… |
CVE-2022-1638 | High | 8.8 | 2022-07-26 | Heap buffer overflow in V8 Internationalization in Google Chrome prior to 101.0.4951.64 allowed a remote attacker to potentially exploit heap corruption via a… |
CVE-2022-1489 | High | 8.8 | 2022-07-26 | Out of bounds memory access in UI Shelf in Google Chrome on Chrome OS, Lacros prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corr… |
CVE-2022-1484 | High | 8.8 | 2022-07-26 | Heap buffer overflow in Web UI Settings in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via a crafted… |
CVE-2022-1483 | High | 8.8 | 2022-07-26 | Heap buffer overflow in WebGPU in Google Chrome prior to 101.0.4951.41 allowed a remote attacker who had compromised the renderer process to potentially exploi… |
CVE-2022-1482 | Medium | 6.5 | 2022-07-26 | Inappropriate implementation in WebGL in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HT… |
CVE-2021-33464 | Medium | 5.5 | 2022-07-26 | An issue was discovered in yasm version 1.3.0. There is a heap-buffer-overflow in inc_fopen() in modules/preprocs/nasm/nasm-pp.c. |
CVE-2021-33448 | Medium | 5.5 | 2022-07-26 | An issue was discovered in mjs(mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is stack buffer overflow at 0x7fffe9049390. |
CVE-2021-33443 | Medium | 5.5 | 2022-07-26 | An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is stack buffer overflow in mjs_execute() in mjs.c. |
CVE-2021-33438 | Medium | 5.5 | 2022-07-26 | An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is stack buffer overflow in json_parse_array() in mjs.c. |
CVE-2022-1042 | High | 8.2 | 2022-07-26 | In Zephyr bluetooth mesh core stack, an out-of-bound write vulnerability can be triggered during provisioning. |
CVE-2022-1041 | High | 8.2 | 2022-07-26 | In Zephyr bluetooth mesh core stack, an out-of-bound write vulnerability can be triggered during provisioning. |
CVE-2022-1143 | High | 8.8 | 2022-07-23 | Heap buffer overflow in WebUI in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who convinced a user to engage in specific user interaction to… |
CVE-2022-1142 | High | 8.8 | 2022-07-23 | Heap buffer overflow in WebUI in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who convinced a user to engage in specific user interaction to… |
CVE-2022-34503 | Medium | 6.5 | 2022-07-22 | QPDF v8.4.2 was discovered to contain a heap buffer overflow via the function QPDF::processXRefStream. This vulnerability allows attackers to cause a Denial of… |
CVE-2022-34502 | Medium | 5.5 | 2022-07-22 | Radare2 v5.7.0 was discovered to contain a heap buffer overflow via the function consume_encoded_name_new at format/wasm/wasm.c. This vulnerability allows atta… |
CVE-2022-0976 | High | 8.8 | 2022-07-21 | Heap buffer overflow in GPU in Google Chrome prior to 99.0.4844.74 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-34610 | Critical | 9.8 | 2022-07-20 | H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the URL /ihomers/app. |
CVE-2022-34609 | Critical | 9.8 | 2022-07-20 | H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the INTF parameter at /doping.asp. |
CVE-2022-34608 | Critical | 9.8 | 2022-07-20 | H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the ajaxmsg parameter at /AJAX/ajaxget. |
CVE-2022-34607 | Critical | 9.8 | 2022-07-20 | H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the HOST parameter at /doping.asp. |
CVE-2022-34606 | Critical | 9.8 | 2022-07-20 | H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the EditvsList parameter at /dotrace.asp. |
CVE-2022-34605 | Critical | 9.8 | 2022-07-20 | H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the HOST parameter at /dotrace.asp. |
CVE-2022-34604 | Critical | 9.8 | 2022-07-20 | H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the INTF parameter at /dotrace.asp. |
CVE-2022-34603 | Critical | 9.8 | 2022-07-20 | H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the DelDNSHnList interface at /goform/aspForm. |
CVE-2022-34602 | Critical | 9.8 | 2022-07-20 | H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the ipqos_lanip_editlist interface at /goform/aspForm. |
CVE-2022-34601 | Critical | 9.8 | 2022-07-20 | H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the Delstlist interface at /goform/aspForm. |
CVE-2022-34600 | Critical | 9.8 | 2022-07-20 | H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the EditSTList interface at /goform/aspForm. |
CVE-2022-34599 | Critical | 9.8 | 2022-07-20 | H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the EdittriggerList interface at /goform/aspForm. |
CVE-2022-33967 | High | 7.8 | 2022-07-20 | squashfs filesystem implementation of U-Boot versions from v2020.10-rc2 to v2022.07-rc5 contains a heap-based buffer overflow vulnerability due to a defect in… |
CVE-2022-32961 | Medium | 6.8 | 2022-07-20 | HICOS’ client-side citizen digital certificate component has a stack-based buffer overflow vulnerability when reading IC card due to insufficient parameter len… |
CVE-2022-32960 | Medium | 6.8 | 2022-07-20 | HiCOS’ client-side citizen digital certificate component has a stack-based buffer overflow vulnerability when reading IC card due to insufficient parameter len… |
CVE-2022-32959 | Medium | 6.8 | 2022-07-20 | HiCOS’ client-side citizen digital certificate component has a stack-based buffer overflow vulnerability when reading IC card due to insufficient parameter len… |
CVE-2022-31144 | High | 7.0 | 2022-07-19 | Redis is an in-memory database that persists on disk. A specially crafted `XAUTOCLAIM` command on a stream key in a specific state may result with heap overflo… |
CVE-2022-2122 | High | 7.8 | 2022-07-19 | DOS / potential heap overwrite in qtdemux using zlib decompression. Integer overflow in qtdemux element in qtdemux_inflate function which causes a segfault, or… |
CVE-2022-1920 | High | 7.8 | 2022-07-19 | Integer overflow in matroskademux element in gst_matroska_demux_add_wvpk_header function which allows a heap overwrite while parsing matroska files. Potential… |
CVE-2022-34035 | High | 7.5 | 2022-07-18 | HTMLDoc v1.9.12 and below was discovered to contain a heap overflow via e_node htmldoc/htmldoc/html.cxx:588. |
CVE-2022-34033 | High | 7.5 | 2022-07-18 | HTMLDoc v1.9.15 was discovered to contain a heap overflow via (write_header) /htmldoc/htmldoc/html.cxx:273. |
CVE-2022-23745 | High | 7.5 | 2022-07-18 | A potential memory corruption issue was found in Capsule Workspace Android app (running on GrapheneOS). This could result in application crashing but could not… |
CVE-2021-44170 | Medium | 6.7 | 2022-07-18 | A stack-based buffer overflow vulnerability [CWE-121] in the command line interpreter of FortiOS before 7.0.4 and FortiProxy before 2.0.8 may allow an authenti… |
CVE-2021-33656 | Medium | 6.8 | 2022-07-18 | When setting font with malicous data by ioctl cmd PIO_FONT,kernel will write memory out of bounds. |
CVE-2021-33655 | Medium | 6.7 | 2022-07-18 | When sending malicous data to kernel by ioctl cmd FBIOPUT_VSCREENINFO,kernel will write memory out of bounds. |
CVE-2022-32434 | High | 7.8 | 2022-07-15 | EIPStackGroup OpENer v2.3.0 was discovered to contain a stack overflow via /bin/posix/src/ports/POSIX/OpENer+0x56073d. |
CVE-2022-34251 | High | 7.8 | 2022-07-15 | Adobe InCopy versions 17.2 (and earlier) and 16.4.1 (and earlier) are affected by an Out-Of-Bounds Write vulnerability that could result in arbitrary code exec… |
CVE-2022-34247 | High | 7.8 | 2022-07-15 | Adobe InDesign versions 17.2.1 (and earlier) and 16.4.1 (and earlier) are affected by an Out-Of-Bounds Write vulnerability that could result in arbitrary code… |
CVE-2022-34245 | High | 7.8 | 2022-07-15 | Adobe InDesign versions 17.2.1 (and earlier) and 16.4.1 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary… |
CVE-2022-34217 | High | 7.8 | 2022-07-15 | Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are affected by an Out-Of-Bounds Write vuln… |
CVE-2022-32323 | High | 7.3 | 2022-07-14 | AutoTrace v0.40.0 was discovered to contain a heap overflow via the ReadImage function at input-bmp.c:660. |
CVE-2021-26384 | High | 7.8 | 2022-07-14 | A malformed SMI (System Management Interface) command may allow an attacker to establish a corrupted SMI Trigger Info data structure, potentially leading to ou… |
CVE-2020-14127 | High | 7.5 | 2022-07-14 | A denial of service vulnerability exists in some Xiaomi models of phones. The vulnerability is caused by heap overflow and can be exploited by attackers to mak… |
CVE-2022-34759 | High | 7.5 | 2022-07-13 | A CWE-787: Out-of-bounds Write vulnerability exists that could cause a denial of service of the webserver due to improper parsing of the HTTP Headers. Affected… |
CVE-2022-32117 | High | 7.8 | 2022-07-13 | Jerryscript v2.4.0 was discovered to contain a stack buffer overflow via the function jerryx_print_unhandled_exception in /util/print.c. |
CVE-2022-2380 | Medium | 5.5 | 2022-07-13 | The Linux kernel was found vulnerable out of bounds memory access in the drivers/video/fbdev/sm712fb.c:smtcfb_read() function. The vulnerability could result i… |
CVE-2022-20229 | Critical | 9.8 | 2022-07-13 | In bta_hf_client_handle_cind_list_item of bta_hf_client_at.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote… |
CVE-2022-20222 | Critical | 9.8 | 2022-07-13 | In read_attr_value of gatt_db.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no addit… |
CVE-2022-22049 | High | 7.8 | 2022-07-12 | Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability |
CVE-2022-22026 | High | 8.8 | 2022-07-12 | Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability |
CVE-2022-1737 | Critical | 9.8 | 2022-07-12 | Pyramid Solutions' affected products, the Developer and DLL kits for EtherNet/IP Adapter and EtherNet/IP Scanner, are vulnerable to an out-of-bounds write, whi… |
CVE-2022-34742 | High | 7.5 | 2022-07-12 | The system module has a read/write vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2021-41396 | High | 7.5 | 2022-07-12 | Live555 through 1.08 does not handle socket connections properly. A huge number of incoming socket connections in a short time invokes the error-handling modul… |
CVE-2022-34819 | Critical | 10.0 | 2022-07-12 | A vulnerability has been identified in SIMATIC CP 1242-7 V2 (All versions < V3.3.46), SIMATIC CP 1243-1 (All versions < V3.3.46), SIMATIC CP 1243-7 LTE EU (All… |
CVE-2022-34748 | High | 7.8 | 2022-07-12 | A vulnerability has been identified in Simcenter Femap (All versions < V2022.2). The affected application contains an out of bounds write past the end of an al… |
CVE-2022-34291 | Medium | 5.5 | 2022-07-12 | A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application contains a stack corruption vulnerability while parsi… |
CVE-2022-34290 | Medium | 5.5 | 2022-07-12 | A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application contains a stack corruption vulnerability while parsi… |
CVE-2022-34289 | High | 7.8 | 2022-07-12 | A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application contains an out of bounds write past the end of an al… |
CVE-2022-34287 | Medium | 5.5 | 2022-07-12 | A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application contains a stack corruption vulnerability while parsi… |
CVE-2022-34286 | High | 7.8 | 2022-07-12 | A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application contains an out of bounds write past the end of an al… |
CVE-2022-34284 | High | 7.8 | 2022-07-12 | A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application contains an out of bounds write past the end of an al… |
CVE-2022-34276 | High | 7.8 | 2022-07-12 | A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application contains an out of bounds write past the end of an al… |
CVE-2022-34275 | High | 7.8 | 2022-07-12 | A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application contains an out of bounds write past the end of an al… |
CVE-2022-34274 | High | 7.8 | 2022-07-12 | A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application contains an out of bounds write past the end of an al… |
CVE-2022-34273 | High | 7.8 | 2022-07-12 | A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application contains an out of bounds write past the end of an al… |
CVE-2022-30938 | High | 7.5 | 2022-07-12 | A vulnerability has been identified in EN100 Ethernet module DNP3 IP variant (All versions), EN100 Ethernet module IEC 104 variant (All versions), EN100 Ethern… |
CVE-2022-2344 | High | 7.8 | 2022-07-08 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0045. |
CVE-2022-32441 | Medium | 5.5 | 2022-07-07 | A memory corruption in Hex Rays Ida Pro v6.6 allows attackers to cause a Denial of Service (DoS) via a crafted file. Related to Data from Faulting Address cont… |
CVE-2022-32208 | Medium | 5.9 | 2022-07-07 | When curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures wrongly. This flaw makes it possible for a Man-In-The-Middle at… |
CVE-2022-33047 | Critical | 9.8 | 2022-07-06 | OTFCC v0.10.4 was discovered to contain a heap buffer overflow after free via otfccbuild.c. |
CVE-2021-3697 | High | 7.0 | 2022-07-06 | A crafted JPEG image may lead the JPEG reader to underflow its data pointer, allowing user-controlled data to be written in heap. To a successful to be perform… |