CWE-787 · Out-of-bounds Write (page 80)
Page 80 of 100 — CVEs classified under CWE-787, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-22100 | High | 8.4 | 2022-09-02 | Memory corruption in multimedia due to improper check on received export descriptors in Snapdragon Auto |
CVE-2022-22096 | Critical | 9.8 | 2022-09-02 | Memory corruption in Bluetooth HOST due to stack-based buffer overflow when when extracting data using command length parameter in Snapdragon Connectivity, Sna… |
CVE-2022-22080 | High | 8.4 | 2022-09-02 | Improper validation of backend id in PCM routing process can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdra… |
CVE-2022-22070 | High | 7.8 | 2022-09-02 | Memory corruption in audio due to lack of check of invalid routing address into APR Routing table in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivi… |
CVE-2022-2320 | High | 7.8 | 2022-09-01 | A flaw was found in the Xorg-x11-server. The specific flaw exists within the handling of ProcXkbSetDeviceInfo requests. The issue results from the lack of prop… |
CVE-2021-3826 | Medium | 6.5 | 2022-09-01 | Heap/stack buffer overflow in the dlang_lname function in d-demangle.c in libiberty allows attackers to potentially cause a denial of service (segmentation fau… |
CVE-2020-35530 | Medium | 5.5 | 2022-09-01 | In LibRaw, there is an out-of-bounds write vulnerability within the "new_node()" function (libraw\src\x3f\x3f_utils_patched.cpp) that can be triggered via a cr… |
CVE-2022-36054 | Medium | 6.8 | 2022-09-01 | Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. The 6LoWPAN implementation in the Contiki-NG operating system (f… |
CVE-2022-2892 | High | 7.8 | 2022-08-31 | Measuresoft ScadaPro Server (Versions prior to 6.8.0.1) uses an unmaintained ActiveX control, which may allow an out-of-bounds write condition while processing… |
CVE-2022-36571 | High | 7.2 | 2022-08-31 | Tenda AC9 V15.03.05.19 was discovered to contain a stack overflow via the mask parameter at /goform/WanParameterSetting. |
CVE-2022-36570 | High | 7.2 | 2022-08-31 | Tenda AC9 V15.03.05.19 was discovered to contain a stack overflow via the time parameter at /goform/SetLEDCfg. |
CVE-2022-36569 | High | 8.8 | 2022-08-31 | Tenda AC9 V15.03.05.19 was discovered to contain a stack overflow via the deviceList parameter at /goform/setMacFilterCfg. |
CVE-2022-36568 | High | 8.8 | 2022-08-31 | Tenda AC9 V15.03.05.19 was discovered to contain a stack overflow via the list parameter at /goform/setPptpUserList. |
CVE-2022-1841 | High | 7.2 | 2022-08-31 | In subsys/net/ip/tcp.c , function tcp_flags , when the incoming parameter flags is ECN or CWR , the buf will out-of-bounds write a byte zero. |
CVE-2022-3028 | High | 7.0 | 2022-08-31 | A race condition was found in the Linux kernel's IP framework for transforming packets (XFRM subsystem) when multiple calls to xfrm_probe_algs occurred simulta… |
CVE-2022-2866 | High | 7.8 | 2022-08-31 | FATEK FvDesigner version 1.5.103 and prior is vulnerable to an out-of-bounds write while processing project files. If a valid user is tricked into using malici… |
CVE-2022-2044 | High | 8.2 | 2022-08-31 | MOXA NPort 5110: Firmware Versions 2.10 is vulnerable to an out-of-bounds write that may allow an attacker to overwrite values in memory, causing a denial-of-s… |
CVE-2022-2043 | High | 7.5 | 2022-08-31 | MOXA NPort 5110: Firmware Versions 2.10 is vulnerable to an out-of-bounds write that can cause the device to become unresponsive. |
CVE-2022-1888 | High | 7.8 | 2022-08-31 | Alpha7 PC Loader (All versions) is vulnerable to a stack-based buffer overflow while processing a specifically crafted project file, which may allow an attacke… |
CVE-2022-1354 | Medium | 5.5 | 2022-08-31 | A heap buffer overflow flaw was found in Libtiffs' tiffinfo.c in TIFFReadRawDataStriped() function. This flaw allows an attacker to pass a crafted TIFF file to… |
CVE-2022-1115 | Medium | 5.5 | 2022-08-29 | A heap-buffer-overflow flaw was found in ImageMagick’s PushShortPixel() function of quantum-private.h file. This vulnerability is triggered when an attacker pa… |
CVE-2022-0367 | High | 7.8 | 2022-08-29 | A heap-based buffer overflow flaw was found in libmodbus in function modbus_reply() in src/modbus.c. |
CVE-2022-35020 | Medium | 5.5 | 2022-08-29 | Advancecomp v2.3 was discovered to contain a heap buffer overflow via the component __interceptor_memcpy at /sanitizer_common/sanitizer_common_interceptors.inc. |
CVE-2022-35017 | Medium | 5.5 | 2022-08-29 | Advancecomp v2.3 was discovered to contain a heap buffer overflow. |
CVE-2022-35016 | Medium | 5.5 | 2022-08-29 | Advancecomp v2.3 was discovered to contain a heap buffer overflow. |
CVE-2022-35015 | Medium | 5.5 | 2022-08-29 | Advancecomp v2.3 was discovered to contain a heap buffer overflow via le_uint32_read at /lib/endianrw.h. |
CVE-2022-38571 | High | 7.5 | 2022-08-28 | Tenda M3 V1.0.0.12(4856) was discovered to contain a buffer overflow in the function formSetGuideListItem. |
CVE-2022-38570 | High | 7.5 | 2022-08-28 | Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow in the function formDelPushedAd. This vulnerability allows attackers to cause a Denial of S… |
CVE-2022-38569 | High | 7.5 | 2022-08-28 | Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow in the function formDelAd. |
CVE-2022-38568 | High | 7.5 | 2022-08-28 | Tenda M3 V1.0.0.12(4856) was discovered to contain a heap buffer overflow vulnerability in the function formSetFixTools. This vulnerability allows attackers to… |
CVE-2022-38567 | High | 7.5 | 2022-08-28 | Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow vulnerability in the function formSetAdConfigInfo. This vulnerability allows attackers to c… |
CVE-2022-38566 | High | 7.5 | 2022-08-28 | Tenda M3 V1.0.0.12(4856) was discovered to contain a heap buffer overflow vulnerability in the function formEmailTest. This vulnerability allows attackers to c… |
CVE-2022-38565 | High | 7.5 | 2022-08-28 | Tenda M3 V1.0.0.12(4856) was discovered to contain a heap buffer overflow vulnerability in the function formEmailTest. This vulnerability allows attackers to c… |
CVE-2022-38564 | High | 7.5 | 2022-08-28 | Tenda M3 V1.0.0.12(4856) was discovered to contain a buffer overflow vulnerability in the function formSetPicListItem. This vulnerability allows attackers to c… |
CVE-2022-38563 | High | 7.5 | 2022-08-28 | Tenda M3 V1.0.0.12(4856) was discovered to contain a heap buffer overflow vulnerability in the function formSetFixTools. This vulnerability allows attackers to… |
CVE-2022-38562 | High | 7.5 | 2022-08-28 | Tenda M3 V1.0.0.12(4856) was discovered to contain a heap buffer overflow vulnerability in the function formSetFixTools. This vulnerability allows attackers to… |
CVE-2022-38555 | Critical | 9.8 | 2022-08-28 | Linksys E1200 v1.0.04 is vulnerable to Buffer Overflow via ej_get_web_page_name. |
CVE-2022-2915 | High | 8.8 | 2022-08-26 | A Heap-based Buffer Overflow vulnerability in the SonicWall SMA100 appliance allows a remote authenticated attacker to cause Denial of Service (DoS) on the app… |
CVE-2022-38533 | Medium | 5.5 | 2022-08-26 | In GNU Binutils before 2.40, there is a heap-buffer-overflow in the error function bfd_getl32 when called from the strip_main function in strip-new via a craft… |
CVE-2021-23172 | Medium | 5.5 | 2022-08-25 | A vulnerability was found in SoX, where a heap-buffer-overflow occurs in function startread() in hcom.c file. The vulnerability is exploitable with a crafted h… |
CVE-2021-23159 | Medium | 5.5 | 2022-08-25 | A vulnerability was found in SoX, where a heap-buffer-overflow occurs in function lsx_read_w_buf() in formats_i.c file. The vulnerability is exploitable with a… |
CVE-2022-20824 | High | 8.8 | 2022-08-25 | A vulnerability in the Cisco Discovery Protocol feature of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to ex… |
CVE-2022-2991 | Medium | 6.7 | 2022-08-25 | A heap-based buffer overflow was found in the Linux kernel's LightNVM subsystem. The issue results from the lack of proper validation of the length of user-sup… |
CVE-2022-0135 | High | 7.8 | 2022-08-25 | An out-of-bounds write issue was found in the VirGL virtual OpenGL renderer (virglrenderer). This flaw allows a malicious guest to create a specially crafted v… |
CVE-2022-37292 | Medium | 5.5 | 2022-08-25 | Tenda AX12 V22.03.01.21_CN is vulnerable to Buffer Overflow. This overflow is triggered in the sub_42FDE4 function, which satisfies the request of the upper-le… |
CVE-2022-37824 | High | 7.8 | 2022-08-25 | Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the shareSpeed parameter in the function fromSetWifiGusetBasic. |
CVE-2022-37823 | High | 7.8 | 2022-08-25 | Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the list parameter in the function formSetVirtualSer. |
CVE-2022-37822 | High | 7.8 | 2022-08-25 | Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the function fromSetRouteStatic. |
CVE-2022-37821 | High | 7.8 | 2022-08-25 | Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the ProvinceCode parameter in the function formSetProvince. |
CVE-2022-37820 | High | 7.8 | 2022-08-25 | Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the ddnsEn parameter in the function formSetSysToolDDNS. |
CVE-2022-37819 | High | 7.8 | 2022-08-25 | Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the timezone parameter in the function fromSetSysTime. |
CVE-2022-37818 | High | 7.8 | 2022-08-25 | Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the list parameter at the function formSetQosBand. |
CVE-2022-37817 | High | 7.8 | 2022-08-25 | Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the function fromSetIpMacBind. |
CVE-2022-37816 | Critical | 9.8 | 2022-08-25 | Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the function fromSetIpMacBind. |
CVE-2022-37815 | Critical | 9.8 | 2022-08-25 | Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the PPPOEPassword parameter in the function formQuickIndex. |
CVE-2022-37814 | Critical | 9.8 | 2022-08-25 | Tenda AC1206 V15.03.06.23 was discovered to contain multiple stack overflows via the deviceMac and the device_id parameters in the function addWifiMacFilter. |
CVE-2022-37813 | Critical | 9.8 | 2022-08-25 | Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the function fromSetSysTime. |
CVE-2022-37812 | Critical | 9.8 | 2022-08-25 | Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the firewallEn parameter in the function formSetFirewallCfg. |
CVE-2022-37811 | Critical | 9.8 | 2022-08-25 | Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the startIp parameter in the function formSetPPTPServer. |
CVE-2022-37809 | Critical | 9.8 | 2022-08-25 | Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the speed_dir parameter in the function formSetSpeedWan. |
CVE-2022-37808 | Critical | 9.8 | 2022-08-25 | Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the index parameter in the function formWifiWpsOOB. |
CVE-2022-37807 | Critical | 9.8 | 2022-08-25 | Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the function formSetClientState. |
CVE-2022-37806 | Critical | 9.8 | 2022-08-25 | Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the page parameter in the function fromDhcpListClient. |
CVE-2022-37805 | Critical | 9.8 | 2022-08-25 | Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the function fromWizardHandle. |
CVE-2022-37804 | Critical | 9.8 | 2022-08-25 | Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the time parameter in the function saveParentControlInfo. |
CVE-2022-37803 | Critical | 9.8 | 2022-08-25 | Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the page parameter in the function fromAddressNat. |
CVE-2022-37802 | Critical | 9.8 | 2022-08-25 | Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the page parameter in the function fromNatStaticSetting. |
CVE-2022-37801 | Critical | 9.8 | 2022-08-25 | Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the list parameter at the function formSetQosBand. |
CVE-2022-37800 | Critical | 9.8 | 2022-08-25 | Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the list parameter at the function fromSetRouteStatic. |
CVE-2022-37799 | Critical | 9.8 | 2022-08-25 | Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the time parameter at the function setSmartPowerManagement. |
CVE-2022-37798 | Critical | 9.8 | 2022-08-25 | Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the list parameter at the function formSetVirtualSer. |
CVE-2022-37100 | Critical | 9.8 | 2022-08-25 | H3C H200 H200V100R004 was discovered to contain a stack overflow via the function UpdateMacClone. |
CVE-2022-37099 | Critical | 9.8 | 2022-08-25 | H3C H200 H200V100R004 was discovered to contain a stack overflow via the function UpdateSnat. |
CVE-2022-37098 | Critical | 9.8 | 2022-08-25 | H3C H200 H200V100R004 was discovered to contain a stack overflow via the function UpdateIpv6Params. |
CVE-2022-37097 | Critical | 9.8 | 2022-08-25 | H3C H200 H200V100R004 was discovered to contain a stack overflow via the function SetAPInfoById. |
CVE-2022-37096 | Critical | 9.8 | 2022-08-25 | H3C H200 H200V100R004 was discovered to contain a stack overflow via the function EnableIpv6. |
CVE-2022-37095 | Critical | 9.8 | 2022-08-25 | H3C H200 H200V100R004 was discovered to contain a stack overflow via the function UpdateWanParams. |
CVE-2022-37094 | Critical | 9.8 | 2022-08-25 | H3C H200 H200V100R004 was discovered to contain a stack overflow via the function Edit_BasicSSID_5G. |
CVE-2022-37093 | Critical | 9.8 | 2022-08-25 | H3C H200 H200V100R004 was discovered to contain a stack overflow via the function AddMacList. |
CVE-2022-37092 | Critical | 9.8 | 2022-08-25 | H3C H200 H200V100R004 was discovered to contain a stack overflow via the function SetAPWifiorLedInfoById. |
CVE-2022-37091 | Critical | 9.8 | 2022-08-25 | H3C H200 H200V100R004 was discovered to contain a stack overflow via the function EditWlanMacList. |
CVE-2022-37090 | Critical | 9.8 | 2022-08-25 | H3C H200 H200V100R004 was discovered to contain a stack overflow via the function Edit_BasicSSID. |
CVE-2022-37089 | Critical | 9.8 | 2022-08-25 | H3C H200 H200V100R004 was discovered to contain a stack overflow via the function EditMacList. |
CVE-2022-37088 | Critical | 9.8 | 2022-08-25 | H3C H200 H200V100R004 was discovered to contain a stack overflow via the function SetAP5GWifiById. |
CVE-2022-37087 | Critical | 9.8 | 2022-08-25 | H3C H200 H200V100R004 was discovered to contain a stack overflow via the function SetMobileAPInfoById. |
CVE-2022-37086 | Critical | 9.8 | 2022-08-25 | H3C H200 H200V100R004 was discovered to contain a stack overflow via the function Asp_SetTimingtimeWifiAndLed. |
CVE-2022-37085 | Critical | 9.8 | 2022-08-25 | H3C H200 H200V100R004 was discovered to contain a stack overflow via the AddWlanMacList function. |
CVE-2022-37084 | High | 7.8 | 2022-08-25 | TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the sPort parameter at the addEffect function. |
CVE-2022-37080 | High | 7.8 | 2022-08-25 | TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the command parameter at setting/setTracerouteCfg. |
CVE-2022-37078 | High | 7.8 | 2022-08-25 | TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a command injection vulnerability via the lang parameter at /setting/setLanguageCfg. |
CVE-2022-37077 | High | 7.8 | 2022-08-25 | TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the pppoeUser parameter. |
CVE-2022-37075 | High | 7.8 | 2022-08-25 | TOTOLink A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the ip parameter in the function setDiagnosisCfg. |
CVE-2022-37074 | High | 7.8 | 2022-08-25 | H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function switch_debug_info_set. |
CVE-2022-37073 | Critical | 9.8 | 2022-08-25 | H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateWanModeMulti. |
CVE-2022-37072 | Critical | 9.8 | 2022-08-25 | H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateWanLinkspyMulti. |
CVE-2022-37071 | Critical | 9.8 | 2022-08-25 | H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateOne2One. |
CVE-2022-37069 | Critical | 9.8 | 2022-08-25 | H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateSnat. |
CVE-2022-37068 | Critical | 9.8 | 2022-08-25 | H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateMacCloneFinal. |
CVE-2022-37067 | Critical | 9.8 | 2022-08-25 | H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateWanParamsMulti. |
CVE-2022-37066 | Critical | 9.8 | 2022-08-25 | H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateDDNS. |