CWE-787 · Out-of-bounds Write (page 82)
Page 82 of 100 — CVEs classified under CWE-787, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-35460 | Medium | 6.5 | 2022-08-16 | OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x61731f. |
CVE-2022-35459 | Medium | 6.5 | 2022-08-16 | OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6e412a. |
CVE-2022-35458 | Medium | 6.5 | 2022-08-16 | OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6b05ce. |
CVE-2022-35456 | Medium | 6.5 | 2022-08-16 | OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x617087. |
CVE-2022-35455 | Medium | 6.5 | 2022-08-16 | OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6b0d63. |
CVE-2022-35454 | Medium | 6.5 | 2022-08-16 | OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6b05aa. |
CVE-2022-35453 | Medium | 6.5 | 2022-08-16 | OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6c08a6. |
CVE-2022-35452 | Medium | 6.5 | 2022-08-16 | OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6b0b2c. |
CVE-2022-35451 | Medium | 6.5 | 2022-08-16 | OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6b03b5. |
CVE-2022-35450 | Medium | 6.5 | 2022-08-16 | OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6b84b1. |
CVE-2022-35449 | Medium | 6.5 | 2022-08-16 | OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6b0466. |
CVE-2022-35448 | Medium | 6.5 | 2022-08-16 | OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6b55af. |
CVE-2022-35447 | Medium | 6.5 | 2022-08-16 | OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6b04de. |
CVE-2022-35113 | Medium | 5.5 | 2022-08-16 | SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via swf_DefineLosslessBitsTagToImage at /modules/swfbits.c. |
CVE-2022-35109 | Medium | 5.5 | 2022-08-16 | SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via draw_stroke at /gfxpoly/stroke.c. |
CVE-2022-35105 | Medium | 5.5 | 2022-08-16 | SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via /bin/png2swf+0x552cea. |
CVE-2022-35104 | Medium | 5.5 | 2022-08-16 | SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via DCTStream::reset() at /xpdf/Stream.cc. |
CVE-2022-35101 | Medium | 5.5 | 2022-08-16 | SWFTools commit 772e55a2 was discovered to contain a segmentation violation via /multiarch/memset-vec-unaligned-erms.S. |
CVE-2022-35012 | Medium | 6.5 | 2022-08-16 | PNGDec commit 8abf6be was discovered to contain a heap buffer overflow via SaveBMP at /linux/main.cpp. |
CVE-2022-35010 | Medium | 6.5 | 2022-08-16 | PNGDec commit 8abf6be was discovered to contain a heap buffer overflow via asan_interceptors_memintrinsics.cpp. |
CVE-2022-35008 | Medium | 6.5 | 2022-08-16 | PNGDec commit 8abf6be was discovered to contain a stack overflow via /linux/main.cpp. |
CVE-2022-35007 | Medium | 6.5 | 2022-08-16 | PNGDec commit 8abf6be was discovered to contain a heap buffer overflow via __interceptor_fwrite.part.57 at sanitizer_common_interceptors.inc. |
CVE-2022-2831 | High | 7.5 | 2022-08-16 | A flaw was found in Blender 3.3.0. An interger overflow in source/blender/blendthumb/src/blendthumb_extract.cc may lead to program crash or memory corruption. |
CVE-2022-35624 | High | 8.2 | 2022-08-15 | In Nordic nRF5 SDK for Mesh 5.0, a heap overflow vulnerability can be triggered by sending a series of segmented packets with SegO > SegN |
CVE-2022-35623 | High | 8.2 | 2022-08-15 | In Nordic nRF5 SDK for Mesh 5.0, a heap overflow vulnerability can be triggered by sending a series of segmented control packets and access packets with the sa… |
CVE-2022-38223 | High | 7.8 | 2022-08-15 | There is an out-of-bounds write in checkType located in etc.c in w3m 0.5.3. It can be triggered by sending a crafted HTML file to the w3m binary. It allows an… |
CVE-2022-2624 | High | 8.8 | 2022-08-12 | Heap buffer overflow in PDF in Google Chrome prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user interactions to p… |
CVE-2022-2587 | Critical | 9.8 | 2022-08-12 | Out of bounds write in Chrome OS Audio Server in Google Chrome on Chrome OS prior to 102.0.5005.125 allowed a remote attacker to potentially exploit heap corru… |
CVE-2022-35561 | High | 7.5 | 2022-08-12 | A stack overflow vulnerability exists in /goform/WifiMacFilterSet in Tenda W6 V1.0.0.9(4122) version, which can be exploited by attackers to cause a denial of… |
CVE-2022-35560 | High | 7.5 | 2022-08-12 | A stack overflow vulnerability exists in /goform/wifiSSIDset in Tenda W6 V1.0.0.9(4122) version, which can be exploited by attackers to cause a denial of servi… |
CVE-2022-35559 | Critical | 9.8 | 2022-08-12 | A stack overflow vulnerability exists in /goform/setAutoPing in Tenda W6 V1.0.0.9(4122), which allows an attacker to construct ping1 parameters and ping2 param… |
CVE-2022-35558 | High | 7.5 | 2022-08-12 | A stack overflow vulnerability exists in /goform/WifiMacFilterGet in Tenda W6 V1.0.0.9(4122) version, which can be exploited by attackers to cause a denial of… |
CVE-2022-35557 | High | 7.5 | 2022-08-12 | A stack overflow vulnerability exists in /goform/wifiSSIDget in Tenda W6 V1.0.0.9(4122) version, which can be exploited by attackers to cause a denial of servi… |
CVE-2022-20313 | Medium | 6.8 | 2022-08-12 | In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution pri… |
CVE-2022-20273 | Medium | 6.5 | 2022-08-12 | In Bluetooth, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional executi… |
CVE-2022-20269 | Medium | 6.8 | 2022-08-12 | In Bluetooth, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution… |
CVE-2022-35667 | High | 7.8 | 2022-08-11 | Adobe Acrobat Reader versions 22.001.20169 (and earlier), 20.005.30362 (and earlier) and 17.012.30249 (and earlier) are affected by an out-of-bounds write vuln… |
CVE-2022-34260 | High | 7.8 | 2022-08-11 | Adobe Illustrator versions 26.3.1 (and earlier) and 25.4.6 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary co… |
CVE-2022-28750 | High | 7.5 | 2022-08-11 | Zoom On-Premise Meeting Connector Zone Controller (ZC) before version 4.8.20220419.112 fails to properly parse STUN error codes, which can result in memory cor… |
CVE-2022-20400 | Critical | 9.8 | 2022-08-11 | In cd_CodeMsg of cd_codec.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional… |
CVE-2022-20369 | Medium | 6.7 | 2022-08-11 | In v4l2_m2m_querybuf of v4l2-mem2mem.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privil… |
CVE-2022-20247 | High | 7.5 | 2022-08-11 | In Media, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution p… |
CVE-2022-20244 | High | 7.5 | 2022-08-11 | In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if more than 100 bluetoot… |
CVE-2022-20237 | Critical | 9.8 | 2022-08-11 | In BuildDevIDResponse of miscdatabuilder.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution w… |
CVE-2022-20345 | High | 8.8 | 2022-08-10 | In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over B… |
CVE-2022-20792 | High | 7.8 | 2022-08-10 | A vulnerability in the regex module used by the signature database load module of Clam AntiVirus (ClamAV) versions 0.104.0 through 0.104.2 and LTS version 0.10… |
CVE-2022-30176 | High | 7.8 | 2022-08-09 | Azure RTOS GUIX Studio Remote Code Execution Vulnerability |
CVE-2022-37452 | Critical | 9.8 | 2022-08-07 | Exim before 4.95 has a heap-based buffer overflow for the alias list in host_name_lookup in host.c when sender_host_name is set. |
CVE-2022-29465 | Critical | 9.8 | 2022-08-05 | An out-of-bounds write vulnerability exists in the PSD Header processing memory allocation functionality of Accusoft ImageGear 20.0. A specially-crafted malfor… |
CVE-2022-28665 | Critical | 9.8 | 2022-08-05 | A memory corruption vulnerability exists in the httpd unescape functionality of FreshTomato 2022.1. A specially-crafted HTTP request can lead to memory corrupt… |
CVE-2022-28664 | Critical | 9.8 | 2022-08-05 | A memory corruption vulnerability exists in the httpd unescape functionality of FreshTomato 2022.1. A specially-crafted HTTP request can lead to memory corrupt… |
CVE-2022-27631 | Critical | 9.8 | 2022-08-05 | A memory corruption vulnerability exists in the httpd unescape functionality of DD-WRT Revision 32270 - Revision 48599. A specially-crafted HTTP request can le… |
CVE-2022-26376 | Critical | 9.8 | 2022-08-05 | A memory corruption vulnerability exists in the httpd unescape functionality of Asuswrt prior to 3.0.0.4.386_48706 and Asuswrt-Merlin New Gen prior to 386.7… |
CVE-2022-26009 | Critical | 9.8 | 2022-08-05 | A stack-based buffer overflow vulnerability exists in the confsrv ucloud_set_node_location functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A speciall… |
CVE-2022-25996 | Critical | 9.8 | 2022-08-05 | A stack-based buffer overflow vulnerability exists in the confsrv addTimeGroup functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted ne… |
CVE-2022-23919 | Critical | 9.8 | 2022-08-05 | A stack-based buffer overflow vulnerability exists in the confsrv set_mf_rule functionality of TCL LinkHub Mesh Wifi MS1G_00_01.00_14. A specially-crafted netw… |
CVE-2022-23918 | Critical | 9.8 | 2022-08-05 | A stack-based buffer overflow vulnerability exists in the confsrv set_mf_rule functionality of TCL LinkHub Mesh Wifi MS1G_00_01.00_14. A specially-crafted netw… |
CVE-2022-23399 | Critical | 9.8 | 2022-08-05 | A stack-based buffer overflow vulnerability exists in the confsrv set_port_fwd_rule functionality of TCL LinkHub Mesh Wifi MS1G_00_01.00_14. A specially-crafte… |
CVE-2022-23103 | Critical | 9.8 | 2022-08-05 | A stack-based buffer overflow vulnerability exists in the confsrv confctl_set_app_language functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A speciall… |
CVE-2022-21201 | High | 8.8 | 2022-08-05 | A stack-based buffer overflow vulnerability exists in the confers ucloud_add_node_new functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-cra… |
CVE-2022-37398 | High | 7.1 | 2022-08-05 | A stack-based buffer overflow vulnerability was found inside ADM when using WebDAV due to the lack of data size validation. An attacker can exploit this vulner… |
CVE-2022-33730 | Medium | 6.8 | 2022-08-05 | Heap-based buffer overflow vulnerability in Samsung Dex for PC prior to SMR Aug-2022 Release 1 allows arbitrary code execution by physical attackers. |
CVE-2022-37434 | Critical | 9.8 | 2022-08-05 | zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications t… |
CVE-2022-37415 | High | 7.8 | 2022-08-05 | The Uniwill SparkIO.sys driver 1.0 is vulnerable to a stack-based buffer overflow via IOCTL 0x40002008. |
CVE-2022-35506 | High | 7.5 | 2022-08-03 | TripleCross v0.1.0 was discovered to contain a stack overflow which occurs because there is no limit to the length of program parameters. |
CVE-2022-34992 | High | 7.8 | 2022-08-03 | Luadec v0.9.9 was discovered to contain a heap-buffer overflow via the function UnsetPending. |
CVE-2022-28668 | High | 7.8 | 2022-08-03 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro 11.9.2. User interaction is required t… |
CVE-2022-32292 | Critical | 9.8 | 2022-08-03 | In ConnMan through 1.41, remote attackers able to send HTTP requests to the gweb component are able to exploit a heap-based buffer overflow in received_data to… |
CVE-2022-34927 | High | 7.8 | 2022-08-03 | MilkyTracker v1.03.00 was discovered to contain a stack overflow via the component LoaderXM::load. This vulnerability is triggered when the program is supplied… |
CVE-2022-35222 | Medium | 6.8 | 2022-08-02 | HiCOS Citizen verification component has a stack-based buffer overflow vulnerability due to insufficient parameter length validation. An unauthenticated physic… |
CVE-2022-35219 | Medium | 5.5 | 2022-08-02 | The NHI card’s web service component has a stack-based buffer overflow vulnerability due to insufficient validation for network packet key parameter. A LAN att… |
CVE-2022-35218 | Medium | 5.5 | 2022-08-02 | The NHI card’s web service component has a heap-based buffer overflow vulnerability due to insufficient validation for packet origin parameter length. A LAN at… |
CVE-2022-35217 | High | 7.8 | 2022-08-02 | The NHI card’s web service component has a stack-based buffer overflow vulnerability due to insufficient validation for network packet header length. A local a… |
CVE-2022-2598 | Medium | 6.5 | 2022-08-01 | Out-of-bounds Write to API in GitHub repository vim/vim prior to 9.0.0100. |
CVE-2022-26445 | Medium | 6.7 | 2022-08-01 | In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution p… |
CVE-2022-26444 | Medium | 6.7 | 2022-08-01 | In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution p… |
CVE-2022-26443 | Medium | 6.7 | 2022-08-01 | In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution p… |
CVE-2022-26442 | Medium | 6.7 | 2022-08-01 | In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution p… |
CVE-2022-26441 | Medium | 6.7 | 2022-08-01 | In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution p… |
CVE-2022-26440 | Medium | 6.7 | 2022-08-01 | In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution p… |
CVE-2022-26439 | Medium | 6.7 | 2022-08-01 | In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution p… |
CVE-2022-26438 | Medium | 6.7 | 2022-08-01 | In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution p… |
CVE-2022-26435 | Medium | 6.7 | 2022-08-01 | In mailbox, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege with System execution privileges ne… |
CVE-2022-26434 | Medium | 6.7 | 2022-08-01 | In mailbox, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privi… |
CVE-2022-26432 | Medium | 6.7 | 2022-08-01 | In mailbox, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privi… |
CVE-2022-26431 | Medium | 6.7 | 2022-08-01 | In mailbox, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privi… |
CVE-2022-26430 | Medium | 6.7 | 2022-08-01 | In mailbox, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege with System execution privileges ne… |
CVE-2022-26427 | Medium | 6.7 | 2022-08-01 | In camera isp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution pr… |
CVE-2022-26426 | Medium | 6.7 | 2022-08-01 | In camera isp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution pr… |
CVE-2022-21792 | Medium | 6.7 | 2022-08-01 | In camera isp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution pr… |
CVE-2022-34528 | High | 8.8 | 2022-07-29 | D-Link DSL-3782 v1.03 and below was discovered to contain a stack overflow via the function getAttrValue. |
CVE-2022-34526 | Medium | 6.5 | 2022-07-29 | A stack overflow was discovered in the _TIFFVGetField function of Tiffsplit v4.4.0. This vulnerability allows attackers to cause a Denial of Service (DoS) via… |
CVE-2022-27865 | High | 7.8 | 2022-07-29 | A maliciously crafted TGA or PCX file may be used to write beyond the allocated buffer through DesignReview.exe application while parsing TGA and PCX files. Th… |
CVE-2022-36752 | Medium | 5.5 | 2022-07-28 | png2webp v1.0.4 was discovered to contain an out-of-bounds write via the function w2p. This vulnerability is exploitable via a crafted png file. |
CVE-2022-31627 | High | 7.7 | 2022-07-28 | In PHP versions 8.1.x below 8.1.8, when fileinfo functions, such as finfo_buffer, due to incorrect patch applied to the third party code from libmagic, incorre… |
CVE-2022-2294 | High | 8.8 | 2022-07-28 | Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag… |
CVE-2022-36998 | Medium | 6.3 | 2022-07-28 | An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBa… |
CVE-2022-2415 | High | 8.8 | 2022-07-28 | Heap buffer overflow in WebGL in Google Chrome prior to 103.0.5060.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-1876 | High | 8.8 | 2022-07-27 | Heap buffer overflow in DevTools in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to potential… |
CVE-2022-1638 | High | 8.8 | 2022-07-26 | Heap buffer overflow in V8 Internationalization in Google Chrome prior to 101.0.4951.64 allowed a remote attacker to potentially exploit heap corruption via a… |