CWE-787 · Out-of-bounds Write (page 82)
Page 82 of 100 — CVEs classified under CWE-787, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-29326 | Critical | 9.8 | 2022-05-10 | D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the addhostfilter parameter in /goform/websHostFilter. |
CVE-2022-29325 | Critical | 9.8 | 2022-05-10 | D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the addurlfilter parameter in /goform/websURLFilter. |
CVE-2022-29324 | Critical | 9.8 | 2022-05-10 | D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the proto parameter in /goform/form2IPQoSTcAdd. |
CVE-2022-29323 | Critical | 9.8 | 2022-05-10 | D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the MAC parameter in /goform/editassignment. |
CVE-2022-29322 | Critical | 9.8 | 2022-05-10 | D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the IPADDR and nvmacaddr parameters in /goform/form2Dhcpip. |
CVE-2022-29321 | Critical | 9.8 | 2022-05-10 | D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the lanip parameter in /goform/setNetworkLan. |
CVE-2022-1621 | High | 7.8 | 2022-05-10 | Heap buffer overflow in vim_strncpy find_word in GitHub repository vim/vim prior to 8.2.4919. This vulnerability is capable of crashing software, Bypass Protec… |
CVE-2022-30524 | High | 7.8 | 2022-05-09 | There is an invalid memory access in the TextLine class in TextOutputDev.cc in Xpdf 4.0.4 because the text extractor mishandles characters at large y coordinat… |
CVE-2022-1619 | High | 7.8 | 2022-05-08 | Heap-based Buffer Overflow in function cmdline_erase_chars in GitHub repository vim/vim prior to 8.2.4899. This vulnerabilities are capable of crashing softwar… |
CVE-2022-28278 | High | 7.8 | 2022-05-06 | Adobe Photoshop versions 22.5.6 (and earlier) and 23.2.2 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code… |
CVE-2022-28277 | High | 7.8 | 2022-05-06 | Adobe Photoshop versions 22.5.6 (and earlier) and 23.2.2 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code… |
CVE-2022-28276 | High | 7.8 | 2022-05-06 | Adobe Photoshop versions 22.5.6 (and earlier) and 23.2.2 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code… |
CVE-2022-28275 | High | 7.8 | 2022-05-06 | Adobe Photoshop versions 22.5.6 (and earlier) and 23.2.2 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code… |
CVE-2022-28273 | High | 7.8 | 2022-05-06 | Adobe Photoshop versions 22.5.6 (and earlier) and 23.2.2 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code… |
CVE-2022-28272 | High | 7.8 | 2022-05-06 | Adobe Photoshop versions 22.5.6 (and earlier) and 23.2.2 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code… |
CVE-2022-28270 | High | 7.8 | 2022-05-06 | Adobe Photoshop versions 22.5.6 (and earlier) and 23.2.2 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code… |
CVE-2022-27784 | High | 7.8 | 2022-05-06 | Adobe After Effects versions 22.2.1 (and earlier) and 18.4.5 (and earlier) are affected by a stack overflow vulnerability due to insecure handling of a crafted… |
CVE-2022-27783 | High | 7.8 | 2022-05-06 | Adobe After Effects versions 22.2.1 (and earlier) and 18.4.5 (and earlier) are affected by a stack overflow vulnerability due to insecure handling of a crafted… |
CVE-2022-24105 | High | 7.8 | 2022-05-06 | Adobe Photoshop versions 22.5.6 (and earlier)and 23.2.2 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code… |
CVE-2022-23205 | High | 7.8 | 2022-05-06 | Adobe Photoshop versions 22.5.6 (and earlier)and 23.2.2 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code… |
CVE-2022-28973 | High | 7.5 | 2022-05-06 | Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the wanMTU parameter in the function fromAdvSetMacMtuWan. This vulnerability allows attack… |
CVE-2022-28972 | High | 7.5 | 2022-05-06 | Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the timeZone parameter in the function form_fast_setting_wifi_set. This vulnerability allo… |
CVE-2022-28971 | High | 7.5 | 2022-05-06 | Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the list parameter in the function fromSetIpMacBind. This vulnerability allows attackers t… |
CVE-2022-28970 | High | 7.5 | 2022-05-06 | Tenda AX1806 v1.0.0.1 was discovered to contain a heap overflow via the mac parameter in the function GetParentControlInfo. This vulnerability allows attackers… |
CVE-2022-28969 | High | 7.5 | 2022-05-06 | Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the shareSpeed parameter in the function fromSetWifiGusetBasic. This vulnerability allows… |
CVE-2022-30293 | High | 7.5 | 2022-05-06 | In WebKitGTK through 2.36.0 (and WPE WebKit), there is a heap-based buffer overflow in WebCore::TextureMapperLayer::setContentsLayer in WebCore/platform/graphi… |
CVE-2021-38427 | Medium | 6.6 | 2022-05-05 | RTI Connext DDS Professional and Connext DDS Secure Versions 4.2.x to 6.1.0 are vulnerable to a stack-based buffer overflow, which may allow a local attacker t… |
CVE-2022-30292 | Critical | 10.0 | 2022-05-04 | Heap-based buffer overflow in sqbaselib.cpp in SQUIRREL 3.2 due to lack of a certain sq_reservestack call. |
CVE-2022-20753 | Medium | 4.7 | 2022-05-04 | A vulnerability in web-based management interface of Cisco Small Business RV340 and RV345 Routers could allow an authenticated, remote attacker to execute arbi… |
CVE-2022-28556 | High | 7.5 | 2022-05-04 | Tenda AC15 US_AC15V1.0BR_V15.03.05.20_multi_TDE01.bin is vulnerable to Buffer Overflow. The stack overflow vulnerability lies in the /goform/setpptpservercfg i… |
CVE-2022-28806 | High | 7.8 | 2022-05-04 | An issue was discovered on certain Fujitsu LIEFBOOK devices (A3510, U9310, U7511/U7411/U7311, U9311, E5510/E5410, U7510/U7410/U7310, E459/E449) with BIOS versi… |
CVE-2022-28082 | Critical | 9.8 | 2022-05-04 | Tenda AX12 v22.03.01.21_CN was discovered to contain a stack overflow via the list parameter at /goform/SetNetControlList. |
CVE-2022-25785 | Medium | 6.6 | 2022-05-04 | Stack-based Buffer Overflow vulnerability in SiteManager allows logged-in or local user to cause arbitrary code execution. This issue affects: Secomea SiteMana… |
CVE-2022-27470 | High | 7.8 | 2022-05-04 | SDL_ttf v2.0.18 and below was discovered to contain an arbitrary memory write via the function TTF_RenderText_Solid(). This vulnerability is triggered via a cr… |
CVE-2022-20108 | Medium | 6.7 | 2022-05-03 | In voice service, there is a possible out of bounds write due to a stack-based buffer overflow. This could lead to local escalation of privilege with System ex… |
CVE-2022-20106 | Medium | 6.7 | 2022-05-03 | In MM service, there is a possible out of bounds write due to a heap-based buffer overflow. This could lead to local escalation of privilege with System execut… |
CVE-2022-20105 | Medium | 6.7 | 2022-05-03 | In MM service, there is a possible out of bounds write due to a stack-based buffer overflow. This could lead to local escalation of privilege with System execu… |
CVE-2022-20099 | High | 7.8 | 2022-05-03 | In aee daemon, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution… |
CVE-2022-20095 | Medium | 6.7 | 2022-05-03 | In imgsensor, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution pri… |
CVE-2022-20094 | Medium | 6.7 | 2022-05-03 | In imgsensor, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution… |
CVE-2022-20087 | Medium | 6.7 | 2022-05-03 | In ccu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2022-28561 | Critical | 9.8 | 2022-05-03 | There is a stack overflow vulnerability in the /goform/setMacFilterCfg function in the httpd service of Tenda ax12 22.03.01.21_cn router. An attacker can obtai… |
CVE-2022-28560 | Critical | 9.8 | 2022-05-03 | There is a stack overflow vulnerability in the goform/fast_setting_wifi_set function in the httpd service of Tenda ac9 15.03.2.21_cn router. An attacker can ob… |
CVE-2022-23400 | High | 7.1 | 2022-05-03 | A stack-based buffer overflow vulnerability exists in the IGXMPXMLParser::parseDelimiter functionality of Accusoft ImageGear 19.10. A specially-crafted PSD fil… |
CVE-2022-20737 | High | 8.5 | 2022-05-03 | A vulnerability in the handler for HTTP authentication for resources accessed through the Clientless SSL VPN portal of Cisco Adaptive Security Appliance (ASA)… |
CVE-2021-42531 | High | 7.8 | 2022-05-02 | XMP Toolkit SDK version 2021.07 (and earlier) is affected by a stack-based buffer overflow vulnerability potentially resulting in arbitrary code execution in t… |
CVE-2021-42530 | High | 7.8 | 2022-05-02 | XMP Toolkit SDK version 2021.07 (and earlier) is affected by a stack-based buffer overflow vulnerability potentially resulting in arbitrary code execution in t… |
CVE-2021-42529 | High | 7.8 | 2022-05-02 | XMP Toolkit SDK version 2021.07 (and earlier) is affected by a stack-based buffer overflow vulnerability potentially resulting in arbitrary code execution in t… |
CVE-2021-46790 | High | 7.8 | 2022-05-02 | ntfsck in NTFS-3G through 2021.8.22 has a heap-based buffer overflow involving buffer+512*3-2. NOTE: the upstream position is that ntfsck is deprecated; howeve… |
CVE-2022-1403 | High | 7.8 | 2022-04-29 | ASDA-Soft: Version 5.4.1.0 and prior does not properly sanitize input while processing a specific project file, allowing a possible out-of-bounds write conditi… |
CVE-2022-1015 | Medium | 6.6 | 2022-04-29 | A flaw was found in the Linux kernel in linux/net/netfilter/nf_tables_api.c of the netfilter subsystem. This flaw allows a local user to cause an out-of-bounds… |
CVE-2022-28196 | Medium | 4.6 | 2022-04-27 | NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot blob_decompress function, where insufficient validation of untrusted data may allow a… |
CVE-2022-28193 | Medium | 5.6 | 2022-04-27 | NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot module tegrabl_cbo.c, where insufficient validation of untrusted data may allow a loca… |
CVE-2022-22323 | Medium | 6.5 | 2022-04-27 | IBM Security Identity Manager (IBM Security Verify Password Synchronization Plug-in for Windows AD 10.x) is vulnerable to a denial of service, caused by a heap… |
CVE-2022-22312 | Medium | 6.5 | 2022-04-27 | IBM Security Identity Manager (IBM Security Verify Password Synchronization Plug-in for Windows AD 10.x) is vulnerable to a denial of service, caused by a heap… |
CVE-2021-34587 | Medium | 5.3 | 2022-04-27 | In Bender/ebee Charge Controllers in multiple versions a long URL could lead to webserver crash. The URL is used as input of an sprintf to a stack variable. |
CVE-2022-27239 | High | 7.8 | 2022-04-27 | In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root priv… |
CVE-2022-28085 | High | 7.8 | 2022-04-27 | A flaw was found in htmldoc commit 31f7804. A heap buffer overflow in the function pdf_write_names in ps-pdf.cxx may lead to arbitrary code execution and Denia… |
CVE-2022-28506 | Medium | 5.5 | 2022-04-25 | There is a heap-buffer-overflow in GIFLIB 5.2.1 function DumpScreen2RGB() in gif2rgb.c:298:45. |
CVE-2022-27135 | Medium | 5.5 | 2022-04-25 | xpdf 4.03 has heap buffer overflow in the function readXRefTable located in XRef.cc. An attacker can exploit this bug to cause a Denial of Service (Segmentatio… |
CVE-2022-29077 | Critical | 9.8 | 2022-04-25 | A heap-based buffer overflow exists in rippled before 1.8.5. The vulnerability allows attackers to cause a crash or execute commands remotely on a rippled node… |
CVE-2021-3721 | Medium | 5.5 | 2022-04-22 | A denial of service vulnerability was reported in Lenovo PCManager prior to version 4.0.20.10282 that could allow an attacker with local access to trigger a bl… |
CVE-2022-1437 | High | 7.1 | 2022-04-22 | Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end of the intented buffer. Ty… |
CVE-2022-27404 | Critical | 9.8 | 2022-04-22 | FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the function sfnt_init_face. |
CVE-2022-29536 | High | 7.5 | 2022-04-20 | In GNOME Epiphany before 41.4 and 42.x before 42.2, an HTML document can trigger a client buffer overflow (in ephy_string_shorten in the UI process) via a long… |
CVE-2022-27527 | High | 7.8 | 2022-04-19 | A Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL files. It was fixed in PDFTron earlier than 9.0.7 version in Autod… |
CVE-2022-25788 | High | 7.8 | 2022-04-19 | A maliciously crafted JT file in Autodesk AutoCAD 2022 may be used to write beyond the allocated buffer while parsing JT files. This vulnerability can be explo… |
CVE-2022-27530 | High | 7.8 | 2022-04-18 | A maliciously crafted TIF or PICT file in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to write beyond the allocated buffer through Buffer overflow vuln… |
CVE-2022-27529 | High | 7.8 | 2022-04-18 | A maliciously crafted PICT, BMP, PSD or TIF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 may be used to write beyond the allocated buffer while parsing PICT… |
CVE-2022-27526 | High | 7.8 | 2022-04-18 | A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerability. This vulnerability in conjunctio… |
CVE-2022-27525 | High | 7.8 | 2022-04-18 | A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violatio… |
CVE-2021-42782 | Medium | 5.3 | 2022-04-18 | Stack buffer overflow issues were found in Opensc before version 0.22.0 in various places that could potentially crash programs using the library. |
CVE-2021-42781 | Medium | 5.3 | 2022-04-18 | Heap buffer overflow issues were found in Opensc before version 0.22.0 in pkcs15-oberthur.c that could potentially crash programs using the library. |
CVE-2020-13495 | Medium | 5.5 | 2022-04-18 | An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles file offsets in binary USD files. A specially crafted malformed file can trigger an… |
CVE-2022-1383 | Medium | 6.1 | 2022-04-18 | Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.8. The bug causes the program reads data past the end of the intented buffer. Ty… |
CVE-2022-1381 | High | 7.8 | 2022-04-18 | global heap buffer overflow in skip_range in GitHub repository vim/vim prior to 8.2.4763. This vulnerability is capable of crashing software, Bypass Protection… |
CVE-2022-28966 | Medium | 5.5 | 2022-04-16 | Wasm3 0.5.0 has a heap-based buffer overflow in NewCodePage in m3_code.c (called indirectly from Compile_BranchTable in m3_compile.c). |
CVE-2022-29072 | High | 7.8 | 2022-04-15 | 7-Zip through 21.07 on Windows allows privilege escalation and command execution when a file with the .7z extension is dragged to the Help>Contents area. This… |
CVE-2022-24521 | High | 7.8 | 2022-04-15 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
CVE-2021-44488 | Critical | 9.1 | 2022-04-15 | An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can control the size and input to calls to memcpy in op_fnfnumber… |
CVE-2022-20683 | High | 8.6 | 2022-04-15 | A vulnerability in the Application Visibility and Control (AVC-FNF) feature of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers could… |
CVE-2022-28044 | Critical | 9.8 | 2022-04-15 | Irzip v0.640 was discovered to contain a heap memory corruption via the component lrzip.c:initialise_control. |
CVE-2022-1304 | High | 7.8 | 2022-04-14 | An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a s… |
CVE-2022-28711 | Critical | 9.8 | 2022-04-14 | A memory corruption vulnerability exists in the cgi.c unescape functionality of ArduPilot APWeb master branch 50b6b7ac - master branch 46177cb9. A specially-cr… |
CVE-2021-40426 | High | 8.8 | 2022-04-14 | A heap-based buffer overflow vulnerability exists in the sphere.c start_read() functionality of Sound Exchange libsox 14.4.2 and master commit 42b3557e. A spec… |
CVE-2021-40398 | High | 7.8 | 2022-04-14 | An out-of-bounds write vulnerability exists in the parse_raster_data functionality of Accusoft ImageGear 19.10. A specially-crafted malformed file can lead to… |
CVE-2021-21946 | High | 8.8 | 2022-04-14 | Two heap-based buffer overflow vulnerabilities exists in the JPEG-JFIF lossless Huffman image parser functionality of Accusoft ImageGear 19.10. A specially-cra… |
CVE-2021-21945 | High | 8.8 | 2022-04-14 | Two heap-based buffer overflow vulnerabilities exist in the TIFF parser functionality of Accusoft ImageGear 19.10. A specially-crafted file can lead to a heap… |
CVE-2021-21944 | High | 8.8 | 2022-04-14 | Two heap-based buffer overflow vulnerabilities exist in the TIFF parser functionality of Accusoft ImageGear 19.10. A specially-crafted file can lead to a heap… |
CVE-2021-21942 | High | 8.8 | 2022-04-14 | An out-of-bounds write vulnerability exists in the TIFF YCbCr image parser functionality of Accusoft ImageGear 19.10. A specially-crafted file can lead to remo… |
CVE-2021-21939 | High | 8.8 | 2022-04-14 | A heap-based buffer overflow vulnerability exists in the XWD parser functionality of Accusoft ImageGear 19.10. A specially-crafted file can lead to code execut… |
CVE-2022-26507 | Critical | 9.8 | 2022-04-14 | A heap-based buffer overflow exists in XML Decompression DecodeTreeBlock in AT&T Labs Xmill 0.7. A crafted input file can lead to remote code execution. This i… |
CVE-2022-1350 | Medium | 4.3 | 2022-04-14 | A vulnerability classified as problematic was found in GhostPCL 9.55.0. This vulnerability affects the function chunk_free_object of the file gsmchunk.c. The m… |
CVE-2022-25797 | High | 7.8 | 2022-04-13 | A maliciously crafted PDF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to dereference for a write beyond the allocated buffer while parsing PDF… |
CVE-2022-27419 | Medium | 5.5 | 2022-04-12 | rtl_433 21.12 was discovered to contain a stack overflow in the function acurite_00275rm_decode at /devices/acurite.c. This vulnerability allows attackers to c… |
CVE-2022-27418 | High | 7.8 | 2022-04-12 | Tcpreplay v4.4.1 has a heap-based buffer overflow in do_checksum_math at /tcpedit/checksum.c. |
CVE-2022-28772 | High | 7.5 | 2022-04-12 | By overlong input values an attacker may force overwrite of the internal program stack in SAP Web Dispatcher - versions 7.53, 7.77, 7.81, 7.85, 7.86, or Intern… |
CVE-2022-21228 | High | 7.8 | 2022-04-12 | The affected product is vulnerable to a stack-based buffer overflow, which may allow an attacker to execute arbitrary code. |
CVE-2021-39814 | Medium | 6.7 | 2022-04-12 | In ppmp_validate_wsm of drm_fw.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege wi… |
CVE-2021-32040 | Medium | 6.5 | 2022-04-12 | It may be possible to have an extremely long aggregation pipeline in conjunction with a specific stage/operator and cause a stack overflow due to the size of t… |