CWE-787 · Out-of-bounds Write (page 83)
Page 83 of 100 — CVEs classified under CWE-787, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-28663 | High | 7.8 | 2022-04-12 | A vulnerability has been identified in Simcenter Femap (All versions < V2022.1.2). The affected application contains an out of bounds write past the end of an… |
CVE-2022-28662 | Medium | 6.5 | 2022-04-12 | A vulnerability has been identified in Simcenter Femap (All versions < V2022.1.2). The affected application contains an out of bounds write past the end of an… |
CVE-2022-25753 | High | 8.8 | 2022-04-12 | A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coa… |
CVE-2022-27835 | High | 7.6 | 2022-04-11 | Improper boundary check in UWB firmware prior to SMR Apr-2022 Release 1 allows arbitrary memory write. |
CVE-2022-27574 | Medium | 4.4 | 2022-04-11 | Improper input validation vulnerability in parser_iloc and sheifd_find_itemIndexin fuctions of libsimba library prior to SMR Apr-2022 Release 1 allows out of b… |
CVE-2022-27573 | Medium | 4.4 | 2022-04-11 | Improper input validation vulnerability in parser_infe and sheifd_find_itemIndexin fuctions of libsimba library prior to SMR Apr-2022 Release 1 allows out of b… |
CVE-2022-27572 | High | 8.1 | 2022-04-11 | Heap-based buffer overflow vulnerability in parser_ipma function of libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote attackers. |
CVE-2022-27571 | High | 8.1 | 2022-04-11 | Heap-based buffer overflow vulnerability in sheifd_get_info_image function in libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote… |
CVE-2022-27570 | High | 8.1 | 2022-04-11 | Heap-based buffer overflow vulnerability in parser_single_iref function in libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote att… |
CVE-2022-27569 | High | 8.1 | 2022-04-11 | Heap-based buffer overflow vulnerability in parser_infe function in libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote attacker. |
CVE-2022-27568 | High | 8.1 | 2022-04-11 | Heap-based buffer overflow vulnerability in parser_iloc function in libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote attacker. |
CVE-2022-26098 | High | 8.1 | 2022-04-11 | Heap-based buffer overflow vulnerability in sheifd_create function of libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote attacker… |
CVE-2022-26092 | High | 7.4 | 2022-04-11 | Improper boundary check in Quram Agif library prior to SMR Apr-2022 Release 1 allows arbitrary code execution. |
CVE-2022-25792 | High | 7.8 | 2022-04-11 | A maliciously crafted DXF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 and Autodesk Navisworks 2022 can be used to write beyond the allocated buffer through… |
CVE-2022-25791 | High | 7.8 | 2022-04-11 | A Memory Corruption vulnerability for DWF and DWFX files in Autodesk AutoCAD 2022, 2021, 2020, 2019 and Autodesk Navisworks 2022 may lead to code execution thr… |
CVE-2022-25790 | High | 7.8 | 2022-04-11 | A maliciously crafted DWF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 and Autodesk Navisworks 2022 can be used to write beyond the allocated boundaries whe… |
CVE-2022-20074 | Medium | 6.6 | 2022-04-11 | In preloader (partition), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an attac… |
CVE-2022-20070 | Medium | 6.7 | 2022-04-11 | In ssmr, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileg… |
CVE-2022-20067 | Medium | 6.7 | 2022-04-11 | In mdp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2022-20063 | Medium | 6.5 | 2022-04-11 | In atf (spm), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution pri… |
CVE-2022-27295 | High | 7.5 | 2022-04-10 | D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formAdvanceSetup. This vulnerability allows attackers to cause a Denial of S… |
CVE-2022-27294 | High | 7.5 | 2022-04-10 | D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formWlanWizardSetup. This vulnerability allows attackers to cause a Denial o… |
CVE-2022-27293 | High | 7.5 | 2022-04-10 | D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formWlanSetup. This vulnerability allows attackers to cause a Denial of Serv… |
CVE-2022-27292 | High | 7.5 | 2022-04-10 | D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formLanguageChange. This vulnerability allows attackers to cause a Denial of… |
CVE-2022-27291 | High | 7.5 | 2022-04-10 | D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formdumpeasysetup. This vulnerability allows attackers to cause a Denial of… |
CVE-2022-27290 | High | 7.5 | 2022-04-10 | D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formSetWanDhcpplus. This vulnerability allows attackers to cause a Denial of… |
CVE-2022-27289 | High | 7.5 | 2022-04-10 | D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formSetWanL2TP. This vulnerability allows attackers to cause a Denial of Ser… |
CVE-2022-27288 | High | 7.5 | 2022-04-10 | D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formSetWanPPTP. This vulnerability allows attackers to cause a Denial of Ser… |
CVE-2022-27287 | High | 7.5 | 2022-04-10 | D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formSetWanPPPoE. This vulnerability allows attackers to cause a Denial of Se… |
CVE-2022-27286 | High | 7.5 | 2022-04-10 | D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formSetWanNonLogin. This vulnerability allows attackers to cause a Denial of… |
CVE-2022-1286 | Critical | 9.8 | 2022-04-10 | heap-buffer-overflow in mrb_vm_exec in mruby/mruby in GitHub repository mruby/mruby prior to 3.2. Possible arbitrary code execution if being exploited. |
CVE-2022-27146 | Medium | 5.5 | 2022-04-08 | GPAC mp4box 1.1.0-DEV-rev1759-geb2d1e6dd-has a heap-buffer-overflow vulnerability in function gf_isom_apple_enum_tag. |
CVE-2022-27145 | Medium | 5.5 | 2022-04-08 | GPAC mp4box 1.1.0-DEV-rev1727-g8be34973d-master has a stack-overflow vulnerability in function gf_isom_get_sample_for_movie_time of mp4box. |
CVE-2021-43521 | High | 7.5 | 2022-04-08 | A Buffer Overflow vulnerability exists in zlog 1.2.15 via zlog_conf_build_with_file in src/zlog/src/conf.c. |
CVE-2021-40656 | High | 8.8 | 2022-04-08 | libsixel before 1.10 is vulnerable to Buffer Overflow in libsixel/src/quant.c:867. |
CVE-2022-27044 | High | 8.8 | 2022-04-08 | libsixel 1.8.6 is affected by Buffer Overflow in libsixel/src/quant.c:876. |
CVE-2022-25596 | High | 8.8 | 2022-04-07 | ASUS RT-AC56U’s configuration function has a heap-based buffer overflow vulnerability due to insufficient validation for the decryption parameter length, which… |
CVE-2022-23973 | High | 8.8 | 2022-04-07 | ASUS RT-AX56U’s user profile configuration function is vulnerable to stack-based buffer overflow due to insufficient validation for parameter length. An unauth… |
CVE-2022-27022 | Critical | 9.8 | 2022-04-07 | There is a stack overflow vulnerability in the SetSysTimeCfg() function in the httpd service of Tenda AC9 V15.03.2.21_cn. The attacker can obtain a stable root… |
CVE-2022-27016 | Critical | 9.8 | 2022-04-07 | There is a stack overflow vulnerability in the SetStaticRouteCfg() function in the httpd service of Tenda AC9 15.03.2.21_cn. |
CVE-2022-24786 | Critical | 9.8 | 2022-04-06 | PJSIP is a free and open source multimedia communication library written in C. PJSIP versions 2.12 and prior do not parse incoming RTCP feedback RPSI (Referenc… |
CVE-2022-1253 | Critical | 9.8 | 2022-04-06 | Heap-based Buffer Overflow in GitHub repository strukturag/libde265 prior to and including 1.0.8. The fix is established in commit 8e89fe0e175d2870c39486fdd092… |
CVE-2022-1240 | High | 7.8 | 2022-04-06 | Heap buffer overflow in libr/bin/format/mach0/mach0.c in GitHub repository radareorg/radare2 prior to 5.8.6. If address sanitizer is disabled during the compil… |
CVE-2022-1238 | High | 7.8 | 2022-04-06 | Out-of-bounds Write in libr/bin/format/ne/ne.c in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability is heap overflow and may be exploitabl… |
CVE-2021-26112 | High | 8.1 | 2022-04-06 | Multiple stack-based buffer overflow vulnerabilities [CWE-121] both in network daemons and in the command line interpreter of FortiWAN before 4.5.9 may allow a… |
CVE-2022-26953 | High | 7.5 | 2022-04-06 | Digi Passport Firmware through 1.5.1,1 is affected by a buffer overflow. An attacker can supply a string in the page parameter for reboot.asp endpoint, allowin… |
CVE-2022-26952 | High | 7.5 | 2022-04-06 | Digi Passport Firmware through 1.5.1,1 is affected by a buffer overflow in the function for building the Location header string when an unauthenticated user is… |
CVE-2021-44109 | High | 7.5 | 2022-04-05 | A buffer overflow in lib/sbi/message.c in Open5GS 2.3.6 and earlier allows remote attackers to Denial of Service via a crafted sbi request. |
CVE-2022-0809 | High | 8.8 | 2022-04-05 | Out of bounds memory access in WebXR in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… |
CVE-2022-0800 | High | 8.8 | 2022-04-05 | Heap buffer overflow in Cast UI in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in specific user interaction to… |
CVE-2022-0797 | High | 8.8 | 2022-04-05 | Out of bounds memory access in Mojo in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to perform an out of bounds memory write via a crafted HTM… |
CVE-2022-0789 | High | 8.8 | 2022-04-05 | Heap buffer overflow in ANGLE in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-0470 | High | 8.8 | 2022-04-05 | Out of bounds memory access in V8 in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa… |
CVE-2022-0454 | High | 8.8 | 2022-04-05 | Heap buffer overflow in ANGLE in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-0610 | High | 8.8 | 2022-04-05 | Inappropriate implementation in Gamepad API in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a craf… |
CVE-2022-0604 | High | 8.8 | 2022-04-05 | Heap buffer overflow in Tab Groups in Google Chrome prior to 98.0.4758.102 allowed an attacker who convinced a user to install a malicious extension and engage… |
CVE-2022-1185 | Medium | 6.5 | 2022-04-04 | A denial of service vulnerability when rendering RDoc files in GitLab CE/EE versions 10 to 14.7.7, 14.8.0 to 14.8.5, and 14.9.0 to 14.9.2 allows an attacker to… |
CVE-2022-28381 | Critical | 9.8 | 2022-04-03 | Mediaserver.exe in ALLMediaServer 1.6 has a stack-based buffer overflow that allows remote attackers to execute arbitrary code via a long string to TCP port 88… |
CVE-2022-1211 | Medium | 6.3 | 2022-04-03 | A vulnerability classified as critical has been found in tildearrow Furnace dev73. This affects the FUR to VGM converter in console mode which causes stack-bas… |
CVE-2022-26419 | High | 7.8 | 2022-04-01 | Omron CX-Position (versions 2.5.3 and prior) is vulnerable to multiple stack-based buffer overflow conditions while parsing a specific project file, which may… |
CVE-2022-26022 | High | 7.8 | 2022-04-01 | Omron CX-Position (versions 2.5.3 and prior) is vulnerable to an out-of-bounds write while processing a specific project file, which may allow an attacker to e… |
CVE-2022-25959 | High | 7.8 | 2022-04-01 | Omron CX-Position (versions 2.5.3 and prior) is vulnerable to memory corruption while processing a specific project file, which may allow an attacker to execut… |
CVE-2022-1068 | Medium | 5.5 | 2022-04-01 | Modbus Tools Modbus Slave (versions 7.4.2 and prior) is vulnerable to a stack-based buffer overflow in the registration field. This may cause the program to cr… |
CVE-2021-33657 | High | 8.8 | 2022-04-01 | There is a heap overflow problem in video/SDL_pixels.c in SDL (Simple DirectMedia Layer) 2.x to 2.0.18 versions. By crafting a malicious .BMP file, an attacker… |
CVE-2021-32976 | Critical | 9.8 | 2022-04-01 | Five buffer overflows in the built-in web server in Moxa NPort IAW5000A-I/O series firmware version 2.2 or earlier may allow a remote attacker to initiate a de… |
CVE-2021-26623 | High | 7.8 | 2022-04-01 | A remote code execution vulnerability due to incomplete check for 'xheader_decode_path_record' function's parameter length value in the ark library. Remote att… |
CVE-2021-35103 | High | 7.8 | 2022-04-01 | Possible out of bound write due to improper validation of number of timer values received from firmware while syncing timers in Snapdragon Auto, Snapdragon Com… |
CVE-2021-30333 | High | 7.8 | 2022-04-01 | Improper validation of buffer size input to the EFS file can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdra… |
CVE-2021-1942 | Critical | 9.3 | 2022-04-01 | Improper handling of permissions of a shared memory region can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapd… |
CVE-2021-43722 | Critical | 9.8 | 2022-03-31 | D-Link DIR-645 1.03 A1 is vulnerable to Buffer Overflow. The hnap_main function in the cgibin handler uses sprintf to format the soapaction header onto the sta… |
CVE-2019-12266 | High | 7.6 | 2022-03-30 | Stack-based Buffer Overflow vulnerability in Wyze Cam Pan v2, Cam v2, Cam v3 allows an attacker to run arbitrary code on the affected device. This issue affect… |
CVE-2022-1160 | High | 7.8 | 2022-03-30 | heap buffer overflow in get_one_sourceline in GitHub repository vim/vim prior to 8.2.4647. |
CVE-2021-39786 | Medium | 6.7 | 2022-03-30 | In NFC, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2021-39741 | High | 7.8 | 2022-03-30 | In Keymaster, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution pri… |
CVE-2021-44081 | High | 7.5 | 2022-03-29 | A buffer overflow vulnerability exists in the AMF of open5gs 2.1.4. When the length of MSIN in Supi exceeds 24 characters, it leads to AMF denial of service. |
CVE-2022-23901 | Critical | 9.8 | 2022-03-29 | A stack overflow re2c 2.2 exists due to infinite recursion issues in src/dfa/dead_rules.cc. |
CVE-2022-26278 | Critical | 9.8 | 2022-03-28 | Tenda AC9 v15.03.2.21_cn was discovered to contain a stack overflow via the time parameter in the PowerSaveSet function. |
CVE-2022-22274 | Critical | 9.8 | 2022-03-25 | A Stack-based buffer overflow vulnerability in the SonicOS via HTTP request allows a remote unauthenticated attacker to cause Denial of Service (DoS) or potent… |
CVE-2022-0995 | High | 7.8 | 2022-03-25 | An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite parts of the kernel… |
CVE-2022-0500 | High | 7.8 | 2022-03-25 | A flaw was found in unrestricted eBPF usage by the BPF_BTF_LOAD, leading to a possible out-of-bounds memory write in the Linux kernel’s BPF subsystem due to th… |
CVE-2022-0435 | High | 8.8 | 2022-03-25 | A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of d… |
CVE-2021-3567 | High | 7.5 | 2022-03-25 | A flaw was found in Caribou due to a regression of CVE-2020-25712 fix. An attacker could use this flaw to bypass screen-locking applications that leverage Cari… |
CVE-2018-25032 | High | 7.5 | 2022-03-25 | zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches. |
CVE-2022-21820 | Medium | 6.3 | 2022-03-24 | NVIDIA DCGM contains a vulnerability in nvhostengine, where a network user can cause detection of error conditions without action, which may lead to limited co… |
CVE-2022-1052 | Medium | 5.5 | 2022-03-24 | Heap Buffer Overflow in iterate_chained_fixups in GitHub repository radareorg/radare2 prior to 5.6.6. |
CVE-2022-1061 | High | 7.5 | 2022-03-24 | Heap Buffer Overflow in parseDragons in GitHub repository radareorg/radare2 prior to 5.6.8. |
CVE-2021-28278 | High | 7.8 | 2022-03-23 | A Heap-based Buffer Overflow vulnerability exists in jhead 3.04 and 3.05 via the RemoveSectionType function in jpgfile.c. |
CVE-2021-28277 | High | 7.8 | 2022-03-23 | A Heap-based Buffer Overflow vulnerabilty exists in jhead 3.04 and 3.05 is affected by: Buffer Overflow via the RemoveUnknownSections function in jpgfile.c. |
CVE-2021-38278 | Critical | 9.8 | 2022-03-23 | Tenda AC10-1200 v15.03.06.23_EN was discovered to contain a buffer overflow via the urls parameter in the saveParentControlInfo function. |
CVE-2022-27666 | High | 7.8 | 2022-03-23 | A heap buffer overflow flaw was found in IPsec ESP transformation code in net/ipv4/esp4.c and net/ipv6/esp6.c. This flaw allows a local attacker with a normal… |
CVE-2021-41736 | Critical | 9.8 | 2022-03-22 | Faust v2.35.0 was discovered to contain a heap-buffer overflow in the function realPropagate() at propagate.cpp. |
CVE-2022-24764 | High | 7.5 | 2022-03-22 | PJSIP is a free and open source multimedia communication library written in C. Versions 2.12 and prior contain a stack buffer overflow vulnerability that affec… |
CVE-2022-24126 | Critical | 9.8 | 2022-03-20 | A buffer overflow in the NRSessionSearchResult parser in Bandai Namco FromSoftware Dark Souls III through 2022-03-19 allows remote attackers to execute arbitra… |
CVE-2022-25461 | Critical | 9.8 | 2022-03-18 | Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the startip parameter in the SetPptpServerCfg function. |
CVE-2022-25460 | Critical | 9.8 | 2022-03-18 | Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the endip parameter in the SetPptpServerCfg function. |
CVE-2022-25459 | Critical | 9.8 | 2022-03-18 | Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the S1 parameter in the SetSysTimeCfg function. |
CVE-2022-25458 | Critical | 9.8 | 2022-03-18 | Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the cmdinput parameter in the exeCommand function. |
CVE-2022-25457 | Critical | 9.8 | 2022-03-18 | Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the ntpserver parameter in the SetSysTimeCfg function. |
CVE-2022-25456 | Critical | 9.8 | 2022-03-18 | Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the security_5g parameter in the WifiBasicSet function. |
CVE-2022-25455 | Critical | 9.8 | 2022-03-18 | Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the list parameter in the SetIpMacBind function. |