CWE-787 · Out-of-bounds Write (page 84)
Page 84 of 100 — CVEs classified under CWE-787, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-25454 | Critical | 9.8 | 2022-03-18 | Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the loginpwd parameter in the SetFirewallCfg function. |
CVE-2022-25453 | Critical | 9.8 | 2022-03-18 | Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the time parameter in the saveParentControlInfo function. |
CVE-2022-25452 | Critical | 9.8 | 2022-03-18 | Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the URLs parameter in the saveParentControlInfo function. |
CVE-2022-25451 | Critical | 9.8 | 2022-03-18 | Tenda AC6 V15.03.05.09_multi was discovered to contain a stack overflow via the list parameter in the setstaticroutecfg function. |
CVE-2022-25450 | Critical | 9.8 | 2022-03-18 | Tenda AC6 V15.03.05.09_multi was discovered to contain a stack overflow via the list parameter in the SetVirtualServerCfg function. |
CVE-2022-25449 | Critical | 9.8 | 2022-03-18 | Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the deviceId parameter in the saveParentControlInfo function. |
CVE-2022-25448 | Critical | 9.8 | 2022-03-18 | Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the day parameter in the openSchedWifi function. |
CVE-2022-25447 | Critical | 9.8 | 2022-03-18 | Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the schedendtime parameter in the openSchedWifi function. |
CVE-2022-25446 | Critical | 9.8 | 2022-03-18 | Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the schedstarttime parameter in the openSchedWifi function. |
CVE-2022-25445 | Critical | 9.8 | 2022-03-18 | Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the time parameter in the PowerSaveSet function. |
CVE-2022-25440 | Critical | 9.8 | 2022-03-18 | Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the ntpserver parameter in the SetSysTimeCfg function. |
CVE-2022-25439 | Critical | 9.8 | 2022-03-18 | Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the list parameter in the SetIpMacBind function. |
CVE-2022-25437 | Critical | 9.8 | 2022-03-18 | Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the list parameter in the SetVirtualServerCfg function. |
CVE-2022-25435 | Critical | 9.8 | 2022-03-18 | Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the list parameter in the SetStaticRoutecfg function. |
CVE-2022-25434 | Critical | 9.8 | 2022-03-18 | Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the firewallen parameter in the SetFirewallCfg function. |
CVE-2022-25433 | Critical | 9.8 | 2022-03-18 | Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the urls parameter in the saveparentcontrolinfo function. |
CVE-2022-25431 | Critical | 9.8 | 2022-03-18 | Tenda AC9 v15.03.2.21 was discovered to contain multiple stack overflows via the NPTR, V12, V10 and V11 parameter in the Formsetqosband function. |
CVE-2022-25429 | Critical | 9.8 | 2022-03-18 | Tenda AC9 v15.03.2.21 was discovered to contain a buffer overflow via the time parameter in the saveparentcontrolinfo function. |
CVE-2022-25428 | Critical | 9.8 | 2022-03-18 | Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the deviceId parameter in the saveparentcontrolinfo function. |
CVE-2022-25427 | Critical | 9.8 | 2022-03-18 | Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the schedendtime parameter in the openSchedWifi function. |
CVE-2022-24092 | High | 7.8 | 2022-03-18 | Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by an out-of-bounds write vulnerab… |
CVE-2022-24091 | High | 7.8 | 2022-03-18 | Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by an out-of-bounds write vulnerab… |
CVE-2022-22666 | High | 7.8 | 2022-03-18 | A memory corruption issue was addressed with improved validation. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, watchOS 8.5. Processing a malicio… |
CVE-2022-22651 | High | 7.5 | 2022-03-18 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.3. A remote attacker may be able to cause un… |
CVE-2022-22640 | High | 7.8 | 2022-03-18 | A memory corruption issue was addressed with improved validation. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, macOS Monterey 12.3, watchOS 8.5… |
CVE-2022-22636 | High | 7.8 | 2022-03-18 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4. An application may be abl… |
CVE-2022-22635 | Critical | 9.8 | 2022-03-18 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4. An application may be abl… |
CVE-2022-22633 | High | 7.8 | 2022-03-18 | A memory corruption issue was addressed with improved state management. This issue is fixed in watchOS 8.5, iOS 15.4 and iPadOS 15.4, macOS Big Sur 11.6.5, mac… |
CVE-2022-22631 | High | 7.8 | 2022-03-18 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 202… |
CVE-2022-22613 | High | 7.8 | 2022-03-18 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, macOS Big Sur 11.6.5, Sec… |
CVE-2022-22612 | High | 7.8 | 2022-03-18 | A memory consumption issue was addressed with improved memory handling. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, iTunes 12.12.3 for Windows… |
CVE-2022-22597 | High | 7.8 | 2022-03-18 | A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Ca… |
CVE-2022-22596 | High | 7.8 | 2022-03-18 | A memory corruption issue was addressed with improved validation. This issue is fixed in watchOS 8.5, iOS 15.4 and iPadOS 15.4. An application may be able to e… |
CVE-2022-22591 | High | 7.8 | 2022-03-18 | A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.2. A malicious application may be able to execu… |
CVE-2022-22587 | Critical | 9.8 | 2022-03-18 | A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 15.3 and iPadOS 15.3, macOS Big Sur 11.6.3, macOS Monterey 1… |
CVE-2022-22586 | Critical | 9.8 | 2022-03-18 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.2. A malicious application may be able to ex… |
CVE-2022-22584 | High | 7.8 | 2022-03-18 | A memory corruption issue was addressed with improved validation. This issue is fixed in tvOS 15.3, iOS 15.3 and iPadOS 15.3, watchOS 8.4, macOS Monterey 12.2… |
CVE-2021-30771 | High | 7.8 | 2022-03-18 | An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.4, iOS 14.6 and iPadOS 14.6, watchOS 7.5, tvOS 14… |
CVE-2022-24655 | High | 7.8 | 2022-03-18 | A stack overflow vulnerability exists in the upnpd service in Netgear EX6100v1 201.0.2.28, CAX80 2.1.2.6, and DC112A 1.0.0.62, which may lead to the execution… |
CVE-2022-25949 | High | 7.8 | 2022-03-17 | The kernel mode driver kwatch3 of KINGSOFT Internet Security 9 Plus Version 2010.06.23.247 fails to properly handle crafted inputs, leading to stack-based buff… |
CVE-2022-25516 | Medium | 6.5 | 2022-03-17 | stb_truetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function stbtt__find_table at stb_truetype.h. NOTE: Third party has disputed stat… |
CVE-2022-25515 | Medium | 6.5 | 2022-03-17 | stb_truetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function ttULONG() at stb_truetype.h. NOTE: Third party has disputed stating that… |
CVE-2022-25514 | High | 7.5 | 2022-03-17 | stb_truetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function ttUSHORT() at stb_truetype.h. NOTE: Third party has disputed stating tha… |
CVE-2022-26300 | High | 7.5 | 2022-03-17 | EOS v2.1.0 was discovered to contain a heap-buffer-overflow via the function txn_test_gen_plugin. |
CVE-2022-0982 | Critical | 9.8 | 2022-03-16 | The telnet_input_char function in opt/src/accel-pppd/cli/telnet.c suffers from a memory corruption vulnerability, whereby user input cmdline_len is copied into… |
CVE-2021-41987 | High | 8.1 | 2022-03-16 | In the SCEP Server of RouterOS in certain Mikrotik products, an attacker can trigger a heap-based buffer overflow that leads to remote code execution. The atta… |
CVE-2021-39793 | High | 7.8 | 2022-03-16 | In kbase_jd_user_buf_pin_pages of mali_kbase_mem.c, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalati… |
CVE-2021-39736 | Medium | 6.7 | 2022-03-16 | In prepare_io_entry and prepare_response of lwis_ioctl.c and lwis_periodic_io.c, there is a possible out of bounds write due to an integer overflow. This could… |
CVE-2021-39733 | Medium | 6.7 | 2022-03-16 | In amcs_cdev_unlocked_ioctl of audiometrics.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of… |
CVE-2021-39732 | High | 7.8 | 2022-03-16 | In copy_io_entries of lwis_ioctl.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with n… |
CVE-2021-39731 | Medium | 6.7 | 2022-03-16 | In ProtocolStkProactiveCommandAdapter::Init of protocolstkadapter.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lea… |
CVE-2021-39729 | Medium | 6.7 | 2022-03-16 | In the TitanM chip, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System executi… |
CVE-2021-39721 | Medium | 6.7 | 2022-03-16 | In TBD of TBD, there is a possible out of bounds write due to memory corruption. This could lead to local escalation of privilege with System execution privile… |
CVE-2021-39719 | Medium | 6.7 | 2022-03-16 | In lwis_top_register_io of lwis_device_top.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privil… |
CVE-2021-39718 | Medium | 6.7 | 2022-03-16 | In ProtocolStkProactiveCommandAdapter::Init of protocolstkadapter.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lea… |
CVE-2021-39708 | Critical | 9.8 | 2022-03-16 | In gatt_process_notification of gatt_cl.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of p… |
CVE-2021-39685 | High | 7.8 | 2022-03-16 | In various setup methods of the USB gadget subsystem, there is a possible out of bounds write due to an incorrect flag check. This could lead to local escalati… |
CVE-2021-39667 | Medium | 6.5 | 2022-03-16 | In ih264d_parse_decode_slice of ih264d_parse_slice.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote informat… |
CVE-2021-23165 | Critical | 9.8 | 2022-03-16 | A flaw was found in htmldoc before v1.9.12. Heap buffer overflow in pspdf_prepare_outpages(), in ps-pdf.cxx may lead to execute arbitrary code and denial of se… |
CVE-2021-43305 | High | 8.8 | 2022-03-14 | Heap buffer overflow in Clickhouse's LZ4 compression codec when parsing a malicious query. There is no verification that the copy operations in the LZ4::decomp… |
CVE-2021-43304 | High | 8.8 | 2022-03-14 | Heap buffer overflow in Clickhouse's LZ4 compression codec when parsing a malicious query. There is no verification that the copy operations in the LZ4::decomp… |
CVE-2022-0943 | High | 7.8 | 2022-03-14 | Heap-based Buffer Overflow occurs in vim in GitHub repository vim/vim prior to 8.2.4563. |
CVE-2022-24578 | High | 7.8 | 2022-03-14 | GPAC 1.0.1 is affected by a heap-based buffer overflow in SFS_AddString () at bifs/script_dec.c. |
CVE-2022-24575 | High | 7.8 | 2022-03-14 | GPAC 1.0.1 is affected by a stack-based buffer overflow through MP4Box. |
CVE-2022-23943 | Critical | 9.8 | 2022-03-14 | Out-of-bounds Write vulnerability in mod_sed of Apache HTTP Server allows an attacker to overwrite heap memory with possibly attacker provided data. This issue… |
CVE-2022-26967 | High | 7.8 | 2022-03-12 | GPAC 2.0 allows a heap-based buffer overflow in gf_base64_encode. It can be triggered via MP4Box. |
CVE-2022-24097 | High | 7.8 | 2022-03-11 | Adobe After Effects versions 22.2 (and earlier) and 18.4.4 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary co… |
CVE-2022-24096 | High | 7.8 | 2022-03-11 | Adobe After Effects versions 22.2 (and earlier) and 18.4.4 (and earlier) are affected by an Heap-based Buffer Overflow vulnerability that could result in arbit… |
CVE-2022-24095 | High | 7.8 | 2022-03-11 | Adobe After Effects versions 22.2 (and earlier) and 18.4.4 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability that could result in arbit… |
CVE-2022-24094 | High | 7.8 | 2022-03-11 | Adobe After Effects versions 22.2 (and earlier) and 18.4.4 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability that could result in arbit… |
CVE-2020-36518 | High | 7.5 | 2022-03-11 | jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects. |
CVE-2022-25566 | High | 7.5 | 2022-03-10 | Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function saveParentControlInfo. This vulnerability allows attackers to cause a Denial o… |
CVE-2022-25561 | High | 7.5 | 2022-03-10 | Tenda AX12 v22.03.01.21 was discovered to contain a stack overflow in the function sub_42DE00. This vulnerability allows attackers to cause a Denial of Service… |
CVE-2022-25560 | High | 7.5 | 2022-03-10 | Tenda AX12 v22.03.01.21 was discovered to contain a stack overflow in the function sub_4327CC. This vulnerability allows attackers to cause a Denial of Service… |
CVE-2022-25558 | High | 7.5 | 2022-03-10 | Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function formSetProvince. This vulnerability allows attackers to cause a Denial of Serv… |
CVE-2022-25557 | High | 7.5 | 2022-03-10 | Tenda AX1806 v1.0.0.1 was discovered to contain a heap overflow in the function saveParentControlInfo. This vulnerability allows attackers to cause a Denial of… |
CVE-2022-25556 | High | 7.5 | 2022-03-10 | Tenda AX12 v22.03.01.21 was discovered to contain a stack overflow in the function sub_42E328. This vulnerability allows attackers to cause a Denial of Service… |
CVE-2022-25555 | High | 7.5 | 2022-03-10 | Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function fromSetSysTime. This vulnerability allows attackers to cause a Denial of Servi… |
CVE-2022-25554 | High | 7.5 | 2022-03-10 | Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function saveParentControlInfo. This vulnerability allows attackers to cause a Denial o… |
CVE-2022-25553 | High | 7.5 | 2022-03-10 | Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function formSetSysToolDDNS. This vulnerability allows attackers to cause a Denial of S… |
CVE-2022-25552 | High | 7.5 | 2022-03-10 | Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function form_fast_setting_wifi_set. This vulnerability allows attackers to cause a Den… |
CVE-2022-25551 | High | 7.5 | 2022-03-10 | Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function formSetSysToolDDNS. This vulnerability allows attackers to cause a Denial of S… |
CVE-2022-25550 | High | 7.5 | 2022-03-10 | Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function saveParentControlInfo. This vulnerability allows attackers to cause a Denial o… |
CVE-2022-25549 | High | 7.5 | 2022-03-10 | Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function formSetSysToolDDNS. This vulnerability allows attackers to cause a Denial of S… |
CVE-2022-25548 | High | 7.5 | 2022-03-10 | Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function fromSetSysTime. This vulnerability allows attackers to cause a Denial of Servi… |
CVE-2022-25547 | High | 7.5 | 2022-03-10 | Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function fromSetSysTime. This vulnerability allows attackers to cause a Denial of Servi… |
CVE-2022-25546 | High | 7.5 | 2022-03-10 | Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function formSetSysToolDDNS. This vulnerability allows attackers to cause a Denial of S… |
CVE-2022-25234 | High | 7.8 | 2022-03-10 | Out-of-bounds write vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows an attacker to cause information disclosu… |
CVE-2022-24995 | Critical | 9.8 | 2022-03-10 | Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromSetSysTime. This vulnerability allows attackers to cause a Denial of S… |
CVE-2022-21124 | High | 7.8 | 2022-03-10 | Out-of-bounds write vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows an attacker to cause information disclosu… |
CVE-2022-20059 | Medium | 6.6 | 2022-03-10 | In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an attacker wh… |
CVE-2022-20058 | Medium | 6.6 | 2022-03-10 | In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an attacker wh… |
CVE-2022-20056 | Medium | 6.6 | 2022-03-10 | In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an attacker wh… |
CVE-2022-20055 | Medium | 6.8 | 2022-03-10 | In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an attacker wh… |
CVE-2022-20048 | High | 7.8 | 2022-03-10 | In video decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional ex… |
CVE-2022-20047 | High | 7.8 | 2022-03-10 | In video decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional ex… |
CVE-2022-0904 | Medium | 4.3 | 2022-03-10 | A stack overflow bug in the document extractor in Mattermost Server in versions up to and including 6.3.2 allows an attacker to crash the server via submitting… |
CVE-2022-0903 | Medium | 5.3 | 2022-03-10 | A call stack overflow bug in the SAML login feature in Mattermost server in versions up to and including 6.3.2 allows an attacker to crash the server via submi… |
CVE-2022-0891 | Medium | 6.1 | 2022-03-10 | A heap buffer overflow in ExtractImageSection function in tiffcrop.c in libtiff library Version 4.3.0 allows attacker to trigger unsafe or out of bounds memory… |
CVE-2021-46408 | High | 7.5 | 2022-03-10 | Tenda AX12 v22.03.01.21 was discovered to contain a stack buffer overflow in the function sub_422CE4. This vulnerability allows attackers to cause a Denial of… |