CWE-787 · Out-of-bounds Write (page 85)
Page 85 of 100 — CVEs classified under CWE-787, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-43754 | High | 7.8 | 2022-06-15 | Adobe Prelude version 22.1.1 (and earlier) is affected by an Out-of-bounds Write vulnerability due to insecure handling of a malicious file, potentially result… |
CVE-2022-20825 | Critical | 9.8 | 2022-06-15 | A vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an unauthenticated, remote… |
CVE-2021-39820 | High | 7.8 | 2022-06-15 | Adobe InDesign versions 16.3 (and earlier), and 16.3.1 (and earlier) is affected by an Out-of-bounds Write vulnerability due to insecure handling of a maliciou… |
CVE-2022-20233 | Medium | 6.7 | 2022-06-15 | In param_find_digests_internal and related functions of the Titan-M source, there is a possible out of bounds write due to an incorrect bounds check. This coul… |
CVE-2022-20209 | High | 7.5 | 2022-06-15 | In hme_add_new_node_to_a_sorted_array of hme_utils.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote informati… |
CVE-2022-20202 | Medium | 6.5 | 2022-06-15 | In ih264_resi_trans_quant_4x4_sse42 of ih264_resi_trans_quant_sse42.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to… |
CVE-2022-20183 | Medium | 6.7 | 2022-06-15 | In hypx_create_blob_dmabuf of faceauth_hypx.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr… |
CVE-2022-20178 | Medium | 6.7 | 2022-06-15 | In ioctl_dpm_qos_update and ioctl_event_control_set of (TBD), there is a possible out of bounds write due to an integer overflow. This could lead to local esca… |
CVE-2022-20166 | Medium | 6.7 | 2022-06-15 | In various methods of kernel base drivers, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privil… |
CVE-2022-20152 | Medium | 6.7 | 2022-06-15 | In the TitanM chip, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System executi… |
CVE-2022-20147 | High | 7.8 | 2022-06-15 | In nfa_dm_check_set_config of nfa_dm_main.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pri… |
CVE-2022-20140 | Critical | 9.8 | 2022-06-15 | In read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege wi… |
CVE-2022-20127 | Critical | 9.8 | 2022-06-15 | In ce_t4t_data_cback of ce_t4t.cc, there is a possible out of bounds write due to a double free. This could lead to remote code execution with no additional ex… |
CVE-2021-40212 | Critical | 9.8 | 2022-06-15 | An exploitable out-of-bounds write vulnerability in PotPlayer 1.7.21523 build 210729 may lead to code execution, information disclosure, and denial of service. |
CVE-2022-30937 | High | 7.5 | 2022-06-14 | A vulnerability has been identified in EN100 Ethernet module DNP3 IP variant (All versions), EN100 Ethernet module IEC 104 variant (All versions), EN100 Ethern… |
CVE-2022-22085 | High | 8.4 | 2022-06-14 | Memory corruption in video due to buffer overflow while reading the dts file in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consum… |
CVE-2022-22084 | High | 8.4 | 2022-06-14 | Memory corruption when extracting qcp audio file due to lack of check on data length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdrago… |
CVE-2021-35118 | Medium | 6.7 | 2022-06-14 | An out-of-bounds write can occur due to an incorrect input check in the camera driver in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdrag… |
CVE-2021-30341 | Critical | 9.8 | 2022-06-14 | Improper buffer size validation of DSM packet received can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdrago… |
CVE-2022-29524 | High | 7.8 | 2022-06-14 | Out-of-bounds write vulnerability exists in V-Server v4.0.11.0 and earlier and V-Server Lite v4.0.13.0 and earlier, which may allow an attacker to obtain infor… |
CVE-2022-26302 | High | 7.8 | 2022-06-14 | Heap-based buffer overflow exists in the simulator module contained in the graphic editor 'V-SFT' versions prior to v6.1.6.0, which may allow an attacker to ob… |
CVE-2022-31054 | High | 7.5 | 2022-06-13 | Argo Events is an event-driven workflow automation framework for Kubernetes. Prior to version 1.7.1, several `HandleRoute` endpoints make use of the deprecated… |
CVE-2021-40036 | Critical | 9.8 | 2022-06-13 | The bone voice ID TA has a memory overwrite vulnerability. Successful exploitation of this vulnerability may result in malicious code execution. |
CVE-2021-46814 | High | 7.5 | 2022-06-13 | The video framework has an out-of-bounds memory read/write vulnerability. Successful exploitation of this vulnerability may affect system availability. |
CVE-2021-46818 | High | 7.8 | 2022-06-13 | Adobe Media Encoder version 15.4 (and earlier) are affected by a memory corruption vulnerability. An unauthenticated attacker could leverage this vulnerability… |
CVE-2021-46817 | High | 7.8 | 2022-06-13 | Adobe Media Encoder version 15.4 (and earlier) are affected by a memory corruption vulnerability. An unauthenticated attacker could leverage this vulnerability… |
CVE-2021-46816 | High | 7.8 | 2022-06-13 | Adobe Premiere Pro version 15.4 (and earlier) are affected by a memory corruption vulnerability. An unauthenticated attacker could leverage this vulnerability… |
CVE-2022-2061 | Low | 3.3 | 2022-06-13 | Heap-based Buffer Overflow in GitHub repository hpjansson/chafa prior to 1.12.0. |
CVE-2021-37404 | Critical | 9.8 | 2022-06-13 | There is a potential heap buffer overflow in Apache Hadoop libhdfs native code. Opening a file path provided by user without validation may result in a denial… |
CVE-2022-21499 | Medium | 6.7 | 2022-06-09 | KGDB and KDB allow read and write access to kernel memory, and thus should be restricted during lockdown. An attacker with access to a serial port could trigge… |
CVE-2022-31031 | Critical | 9.8 | 2022-06-09 | PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN… |
CVE-2022-2000 | High | 7.8 | 2022-06-09 | Out-of-bounds Write in GitHub repository vim/vim prior to 8.2. |
CVE-2020-14125 | High | 7.5 | 2022-06-08 | A denial of service vulnerability exists in some Xiaomi models of phones. The vulnerability is caused by out-of-bound read/write and can be exploited by attack… |
CVE-2022-30926 | Critical | 9.8 | 2022-06-08 | H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the EditMacList parameter at /goform/aspForm. |
CVE-2022-30925 | Critical | 9.8 | 2022-06-08 | H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the AddMacList parameter at /goform/aspForm. |
CVE-2022-30924 | Critical | 9.8 | 2022-06-08 | H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the SetAPWifiorLedInfoById parameter at /goform/aspForm. |
CVE-2022-30923 | Critical | 9.8 | 2022-06-08 | H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the Asp_SetTimingtimeWifiAndLed parameter at /goform/aspForm. |
CVE-2022-30922 | Critical | 9.8 | 2022-06-08 | H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the EditWlanMacList parameter at /goform/aspForm. |
CVE-2022-30921 | Critical | 9.8 | 2022-06-08 | H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the SetMobileAPInfoById parameter at /goform/aspForm. |
CVE-2022-30920 | Critical | 9.8 | 2022-06-08 | H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the Edit_BasicSSID parameter at /goform/aspForm. |
CVE-2022-30919 | Critical | 9.8 | 2022-06-08 | H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the Edit_BasicSSID_5G parameter at /goform/aspForm. |
CVE-2022-30918 | Critical | 9.8 | 2022-06-08 | H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the Asp_SetTelnet parameter at /goform/aspForm. |
CVE-2022-30917 | Critical | 9.8 | 2022-06-08 | H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the AddWlanMacList parameter at /goform/aspForm. |
CVE-2022-30916 | Critical | 9.8 | 2022-06-08 | H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the Asp_SetTelnetDebug parameter at /goform/aspForm. |
CVE-2022-30915 | Critical | 9.8 | 2022-06-08 | H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the UpdateSnat parameter at /goform/aspForm. |
CVE-2022-30914 | Critical | 9.8 | 2022-06-08 | H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the UpdateMacClone parameter at /goform/aspForm. |
CVE-2022-30913 | Critical | 9.8 | 2022-06-08 | H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the ipqos_set_bandwidth parameter at /goform/aspForm. |
CVE-2022-30912 | Critical | 9.8 | 2022-06-08 | H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the UpdateWanParams parameter at /goform/aspForm. |
CVE-2022-30910 | Critical | 9.8 | 2022-06-08 | H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the GO parameter at /goform/aspForm. |
CVE-2022-30909 | Critical | 9.8 | 2022-06-08 | H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the CMD parameter at /goform/aspForm. |
CVE-2022-30790 | High | 7.8 | 2022-06-08 | Das U-Boot 2022.01 has a Buffer Overflow, a different issue than CVE-2022-30552. |
CVE-2019-25063 | Medium | 5.3 | 2022-06-08 | A vulnerability was found in Sricam IP CCTV Camera. It has been classified as critical. Affected is an unknown function of the component Device Viewer. The man… |
CVE-2019-25062 | Medium | 5.3 | 2022-06-08 | A vulnerability was found in Sricam IP CCTV Camera and classified as critical. This issue affects some unknown processing of the component Device Viewer. The m… |
CVE-2022-21759 | Medium | 6.7 | 2022-06-06 | In power service, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution… |
CVE-2022-21754 | Medium | 6.7 | 2022-06-06 | In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution p… |
CVE-2022-21753 | Medium | 6.7 | 2022-06-06 | In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution p… |
CVE-2022-21752 | Medium | 6.7 | 2022-06-06 | In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution p… |
CVE-2022-21751 | Medium | 6.7 | 2022-06-06 | In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution p… |
CVE-2022-21750 | Medium | 6.7 | 2022-06-06 | In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution p… |
CVE-2022-31783 | Medium | 5.5 | 2022-06-02 | Liblouis 3.21.0 has an out-of-bounds write in compileRule in compileTranslationTable.c, as demonstrated by lou_trace. |
CVE-2022-31782 | High | 7.8 | 2022-06-02 | ftbench.c in FreeType Demo Programs through 2.12.1 has a heap-based buffer overflow. |
CVE-2022-30521 | Critical | 9.8 | 2022-06-02 | The LAN-side Web-Configuration Interface has Stack-based Buffer Overflow vulnerability in the D-Link Wi-Fi router firmware DIR-890L DIR890LA1_FW107b09.bin and… |
CVE-2022-29777 | Critical | 9.8 | 2022-06-02 | Onlyoffice Document Server v6.0.0 and below and Core 6.1.0.26 and below were discovered to contain a heap overflow via the component DesktopEditor/fontengine/f… |
CVE-2022-29776 | Critical | 9.8 | 2022-06-02 | Onlyoffice Document Server v6.0.0 and below and Core 6.1.0.26 and below were discovered to contain a stack overflow via the component DesktopEditor/common/File… |
CVE-2022-28690 | High | 7.8 | 2022-06-02 | The affected product is vulnerable to an out-of-bounds write via uninitialized pointer, which may allow an attacker to execute arbitrary code. |
CVE-2022-27184 | High | 7.8 | 2022-06-02 | The affected product is vulnerable to an out-of-bounds write, which may allow an attacker to execute arbitrary code. |
CVE-2022-1943 | High | 7.8 | 2022-06-02 | A flaw out of bounds memory write in the Linux kernel UDF file system functionality was found in the way user triggers some file operation which triggers udf_w… |
CVE-2021-42204 | High | 7.8 | 2022-06-02 | An issue was discovered in swftools through 20201222. A heap-buffer-overflow exists in the function swf_GetBits() located in rfxswf.c. It allows an attacker to… |
CVE-2021-42201 | High | 7.8 | 2022-06-02 | An issue was discovered in swftools through 20201222. A heap-buffer-overflow exists in the function swf_GetD64() located in rfxswf.c. It allows an attacker to… |
CVE-2021-42199 | High | 7.8 | 2022-06-02 | An issue was discovered in swftools through 20201222. A heap buffer overflow exists in the function swf_FontExtract_DefineTextCallback() located in swftext.c… |
CVE-2021-42195 | High | 7.8 | 2022-06-02 | An issue was discovered in swftools through 20201222. A heap-buffer-overflow exists in the function handleEditText() located in swfdump.c. It allows an attacke… |
CVE-2022-31003 | Critical | 9.1 | 2022-05-31 | Sofia-SIP is an open-source Session Initiation Protocol (SIP) User-Agent library. Prior to version 1.13.8, when parsing each line of a sdp message, `rest = rec… |
CVE-2022-1942 | High | 7.8 | 2022-05-31 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. |
CVE-2022-1897 | High | 7.8 | 2022-05-27 | Out-of-bounds Write in GitHub repository vim/vim prior to 8.2. |
CVE-2022-26772 | High | 7.8 | 2022-05-26 | A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.4. An application may be able to execute arbit… |
CVE-2022-26771 | High | 7.8 | 2022-05-26 | A memory corruption issue was addressed with improved state management. This issue is fixed in watchOS 8.6, tvOS 15.5, iOS 15.5 and iPadOS 15.5. A malicious ap… |
CVE-2022-26769 | High | 7.8 | 2022-05-26 | A memory corruption issue was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Bi… |
CVE-2022-26768 | High | 7.8 | 2022-05-26 | A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.4, watchOS 8.6, tvOS 15.5, macOS Big Sur 11.6… |
CVE-2022-26764 | Medium | 4.7 | 2022-05-26 | A memory corruption issue was addressed with improved validation. This issue is fixed in watchOS 8.6, tvOS 15.5, macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5… |
CVE-2022-26761 | High | 7.8 | 2022-05-26 | A memory corruption issue was addressed with improved memory handling. This issue is fixed in Security Update 2022-004 Catalina, macOS Big Sur 11.6.6. An appli… |
CVE-2022-26756 | High | 7.8 | 2022-05-26 | An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS… |
CVE-2022-26751 | High | 7.8 | 2022-05-26 | A memory corruption issue was addressed with improved input validation. This issue is fixed in iTunes 12.12.4 for Windows, iOS 15.5 and iPadOS 15.5, Security U… |
CVE-2022-26748 | High | 8.8 | 2022-05-26 | An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS… |
CVE-2022-26745 | Medium | 5.5 | 2022-05-26 | A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.6.6. A malicious application may disclose restricted… |
CVE-2022-26744 | High | 7.8 | 2022-05-26 | A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 15.5 and iPadOS 15.5. An application may be able to execute… |
CVE-2022-26743 | High | 7.0 | 2022-05-26 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.4. An attacker that has already achieved cod… |
CVE-2022-26740 | High | 7.8 | 2022-05-26 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. An a… |
CVE-2022-26739 | High | 7.8 | 2022-05-26 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. An a… |
CVE-2022-26738 | High | 7.8 | 2022-05-26 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. An a… |
CVE-2022-26737 | High | 7.8 | 2022-05-26 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. An a… |
CVE-2022-26736 | High | 7.8 | 2022-05-26 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. An a… |
CVE-2022-26723 | Critical | 9.8 | 2022-05-26 | A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.4, macOS Big Sur 11.6.6. Mounting a maliciousl… |
CVE-2022-26720 | High | 7.8 | 2022-05-26 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS… |
CVE-2022-26715 | High | 7.8 | 2022-05-26 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS… |
CVE-2022-26714 | High | 7.8 | 2022-05-26 | A memory corruption issue was addressed with improved validation. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, Security Update 2022-004 Catalina… |
CVE-2022-22675 | High | 7.8 | 2022-05-26 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey 1… |
CVE-2022-22672 | High | 7.8 | 2022-05-26 | A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 15.4 and iPadOS 15.4, Security Update 2022-003 Catalina, macO… |
CVE-2022-30789 | High | 7.8 | 2022-05-26 | A crafted NTFS image can cause a heap-based buffer overflow in ntfs_check_log_client_array in NTFS-3G through 2021.8.22. |
CVE-2022-30788 | High | 7.8 | 2022-05-26 | A crafted NTFS image can cause a heap-based buffer overflow in ntfs_mft_rec_alloc in NTFS-3G through 2021.8.22. |
CVE-2022-30786 | High | 7.8 | 2022-05-26 | A crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate in NTFS-3G through 2021.8.22. |