CWE-787 · Out-of-bounds Write (page 85)
Page 85 of 100 — CVEs classified under CWE-787, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-40064 | High | 7.5 | 2022-03-10 | There is a heap-based buffer overflow vulnerability in system components. Successful exploitation of this vulnerability may affect system stability. |
CVE-2021-40060 | High | 7.5 | 2022-03-10 | There is a heap-based buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerability may affect availability. |
CVE-2021-40058 | High | 7.5 | 2022-03-10 | There is a heap-based buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerability may affect availability. |
CVE-2021-40057 | High | 7.5 | 2022-03-10 | There is a heap-based and stack-based buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerability may affect availabili… |
CVE-2021-34340 | Medium | 6.5 | 2022-03-10 | Ming 0.4.8 has an out-of-bounds buffer access issue in the function decompileINCR_DECR() in decompiler.c file that causes a direct segmentation fault and leads… |
CVE-2021-34339 | Medium | 6.5 | 2022-03-10 | Ming 0.4.8 has an out-of-bounds buffer access issue in the function getString() in decompiler.c file that causes a direct segmentation fault and leads to denia… |
CVE-2021-34338 | Medium | 6.5 | 2022-03-10 | Ming 0.4.8 has an out-of-bounds buffer overwrite issue in the function getName() in decompiler.c file that causes a direct segmentation fault and leads to deni… |
CVE-2021-32435 | Medium | 5.5 | 2022-03-10 | Stack-based buffer overflow in the function get_key in parse.c of abcm2ps v8.14.11 allows remote attackers to cause a Denial of Service (DoS) via unspecified v… |
CVE-2022-24501 | High | 7.8 | 2022-03-09 | VP9 Video Extensions Remote Code Execution Vulnerability |
CVE-2022-24457 | High | 7.8 | 2022-03-09 | HEIF Image Extensions Remote Code Execution Vulnerability |
CVE-2022-24456 | High | 7.8 | 2022-03-09 | HEVC Video Extensions Remote Code Execution Vulnerability |
CVE-2022-24453 | High | 7.8 | 2022-03-09 | HEVC Video Extensions Remote Code Execution Vulnerability |
CVE-2022-24451 | High | 7.8 | 2022-03-09 | VP9 Video Extensions Remote Code Execution Vulnerability |
CVE-2022-23282 | High | 7.8 | 2022-03-09 | Paint 3D Remote Code Execution Vulnerability |
CVE-2022-22007 | High | 7.8 | 2022-03-09 | HEVC Video Extensions Remote Code Execution Vulnerability |
CVE-2022-22006 | High | 7.8 | 2022-03-09 | HEVC Video Extensions Remote Code Execution Vulnerability |
CVE-2022-24661 | High | 7.8 | 2022-03-08 | A vulnerability has been identified in Simcenter STAR-CCM+ Viewer (All versions < V2022.1). The starview+.exe contains a memory corruption vulnerability while… |
CVE-2021-42018 | Medium | 5.9 | 2022-03-08 | A vulnerability has been identified in RUGGEDCOM i800, RUGGEDCOM i800NC, RUGGEDCOM i801, RUGGEDCOM i801NC, RUGGEDCOM i802, RUGGEDCOM i802NC, RUGGEDCOM i803, RU… |
CVE-2022-26496 | Critical | 9.8 | 2022-03-06 | In nbd-server in nbd before 3.24, there is a stack-based buffer overflow. An attacker can cause a buffer overflow in the parsing of the name field by sending a… |
CVE-2022-25465 | High | 7.8 | 2022-03-05 | Espruino 2v11 release was discovered to contain a stack buffer overflow via src/jsvar.c in jsvGetNextSibling. |
CVE-2022-25044 | High | 7.8 | 2022-03-05 | Espruino 2v11.251 was discovered to contain a stack buffer overflow via src/jsvar.c in jsvNewFromString. |
CVE-2022-25106 | Medium | 5.5 | 2022-03-04 | D-Link DIR-859 v1.05 was discovered to contain a stack-based buffer overflow via the function genacgi_main. This vulnerability allows attackers to cause a Deni… |
CVE-2021-3575 | High | 7.8 | 2022-03-04 | A heap-based buffer overflow was found in openjpeg in color.c:379:42 in sycc420_to_rgb when decompressing a crafted .j2k file. An attacker could use this to ex… |
CVE-2021-46394 | Critical | 9.8 | 2022-03-04 | There is a stack buffer overflow vulnerability in the formSetPPTPServer function of Tenda-AX3 router V16.03.12.10_CN. The v13 variable is directly retrieved fr… |
CVE-2021-46393 | Critical | 9.8 | 2022-03-04 | There is a stack buffer overflow vulnerability in the formSetPPTPServer function of Tenda-AX3 router V16.03.12.10_CN. The v10 variable is directly retrieved fr… |
CVE-2021-3638 | Medium | 6.5 | 2022-03-03 | An out-of-bounds memory access flaw was found in the ATI VGA device emulation of QEMU. This flaw occurs in the ati_2d_blt() routine while handling MMIO write o… |
CVE-2021-26259 | High | 7.8 | 2022-03-03 | A flaw was found in htmldoc in v1.9.12. Heap buffer overflow in render_table_row(),in ps-pdf.cxx may lead to arbitrary code execution and denial of service. |
CVE-2021-38578 | High | 7.4 | 2022-03-03 | Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize. |
CVE-2021-44335 | High | 7.8 | 2022-03-03 | David Brackeen ok-file-formats 203defd is vulnerable to Buffer Overflow. When the function of the ok-file-formats project is used, a heap-buffer-overflow occur… |
CVE-2021-3623 | Medium | 6.1 | 2022-03-02 | A flaw was found in libtpms. The flaw can be triggered by specially-crafted TPM 2 command packets containing illegal values and may lead to an out-of-bounds ac… |
CVE-2021-23206 | High | 7.8 | 2022-03-02 | A flaw was found in htmldoc in v1.9.12 and prior. A stack buffer overflow in parse_table() in ps-pdf.cxx may lead to execute arbitrary code and denial of servi… |
CVE-2022-25050 | Medium | 5.5 | 2022-03-02 | rtl_433 21.12 was discovered to contain a stack overflow in the function somfy_iohc_decode(). This vulnerability allows attackers to cause a Denial of Service… |
CVE-2021-45863 | Medium | 5.5 | 2022-03-02 | tsMuxer git-2678966 was discovered to contain a heap-based buffer overflow via the function HevcUnit::updateBits in hevc.cpp. |
CVE-2022-26181 | High | 7.8 | 2022-02-28 | Dropbox Lepton v1.2.1-185-g2a08b77 was discovered to contain a heap-buffer-overflow in the function aligned_dealloc():src/lepton/bitops.cc:108. |
CVE-2022-25023 | High | 8.8 | 2022-02-28 | Audio File commit 004065d was discovered to contain a heap-buffer overflow in the function fouBytesToInt():AudioFile.h. |
CVE-2021-44342 | High | 7.8 | 2022-02-28 | David Brackeen ok-file-formats 203defd is vulnerable to Buffer Overflow via function ok_png_transform_scanline() in "/ok_png.c:494". |
CVE-2021-44331 | High | 7.8 | 2022-02-28 | ARM astcenc 3.2.0 is vulnerable to Buffer Overflow in function encode_ise(). |
CVE-2021-44340 | High | 7.8 | 2022-02-28 | David Brackeen ok-file-formats dev version is vulnerable to Buffer Overflow. When the function of the ok-file-formats project is used, a heap-buffer-overflow o… |
CVE-2021-44339 | High | 7.8 | 2022-02-28 | David Brackeen ok-file-formats 203defd is vulnerable to Buffer Overflow. When the function of the ok-file-formats project is used, a heap-buffer-overflow occur… |
CVE-2021-44334 | High | 7.8 | 2022-02-28 | David Brackeen ok-file-formats 97f78ca is vulnerable to Buffer Overflow. When the function of the ok-file-formats project is used, a heap-buffer-overflow occur… |
CVE-2021-43086 | Critical | 9.8 | 2022-02-28 | ARM astcenc 3.2.0 is vulnerable to Buffer Overflow. When the compression function of the astc-encoder project with -cl option was used, a stack-buffer-overflow… |
CVE-2022-25170 | High | 7.8 | 2022-02-25 | The affected product is vulnerable to a stack-based buffer overflow while processing project files, which may allow an attacker to execute arbitrary code |
CVE-2022-23985 | High | 7.8 | 2022-02-25 | The affected product is vulnerable to an out-of-bounds write while processing project files, which allows an attacker to craft a project file that would allow… |
CVE-2021-3610 | High | 7.5 | 2022-02-24 | A heap-based buffer overflow vulnerability was found in ImageMagick in versions prior to 7.0.11-14 in ReadTIFFImage() in coders/tiff.c. This issue is due to an… |
CVE-2021-26252 | High | 7.8 | 2022-02-24 | A flaw was found in htmldoc in v1.9.12. Heap buffer overflow in pspdf_prepare_page(),in ps-pdf.cxx may lead to execute arbitrary code and denial of service. |
CVE-2022-25418 | Critical | 9.8 | 2022-02-24 | Tenda AC9 V15.03.2.21_cn was discovered to contain a stack overflow via the function openSchedWifi. |
CVE-2022-25417 | Critical | 9.8 | 2022-02-24 | Tenda AC9 V15.03.2.21_cn was discovered to contain a stack overflow via the function saveparentcontrolinfo. |
CVE-2022-25414 | Critical | 9.8 | 2022-02-24 | Tenda AC9 V15.03.2.21_cn was discovered to contain a stack overflow via the parameter NPTR. |
CVE-2022-25363 | Medium | 6.5 | 2022-02-24 | WatchGuard Firebox and XTM appliances allow an authenticated remote attacker with unprivileged credentials to modify privileged management user credentials. Th… |
CVE-2022-25293 | High | 8.8 | 2022-02-24 | A systemd stack-based buffer overflow in WatchGuard Firebox and XTM appliances allows an authenticated remote attacker to potentially execute arbitrary code by… |
CVE-2022-25292 | High | 8.8 | 2022-02-24 | A wgagent stack-based buffer overflow in WatchGuard Firebox and XTM appliances allows an authenticated remote attacker to potentially execute arbitrary code by… |
CVE-2022-25074 | Critical | 9.8 | 2022-02-24 | TP-Link TL-WR902AC(US)_V3_191209 routers were discovered to contain a stack overflow in the function DM_ Fillobjbystr(). This vulnerability allows unauthentica… |
CVE-2022-25073 | Critical | 9.8 | 2022-02-24 | TL-WR841Nv14_US_0.9.1_4.18 routers were discovered to contain a stack overflow in the function dm_fillObjByStr(). This vulnerability allows unauthenticated att… |
CVE-2022-25072 | Critical | 9.8 | 2022-02-24 | TP-Link Archer A54 Archer A54(US)_V1_210111 routers were discovered to contain a stack overflow in the function DM_ Fillobjbystr(). This vulnerability allows u… |
CVE-2022-0714 | Medium | 5.5 | 2022-02-22 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.4436. |
CVE-2022-0713 | High | 7.1 | 2022-02-22 | Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.4. |
CVE-2021-46699 | High | 7.8 | 2022-02-22 | A vulnerability has been identified in Simcenter Femap (All versions < V2022.1.1). Affected application contains a stack based buffer overflow vulnerability wh… |
CVE-2021-46162 | High | 7.8 | 2022-02-22 | A vulnerability has been identified in Simcenter Femap (All versions < V2022.1.1). Affected application contains an out of bounds write past the end of an allo… |
CVE-2022-0676 | High | 7.8 | 2022-02-22 | Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.4. |
CVE-2021-44568 | Medium | 6.5 | 2022-02-21 | Two heap-overflow vulnerabilities exist in openSUSE/libsolv libsolv through 13 Dec 2020 in the decisionmap variable via the resolve_dependencies function at sr… |
CVE-2021-44142 | High | 8.8 | 2022-02-21 | The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced compatibility with Apple SMB clients and interoperability with a N… |
CVE-2022-24369 | High | 8.8 | 2022-02-18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. User interaction is required t… |
CVE-2022-24361 | High | 8.8 | 2022-02-18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. User interaction is required t… |
CVE-2022-24355 | High | 8.8 | 2022-02-18 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR940N 3.20.1 Build 200316 Rel.34392n (5… |
CVE-2022-24064 | High | 7.8 | 2022-02-18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro 11.8.8.0. User interaction is required… |
CVE-2022-24063 | High | 7.8 | 2022-02-18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro 13.2.0.21165. User interaction is requ… |
CVE-2022-24059 | High | 7.8 | 2022-02-18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro 11.8.7.0. User interaction is required… |
CVE-2022-24058 | High | 7.8 | 2022-02-18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro 11.8.7.0. User interaction is required… |
CVE-2022-24057 | High | 7.8 | 2022-02-18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro 11.8.7.0. User interaction is required… |
CVE-2022-24056 | High | 7.8 | 2022-02-18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro 11.8.7.0. User interaction is required… |
CVE-2022-24049 | Critical | 9.8 | 2022-02-18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sonos One Speaker prior to 3.4.1 (S2 systems) and 11.2.13 bui… |
CVE-2021-46656 | High | 7.8 | 2022-02-18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to expl… |
CVE-2021-46652 | High | 7.8 | 2022-02-18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to expl… |
CVE-2021-46647 | High | 7.8 | 2022-02-18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is… |
CVE-2021-46646 | High | 7.8 | 2022-02-18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is… |
CVE-2021-46645 | High | 7.8 | 2022-02-18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is… |
CVE-2021-46644 | High | 7.8 | 2022-02-18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is… |
CVE-2021-46640 | High | 7.8 | 2022-02-18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to expl… |
CVE-2021-46639 | High | 7.8 | 2022-02-18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is… |
CVE-2021-46635 | High | 7.8 | 2022-02-18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is… |
CVE-2021-46634 | High | 7.8 | 2022-02-18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is… |
CVE-2021-46604 | High | 7.8 | 2022-02-18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is… |
CVE-2021-46598 | High | 7.8 | 2022-02-18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is… |
CVE-2021-46586 | High | 7.8 | 2022-02-18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is… |
CVE-2021-46585 | High | 7.8 | 2022-02-18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is… |
CVE-2021-46584 | High | 7.8 | 2022-02-18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is… |
CVE-2021-46583 | High | 7.8 | 2022-02-18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is… |
CVE-2021-46581 | High | 7.8 | 2022-02-18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is… |
CVE-2021-46576 | High | 7.8 | 2022-02-18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is… |
CVE-2021-46574 | High | 7.8 | 2022-02-18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is… |
CVE-2021-46572 | High | 7.8 | 2022-02-18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is… |
CVE-2021-46569 | High | 7.8 | 2022-02-18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is… |
CVE-2021-46568 | High | 7.8 | 2022-02-18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is… |
CVE-2021-46564 | High | 7.8 | 2022-02-18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is… |
CVE-2021-4093 | High | 8.8 | 2022-02-18 | A flaw was found in the KVM's AMD code for supporting the Secure Encrypted Virtualization-Encrypted State (SEV-ES). A KVM guest using SEV-ES can trigger out-of… |
CVE-2021-4090 | High | 7.1 | 2022-02-18 | An out-of-bounds (OOB) memory write flaw was found in the NFSD in the Linux kernel. Missing sanity may lead to a write beyond bmval[bmlen-1] in nfsd4_decode_bi… |
CVE-2021-20325 | Critical | 9.8 | 2022-02-18 | Missing fixes for CVE-2021-40438 and CVE-2021-26691 in the versions of httpd, as shipped in Red Hat Enterprise Linux 8.5.0, causes a security regression compar… |
CVE-2022-23318 | High | 7.1 | 2022-02-17 | A heap-buffer-overflow in pcf2bdf, versions >= 1.05 allows an attacker to trigger unsafe memory access via a specially crafted PCF font file. This out-of-bound… |
CVE-2022-22899 | Medium | 5.5 | 2022-02-17 | Core FTP / SFTP Server v2 Build 725 was discovered to allow unauthenticated attackers to cause a Denial of Service (DoS) via a crafted packet through the SSH s… |
CVE-2022-0629 | High | 7.8 | 2022-02-17 | Stack-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. |