CWE-787 · Out-of-bounds Write (page 87)
Page 87 of 100 — CVEs classified under CWE-787, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-24155 | High | 7.5 | 2022-02-04 | Tenda AX3 v16.03.12.10_CN was discovered to contain a heap overflow in the function setSchedWifi. This vulnerability allows attackers to cause a Denial of Serv… |
CVE-2022-24154 | High | 7.5 | 2022-02-04 | Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetRebootTimer. This vulnerability allows attackers to cause a Denial… |
CVE-2022-24153 | High | 7.5 | 2022-02-04 | Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formAddMacfilterRule. This vulnerability allows attackers to cause a Denia… |
CVE-2022-24152 | High | 7.5 | 2022-02-04 | Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromSetRouteStatic. This vulnerability allows attackers to cause a Denial… |
CVE-2022-24151 | High | 7.5 | 2022-02-04 | Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromSetWifiGusetBasic. This vulnerability allows attackers to cause a Deni… |
CVE-2022-24149 | High | 7.5 | 2022-02-04 | Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromSetWirelessRepeat. This vulnerability allows attackers to cause a Deni… |
CVE-2022-24147 | High | 7.5 | 2022-02-04 | Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromAdvSetMacMtuWan. This vulnerability allows attackers to cause a Denial… |
CVE-2022-24146 | High | 7.5 | 2022-02-04 | Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetQosBand. This vulnerability allows attackers to cause a Denial of S… |
CVE-2022-24145 | High | 7.5 | 2022-02-04 | Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formWifiBasicSet. This vulnerability allows attackers to cause a Denial of… |
CVE-2022-24143 | High | 7.5 | 2022-02-04 | Tenda AX3 v16.03.12.10_CN and AX12 22.03.01.2_CN was discovered to contain a stack overflow in the function form_fast_setting_wifi_set. This vulnerability allo… |
CVE-2022-24142 | High | 7.5 | 2022-02-04 | Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetFirewallCfg. This vulnerability allows attackers to cause a Denial… |
CVE-2021-45997 | High | 7.5 | 2022-02-04 | Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formSetPortMapping. This vulnerability allows attacker… |
CVE-2021-45996 | High | 7.5 | 2022-02-04 | Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formSetPortMapping. This vulnerability allows attacker… |
CVE-2021-45995 | High | 7.5 | 2022-02-04 | Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formSetStaticRoute. This vulnerability allows attacker… |
CVE-2021-45994 | High | 7.5 | 2022-02-04 | Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formDelDhcpRule. This vulnerability allows attackers t… |
CVE-2021-45993 | High | 7.5 | 2022-02-04 | Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formIPMacBindModify. This vulnerability allows attacke… |
CVE-2021-45992 | High | 7.5 | 2022-02-04 | Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formSetQvlanList. This vulnerability allows attackers… |
CVE-2021-45991 | High | 7.5 | 2022-02-04 | Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formAddVpnUsers. This vulnerability allows attackers t… |
CVE-2021-45989 | High | 7.5 | 2022-02-04 | Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function guestWifiRuleRefresh. This vulnerability allows attack… |
CVE-2021-45988 | High | 7.5 | 2022-02-04 | Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formAddDnsForward. This vulnerability allows attackers… |
CVE-2022-21740 | High | 7.6 | 2022-02-03 | Tensorflow is an Open Source Machine Learning Framework. The implementation of `SparseCountSparseOutput` is vulnerable to a heap overflow. The fix will be incl… |
CVE-2022-24031 | High | 8.2 | 2022-02-03 | An issue was discovered in NvmExpressDxe in Insyde InsydeH2O with kernel 5.1 through 5.5. An SMM memory corruption vulnerability allows an attacker to write fi… |
CVE-2022-24030 | High | 7.5 | 2022-02-03 | An issue was discovered in AhciBusDxe in Insyde InsydeH2O with kernel 5.1 through 5.5. An SMM memory corruption vulnerability allows an attacker to write fixed… |
CVE-2021-43615 | High | 8.2 | 2022-02-03 | An issue was discovered in HddPassword in Insyde InsydeH2O with kernel 5.1 before 05.16.23, 5.2 before 05.26.23, 5.3 before 05.35.23, 5.4 before 05.43.22, and… |
CVE-2021-42554 | High | 8.2 | 2022-02-03 | An issue was discovered in Insyde InsydeH2O with Kernel 5.0 before 05.08.42, Kernel 5.1 before 05.16.42, Kernel 5.2 before 05.26.42, Kernel 5.3 before 05.35.42… |
CVE-2021-42059 | Medium | 6.7 | 2022-02-03 | An issue was discovered in Insyde InsydeH2O Kernel 5.0 before 05.08.41, Kernel 5.1 before 05.16.41, Kernel 5.2 before 05.26.41, Kernel 5.3 before 05.35.41, and… |
CVE-2021-43522 | High | 7.5 | 2022-02-03 | An issue was discovered in Insyde InsydeH2O with kernel 5.1 through 2021-11-08, 5.2 through 2021-11-08, and 5.3 through 2021-11-08. A StorageSecurityCommandDxe… |
CVE-2021-36193 | Medium | 6.7 | 2022-02-02 | Multiple stack-based buffer overflows in the command line interpreter of FortiWeb before 6.4.2 may allow an authenticated attacker to achieve arbitrary code ex… |
CVE-2020-26208 | Medium | 5.3 | 2022-02-02 | JHEAD is a simple command line tool for displaying and some manipulation of EXIF header data embedded in Jpeg images from digital cameras. In affected versions… |
CVE-2022-24197 | Medium | 6.5 | 2022-02-01 | iText v7.1.17 was discovered to contain a stack-based buffer overflow via the component ByteBuffer.append, which allows attackers to cause a Denial of Service… |
CVE-2022-0417 | High | 7.8 | 2022-02-01 | Heap-based Buffer Overflow GitHub repository vim/vim prior to 8.2. |
CVE-2022-0408 | High | 7.8 | 2022-01-30 | Stack-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. |
CVE-2022-0407 | High | 7.8 | 2022-01-30 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. |
CVE-2022-0392 | High | 7.8 | 2022-01-28 | Heap-based Buffer Overflow in GitHub repository vim prior to 8.2. |
CVE-2022-21796 | High | 8.2 | 2022-01-28 | A memory corruption vulnerability exists in the netserver parse_command_list functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP re… |
CVE-2022-21217 | Critical | 9.8 | 2022-01-28 | An out-of-bounds write vulnerability exists in the device TestEmail functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted network request… |
CVE-2021-4034 | High | 7.8 | 2022-01-28 | A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users t… |
CVE-2021-22807 | High | 7.8 | 2022-01-28 | A CWE-787: Out-of-bounds Write vulnerability exists that could cause arbitrary code execution when a malicious *.gd1 configuration file is loaded into the GUIc… |
CVE-2021-46527 | High | 7.8 | 2022-01-27 | Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjs_get_cstring at src/mjs_string.c. |
CVE-2021-46524 | High | 7.8 | 2022-01-27 | Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via snquote at mjs/src/mjs_json.c. |
CVE-2021-46523 | High | 7.8 | 2022-01-27 | Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via to_json_or_debug at mjs/src/mjs_json.c. |
CVE-2021-46522 | High | 7.8 | 2022-01-27 | Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via /usr/lib/x86_64-linux-gnu/libasan.so.4+0xaff53. |
CVE-2021-46520 | High | 7.8 | 2022-01-27 | Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjs_jprintf at src/mjs_util.c. |
CVE-2021-46519 | High | 7.8 | 2022-01-27 | Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjs_array_length at src/mjs_array.c. |
CVE-2021-46518 | High | 7.8 | 2022-01-27 | Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjs_disown at src/mjs_core.c. |
CVE-2022-0361 | High | 7.8 | 2022-01-26 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. |
CVE-2022-0359 | High | 7.8 | 2022-01-26 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. |
CVE-2021-36347 | High | 7.2 | 2022-01-25 | iDRAC9 versions prior to 5.00.20.00 and iDRAC8 versions prior to 2.82.82.82 contain a stack-based buffer overflow vulnerability. An authenticated remote attack… |
CVE-2021-46483 | High | 7.8 | 2022-01-25 | Jsish v3.5.0 was discovered to contain a heap buffer overflow via BooleanConstructor at src/jsiBool.c. |
CVE-2021-46482 | High | 7.8 | 2022-01-25 | Jsish v3.5.0 was discovered to contain a heap buffer overflow via NumberConstructor at src/jsiNumber.c. |
CVE-2021-46480 | Medium | 5.5 | 2022-01-25 | Jsish v3.5.0 was discovered to contain a heap buffer overflow via jsiValueObjDelete in src/jsiEval.c. This vulnerability can lead to a Denial of Service (DoS). |
CVE-2021-46478 | Medium | 5.5 | 2022-01-25 | Jsish v3.5.0 was discovered to contain a heap buffer overflow via jsiClearStack in src/jsiEval.c. This vulnerability can lead to a Denial of Service (DoS). |
CVE-2021-46477 | Medium | 5.5 | 2022-01-25 | Jsish v3.5.0 was discovered to contain a heap buffer overflow via RegExp_constructor in src/jsiRegexp.c. This vulnerability can lead to a Denial of Service (Do… |
CVE-2021-46475 | Medium | 5.5 | 2022-01-25 | Jsish v3.5.0 was discovered to contain a heap buffer overflow via jsi_ArraySliceCmd in src/jsiArray.c. This vulnerability can lead to a Denial of Service (DoS). |
CVE-2021-46474 | Medium | 5.5 | 2022-01-25 | Jsish v3.5.0 was discovered to contain a heap buffer overflow via jsiEvalCodeSub in src/jsiEval.c. This vulnerability can lead to a Denial of Service (DoS). |
CVE-2022-23850 | High | 7.8 | 2022-01-23 | xhtml_translate_entity in xhtml.c in epub2txt (aka epub2txt2) through 2.02 allows a stack-based buffer overflow via a crafted EPUB document. |
CVE-2021-46238 | Medium | 5.5 | 2022-01-21 | GPAC v1.1.0 was discovered to contain a stack overflow via the function gf_node_get_name () at scenegraph/base_scenegraph.c. This vulnerability can lead to a p… |
CVE-2022-0318 | Critical | 9.8 | 2022-01-21 | Heap-based Buffer Overflow in vim/vim prior to 8.2. |
CVE-2022-21933 | Medium | 6.7 | 2022-01-21 | ASUS VivoMini/Mini PC device has an improper input validation vulnerability. A local attacker with system privilege can use system management interrupt (SMI) t… |
CVE-2022-22895 | High | 7.8 | 2022-01-21 | Jerryscript 3.0.0 was discovered to contain a heap-buffer-overflow via ecma_utf8_string_to_number_by_radix in /jerry-core/ecma/base/ecma-helpers-conversion.c. |
CVE-2022-22894 | High | 7.8 | 2022-01-21 | Jerryscript 3.0.0 was discovered to contain a stack overflow via ecma_lcache_lookup in /jerry-core/ecma/base/ecma-lcache.c. |
CVE-2022-22893 | High | 7.8 | 2022-01-21 | Jerryscript 3.0.0 was discovered to contain a stack overflow via vm_loop.lto_priv.304 in /jerry-core/vm/vm.c. |
CVE-2022-22888 | High | 7.8 | 2022-01-20 | Jerryscript 3.0.0 was discovered to contain a stack overflow via ecma_op_object_find_own in /ecma/operations/ecma-objects.c. |
CVE-2021-46334 | High | 7.8 | 2022-01-20 | Moddable SDK v11.5.0 was discovered to contain a stack buffer overflow via the component __interceptor_strcat. |
CVE-2021-46332 | High | 7.8 | 2022-01-20 | Moddable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via xs/sources/xsDataView.c in fxUint8Getter. |
CVE-2021-46328 | High | 7.8 | 2022-01-20 | Moddable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via the component __libc_start_main. |
CVE-2021-46326 | High | 7.8 | 2022-01-20 | Moddable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via the component __asan_memcpy. |
CVE-2021-46325 | High | 7.8 | 2022-01-20 | Espruino 2v10.246 was discovered to contain a stack buffer overflow via src/jsutils.c in vcbprintf. |
CVE-2021-46324 | High | 7.8 | 2022-01-20 | Espruino 2v11.251 was discovered to contain a stack buffer overflow via src/jsvar.c in jsvNewFromString. |
CVE-2021-45417 | High | 7.8 | 2022-01-20 | AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata (such as XFS extended attributes or tmpfs ACLs), because of a heap-ba… |
CVE-2021-33913 | Critical | 9.8 | 2022-01-19 | libspf2 before 1.2.11 has a heap-based buffer overflow that might allow remote attackers to execute arbitrary code (via an unauthenticated e-mail message from… |
CVE-2021-33912 | Critical | 9.8 | 2022-01-19 | libspf2 before 1.2.11 has a four-byte heap-based buffer overflow that might allow remote attackers to execute arbitrary code (via an unauthenticated e-mail mes… |
CVE-2021-34402 | Medium | 6.7 | 2022-01-18 | NVIDIA Tegra kernel driver contains a vulnerability in NVIDIA NVDEC, where a user with high privileges might be able to read from or write to a memory location… |
CVE-2020-14107 | High | 7.5 | 2022-01-18 | A stack overflow in the HTTP server of Cast can be exploited to make the app crash in LAN. |
CVE-2022-0261 | High | 7.8 | 2022-01-18 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. |
CVE-2021-38783 | High | 7.5 | 2022-01-18 | There is a Out-of-Bound Write in the Allwinner R818 SoC Android Q SDK V1.0 camera driver "/dev/cedar_dev" through iotcl cmd IOCTL_SET_PROC_INFO and IOCTL_COPY_… |
CVE-2022-23095 | High | 7.8 | 2022-01-15 | Open Design Alliance Drawings SDK before 2022.12.1 mishandles the loading of JPG files. Unchecked input data from a crafted JPG file leads to memory corruption… |
CVE-2021-46168 | Medium | 5.5 | 2022-01-14 | Spin v6.5.1 was discovered to contain an out-of-bounds write in lex() at spinlex.c. |
CVE-2022-21137 | High | 7.8 | 2022-01-14 | Omron CX-One Versions 4.60 and prior are vulnerable to a stack-based buffer overflow while processing specific project files, which may allow an attacker to ex… |
CVE-2021-45068 | High | 7.8 | 2022-01-14 | Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by an out-of-bounds write vulnerab… |
CVE-2021-45061 | High | 7.8 | 2022-01-14 | Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by an out-of-bounds write vulnerab… |
CVE-2021-44828 | High | 7.8 | 2022-01-14 | Arm Mali GPU Kernel Driver (Midgard r26p0 through r30p0, Bifrost r0p0 through r34p0, and Valhall r19p0 through r34p0) allows a non-privileged user to achieve w… |
CVE-2021-44743 | High | 7.8 | 2022-01-14 | Adobe Bridge version 11.1.2 (and earlier) and version 12.0 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary co… |
CVE-2021-44709 | High | 7.8 | 2022-01-14 | Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a heap overflow vulnerability d… |
CVE-2021-44708 | High | 7.8 | 2022-01-14 | Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a heap overflow vulnerability d… |
CVE-2021-44707 | High | 7.8 | 2022-01-14 | Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by an out-of-bounds write vulnerab… |
CVE-2021-44703 | High | 7.8 | 2022-01-14 | Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a stack buffer overflow vulnera… |
CVE-2021-39683 | Medium | 6.7 | 2022-01-14 | In copy_from_mbox of sss_ice_util.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege wi… |
CVE-2021-39682 | High | 7.8 | 2022-01-14 | In mgm_alloc_page of memory_group_manager.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of p… |
CVE-2021-39632 | High | 7.8 | 2022-01-14 | In inotify_cb of events.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no… |
CVE-2021-39623 | Critical | 9.8 | 2022-01-14 | In doRead of SimpleDecodingSource.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privil… |
CVE-2021-23157 | High | 7.8 | 2022-01-14 | WECON LeviStudioU Versions 2019-09-21 and prior are vulnerable to a heap-based buffer overflow, which may allow an attacker to remotely execute code. |
CVE-2021-23138 | High | 7.8 | 2022-01-14 | WECON LeviStudioU Versions 2019-09-21 and prior are vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute code. |
CVE-2022-0213 | Medium | 6.6 | 2022-01-14 | vim is vulnerable to Heap-based Buffer Overflow |
CVE-2021-38692 | High | 8.1 | 2022-01-14 | A stack buffer overflow vulnerability has been reported to affect QNAP device running QVR Elite, QVR Pro, QVR Guard. If exploited, this vulnerability allows at… |
CVE-2021-38691 | High | 8.1 | 2022-01-14 | A stack buffer overflow vulnerability has been reported to affect QNAP device running QVR Elite, QVR Pro, QVR Guard. If exploited, this vulnerability allows at… |
CVE-2021-38690 | High | 8.1 | 2022-01-14 | A stack buffer overflow vulnerability has been reported to affect QNAP device running QVR Elite, QVR Pro, QVR Guard. If exploited, this vulnerability allows at… |
CVE-2021-38689 | High | 8.1 | 2022-01-14 | A stack buffer overflow vulnerability has been reported to affect QNAP device running QVR Elite, QVR Pro, QVR Guard. If exploited, this vulnerability allows at… |
CVE-2021-38682 | High | 8.1 | 2022-01-14 | A stack buffer overflow vulnerability has been reported to affect QNAP device running QVR Elite, QVR Pro, QVR Guard. If exploited, this vulnerability allows at… |
CVE-2021-34980 | High | 8.8 | 2022-01-13 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.78_1.0.1 routers. Authenticatio… |