CWE-787 · Out-of-bounds Write (page 88)
Page 88 of 100 — CVEs classified under CWE-787, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-34978 | High | 8.8 | 2022-01-13 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.78_1.0.1 routers. Authenticatio… |
CVE-2021-34945 | High | 7.8 | 2022-01-13 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to expl… |
CVE-2021-34941 | High | 7.8 | 2022-01-13 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to expl… |
CVE-2021-34940 | High | 7.8 | 2022-01-13 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to expl… |
CVE-2021-34938 | High | 7.8 | 2022-01-13 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to expl… |
CVE-2021-34935 | High | 7.8 | 2022-01-13 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to expl… |
CVE-2021-34932 | High | 7.8 | 2022-01-13 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to expl… |
CVE-2021-34929 | High | 7.8 | 2022-01-13 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to expl… |
CVE-2021-34928 | High | 7.8 | 2022-01-13 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to expl… |
CVE-2021-34926 | High | 7.8 | 2022-01-13 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to expl… |
CVE-2021-34925 | High | 7.8 | 2022-01-13 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to expl… |
CVE-2021-34924 | High | 7.8 | 2022-01-13 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to expl… |
CVE-2021-34923 | High | 7.8 | 2022-01-13 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to expl… |
CVE-2021-34921 | High | 7.8 | 2022-01-13 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to expl… |
CVE-2021-34920 | High | 7.8 | 2022-01-13 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to expl… |
CVE-2021-34918 | High | 7.8 | 2022-01-13 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to expl… |
CVE-2021-34915 | High | 7.8 | 2022-01-13 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to expl… |
CVE-2021-34914 | High | 7.8 | 2022-01-13 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to expl… |
CVE-2021-34907 | High | 7.8 | 2022-01-13 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to expl… |
CVE-2021-34905 | High | 7.8 | 2022-01-13 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to expl… |
CVE-2021-34904 | High | 7.8 | 2022-01-13 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to expl… |
CVE-2021-34903 | High | 7.8 | 2022-01-13 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to expl… |
CVE-2021-34900 | High | 7.8 | 2022-01-13 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to expl… |
CVE-2021-34899 | High | 7.8 | 2022-01-13 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to expl… |
CVE-2021-34898 | High | 7.8 | 2022-01-13 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to expl… |
CVE-2021-34897 | High | 7.8 | 2022-01-13 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to expl… |
CVE-2021-34896 | High | 7.8 | 2022-01-13 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to expl… |
CVE-2021-34893 | High | 7.8 | 2022-01-13 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to expl… |
CVE-2021-34892 | High | 7.8 | 2022-01-13 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to expl… |
CVE-2021-34878 | High | 7.8 | 2022-01-13 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to expl… |
CVE-2021-34877 | High | 7.8 | 2022-01-13 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to expl… |
CVE-2021-34876 | High | 7.8 | 2022-01-13 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to expl… |
CVE-2021-34875 | High | 7.8 | 2022-01-13 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to expl… |
CVE-2021-34873 | High | 7.8 | 2022-01-13 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to expl… |
CVE-2021-34871 | High | 7.8 | 2022-01-13 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to expl… |
CVE-2022-22989 | Critical | 9.8 | 2022-01-13 | My Cloud OS 5 was vulnerable to a pre-authenticated stack overflow vulnerability on the FTP service that could be exploited by unauthenticated attackers on the… |
CVE-2021-45058 | High | 7.8 | 2022-01-13 | Adobe InDesign version 16.4 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of t… |
CVE-2021-45057 | High | 7.8 | 2022-01-13 | Adobe InDesign version 16.4 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of t… |
CVE-2021-45056 | High | 7.8 | 2022-01-13 | Adobe InCopy version 16.4 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the… |
CVE-2021-45053 | High | 7.8 | 2022-01-13 | Adobe InCopy version 16.4 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the… |
CVE-2021-37530 | Medium | 5.5 | 2022-01-12 | A denial of service vulnerabiity exists in fig2dev through 3.28a due to a segfault in the open_stream function in readpics.c. |
CVE-2021-36417 | High | 7.8 | 2022-01-12 | A heap-based buffer overflow vulnerability exists in GPAC v1.0.1 in the gf_isom_dovi_config_get function in MP4Box, which causes a denial of service or execute… |
CVE-2021-44648 | High | 8.8 | 2022-01-12 | GNOME gdk-pixbuf 2.42.6 is vulnerable to a heap-buffer overflow vulnerability when decoding the lzw compressed stream of image data in GIF files with lzw minim… |
CVE-2022-21917 | High | 7.8 | 2022-01-11 | HEVC Video Extensions Remote Code Execution Vulnerability |
CVE-2022-21882 | High | 7.0 | 2022-01-11 | Win32k Elevation of Privilege Vulnerability |
CVE-2021-34704 | High | 8.6 | 2022-01-11 | A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow… |
CVE-2021-1573 | High | 8.6 | 2022-01-11 | A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow… |
CVE-2021-36414 | High | 7.8 | 2022-01-10 | A heab-based buffer overflow vulnerability exists in MP4Box in GPAC 1.0.1 via media.c, which allows attackers to cause a denial of service or execute arbitrary… |
CVE-2021-36412 | High | 7.8 | 2022-01-10 | A heap-based buffer overflow vulnerability exists in MP4Box in GPAC 1.0.1 via the gp_rtp_builder_do_mpeg12_video function, which allows attackers to possibly h… |
CVE-2021-36410 | Medium | 5.5 | 2022-01-10 | A stack-buffer-overflow exists in libde265 v1.0.8 via fallback-motion.cc in function put_epel_hv_fallback when running program dec265. |
CVE-2022-0158 | Low | 3.3 | 2022-01-10 | vim is vulnerable to Heap-based Buffer Overflow |
CVE-2021-43579 | High | 7.8 | 2022-01-10 | A stack-based buffer overflow in image_load_bmp() in HTMLDOC <= 1.9.13 results in remote code execution if the victim converts an HTML document linking to a cr… |
CVE-2021-40028 | High | 7.5 | 2022-01-10 | The eID module has an out-of-bounds memory write vulnerability,Successful exploitation of this vulnerability may affect data integrity. |
CVE-2021-40026 | High | 7.5 | 2022-01-10 | There is a Heap-based buffer overflow vulnerability in the AOD module in smartphones. Successful exploitation of this vulnerability may affect service integrit… |
CVE-2021-40021 | High | 7.5 | 2022-01-10 | The eID module has an out-of-bounds memory write vulnerability,Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2021-40014 | High | 7.5 | 2022-01-10 | The bone voice ID trusted application (TA) has a heap overflow vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2021-40010 | Critical | 9.8 | 2022-01-10 | The bone voice ID TA has a heap overflow vulnerability.Successful exploitation of this vulnerability may result in malicious code execution. |
CVE-2021-40009 | Medium | 5.3 | 2022-01-10 | There is an Out-of-bounds write vulnerability in the AOD module in smartphones. Successful exploitation of this vulnerability may affect service integrity. |
CVE-2021-40002 | High | 8.8 | 2022-01-10 | The Bluetooth module has an out-of-bounds write vulnerability. Successful exploitation of this vulnerability may result in malicious command execution at the r… |
CVE-2021-40000 | High | 8.8 | 2022-01-10 | The Bluetooth module has an out-of-bounds write vulnerability. Successful exploitation of this vulnerability may result in malicious command execution at the r… |
CVE-2021-39996 | Critical | 9.8 | 2022-01-10 | There is a Heap-based buffer overflow vulnerability with the NFC module in smartphones. Successful exploitation of this vulnerability may cause memory overflow. |
CVE-2021-32998 | High | 7.4 | 2022-01-10 | The FANUC R-30iA and R-30iB series controllers are vulnerable to an out-of-bounds write, which may allow an attacker to remotely execute arbitrary code. INIT S… |
CVE-2021-20048 | High | 8.8 | 2022-01-10 | A Stack-based buffer overflow in the SonicOS SessionID HTTP response header allows a remote authenticated attacker to cause Denial of Service (DoS) and potenti… |
CVE-2021-20046 | High | 8.8 | 2022-01-10 | A Stack-based buffer overflow in the SonicOS HTTP Content-Length response header allows a remote authenticated attacker to cause Denial of Service (DoS) and po… |
CVE-2022-22707 | Medium | 5.9 | 2022-01-06 | In lighttpd 1.4.46 through 1.4.63, the mod_extforward_Forwarded function of the mod_extforward plugin has a stack-based buffer overflow (4 bytes representing -… |
CVE-2021-45971 | High | 8.2 | 2022-01-06 | An issue was discovered in SdHostDriver in Insyde InsydeH2O with kernel 5.1 before 05.16.25, 5.2 before 05.26.25, 5.3 before 05.35.25, 5.4 before 05.43.25, and… |
CVE-2021-45970 | High | 8.2 | 2022-01-05 | An issue was discovered in IdeBusDxe in Insyde InsydeH2O with kernel 5.1 before 05.16.25, 5.2 before 05.26.25, 5.3 before 05.35.25, 5.4 before 05.43.25, and 5… |
CVE-2021-45969 | High | 8.2 | 2022-01-05 | An issue was discovered in AhciBusDxe in Insyde InsydeH2O with kernel 5.1 before 05.16.25, 5.2 before 05.26.25, 5.3 before 05.35.25, 5.4 before 05.43.25, and 5… |
CVE-2021-45833 | Medium | 5.5 | 2022-01-05 | A Stack-based Buffer Overflow Vulnerability exists in HDF5 1.13.1-1 via the H5D__create_chunk_file_map_hyper function in /hdf5/src/H5Dchunk.c, which causes a D… |
CVE-2021-45830 | Medium | 5.5 | 2022-01-05 | A heap-based buffer overflow vulnerability exists in HDF5 1.13.1-1 via H5F_addr_decode_len in /hdf5/src/H5Fint.c, which could cause a Denial of Service. |
CVE-2021-22045 | High | 7.8 | 2022-01-04 | VMware ESXi (7.0, 6.7 before ESXi670-202111101-SG and 6.5 before ESXi650-202110101-SG), VMware Workstation (16.2.0) and VMware Fusion (12.2.0) contains a heap-… |
CVE-2021-24042 | Critical | 9.8 | 2022-01-04 | The calling logic for WhatsApp for Android prior to v2.21.23, WhatsApp Business for Android prior to v2.21.23, WhatsApp for iOS prior to v2.21.230, WhatsApp Bu… |
CVE-2022-20014 | Medium | 6.7 | 2022-01-04 | In vow driver, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution p… |
CVE-2021-39990 | Critical | 9.8 | 2022-01-03 | The screen lock module has a Stack-based Buffer Overflow vulnerability.Successful exploitation of this vulnerability may affect user experience. |
CVE-2021-35093 | Medium | 6.5 | 2022-01-03 | Possible memory corruption in BT controller when it receives an oversized LMP packet over 2-DH1 link and leads to denial of service in BlueCore |
CVE-2021-45943 | Medium | 5.5 | 2022-01-01 | GDAL 3.3.0 through 3.4.0 has a heap-based buffer overflow in PCIDSK::CPCIDSKFile::ReadFromFile (called from PCIDSK::CPCIDSKSegment::ReadFromFile and PCIDSK::CP… |
CVE-2021-45942 | Medium | 5.5 | 2022-01-01 | OpenEXR 3.1.x before 3.1.4 has a heap-based buffer overflow in Imf_3_1::LineCompositeTask::execute (called from IlmThread_3_1::NullThreadPoolProvider::addTask… |
CVE-2021-45941 | Medium | 6.5 | 2022-01-01 | libbpf 0.6.0 and 0.6.1 has a heap-based buffer overflow (8 bytes) in __bpf_object__open (called from bpf_object__open_mem and bpf-object-fuzzer.c). |
CVE-2021-45940 | Medium | 6.5 | 2022-01-01 | libbpf 0.6.0 and 0.6.1 has a heap-based buffer overflow (4 bytes) in __bpf_object__open (called from bpf_object__open_mem and bpf-object-fuzzer.c). |
CVE-2021-45939 | Medium | 5.5 | 2022-01-01 | wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClient_DecodePacket (called from MqttClient_WaitType and MqttClient_Subscribe). |
CVE-2021-45938 | Medium | 5.5 | 2022-01-01 | wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClient_DecodePacket (called from MqttClient_WaitType and MqttClient_Unsubscribe). |
CVE-2021-45937 | Medium | 5.5 | 2022-01-01 | wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClient_DecodePacket (called from MqttClient_WaitType and MqttClient_Connect). |
CVE-2021-45936 | Medium | 5.5 | 2022-01-01 | wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttDecode_Disconnect (called from MqttClient_DecodePacket and MqttClient_WaitType). |
CVE-2021-45935 | Medium | 5.5 | 2022-01-01 | Grok 9.5.0 has a heap-based buffer overflow in openhtj2k::T1OpenHTJ2K::decompress (called from std::__1::__packaged_task_func<std::__1::__bind<grk::T1Decompres… |
CVE-2021-45934 | Medium | 5.5 | 2022-01-01 | wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClient_DecodePacket (called from MqttClient_HandlePacket and MqttClient_WaitType). |
CVE-2021-45933 | Medium | 5.5 | 2022-01-01 | wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow (8 bytes) in MqttDecode_Publish (called from MqttClient_DecodePacket and MqttClient_HandlePacket). |
CVE-2021-45932 | Medium | 5.5 | 2022-01-01 | wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow (4 bytes) in MqttDecode_Publish (called from MqttClient_DecodePacket and MqttClient_HandlePacket). |
CVE-2021-45931 | Medium | 6.5 | 2022-01-01 | HarfBuzz 2.9.0 has an out-of-bounds write in hb_bit_set_invertible_t::set (called from hb_sparseset_t<hb_bit_set_invertible_t>::set and hb_set_copy). |
CVE-2021-45930 | Medium | 5.5 | 2022-01-01 | Qt SVG in Qt 5.0.0 through 5.15.2 and 6.0.0 through 6.2.1 has an out-of-bounds write in QtPrivate::QCommonArrayOps<QPainterPath::Element>::growAppend (called f… |
CVE-2021-45928 | Medium | 5.5 | 2022-01-01 | libjxl b02d6b9, as used in libvips 8.11 through 8.11.2 and other products, has an out-of-bounds write in jxl::ModularFrameDecoder::DecodeGroup (called from jxl… |
CVE-2021-45927 | High | 7.8 | 2022-01-01 | MDB Tools (aka mdbtools) 0.9.2 has a stack-based buffer overflow (at 0x7ffd6e029ee0) in mdb_numeric_to_string (called from mdb_xfer_bound_data and _mdb_attempt… |
CVE-2021-45926 | High | 7.8 | 2022-01-01 | MDB Tools (aka mdbtools) 0.9.2 has a stack-based buffer overflow (at 0x7ffd0c689be0) in mdb_numeric_to_string (called from mdb_xfer_bound_data and _mdb_attempt… |
CVE-2021-45958 | Medium | 5.5 | 2022-01-01 | UltraJSON (aka ujson) through 5.1.0 has a stack-based buffer overflow in Buffer_AppendIndentUnchecked (called from encode). Exploitation can, for example, use… |
CVE-2021-45957 | Critical | 9.8 | 2022-01-01 | Dnsmasq 2.86 has a heap-based buffer overflow in answer_request (called from FuzzAnswerTheRequest and fuzz_rfc1035.c). NOTE: the vendor's position is that CVE-… |
CVE-2021-45956 | Critical | 9.8 | 2022-01-01 | Dnsmasq 2.86 has a heap-based buffer overflow in print_mac (called from log_packet and dhcp_reply). NOTE: the vendor's position is that CVE-2021-45951 through… |
CVE-2021-45955 | Critical | 9.8 | 2022-01-01 | Dnsmasq 2.86 has a heap-based buffer overflow in resize_packet (called from FuzzResizePacket and fuzz_rfc1035.c) because of the lack of a proper bounds check u… |
CVE-2021-45954 | Critical | 9.8 | 2022-01-01 | Dnsmasq 2.86 has a heap-based buffer overflow in extract_name (called from answer_auth and FuzzAuth). NOTE: the vendor's position is that CVE-2021-45951 throug… |
CVE-2021-45953 | Critical | 9.8 | 2022-01-01 | Dnsmasq 2.86 has a heap-based buffer overflow in extract_name (called from hash_questions and fuzz_util.c). NOTE: the vendor's position is that CVE-2021-45951… |
CVE-2021-45952 | Critical | 9.8 | 2022-01-01 | Dnsmasq 2.86 has a heap-based buffer overflow in dhcp_reply (called from dhcp_packet and FuzzDhcp). NOTE: the vendor's position is that CVE-2021-45951 through… |
CVE-2021-45951 | Critical | 9.8 | 2022-01-01 | Dnsmasq 2.86 has a heap-based buffer overflow in check_bad_address (called from check_for_bogus_wildcard and FuzzCheckForBogusWildcard). NOTE: the vendor's pos… |