CWE-787 · Out-of-bounds Write (page 89)
Page 89 of 100 — CVEs classified under CWE-787, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-45950 | Medium | 6.5 | 2022-01-01 | LibreDWG 0.12.4.4313 through 0.12.4.4367 has an out-of-bounds write in dwg_free_BLOCK_private (called from dwg_free_BLOCK and dwg_free_object). |
CVE-2021-45949 | Medium | 5.5 | 2022-01-01 | Ghostscript GhostPDL 9.50 through 9.54.0 has a heap-based buffer overflow in sampled_data_finish (called from sampled_data_continue and interp). |
CVE-2021-45948 | Medium | 5.5 | 2022-01-01 | Open Asset Import Library (aka assimp) 5.1.0 and 5.1.1 has a heap-based buffer overflow in _m3d_safestr (called from m3d_load and Assimp::M3DWrapper::M3DWrappe… |
CVE-2021-45947 | Medium | 5.5 | 2022-01-01 | Wasm3 0.5.0 has an out-of-bounds write in Runtime_Release (called from EvaluateExpression and InitDataSegments). |
CVE-2021-45946 | Medium | 5.5 | 2022-01-01 | Wasm3 0.5.0 has an out-of-bounds write in CompileBlock (called from Compile_LoopOrBlock and CompileBlockStatements). |
CVE-2021-45929 | Medium | 5.5 | 2022-01-01 | Wasm3 0.5.0 has an out-of-bounds write in CompileBlock (called from CompileElseBlock and Compile_If). |
CVE-2021-43556 | High | 7.8 | 2021-12-28 | FATEK WinProladder Versions 3.30_24518 and prior are vulnerable to a stack-based buffer overflow while processing project files, which may allow an attacker to… |
CVE-2021-43554 | High | 7.8 | 2021-12-28 | FATEK WinProladder Versions 3.30_24518 and prior are vulnerable to an out-of-bounds write while processing project files, which may allow an attacker to execut… |
CVE-2021-45911 | High | 7.8 | 2021-12-28 | An issue was discovered in gif2apng 1.9. There is a heap-based buffer overflow in the main function. It allows an attacker to write 2 bytes outside the boundar… |
CVE-2021-45910 | High | 7.8 | 2021-12-28 | An issue was discovered in gif2apng 1.9. There is a heap-based buffer overflow within the main function. It allows an attacker to write data outside of the all… |
CVE-2021-45909 | High | 7.8 | 2021-12-28 | An issue was discovered in gif2apng 1.9. There is a heap-based buffer overflow vulnerability in the DecodeLZW function. It allows an attacker to write a large… |
CVE-2021-45908 | High | 7.8 | 2021-12-28 | An issue was discovered in gif2apng 1.9. There is a stack-based buffer overflow involving a while loop. An attacker has little influence over the data written… |
CVE-2021-45907 | High | 7.8 | 2021-12-28 | An issue was discovered in gif2apng 1.9. There is a stack-based buffer overflow involving a for loop. An attacker has little influence over the data written to… |
CVE-2021-45707 | Critical | 9.8 | 2021-12-27 | An issue was discovered in the nix crate 0.16.0 and later before 0.20.2, 0.21.x before 0.21.2, and 0.22.x before 0.22.2 for Rust. unistd::getgrouplist has an o… |
CVE-2021-45704 | High | 8.1 | 2021-12-27 | An issue was discovered in the metrics-util crate before 0.7.0 for Rust. There is a data race and memory corruption because AtomicBucket<T> unconditionally imp… |
CVE-2021-45681 | High | 7.5 | 2021-12-27 | An issue was discovered in the derive-com-impl crate before 0.1.2 for Rust. An invalid reference (and memory corruption) can occur because AddRef might not be… |
CVE-2021-45680 | High | 7.5 | 2021-12-27 | An issue was discovered in the vec-const crate before 2.0.0 for Rust. It tries to construct a Vec from a pointer to a const slice, leading to memory corruption. |
CVE-2018-25026 | Critical | 9.8 | 2021-12-27 | An issue was discovered in the actix-web crate before 0.7.15 for Rust. It can add the Send marker trait to an object that cannot be sent between threads safely… |
CVE-2018-25025 | Critical | 9.8 | 2021-12-27 | An issue was discovered in the actix-web crate before 0.7.15 for Rust. It can unsoundly extend the lifetime of a string, leading to memory corruption. |
CVE-2018-25024 | Critical | 9.8 | 2021-12-27 | An issue was discovered in the actix-web crate before 0.7.15 for Rust. It can unsoundly coerce an immutable reference into a mutable reference, leading to memo… |
CVE-2021-45638 | Critical | 9.6 | 2021-12-26 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6220 before 1.0.0.68, D6400 before 1.0.0.10… |
CVE-2021-45637 | High | 8.3 | 2021-12-26 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects R6260 before 1.1.0.76, R6800 before 1.2.0.62… |
CVE-2021-45636 | Medium | 5.4 | 2021-12-26 | NETGEAR D7000 devices before 1.0.1.82 are affected by a stack-based buffer overflow by an unauthenticated attacker. |
CVE-2021-45607 | Medium | 6.8 | 2021-12-26 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R6400v2 before 1.0.4.118, R6700v3 before 1.0.4.118… |
CVE-2021-45606 | Medium | 4.5 | 2021-12-26 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R6400 before 1.0.1.70, R7000 before 1.0.11.126, R7… |
CVE-2021-45605 | Medium | 6.0 | 2021-12-26 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R6400 before 1.0.1.68, R7000 before 1.0.11.116, R6… |
CVE-2021-45604 | Medium | 4.5 | 2021-12-26 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects CBR750 before 3.2.18.2, D6220 before 1.0.0.68, D64… |
CVE-2021-45573 | High | 8.3 | 2021-12-26 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects R6260 before 1.1.0.76, R6800 before 1.2.0.62… |
CVE-2021-37584 | High | 8.2 | 2021-12-26 | MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected Chipsets MT… |
CVE-2021-37583 | High | 8.2 | 2021-12-26 | MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7613, MT7615… |
CVE-2021-37571 | High | 8.2 | 2021-12-26 | MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7613, MT7615… |
CVE-2021-37569 | High | 8.2 | 2021-12-26 | MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7613, MT7615… |
CVE-2021-37568 | High | 8.2 | 2021-12-26 | MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7613, MT7615… |
CVE-2021-37566 | High | 8.2 | 2021-12-26 | MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7610, MT7613… |
CVE-2021-37563 | High | 8.2 | 2021-12-26 | MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected Chipsets MT… |
CVE-2021-37561 | High | 8.2 | 2021-12-26 | MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected Chipsets MT… |
CVE-2021-37560 | High | 8.2 | 2021-12-26 | MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected Chipsets MT… |
CVE-2021-35055 | High | 8.2 | 2021-12-26 | MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected Chipsets MT… |
CVE-2021-40161 | High | 7.8 | 2021-12-23 | A Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL files through PDFTron earlier than 9.0.7 version. |
CVE-2021-4079 | High | 8.8 | 2021-12-23 | Out of bounds write in WebRTC in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via crafted WebRTC packet… |
CVE-2021-4062 | High | 8.8 | 2021-12-23 | Heap buffer overflow in BFCache in Google Chrome prior to 96.0.4664.93 allowed a remote attacker who had compromised the renderer process to potentially exploi… |
CVE-2021-4058 | High | 8.8 | 2021-12-23 | Heap buffer overflow in ANGLE in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-4055 | High | 8.8 | 2021-12-23 | Heap buffer overflow in extensions in Google Chrome prior to 96.0.4664.93 allowed an attacker who convinced a user to install a malicious extension to potentia… |
CVE-2021-38014 | High | 8.8 | 2021-12-23 | Out of bounds write in Swiftshader in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… |
CVE-2021-38013 | Critical | 9.6 | 2021-12-23 | Heap buffer overflow in fingerprint recognition in Google Chrome on ChromeOS prior to 96.0.4664.45 allowed a remote attacker who had compromised a WebUI render… |
CVE-2021-40394 | Critical | 9.8 | 2021-12-22 | An out-of-bounds write vulnerability exists in the RS-274X aperture macro variables handling functionality of Gerbv 2.7.0 and dev (commit b5f1eacd) and the for… |
CVE-2021-40393 | Critical | 9.8 | 2021-12-22 | An out-of-bounds write vulnerability exists in the RS-274X aperture macro variables handling functionality of Gerbv 2.7.0 and dev (commit b5f1eacd) and the for… |
CVE-2021-39306 | Critical | 9.8 | 2021-12-22 | A stack buffer overflow was discovered on Realtek RTL8195AM device before 2.0.10, it exists in the client code when an attacker sends a big size Authentication… |
CVE-2021-21906 | High | 7.2 | 2021-12-22 | Stack-based buffer overflow vulnerability exists in how the CMA readfile function of Garrett Metal Detectors iC Module CMA Version 5.0 is used at various locat… |
CVE-2021-21905 | High | 7.2 | 2021-12-22 | Stack-based buffer overflow vulnerability exists in how the CMA readfile function of Garrett Metal Detectors iC Module CMA Version 5.0 is used at various locat… |
CVE-2021-21903 | Critical | 9.8 | 2021-12-22 | A stack-based buffer overflow vulnerability exists in the CMA check_udp_crc function of Garrett Metal Detectors’ iC Module CMA Version 5.0. A specially-crafted… |
CVE-2021-21901 | High | 8.8 | 2021-12-22 | A stack-based buffer overflow vulnerability exists in the CMA check_udp_crc function of Garrett Metal Detectors’ iC Module CMA Version 5.0. A specially-crafted… |
CVE-2021-21892 | Critical | 9.9 | 2021-12-22 | A stack-based buffer overflow vulnerability exists in the Web Manager FsUnmount functionality of Lantronix PremierWave 2050 8.9.0.0R4 (in QEMU). A specially cr… |
CVE-2021-21891 | Critical | 9.1 | 2021-12-22 | A stack-based buffer overflow vulnerability exists in the Web Manager FsBrowseClean functionality of Lantronix PremierWave 2050 8.9.0.0R4 (in QEMU). A speciall… |
CVE-2021-21890 | Critical | 9.1 | 2021-12-22 | A stack-based buffer overflow vulnerability exists in the Web Manager FsBrowseClean functionality of Lantronix PremierWave 2050 8.9.0.0R4 (in QEMU). A speciall… |
CVE-2021-21889 | Critical | 9.9 | 2021-12-22 | A stack-based buffer overflow vulnerability exists in the Web Manager Ping functionality of Lantronix PremierWave 2050 8.9.0.0R4 (in QEMU). A specially crafted… |
CVE-2021-21887 | Critical | 9.1 | 2021-12-22 | A stack-based buffer overflow vulnerability exists in the Web Manager SslGenerateCSR functionality of Lantronix PremierWave 2050 8.9.0.0R4 (in QEMU). A special… |
CVE-2021-45258 | Medium | 5.5 | 2021-12-22 | A stack overflow vulnerability exists in gpac 1.1.0 via the gf_bifs_dec_proto_list function, which causes a segmentation fault and application crash. |
CVE-2021-44422 | High | 7.8 | 2021-12-21 | An Improper Input Validation Vulnerability exists when reading a BMP file using Open Design Alliance Drawings SDK before 2022.12. Crafted data in a BMP file ca… |
CVE-2021-44181 | High | 7.8 | 2021-12-20 | Adobe Dimension versions 3.4.3 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context… |
CVE-2021-44180 | High | 7.8 | 2021-12-20 | Adobe Dimension versions 3.4.3 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context… |
CVE-2021-44179 | High | 7.8 | 2021-12-20 | Adobe Dimension versions 3.4.3 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious GIF file, potentially res… |
CVE-2021-43747 | High | 7.8 | 2021-12-20 | Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious WAV file, potentially… |
CVE-2021-43029 | High | 7.8 | 2021-12-20 | Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious M4A file, potentially… |
CVE-2021-43028 | High | 7.8 | 2021-12-20 | Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious M4A file, potentially… |
CVE-2021-43026 | High | 7.8 | 2021-12-20 | Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious MXF file, potentially… |
CVE-2021-43025 | High | 7.8 | 2021-12-20 | Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious SVG file, potentially… |
CVE-2021-43024 | High | 7.8 | 2021-12-20 | Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious WAV file, potentially… |
CVE-2021-43023 | High | 7.8 | 2021-12-20 | Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious EPS/TIFF file, potent… |
CVE-2021-43022 | High | 7.8 | 2021-12-20 | Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious PNG file, potentially… |
CVE-2021-43021 | High | 7.8 | 2021-12-20 | Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious EXR file, potentially… |
CVE-2021-38419 | High | 7.8 | 2021-12-20 | Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable to an out-of-bounds write, which can result in data corruption, a syst… |
CVE-2021-44790 | Critical | 9.8 | 2021-12-20 | A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts). The Apache httpd team is… |
CVE-2021-4136 | High | 7.8 | 2021-12-19 | vim is vulnerable to Heap-based Buffer Overflow |
CVE-2021-0903 | Medium | 6.7 | 2021-12-17 | In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privil… |
CVE-2021-0897 | Medium | 6.7 | 2021-12-17 | In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privil… |
CVE-2021-0896 | Medium | 6.7 | 2021-12-17 | In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privil… |
CVE-2021-0895 | Medium | 6.7 | 2021-12-17 | In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privil… |
CVE-2021-0894 | Medium | 6.7 | 2021-12-17 | In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privil… |
CVE-2021-0679 | Medium | 6.7 | 2021-12-17 | In apusys, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System execution privileg… |
CVE-2021-0678 | Medium | 6.7 | 2021-12-17 | In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privil… |
CVE-2021-45078 | High | 7.8 | 2021-12-15 | stab_xcoff_builtin_type in stabs.c in GNU Binutils through 2.37 allows attackers to cause a denial of service (heap-based buffer overflow) or possibly have uns… |
CVE-2021-39652 | Medium | 6.7 | 2021-12-15 | In sec_ts_parsing_cmds of (TBD), there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege wit… |
CVE-2021-39650 | Medium | 6.7 | 2021-12-15 | In (TBD) of (TBD), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System executio… |
CVE-2021-1044 | High | 7.8 | 2021-12-15 | In eicOpsDecryptAes128Gcm of acropora/app/identity/identity_support.c, there is a possible out of bounds write due to a missing bounds check. This could lead t… |
CVE-2021-1029 | High | 7.8 | 2021-12-15 | In setClientStateLocked of SurfaceFlinger.cpp, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privileg… |
CVE-2021-1028 | High | 7.8 | 2021-12-15 | In setClientStateLocked of SurfaceFlinger.cpp, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privileg… |
CVE-2021-0977 | Medium | 6.7 | 2021-12-15 | In phNxpNHal_DtaUpdate of phNxpNciHal_dta.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of… |
CVE-2021-0971 | Medium | 6.5 | 2021-12-15 | In MPEG4Source::read of MPEG4Extractor.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote information disclo… |
CVE-2021-0967 | High | 8.8 | 2021-12-15 | In vorbis_book_decodev_set of codebook.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote information disclosu… |
CVE-2021-0956 | Critical | 9.8 | 2021-12-15 | In NfcTag::discoverTechnologies (activation) of NfcTag.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote… |
CVE-2021-0930 | High | 8.8 | 2021-12-15 | In phNxpNciHal_process_ext_rsp of phNxpNciHal_ext.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code exe… |
CVE-2021-0918 | High | 8.8 | 2021-12-15 | In gatt_process_notification of gatt_cl.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution ove… |
CVE-2021-0675 | High | 7.8 | 2021-12-15 | In alac decoder, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional… |
CVE-2021-43247 | High | 7.8 | 2021-12-15 | Windows TCP/IP Driver Elevation of Privilege Vulnerability |
CVE-2021-43215 | Critical | 9.8 | 2021-12-15 | iSNS Server Memory Corruption Vulnerability Can Lead to Remote Code Execution |
CVE-2021-40827 | High | 7.8 | 2021-12-15 | Clementine Music Player through 1.3.1 (when a GLib 2.0.0 DLL is used) is vulnerable to a Read Access Violation on Block Data Move, affecting the MP3 file parsi… |
CVE-2021-42069 | Low | 3.3 | 2021-12-14 | When a user opens manipulated Tagged Image File Format (.tif) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the applic… |
CVE-2021-44449 | High | 7.8 | 2021-12-14 | A vulnerability has been identified in JT Utilities (All versions < V12.8.1.1), JTTK (All versions < V10.8.1.1). JTTK library in affected products contains an… |
CVE-2021-44446 | High | 7.8 | 2021-12-14 | A vulnerability has been identified in JT Utilities (All versions < V13.0.3.0), JTTK (All versions < V11.0.3.0). JTTK library in affected products contains an… |