CWE-787 · Out-of-bounds Write (page 91)
Page 91 of 100 — CVEs classified under CWE-787, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-43279 | High | 7.8 | 2021-11-14 | An out-of-bounds write vulnerability exists in the U3D file reading procedure in Open Design Alliance PRC SDK before 2022.10. Crafted data in a U3D file can tr… |
CVE-2021-38684 | High | 8.1 | 2021-11-13 | A stack buffer overflow vulnerability has been reported to affect QNAP NAS running Multimedia Console. If exploited, this vulnerability allows attackers to exe… |
CVE-2021-30265 | Medium | 6.7 | 2021-11-12 | Possible memory corruption due to improper validation of memory address while processing user-space IOCTL for clearing Filter and Route statistics in Snapdrago… |
CVE-2021-1979 | High | 7.8 | 2021-11-12 | Possible buffer overflow due to improper validation of FTM command payload in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… |
CVE-2021-1975 | Critical | 9.8 | 2021-11-12 | Possible heap overflow due to improper length check of domain while parsing the DNS response in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, S… |
CVE-2020-23904 | Medium | 5.5 | 2021-11-10 | A stack buffer overflow in speexenc.c of Speex v1.2 allows attackers to cause a denial of service (DoS) via a crafted WAV file. NOTE: the vendor states "I cann… |
CVE-2020-23901 | Medium | 5.5 | 2021-11-10 | A User Mode Write AV in Editor+0x5d15 of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted tga file. |
CVE-2020-23899 | Medium | 5.5 | 2021-11-10 | A User Mode Write AV in Editor+0x5f91 of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted tga file. |
CVE-2020-23898 | Medium | 5.5 | 2021-11-10 | A User Mode Write AV in Editor+0x5ea2 of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted tga file. |
CVE-2020-23897 | Medium | 5.5 | 2021-11-10 | A User Mode Write AV in Editor!TMethodImplementationIntercept+0x54dcec of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted… |
CVE-2020-23896 | Medium | 5.5 | 2021-11-10 | A User Mode Write AV in Editor+0x576b of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted tiff file. |
CVE-2020-23895 | Medium | 5.5 | 2021-11-10 | A User Mode Write AV in Editor+0x76af of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted tiff file. |
CVE-2020-23894 | Medium | 5.5 | 2021-11-10 | A User Mode Write AV in ntdll!RtlpCoalesceFreeBlocks+0x268 of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted tiff file. |
CVE-2020-23893 | Medium | 5.5 | 2021-11-10 | A User Mode Write AV in Editor!TMethodImplementationIntercept+0x3c3682 of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted… |
CVE-2020-23891 | Medium | 5.5 | 2021-11-10 | A User Mode Write AV in Editor+0x5cd7 of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted tiff file. |
CVE-2020-23889 | Medium | 5.5 | 2021-11-10 | A User Mode Write AV starting at Editor!TMethodImplementationIntercept+0x4189c6 of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via… |
CVE-2020-23888 | Medium | 5.5 | 2021-11-10 | A User Mode Write AV in Editor!TMethodImplementationIntercept+0x53f6c3 of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted… |
CVE-2020-23887 | Medium | 5.5 | 2021-11-10 | XnView MP v0.96.4 was discovered to contain a heap overflow which allows attackers to cause a denial of service (DoS) via a crafted ico file. Related to a Read… |
CVE-2020-23886 | Medium | 5.5 | 2021-11-10 | XnView MP v0.96.4 was discovered to contain a heap overflow which allows attackers to cause a denial of service (DoS) via a crafted pict file. Related to a Use… |
CVE-2020-23878 | Critical | 9.8 | 2021-11-10 | pdf2json v0.71 was discovered to contain a stack buffer overflow in the component XRef::fetch. |
CVE-2020-23877 | Critical | 9.8 | 2021-11-10 | pdf2xml v2.0 was discovered to contain a stack buffer overflow in the component getObjectStream. |
CVE-2020-23874 | Critical | 9.8 | 2021-11-10 | pdf2xml v2.0 was discovered to contain a heap-buffer overflow in the function TextPage::addAttributsNode. |
CVE-2020-23873 | Critical | 9.8 | 2021-11-10 | pdf2xml v2.0 was discovered to contain a heap-buffer overflow in the function TextPage::dump. |
CVE-2021-3064 | Critical | 9.8 | 2021-11-10 | A memory corruption vulnerability exists in Palo Alto Networks GlobalProtect portal and gateway interfaces that enables an unauthenticated network-based attack… |
CVE-2021-3056 | High | 8.8 | 2021-11-10 | A memory corruption vulnerability in Palo Alto Networks PAN-OS GlobalProtect Clientless VPN enables an authenticated attacker to execute arbitrary code with ro… |
CVE-2021-42279 | Medium | 4.2 | 2021-11-10 | Chakra Scripting Engine Memory Corruption Vulnerability |
CVE-2021-43174 | High | 7.5 | 2021-11-09 | NLnet Labs Routinator versions 0.9.0 up to and including 0.10.1, support the gzip transfer encoding when querying RRDP repositories. This encoding can be used… |
CVE-2021-31888 | High | 8.8 | 2021-11-09 | A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All… |
CVE-2021-31887 | High | 8.8 | 2021-11-09 | A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All… |
CVE-2021-31886 | Critical | 9.8 | 2021-11-09 | A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All… |
CVE-2021-42076 | High | 7.5 | 2021-11-08 | An issue was discovered in Barrier before 2.3.4. An attacker can cause memory exhaustion in the barriers component (aka the server-side implementation of Barri… |
CVE-2021-41221 | High | 7.8 | 2021-11-05 | TensorFlow is an open source platform for machine learning. In affected versions the shape inference code for the `Cudnn*` operations in TensorFlow can be tric… |
CVE-2021-41216 | Medium | 5.5 | 2021-11-05 | TensorFlow is an open source platform for machine learning. In affected versions the shape inference function for `Transpose` is vulnerable to a heap buffer ov… |
CVE-2021-3927 | High | 7.8 | 2021-11-05 | vim is vulnerable to Heap-based Buffer Overflow |
CVE-2021-25500 | High | 7.2 | 2021-11-05 | A missing input validation in HDCP LDFW prior to SMR Nov-2021 Release 1 allows attackers to overwrite TZASC allowing TEE compromise. |
CVE-2021-38499 | High | 8.8 | 2021-11-03 | Mozilla developers reported memory safety bugs present in Firefox 92. Some of these bugs showed evidence of memory corruption and we presume that with enough e… |
CVE-2021-38495 | High | 8.8 | 2021-11-03 | Mozilla developers reported memory safety bugs present in Thunderbird 78.13.0. Some of these bugs showed evidence of memory corruption and we presume that with… |
CVE-2021-38494 | High | 8.8 | 2021-11-03 | Mozilla developers reported memory safety bugs present in Firefox 91. Some of these bugs showed evidence of memory corruption and we presume that with enough e… |
CVE-2021-38493 | High | 8.8 | 2021-11-03 | Mozilla developers reported memory safety bugs present in Firefox 91 and Firefox ESR 78.13. Some of these bugs showed evidence of memory corruption and we pres… |
CVE-2021-41036 | Critical | 9.8 | 2021-11-03 | In versions prior to 1.1 of the Eclipse Paho MQTT C Client, the client does not check rem_len size in readpacket. |
CVE-2021-37986 | High | 8.8 | 2021-11-02 | Heap buffer overflow in Settings in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to engage with Dev Tools to potentially exploit heap corrupti… |
CVE-2021-37984 | High | 8.8 | 2021-11-02 | Heap buffer overflow in PDFium in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-37981 | Critical | 9.6 | 2021-11-02 | Heap buffer overflow in Skia in Google Chrome prior to 95.0.4638.54 allowed a remote attacker who had compromised the renderer process to potentially perform a… |
CVE-2021-37979 | High | 8.8 | 2021-11-02 | heap buffer overflow in WebRTC in Google Chrome prior to 94.0.4606.81 allowed a remote attacker who convinced a user to browse to a malicious website to potent… |
CVE-2021-37978 | High | 8.8 | 2021-11-02 | Heap buffer overflow in Blink in Google Chrome prior to 94.0.4606.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-36186 | High | 8.8 | 2021-11-02 | A stack-based buffer overflow in Fortinet FortiWeb version 6.4.0, version 6.3.15 and below, 6.2.5 and below allows attacker to execute unauthorized code or com… |
CVE-2021-22564 | Medium | 4.5 | 2021-11-01 | For certain valid JPEG XL images with a size slightly larger than an integer number of groups (256x256 pixels) when processing the groups out of order the deco… |
CVE-2021-3756 | Critical | 9.8 | 2021-10-29 | libmysofa is vulnerable to Heap-based Buffer Overflow |
CVE-2020-22079 | Critical | 9.8 | 2021-10-29 | Stack-based buffer overflow in Tenda AC-10U AC1200 Router US_AC10UV1.0RTL_V15.03.06.48_multi_TDE01 allows remote attackers to execute arbitrary code via the ti… |
CVE-2021-30824 | High | 7.8 | 2021-10-28 | A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.0.1, Security Update 2021-007 Catalina, macOS… |
CVE-2021-30814 | High | 7.8 | 2021-10-28 | A memory corruption issue was addressed with improved input validation. This issue is fixed in tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing a malicious… |
CVE-2020-9897 | High | 7.8 | 2021-10-28 | An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 14.2 and iPadOS 14.2, macOS Big Sur 11.0.1. Processing a malici… |
CVE-2021-22465 | Medium | 5.5 | 2021-10-28 | A component of the HarmonyOS has a Heap-based Buffer Overflow vulnerability. Local attackers may exploit this vulnerability to cause Kernel System unavailable. |
CVE-2021-37748 | High | 8.8 | 2021-10-28 | Multiple buffer overflows in the limited configuration shell (/sbin/gs_config) on Grandstream HT801 devices before 1.0.29 allow remote authenticated users to e… |
CVE-2021-3903 | High | 7.8 | 2021-10-27 | vim is vulnerable to Heap-based Buffer Overflow |
CVE-2021-40118 | High | 8.6 | 2021-10-27 | A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow… |
CVE-2021-37129 | High | 7.5 | 2021-10-27 | There is an out of bounds write vulnerability in some Huawei products. The vulnerability is caused by a function of a module that does not properly verify inpu… |
CVE-2021-34583 | High | 7.5 | 2021-10-26 | Crafted web server requests may cause a heap-based buffer overflow and could therefore trigger a denial-of- service condition due to a crash in the CODESYS V2… |
CVE-2021-34859 | High | 8.8 | 2021-10-25 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of TeamViewer 15.16.8.0. User interaction is required to exploit… |
CVE-2021-34857 | High | 8.8 | 2021-10-25 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.3 (49160). An attacker must first obtain t… |
CVE-2021-34856 | High | 8.8 | 2021-10-25 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.3 (49160). An attacker must first obtain t… |
CVE-2021-0940 | Medium | 6.7 | 2021-10-25 | In TBD of TBD, there is a possible out of bounds write due to improper locking. This could lead to local escalation of privilege in the kernel with System exec… |
CVE-2021-0935 | Medium | 6.7 | 2021-10-25 | In ip6_xmit of ip6_output.c, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with System exec… |
CVE-2021-0663 | Medium | 6.7 | 2021-10-25 | In audio DSP, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution… |
CVE-2021-0662 | Medium | 6.7 | 2021-10-25 | In audio DSP, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution… |
CVE-2021-0661 | Medium | 6.7 | 2021-10-25 | In audio DSP, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution… |
CVE-2021-0633 | Medium | 6.7 | 2021-10-25 | In display driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execu… |
CVE-2021-21703 | High | 7.8 | 2021-10-25 | In PHP versions 7.3.x up to and including 7.3.31, 7.4.x below 7.4.25 and 8.0.x below 8.0.12, when running PHP FPM SAPI with main FPM daemon process running as… |
CVE-2020-28964 | Medium | 6.7 | 2021-10-22 | Internet Download Manager 6.37.11.1 was discovered to contain a stack buffer overflow in the Search function. This vulnerability allows attackers to escalate l… |
CVE-2020-23060 | High | 7.1 | 2021-10-22 | Internet Download Manager 6.37.11.1 was discovered to contain a stack buffer overflow in the Export/Import function. This vulnerability allows attackers to esc… |
CVE-2021-38479 | Medium | 6.5 | 2021-10-22 | Many API function codes receive raw pointers remotely from the user and trust these pointers as valid in-bound memory regions. An attacker can manipulate API f… |
CVE-2021-38473 | High | 8.0 | 2021-10-22 | The affected product’s code base doesn’t properly control arguments for specific functions, which could lead to a stack overflow. |
CVE-2021-41160 | Medium | 5.3 | 2021-10-21 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. In affected versions a malicious server might trigger… |
CVE-2021-41159 | Medium | 5.8 | 2021-10-21 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. All FreeRDP clients prior to version 2.4.1 using gate… |
CVE-2021-42327 | Medium | 6.7 | 2021-10-21 | dp_link_settings_write in drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c in the Linux kernel through 5.14.14 allows a heap-based buffer overflow by… |
CVE-2021-42012 | High | 7.8 | 2021-10-21 | A stack-based buffer overflow vulnerability in Trend Micro Apex One, Apex One as a Service and Worry-Free Business Security 10.0 SP1 could allow a local attack… |
CVE-2021-21749 | Critical | 9.8 | 2021-10-20 | ZTE MF971R product has two stack-based buffer overflow vulnerabilities. An attacker could exploit the vulnerabilities to execute arbitrary code. |
CVE-2021-21748 | Critical | 9.8 | 2021-10-20 | ZTE MF971R product has two stack-based buffer overflow vulnerabilities. An attacker could exploit the vulnerabilities to execute arbitrary code. |
CVE-2021-35593 | Medium | 6.3 | 2021-10-20 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.33 and prior, 7.5.23 and… |
CVE-2021-35590 | Medium | 6.3 | 2021-10-20 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.33 and prior, 7.5.23 and… |
CVE-2021-42739 | Medium | 6.7 | 2021-10-20 | The firewire subsystem in the Linux kernel through 5.14.13 has a buffer overflow related to drivers/media/firewire/firedtv-avc.c and drivers/media/firewire/fir… |
CVE-2021-30292 | High | 8.4 | 2021-10-20 | Possible memory corruption due to lack of validation of client data used for memory allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity… |
CVE-2021-30291 | High | 8.4 | 2021-10-20 | Possible memory corruption due to lack of validation of client data used for memory allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity… |
CVE-2021-30288 | High | 8.4 | 2021-10-20 | Possible stack overflow due to improper length check of TLV while copying the TLV to a local stack variable in Snapdragon Auto, Snapdragon Compute, Snapdragon… |
CVE-2021-30258 | High | 8.4 | 2021-10-20 | Possible buffer overflow due to improper size calculation of payload received in VR service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Sn… |
CVE-2021-30257 | High | 8.4 | 2021-10-20 | Possible out of bound read or write in VR service due to lack of validation of DSP selection values in Snapdragon Compute, Snapdragon Connectivity, Snapdragon… |
CVE-2021-30256 | High | 8.4 | 2021-10-20 | Possible stack overflow due to improper validation of camera name length before copying the name in VR Service in Snapdragon Compute, Snapdragon Connectivity… |
CVE-2021-1967 | Medium | 5.3 | 2021-10-20 | Possible stack buffer overflow due to lack of check on the maximum number of post NAN discovery attributes while processing a NAN Match event in Snapdragon Aut… |
CVE-2021-1959 | High | 7.8 | 2021-10-20 | Possible memory corruption due to lack of bound check of input index in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT… |
CVE-2021-31383 | High | 7.5 | 2021-10-19 | In Point to MultiPoint (P2MP) scenarios within established sessions between network or adjacent neighbors the improper use of a source to destination copy writ… |
CVE-2021-31374 | High | 7.5 | 2021-10-19 | On Juniper Networks Junos OS and Junos OS Evolved devices processing a specially crafted BGP UPDATE or KEEPALIVE message can lead to a routing process daemon (… |
CVE-2021-30849 | High | 7.8 | 2021-10-19 | Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, watchOS 8, Safari 15, tvOS 15… |
CVE-2021-30848 | High | 7.8 | 2021-10-19 | A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, Safari 15, iOS 15 and iPadOS 15. Proces… |
CVE-2021-30846 | High | 7.8 | 2021-10-19 | A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, Safari 15, tvOS 15, iOS 15 and iPadOS 1… |
CVE-2021-30832 | High | 7.8 | 2021-10-19 | A memory corruption issue was addressed with improved state management. This issue is fixed in Security Update 2021-005 Catalina, macOS Big Sur 11.6. A local a… |
CVE-2021-30830 | High | 7.8 | 2021-10-19 | A memory corruption issue was addressed with improved memory handling. This issue is fixed in Security Update 2021-005 Catalina, macOS Big Sur 11.6. A maliciou… |
CVE-2021-30807 | High | 7.8 | 2021-10-19 | A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.5.1, iOS 14.7.1 and iPadOS 14.7.1, watchOS 7.6.1… |
CVE-2021-3872 | High | 7.8 | 2021-10-19 | vim is vulnerable to Heap-based Buffer Overflow |
CVE-2021-38442 | High | 7.8 | 2021-10-18 | FATEK Automation WinProladder versions 3.30 and prior lacks proper validation of user-supplied data when parsing project files, which could result in a heap-co… |
CVE-2021-38436 | High | 7.8 | 2021-10-18 | FATEK Automation WinProladder versions 3.30 and prior lacks proper validation of user-supplied data when parsing project files, which could result in a memory-… |