CWE-787 · Out-of-bounds Write (page 93)
Page 93 of 100 — CVEs classified under CWE-787, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-32272 | High | 7.8 | 2021-09-20 | An issue was discovered in faad2 before 2.10.0. A heap-buffer-overflow exists in the function stszin located in mp4read.c. It allows an attacker to cause Code… |
CVE-2021-32271 | High | 7.8 | 2021-09-20 | An issue was discovered in gpac through 20200801. A stack-buffer-overflow exists in the function DumpRawUIConfig located in odf_dump.c. It allows an attacker t… |
CVE-2021-32268 | High | 7.8 | 2021-09-20 | Buffer overflow vulnerability in function gf_fprintf in os_file.c in gpac before 1.0.1 allows attackers to execute arbitrary code. The fixed version is 1.0.1. |
CVE-2021-39218 | Medium | 6.3 | 2021-09-17 | Wasmtime is an open source runtime for WebAssembly & WASI. In Wasmtime from version 0.26.0 and before version 0.30.0 is affected by a memory unsoundness vulner… |
CVE-2020-21548 | High | 8.8 | 2021-09-17 | Libsixel 1.8.3 contains a heap-based buffer overflow in the sixel_encode_highcolor function in tosixel.c. |
CVE-2020-21547 | High | 8.8 | 2021-09-17 | Libsixel 1.8.2 contains a heap-based buffer overflow in the dither_func_fs function in tosixel.c. |
CVE-2021-38406 | High | 7.8 | 2021-09-17 | Delta Electronic DOPSoft 2 (Version 2.00.07 and prior) lacks proper validation of user-supplied data when parsing specific project files. This could result in… |
CVE-2020-21606 | Medium | 6.5 | 2021-09-16 | libde265 v1.0.4 contains a heap buffer overflow fault in the put_epel_16_fallback function, which can be exploited via a crafted a file. |
CVE-2020-21604 | Medium | 6.5 | 2021-09-16 | libde265 v1.0.4 contains a heap buffer overflow fault in the _mm_loadl_epi64 function, which can be exploited via a crafted a file. |
CVE-2020-21603 | Medium | 6.5 | 2021-09-16 | libde265 v1.0.4 contains a heap buffer overflow in the put_qpel_0_0_fallback_16 function, which can be exploited via a crafted a file. |
CVE-2020-21602 | Medium | 6.5 | 2021-09-16 | libde265 v1.0.4 contains a heap buffer overflow in the put_weighted_bipred_16_fallback function, which can be exploited via a crafted a file. |
CVE-2020-21601 | Medium | 6.5 | 2021-09-16 | libde265 v1.0.4 contains a stack buffer overflow in the put_qpel_fallback function, which can be exploited via a crafted a file. |
CVE-2020-21600 | Medium | 6.5 | 2021-09-16 | libde265 v1.0.4 contains a heap buffer overflow in the put_weighted_pred_avg_16_fallback function, which can be exploited via a crafted a file. |
CVE-2020-21599 | Medium | 6.5 | 2021-09-16 | libde265 v1.0.4 contains a heap buffer overflow in the de265_image::available_zscan function, which can be exploited via a crafted a file. |
CVE-2020-21598 | High | 8.8 | 2021-09-16 | libde265 v1.0.4 contains a heap buffer overflow in the ff_hevc_put_unweighted_pred_8_sse function, which can be exploited via a crafted a file. |
CVE-2020-21597 | Medium | 6.5 | 2021-09-16 | libde265 v1.0.4 contains a heap buffer overflow in the mc_chroma function, which can be exploited via a crafted a file. |
CVE-2020-21595 | Medium | 6.5 | 2021-09-16 | libde265 v1.0.4 contains a heap buffer overflow in the mc_luma function, which can be exploited via a crafted a file. |
CVE-2020-21594 | Medium | 6.5 | 2021-09-16 | libde265 v1.0.4 contains a heap buffer overflow in the put_epel_hv_fallback function, which can be exploited via a crafted a file. |
CVE-2020-21533 | Medium | 5.5 | 2021-09-16 | fig2dev 3.2.7b contains a stack buffer overflow in the read_textobject function in read.c. |
CVE-2020-21529 | Medium | 5.5 | 2021-09-16 | fig2dev 3.2.7b contains a stack buffer overflow in the bezier_spline function in genepic.c. |
CVE-2021-39275 | Critical | 9.8 | 2021-09-16 | ap_escape_quotes() may write beyond the end of a buffer when given malicious input. No included modules pass untrusted data to these functions, but third-party… |
CVE-2021-40156 | High | 7.8 | 2021-09-15 | A maliciously crafted DWG file in Autodesk Navisworks 2019, 2020, 2021, 2022 can be forced to write beyond allocated boundaries when parsing the DWG files. Thi… |
CVE-2021-27046 | High | 7.8 | 2021-09-15 | A Memory Corruption vulnerability for PDF files in Autodesk Navisworks 2019, 2020, 2021, 2022 may lead to code execution through maliciously crafted DLL files. |
CVE-2021-27044 | High | 7.8 | 2021-09-15 | A Out-Of-Bounds Read/Write Vulnerability in Autodesk FBX Review version 1.4.0 may lead to remote code execution through maliciously crafted DLL files or inform… |
CVE-2021-38653 | High | 7.8 | 2021-09-15 | Microsoft Office Visio Remote Code Execution Vulnerability |
CVE-2021-36952 | High | 7.8 | 2021-09-15 | Visual Studio Remote Code Execution Vulnerability |
CVE-2021-26435 | High | 8.1 | 2021-09-15 | Windows Scripting Engine Memory Corruption Vulnerability |
CVE-2021-3778 | High | 7.8 | 2021-09-15 | vim is vulnerable to Heap-based Buffer Overflow |
CVE-2021-3751 | Critical | 9.8 | 2021-09-15 | libmobi is vulnerable to Out-of-bounds Write |
CVE-2020-21050 | Medium | 6.5 | 2021-09-14 | Libsixel prior to v1.8.3 contains a stack buffer overflow in the function gif_process_raster at fromgif.c. |
CVE-2021-25665 | High | 7.8 | 2021-09-14 | A vulnerability has been identified in Simcenter STAR-CCM+ Viewer (All versions < V2021.2.1). The starview+.exe application lacks proper validation of user-sup… |
CVE-2021-33362 | High | 7.8 | 2021-09-13 | Stack buffer overflow in the hevc_parse_vps_extension function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code… |
CVE-2021-33545 | High | 7.2 | 2021-09-13 | Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the counter parameter whic… |
CVE-2021-32137 | Medium | 5.5 | 2021-09-13 | Heap buffer overflow in the URL_GetProtocolType function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a… |
CVE-2021-32136 | High | 7.8 | 2021-09-13 | Heap buffer overflow in the print_udta function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted f… |
CVE-2021-34346 | Critical | 9.8 | 2021-09-10 | A stack buffer overflow vulnerability has been reported to affect QNAP device running NVR Storage Expansion. If exploited, this vulnerability allows attackers… |
CVE-2021-34345 | Critical | 9.8 | 2021-09-10 | A stack buffer overflow vulnerability has been reported to affect QNAP device running NVR Storage Expansion. If exploited, this vulnerability allows attackers… |
CVE-2021-34344 | Critical | 9.8 | 2021-09-10 | A stack buffer overflow vulnerability has been reported to affect QNAP device running QUSBCam2. If exploited, this vulnerability allows attackers to execute ar… |
CVE-2021-34343 | Medium | 6.0 | 2021-09-10 | A stack buffer overflow vulnerability has been reported to affect QNAP device running QTS, QuTScloud, QuTS hero. If exploited, this vulnerability allows attack… |
CVE-2021-28816 | High | 7.6 | 2021-09-10 | A stack buffer overflow vulnerability has been reported to affect QNAP device running QTS, QuTScloud, QuTS hero. If exploited, this vulnerability allows attack… |
CVE-2021-25461 | Medium | 4.0 | 2021-09-09 | An improper length check in APAService prior to SMR Sep-2021 Release 1 results in stack based Buffer Overflow. |
CVE-2021-32487 | High | 7.5 | 2021-09-09 | In modem 2G RRM, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of service with no additional execution privi… |
CVE-2021-32486 | High | 7.5 | 2021-09-09 | In modem 2G RRM, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of service with no additional execution privi… |
CVE-2021-32485 | High | 7.5 | 2021-09-09 | In modem 2G RRM, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of service with no additional execution privi… |
CVE-2021-32484 | High | 7.5 | 2021-09-09 | In modem 2G RRM, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of service with no additional execution privi… |
CVE-2020-19144 | Medium | 6.5 | 2021-09-09 | Buffer Overflow in LibTiff v4.0.10 allows attackers to cause a denial of service via the 'in _TIFFmemcpy' funtion in the component 'tif_unix.c'. |
CVE-2020-19143 | Medium | 6.5 | 2021-09-09 | Buffer Overflow in LibTiff v4.0.10 allows attackers to cause a denial of service via the "TIFFVGetField" funtion in the component 'libtiff/tif_dir.c'. |
CVE-2021-3761 | High | 7.5 | 2021-09-09 | Any CA issuer in the RPKI can trick OctoRPKI prior to 1.3.0 into emitting an invalid VRP "MaxLength" value, causing RTR sessions to terminate. An attacker can… |
CVE-2021-26603 | High | 8.6 | 2021-09-09 | A heap overflow issue was found in ARK library of bandisoft Co., Ltd when the Ark_DigPathA function parsed a file path. This vulnerability is due to missing su… |
CVE-2021-21105 | High | 8.8 | 2021-09-08 | Adobe Illustrator version 25.2 (and earlier) is affected by a memory corruption vulnerability when parsing a specially crafted file. An unauthenticated attacke… |
CVE-2021-21104 | High | 8.8 | 2021-09-08 | Adobe Illustrator version 25.2 (and earlier) is affected by a memory corruption vulnerability when parsing a specially crafted file. An unauthenticated attacke… |
CVE-2021-21103 | Medium | 4.3 | 2021-09-08 | Adobe Illustrator version 25.2 (and earlier) is affected by a memory corruption vulnerability when parsing a specially crafted file. An unauthenticated attacke… |
CVE-2021-21897 | High | 8.8 | 2021-09-08 | A code execution vulnerability exists in the DL_Dxf::handleLWPolylineData functionality of Ribbonsoft dxflib 3.17.0. A specially-crafted .dxf file can lead to… |
CVE-2021-30717 | High | 8.1 | 2021-09-08 | A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security… |
CVE-2021-30710 | High | 7.1 | 2021-09-08 | A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 14.6, Security Update 2021-004 Mojave, iOS 14.6 and iPadOS… |
CVE-2021-30675 | High | 7.8 | 2021-09-08 | A memory corruption issue was addressed with improved state management. This issue is fixed in Boot Camp 6.1.14. A malicious application may be able to elevate… |
CVE-2021-30672 | High | 7.8 | 2021-09-08 | A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-004 Catalina, Security… |
CVE-2021-30665 | High | 8.8 | 2021-09-08 | A memory corruption issue was addressed with improved state management. This issue is fixed in watchOS 7.4.1, iOS 14.5.1 and iPadOS 14.5.1, tvOS 14.6, iOS 12.5… |
CVE-2021-30664 | High | 7.8 | 2021-09-08 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvO… |
CVE-2021-1883 | Medium | 5.5 | 2021-09-08 | This issue was addressed with improved checks. This issue is fixed in Security Update 2021-004 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, Security Update 2… |
CVE-2021-1882 | Critical | 9.8 | 2021-09-08 | A memory corruption issue was addressed with improved validation. This issue is fixed in Security Update 2021-002 Catalina, iOS 14.5 and iPadOS 14.5, watchOS 7… |
CVE-2021-1858 | High | 7.8 | 2021-09-08 | Processing a maliciously crafted image may lead to arbitrary code execution. This issue is fixed in Security Update 2021-002 Catalina, iOS 14.5 and iPadOS 14.5… |
CVE-2021-1847 | High | 7.8 | 2021-09-08 | A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina, Security Update… |
CVE-2021-1841 | High | 7.8 | 2021-09-08 | A malicious application may be able to execute arbitrary code with kernel privileges. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catal… |
CVE-2021-1840 | High | 7.8 | 2021-09-08 | A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina, Security Update… |
CVE-2021-1834 | Critical | 9.8 | 2021-09-08 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina, Securit… |
CVE-2021-1828 | High | 7.1 | 2021-09-08 | A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina, Security Update… |
CVE-2021-1817 | High | 8.8 | 2021-09-08 | A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS… |
CVE-2021-1809 | High | 7.5 | 2021-09-08 | A memory corruption issue was addressed with improved validation. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iO… |
CVE-2021-1808 | High | 7.5 | 2021-09-08 | A memory corruption issue was addressed with improved validation. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iO… |
CVE-2021-1762 | High | 7.8 | 2021-09-08 | An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 14.4 and iPadOS 14.4, macOS Big Sur 11.2, Security Update 2021-… |
CVE-2021-30805 | Critical | 9.8 | 2021-09-08 | A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.5, Security Update 2021-004 Catalina, Security… |
CVE-2021-30799 | High | 8.8 | 2021-09-08 | Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, Security Update 2021-004 C… |
CVE-2021-30792 | High | 7.8 | 2021-09-08 | An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 14.7, macOS Big Sur 11.5. Processing a maliciously crafted imag… |
CVE-2021-30780 | High | 7.8 | 2021-09-08 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security… |
CVE-2021-30775 | High | 7.8 | 2021-09-08 | A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security U… |
CVE-2021-30766 | High | 7.8 | 2021-09-08 | An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.5, Security Update 2021-004 Catalina, Security Upd… |
CVE-2021-30765 | High | 7.8 | 2021-09-08 | An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.5, Security Update 2021-004 Catalina, Security Upd… |
CVE-2021-30761 | High | 8.8 | 2021-09-08 | A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 12.5.4. Processing maliciously crafted web content may lead… |
CVE-2021-30759 | High | 7.8 | 2021-09-08 | A stack overflow was addressed with improved input validation. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 202… |
CVE-2021-30749 | High | 8.8 | 2021-09-08 | Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Safari 14.1.1, macO… |
CVE-2021-30748 | High | 7.8 | 2021-09-08 | A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 14.7, macOS Big Sur 11.5. An application may be able to exec… |
CVE-2021-30743 | High | 7.8 | 2021-09-08 | An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 14.5 and iPadOS 14.5, watchOS 7.4, Security Update 2021-003 Cat… |
CVE-2021-30739 | High | 7.8 | 2021-09-08 | A local attacker may be able to elevate their privileges. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-00… |
CVE-2021-30737 | High | 8.8 | 2021-09-08 | A memory corruption issue in the ASN.1 decoder was addressed by removing the vulnerable code. This issue is fixed in tvOS 14.6, Security Update 2021-004 Mojave… |
CVE-2021-30735 | High | 7.8 | 2021-09-08 | A malicious application may be able to execute arbitrary code with kernel privileges. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catal… |
CVE-2021-30734 | High | 8.8 | 2021-09-08 | Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Safari 14.1.1, macO… |
CVE-2021-30728 | High | 7.8 | 2021-09-08 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Securit… |
CVE-2021-30726 | High | 7.8 | 2021-09-08 | A malicious application may be able to execute arbitrary code with kernel privileges. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catal… |
CVE-2021-30725 | High | 7.8 | 2021-09-08 | A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security… |
CVE-2021-1916 | Critical | 9.8 | 2021-09-08 | Possible buffer underflow due to lack of check for negative indices values when processing user provided input in Snapdragon Auto, Snapdragon Compute, Snapdrag… |
CVE-2021-36179 | High | 8.0 | 2021-09-08 | A stack-based buffer overflow in Fortinet FortiWeb version 6.3.14 and below, 6.2.4 and below allows attacker to execute unauthorized code or commands via craft… |
CVE-2021-39263 | High | 7.8 | 2021-09-07 | A crafted NTFS image can trigger a heap-based buffer overflow, caused by an unsanitized attribute in ntfs_get_attribute_value, in NTFS-3G < 2021.8.22. |
CVE-2021-39262 | High | 7.8 | 2021-09-07 | A crafted NTFS image can cause an out-of-bounds access in ntfs_decompress in NTFS-3G < 2021.8.22. |
CVE-2021-39261 | High | 7.8 | 2021-09-07 | A crafted NTFS image can cause a heap-based buffer overflow in ntfs_compressed_pwrite in NTFS-3G < 2021.8.22. |
CVE-2021-39260 | High | 7.8 | 2021-09-07 | A crafted NTFS image can cause an out-of-bounds access in ntfs_inode_sync_standard_information in NTFS-3G < 2021.8.22. |
CVE-2021-39259 | High | 7.8 | 2021-09-07 | A crafted NTFS image can trigger an out-of-bounds access, caused by an unsanitized attribute length in ntfs_inode_lookup_by_name, in NTFS-3G < 2021.8.22. |
CVE-2021-39256 | High | 7.8 | 2021-09-07 | A crafted NTFS image can cause a heap-based buffer overflow in ntfs_inode_lookup_by_name in NTFS-3G < 2021.8.22. |
CVE-2021-35267 | High | 7.8 | 2021-09-07 | NTFS-3G versions < 2021.8.22, a stack buffer overflow can occur when correcting differences in the MFT and MFTMirror allowing for code execution or escalation… |
CVE-2021-35266 | High | 7.8 | 2021-09-07 | In NTFS-3G versions < 2021.8.22, when a specially crafted NTFS inode pathname is supplied in an NTFS image a heap buffer overflow can occur resulting in memory… |