CWE-787 · Out-of-bounds Write (page 94)
Page 94 of 100 — CVEs classified under CWE-787, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-19131 | High | 7.5 | 2021-09-07 | Buffer Overflow in LibTiff v4.0.10 allows attackers to cause a denial of service via the "invertImage()" function in the component "tiffcrop". |
CVE-2021-35269 | High | 7.8 | 2021-09-07 | NTFS-3G versions < 2021.8.22, when a specially crafted NTFS attribute from the MFT is setup in the function ntfs_attr_setup_flag, a heap buffer overflow can oc… |
CVE-2021-35268 | High | 7.8 | 2021-09-07 | In NTFS-3G versions < 2021.8.22, when a specially crafted NTFS inode is loaded in the function ntfs_inode_real_open, a heap buffer overflow can occur allowing… |
CVE-2021-33289 | High | 7.8 | 2021-09-07 | In NTFS-3G versions < 2021.8.22, when a specially crafted MFT section is supplied in an NTFS image a heap buffer overflow can occur and allow for code executio… |
CVE-2021-33285 | High | 7.8 | 2021-09-07 | In NTFS-3G versions < 2021.8.22, when a specially crafted NTFS attribute is supplied to the function ntfs_get_attribute_value, a heap buffer overflow can occur… |
CVE-2021-28136 | Medium | 6.5 | 2021-09-07 | The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly handle the reception of multiple LMP IO Capability Request packets… |
CVE-2021-3770 | High | 7.8 | 2021-09-06 | vim is vulnerable to Heap-based Buffer Overflow |
CVE-2021-30614 | High | 8.8 | 2021-09-03 | Chromium: CVE-2021-30614 Heap buffer overflow in TabStrip |
CVE-2021-36017 | High | 7.8 | 2021-09-02 | Adobe After Effects version 18.2.1 (and earlier) is affected by a memory corruption vulnerability when parsing a specially crafted file. An unauthenticated att… |
CVE-2021-35996 | High | 7.8 | 2021-09-02 | Adobe After Effects version 18.2.1 (and earlier) is affected by a memory corruption vulnerability when parsing a specially crafted file. An unauthenticated att… |
CVE-2021-35994 | High | 7.8 | 2021-09-02 | Adobe After Effects version 18.2.1 (and earlier) is affected by an out-of-bounds Write vulnerability when parsing a specially crafted file. An unauthenticated… |
CVE-2021-35993 | High | 7.8 | 2021-09-02 | Adobe After Effects version 18.2.1 (and earlier) is affected by an out-of-bounds Write vulnerability when parsing a specially crafted file. An unauthenticated… |
CVE-2021-28564 | High | 8.8 | 2021-09-02 | Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by an Out-of-bound… |
CVE-2021-28561 | High | 8.8 | 2021-09-02 | Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by a memory corrup… |
CVE-2021-22791 | Medium | 6.5 | 2021-09-02 | A CWE-787: Out-of-bounds Write vulnerability that could cause a Denial of Service on the Modicon PLC controller / simulator when updating the controller applic… |
CVE-2021-21086 | High | 7.8 | 2021-09-02 | Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by an Out-of-bound… |
CVE-2021-33938 | High | 7.5 | 2021-09-02 | Buffer overflow vulnerability in function prune_to_recommended in src/policy.c in libsolv before 0.7.17 allows attackers to cause a Denial of Service. |
CVE-2021-33930 | High | 7.5 | 2021-09-02 | Buffer overflow vulnerability in function pool_installable_whatprovides in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service. |
CVE-2021-33929 | High | 7.5 | 2021-09-02 | Buffer overflow vulnerability in function pool_disabled_solvable in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service. |
CVE-2021-33928 | High | 7.5 | 2021-09-02 | Buffer overflow vulnerability in function pool_installable in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service. |
CVE-2021-36073 | High | 7.8 | 2021-09-01 | Adobe Bridge version 11.1 (and earlier) is affected by a heap-based buffer overflow vulnerability when parsing a crafted .SGI file. An attacker could leverage… |
CVE-2021-36072 | High | 7.8 | 2021-09-01 | Adobe Bridge versions 11.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of t… |
CVE-2021-36066 | High | 7.8 | 2021-09-01 | Adobe Photoshop versions 21.2.10 (and earlier) and 22.4.3 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary cod… |
CVE-2021-36065 | High | 7.8 | 2021-09-01 | Adobe Photoshop versions 21.2.10 (and earlier) and 22.4.3 (and earlier) are affected by a heap-based buffer overflow vulnerability that could result in arbitra… |
CVE-2021-36054 | Low | 3.3 | 2021-09-01 | XMP Toolkit SDK version 2020.1 (and earlier) is affected by a buffer overflow vulnerability potentially resulting in local application denial of service in the… |
CVE-2021-36052 | High | 7.8 | 2021-09-01 | XMP Toolkit version 2020.1 (and earlier) is affected by a memory corruption vulnerability, potentially resulting in arbitrary code execution in the context of… |
CVE-2021-36050 | High | 7.8 | 2021-09-01 | XMP Toolkit SDK version 2020.1 (and earlier) is affected by a buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of… |
CVE-2021-36049 | High | 7.8 | 2021-09-01 | Adobe Bridge version 11.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious Bridge file, potentially resul… |
CVE-2021-36046 | High | 7.8 | 2021-09-01 | XMP Toolkit version 2020.1 (and earlier) is affected by a memory corruption vulnerability, potentially resulting in arbitrary code execution in the context of… |
CVE-2020-20490 | High | 7.5 | 2021-08-31 | A heap buffer-overflow in the client_example1.c component of libiec_iccp_mod v1.5 leads to a denial of service (DOS). |
CVE-2020-20486 | High | 7.5 | 2021-08-31 | IEC104 v1.0 contains a stack-buffer overflow in the parameter Iec10x_Sta_Addr. |
CVE-2021-3634 | Medium | 6.5 | 2021-08-31 | A flaw has been found in libssh in versions prior to 0.9.6. The SSH protocol keeps track of two shared secrets during the lifetime of the session. One of them… |
CVE-2021-29630 | High | 8.1 | 2021-08-30 | In FreeBSD 13.0-STABLE before n246938-0729ba2f49c9, 12.2-STABLE before r370383, 11.4-STABLE before r370381, 13.0-RELEASE before p4, 12.2-RELEASE before p10, an… |
CVE-2021-33019 | High | 7.8 | 2021-08-30 | A stack-based buffer overflow vulnerability in Delta Electronics DOPSoft Version 4.00.11 and prior may be exploited by processing a specially crafted project f… |
CVE-2020-15744 | Critical | 9.6 | 2021-08-30 | Stack-based Buffer Overflow vulnerability in the ONVIF server component of Victure PC420 smart camera allows an attacker to execute remote code on the target d… |
CVE-2021-28233 | High | 8.8 | 2021-08-27 | Heap-based Buffer Overflow vulnerability exists in ok-file-formats 1 via the ok_jpg_generate_huffman_table function in ok_jpg.c. |
CVE-2021-36531 | High | 8.8 | 2021-08-27 | ngiflib 0.4 has a heap overflow in GetByte() at ngiflib.c:70 in NGIFLIB_NO_FILE mode, GetByte() reads memory buffer without checking the boundary. |
CVE-2021-36530 | High | 8.8 | 2021-08-27 | ngiflib 0.4 has a heap overflow in GetByteStr() at ngiflib.c:108 in NGIFLIB_NO_FILE mode, GetByteStr() copy memory buffer without checking the boundary. |
CVE-2021-30592 | High | 8.8 | 2021-08-26 | Out of bounds write in Tab Groups in Google Chrome prior to 92.0.4515.131 allowed an attacker who convinced a user to install a malicious extension to perform… |
CVE-2021-30590 | High | 8.8 | 2021-08-26 | Heap buffer overflow in Bookmarks in Google Chrome prior to 92.0.4515.131 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… |
CVE-2021-1590 | Medium | 5.3 | 2021-08-25 | A vulnerability in the implementation of the system login block-for command for Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a… |
CVE-2021-3713 | High | 7.4 | 2021-08-25 | An out-of-bounds write flaw was found in the UAS (USB Attached SCSI) device emulation of QEMU in versions prior to 6.2.0-rc0. The device uses the guest supplie… |
CVE-2021-32995 | High | 7.8 | 2021-08-25 | Cscape (All Versions prior to 9.90 SP5) lacks proper validation of user-supplied data when parsing project files. This could lead to an out-of-bounds write. An… |
CVE-2020-18971 | Medium | 5.5 | 2021-08-25 | Stack-based Buffer Overflow in PoDoFo v0.9.6 allows attackers to cause a denial of service via the component 'src/base/PdfDictionary.cpp:65'. |
CVE-2021-30985 | High | 7.8 | 2021-08-24 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.2 and iPadOS 15.2. A malicious application may be able… |
CVE-2021-30971 | High | 7.8 | 2021-08-24 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.1, iOS 15.2 and iPadOS 15.2, macOS Big Sur 1… |
CVE-2021-30949 | High | 7.8 | 2021-08-24 | A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.6.2, tvOS 15.2, macOS Monterey 12.1, Security U… |
CVE-2021-30942 | High | 7.8 | 2021-08-24 | Description: A memory corruption issue in the processing of ICC profiles was addressed with improved input validation. This issue is fixed in macOS Big Sur 11… |
CVE-2021-30937 | High | 7.8 | 2021-08-24 | A memory corruption vulnerability was addressed with improved locking. This issue is fixed in macOS Big Sur 11.6.2, tvOS 15.2, macOS Monterey 12.1, Security Up… |
CVE-2021-30929 | Medium | 5.5 | 2021-08-24 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.1, iOS 15.2 and iPadOS 15.2, macOS Big Sur 1… |
CVE-2021-30928 | High | 7.8 | 2021-08-24 | A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.6, watchOS 8, tvOS 15, iOS 14.8 and iPadOS 14.8… |
CVE-2021-30926 | High | 7.8 | 2021-08-24 | Description: A memory corruption issue in the processing of ICC profiles was addressed with improved input validation. This issue is fixed in macOS Monterey 12… |
CVE-2021-30922 | High | 7.8 | 2021-08-24 | Multiple out-of-bounds write issues were addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.6.1. A malicious application may be a… |
CVE-2021-30919 | High | 7.8 | 2021-08-24 | An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 15.1 and iPadOS 15.1, macOS Monterey 12.0.1, iOS 14.8.1 and iPa… |
CVE-2021-30916 | High | 7.8 | 2021-08-24 | A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 15.1 and iPadOS 15.1, macOS Monterey 12.0.1, iOS 14.8.1 and i… |
CVE-2021-30914 | High | 7.8 | 2021-08-24 | A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 15.1 and iPadOS 15.1. An application may be able to execute… |
CVE-2021-30909 | High | 7.8 | 2021-08-24 | A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 15.1 and iPadOS 15.1, macOS Monterey 12.0.1, iOS 14.8.1 and i… |
CVE-2021-30901 | High | 7.8 | 2021-08-24 | Multiple out-of-bounds write issues were addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.0.1, Security Update 2021-007 Catali… |
CVE-2021-30900 | High | 7.8 | 2021-08-24 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 14.8.1 and iPadOS 14.8.1, iOS 15.1 and iPadOS 15.1. A mali… |
CVE-2021-30894 | High | 7.8 | 2021-08-24 | A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 15.1 and iPadOS 15.1, tvOS 15.1. An application may be able… |
CVE-2021-30883 | High | 7.8 | 2021-08-24 | A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 15.0.2 and iPadOS 15.0.2, macOS Monterey 12.0.1, iOS 14.8.1 a… |
CVE-2021-30853 | Medium | 5.5 | 2021-08-24 | This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.6. A malicious application may bypass Gatekeeper checks. |
CVE-2021-30851 | High | 8.8 | 2021-08-24 | A memory corruption vulnerability was addressed with improved locking. This issue is fixed in Safari 15, tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing m… |
CVE-2021-28622 | High | 7.8 | 2021-08-24 | Adobe Animate version 21.0.6 (and earlier) is affected by an Out-of-bounds Write vulnerability. An unauthenticated attacker could leverage this vulnerability t… |
CVE-2021-32263 | High | 7.8 | 2021-08-24 | ok-file-formats through 2021-04-29 has a heap-based buffer overflow in the ok_csv_circular_buffer_read function in ok_csv.c. |
CVE-2021-28610 | High | 7.8 | 2021-08-24 | Adobe After Effects version 18.2 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability when parsing a specially crafted file. An unauthentica… |
CVE-2021-28608 | High | 7.8 | 2021-08-24 | Adobe After Effects version 18.2 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability when parsing a specially crafted file. An unauthentica… |
CVE-2021-28607 | High | 7.8 | 2021-08-24 | Adobe After Effects version 18.2 (and earlier) is affected by a heap corruption vulnerability when parsing a specially crafted file. An unauthenticated attacke… |
CVE-2021-28606 | High | 7.8 | 2021-08-24 | Adobe After Effects version 18.2 (and earlier) is affected by a Stack-based Buffer Overflow vulnerability when parsing a specially crafted file. An unauthentic… |
CVE-2021-28605 | High | 7.8 | 2021-08-24 | Adobe After Effects version 18.2 (and earlier) is affected by a memory corruption vulnerability when parsing a specially crafted file. An unauthenticated attac… |
CVE-2021-28604 | High | 7.8 | 2021-08-24 | Adobe After Effects version 18.2 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability when parsing a specially crafted file. An unauthentica… |
CVE-2021-28603 | High | 7.8 | 2021-08-24 | Adobe After Effects version 18.2 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability when parsing a specially crafted file. An unauthentica… |
CVE-2021-28602 | High | 7.8 | 2021-08-24 | Adobe After Effects version 18.2 (and earlier) is affected by a memory corruption vulnerability when parsing a specially crafted file. An unauthenticated attac… |
CVE-2021-28596 | High | 7.8 | 2021-08-23 | Adobe Framemaker version 2020.0.1 (and earlier) and 2019.0.8 (and earlier) are affected by an Out-of-bounds Write vulnerability when parsing a specially crafte… |
CVE-2020-18773 | Medium | 6.5 | 2021-08-23 | An invalid memory access in the decode function in iptc.cpp of Exiv2 0.27.99.0 allows attackers to cause a denial of service (DOS) via a crafted tif file. |
CVE-2020-18735 | High | 7.5 | 2021-08-23 | A heap buffer overflow in /src/dds_stream.c of Eclipse IOT Cyclone DDS Project v0.1.0 causes the DDS subscriber server to crash. |
CVE-2020-18734 | High | 7.5 | 2021-08-23 | A stack buffer overflow in /ddsi/q_bitset.h of Eclipse IOT Cyclone DDS Project v0.1.0 causes the DDS subscriber server to crash. |
CVE-2021-21828 | Critical | 9.8 | 2021-08-20 | A heap-based buffer overflow vulnerability exists in the XML Decompression DecodeTreeBlock functionality of AT&T Labs Xmill 0.7. In the default case of DecodeT… |
CVE-2021-21827 | Critical | 9.8 | 2021-08-20 | A heap-based buffer overflow vulnerability exists in the XML Decompression DecodeTreeBlock functionality of AT&T Labs Xmill 0.7. Within `DecodeTreeBlock` which… |
CVE-2021-21826 | Critical | 9.8 | 2021-08-20 | A heap-based buffer overflow vulnerability exists in the XML Decompression DecodeTreeBlock functionality of AT&T Labs Xmill 0.7. Within `DecodeTreeBlock` which… |
CVE-2021-36015 | High | 7.8 | 2021-08-20 | Adobe Media Encoder version 15.2 (and earlier) is affected by a memory corruption vulnerability when parsing a specially crafted file. An unauthenticated attac… |
CVE-2021-36009 | High | 7.8 | 2021-08-20 | Adobe Illustrator version 25.2.3 (and earlier) is affected by an memory corruption vulnerability when parsing a specially crafted file. An unauthenticated atta… |
CVE-2021-36000 | High | 7.8 | 2021-08-20 | Adobe Character Animator version 4.2 (and earlier) is affected by a memory corruption vulnerability when parsing a specially crafted file. An unauthenticated a… |
CVE-2021-35999 | High | 7.8 | 2021-08-20 | Adobe Prelude version 10.0 (and earlier) is affected by a memory corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker co… |
CVE-2021-35997 | High | 7.8 | 2021-08-20 | Adobe Premiere Pro version 15.2 (and earlier) is affected by a memory corruption vulnerability when parsing a specially crafted file. An unauthenticated attack… |
CVE-2021-35990 | High | 7.8 | 2021-08-20 | Adobe Bridge version 11.0.2 (and earlier) is affected by an Out-of-bounds Write vulnerability when parsing a specially crafted file. An unauthenticated attacke… |
CVE-2021-35989 | High | 7.8 | 2021-08-20 | Adobe Bridge version 11.0.2 (and earlier) is affected by an Out-of-bounds Write vulnerability when parsing a specially crafted file. An unauthenticated attacke… |
CVE-2021-28642 | High | 8.8 | 2021-08-20 | Acrobat Reader DC versions 2021.005.20054 (and earlier), 2020.004.30005 (and earlier) and 2017.011.30197 (and earlier) are affected by an Out-of-bounds write v… |
CVE-2021-28592 | High | 7.8 | 2021-08-20 | Adobe Illustrator version 25.2.3 (and earlier) is affected by an Out-of-bounds Write vulnerability when parsing a specially crafted file. An unauthenticated at… |
CVE-2021-28591 | High | 7.8 | 2021-08-20 | Adobe Illustrator version 25.2.3 (and earlier) is affected by an Out-of-bounds Write vulnerability when parsing a specially crafted file. An unauthenticated at… |
CVE-2020-18900 | Low | 3.3 | 2021-08-19 | A heap-based buffer overflow in the libexe_io_handle_read_coff_optional_header function of libyal libexe before 20181128. NOTE: the vendor has disputed this as… |
CVE-2021-31227 | High | 7.5 | 2021-08-19 | An issue was discovered in HCC embedded InterNiche 4.0.1. A potential heap buffer overflow exists in the code that parses the HTTP POST request, due to an inco… |
CVE-2021-31226 | Critical | 9.8 | 2021-08-19 | An issue was discovered in HCC embedded InterNiche 4.0.1. A potential heap buffer overflow exists in the code that parses the HTTP POST request, due to lack of… |
CVE-2021-34730 | Critical | 9.8 | 2021-08-18 | A vulnerability in the Universal Plug-and-Play (UPnP) service of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an unauthenticated… |
CVE-2020-25928 | Critical | 9.8 | 2021-08-18 | The DNS feature in InterNiche NicheStack TCP/IP 4.0.1 is affected by: Buffer Overflow. The impact is: execute arbitrary code (remote). The component is: DNS re… |
CVE-2021-0628 | Medium | 6.7 | 2021-08-18 | In OMA DRM, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution priv… |
CVE-2021-0626 | Medium | 6.7 | 2021-08-18 | In ged, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2021-0407 | Medium | 6.7 | 2021-08-18 | In clk driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution… |
CVE-2021-21825 | Critical | 9.8 | 2021-08-18 | A heap-based buffer overflow vulnerability exists in the XML Decompression PlainTextUncompressor::UncompressItem functionality of AT&T Labs’ Xmill 0.7. A speci… |
CVE-2020-23334 | High | 7.5 | 2021-08-17 | A WRITE memory access in the AP4_NullTerminatedStringAtom::AP4_NullTerminatedStringAtom component of Bento4 version 06c39d9 can lead to a segmentation fault. |