CWE-787 · Out-of-bounds Write (page 96)
Page 96 of 100 — CVEs classified under CWE-787, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-43174 | High | 7.5 | 2021-11-09 | NLnet Labs Routinator versions 0.9.0 up to and including 0.10.1, support the gzip transfer encoding when querying RRDP repositories. This encoding can be used… |
CVE-2021-31888 | High | 8.8 | 2021-11-09 | A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All… |
CVE-2021-31887 | High | 8.8 | 2021-11-09 | A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All… |
CVE-2021-31886 | Critical | 9.8 | 2021-11-09 | A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All… |
CVE-2021-42076 | High | 7.5 | 2021-11-08 | An issue was discovered in Barrier before 2.3.4. An attacker can cause memory exhaustion in the barriers component (aka the server-side implementation of Barri… |
CVE-2021-41221 | High | 7.8 | 2021-11-05 | TensorFlow is an open source platform for machine learning. In affected versions the shape inference code for the `Cudnn*` operations in TensorFlow can be tric… |
CVE-2021-41216 | Medium | 5.5 | 2021-11-05 | TensorFlow is an open source platform for machine learning. In affected versions the shape inference function for `Transpose` is vulnerable to a heap buffer ov… |
CVE-2021-3927 | High | 7.8 | 2021-11-05 | vim is vulnerable to Heap-based Buffer Overflow |
CVE-2021-25500 | High | 7.2 | 2021-11-05 | A missing input validation in HDCP LDFW prior to SMR Nov-2021 Release 1 allows attackers to overwrite TZASC allowing TEE compromise. |
CVE-2021-38499 | High | 8.8 | 2021-11-03 | Mozilla developers reported memory safety bugs present in Firefox 92. Some of these bugs showed evidence of memory corruption and we presume that with enough e… |
CVE-2021-38495 | High | 8.8 | 2021-11-03 | Mozilla developers reported memory safety bugs present in Thunderbird 78.13.0. Some of these bugs showed evidence of memory corruption and we presume that with… |
CVE-2021-38494 | High | 8.8 | 2021-11-03 | Mozilla developers reported memory safety bugs present in Firefox 91. Some of these bugs showed evidence of memory corruption and we presume that with enough e… |
CVE-2021-38493 | High | 8.8 | 2021-11-03 | Mozilla developers reported memory safety bugs present in Firefox 91 and Firefox ESR 78.13. Some of these bugs showed evidence of memory corruption and we pres… |
CVE-2021-41036 | Critical | 9.8 | 2021-11-03 | In versions prior to 1.1 of the Eclipse Paho MQTT C Client, the client does not check rem_len size in readpacket. |
CVE-2021-37986 | High | 8.8 | 2021-11-02 | Heap buffer overflow in Settings in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to engage with Dev Tools to potentially exploit heap corrupti… |
CVE-2021-37984 | High | 8.8 | 2021-11-02 | Heap buffer overflow in PDFium in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-37981 | Critical | 9.6 | 2021-11-02 | Heap buffer overflow in Skia in Google Chrome prior to 95.0.4638.54 allowed a remote attacker who had compromised the renderer process to potentially perform a… |
CVE-2021-37979 | High | 8.8 | 2021-11-02 | heap buffer overflow in WebRTC in Google Chrome prior to 94.0.4606.81 allowed a remote attacker who convinced a user to browse to a malicious website to potent… |
CVE-2021-37978 | High | 8.8 | 2021-11-02 | Heap buffer overflow in Blink in Google Chrome prior to 94.0.4606.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-36186 | High | 8.8 | 2021-11-02 | A stack-based buffer overflow in Fortinet FortiWeb version 6.4.0, version 6.3.15 and below, 6.2.5 and below allows attacker to execute unauthorized code or com… |
CVE-2021-22564 | Medium | 4.5 | 2021-11-01 | For certain valid JPEG XL images with a size slightly larger than an integer number of groups (256x256 pixels) when processing the groups out of order the deco… |
CVE-2021-3756 | Critical | 9.8 | 2021-10-29 | libmysofa is vulnerable to Heap-based Buffer Overflow |
CVE-2020-22079 | Critical | 9.8 | 2021-10-29 | Stack-based buffer overflow in Tenda AC-10U AC1200 Router US_AC10UV1.0RTL_V15.03.06.48_multi_TDE01 allows remote attackers to execute arbitrary code via the ti… |
CVE-2021-30824 | High | 7.8 | 2021-10-28 | A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.0.1, Security Update 2021-007 Catalina, macOS… |
CVE-2021-30814 | High | 7.8 | 2021-10-28 | A memory corruption issue was addressed with improved input validation. This issue is fixed in tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing a malicious… |
CVE-2020-9897 | High | 7.8 | 2021-10-28 | An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 14.2 and iPadOS 14.2, macOS Big Sur 11.0.1. Processing a malici… |
CVE-2021-22465 | Medium | 5.5 | 2021-10-28 | A component of the HarmonyOS has a Heap-based Buffer Overflow vulnerability. Local attackers may exploit this vulnerability to cause Kernel System unavailable. |
CVE-2021-37748 | High | 8.8 | 2021-10-28 | Multiple buffer overflows in the limited configuration shell (/sbin/gs_config) on Grandstream HT801 devices before 1.0.29 allow remote authenticated users to e… |
CVE-2021-3903 | High | 7.8 | 2021-10-27 | vim is vulnerable to Heap-based Buffer Overflow |
CVE-2021-40118 | High | 8.6 | 2021-10-27 | A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow… |
CVE-2021-37129 | High | 7.5 | 2021-10-27 | There is an out of bounds write vulnerability in some Huawei products. The vulnerability is caused by a function of a module that does not properly verify inpu… |
CVE-2021-34583 | High | 7.5 | 2021-10-26 | Crafted web server requests may cause a heap-based buffer overflow and could therefore trigger a denial-of- service condition due to a crash in the CODESYS V2… |
CVE-2021-34859 | High | 8.8 | 2021-10-25 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of TeamViewer 15.16.8.0. User interaction is required to exploit… |
CVE-2021-34857 | High | 8.8 | 2021-10-25 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.3 (49160). An attacker must first obtain t… |
CVE-2021-34856 | High | 8.8 | 2021-10-25 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.3 (49160). An attacker must first obtain t… |
CVE-2021-0940 | Medium | 6.7 | 2021-10-25 | In TBD of TBD, there is a possible out of bounds write due to improper locking. This could lead to local escalation of privilege in the kernel with System exec… |
CVE-2021-0935 | Medium | 6.7 | 2021-10-25 | In ip6_xmit of ip6_output.c, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with System exec… |
CVE-2021-0663 | Medium | 6.7 | 2021-10-25 | In audio DSP, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution… |
CVE-2021-0662 | Medium | 6.7 | 2021-10-25 | In audio DSP, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution… |
CVE-2021-0661 | Medium | 6.7 | 2021-10-25 | In audio DSP, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution… |
CVE-2021-0633 | Medium | 6.7 | 2021-10-25 | In display driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execu… |
CVE-2021-21703 | High | 7.8 | 2021-10-25 | In PHP versions 7.3.x up to and including 7.3.31, 7.4.x below 7.4.25 and 8.0.x below 8.0.12, when running PHP FPM SAPI with main FPM daemon process running as… |
CVE-2020-28964 | Medium | 6.7 | 2021-10-22 | Internet Download Manager 6.37.11.1 was discovered to contain a stack buffer overflow in the Search function. This vulnerability allows attackers to escalate l… |
CVE-2020-23060 | High | 7.1 | 2021-10-22 | Internet Download Manager 6.37.11.1 was discovered to contain a stack buffer overflow in the Export/Import function. This vulnerability allows attackers to esc… |
CVE-2021-38479 | Medium | 6.5 | 2021-10-22 | Many API function codes receive raw pointers remotely from the user and trust these pointers as valid in-bound memory regions. An attacker can manipulate API f… |
CVE-2021-38473 | High | 8.0 | 2021-10-22 | The affected product’s code base doesn’t properly control arguments for specific functions, which could lead to a stack overflow. |
CVE-2021-41160 | Medium | 5.3 | 2021-10-21 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. In affected versions a malicious server might trigger… |
CVE-2021-41159 | Medium | 5.8 | 2021-10-21 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. All FreeRDP clients prior to version 2.4.1 using gate… |
CVE-2021-42327 | Medium | 6.7 | 2021-10-21 | dp_link_settings_write in drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c in the Linux kernel through 5.14.14 allows a heap-based buffer overflow by… |
CVE-2021-42012 | High | 7.8 | 2021-10-21 | A stack-based buffer overflow vulnerability in Trend Micro Apex One, Apex One as a Service and Worry-Free Business Security 10.0 SP1 could allow a local attack… |
CVE-2021-21749 | Critical | 9.8 | 2021-10-20 | ZTE MF971R product has two stack-based buffer overflow vulnerabilities. An attacker could exploit the vulnerabilities to execute arbitrary code. |
CVE-2021-21748 | Critical | 9.8 | 2021-10-20 | ZTE MF971R product has two stack-based buffer overflow vulnerabilities. An attacker could exploit the vulnerabilities to execute arbitrary code. |
CVE-2021-35593 | Medium | 6.3 | 2021-10-20 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.33 and prior, 7.5.23 and… |
CVE-2021-35590 | Medium | 6.3 | 2021-10-20 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.33 and prior, 7.5.23 and… |
CVE-2021-42739 | Medium | 6.7 | 2021-10-20 | The firewire subsystem in the Linux kernel through 5.14.13 has a buffer overflow related to drivers/media/firewire/firedtv-avc.c and drivers/media/firewire/fir… |
CVE-2021-30292 | High | 8.4 | 2021-10-20 | Possible memory corruption due to lack of validation of client data used for memory allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity… |
CVE-2021-30291 | High | 8.4 | 2021-10-20 | Possible memory corruption due to lack of validation of client data used for memory allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity… |
CVE-2021-30288 | High | 8.4 | 2021-10-20 | Possible stack overflow due to improper length check of TLV while copying the TLV to a local stack variable in Snapdragon Auto, Snapdragon Compute, Snapdragon… |
CVE-2021-30258 | High | 8.4 | 2021-10-20 | Possible buffer overflow due to improper size calculation of payload received in VR service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Sn… |
CVE-2021-30257 | High | 8.4 | 2021-10-20 | Possible out of bound read or write in VR service due to lack of validation of DSP selection values in Snapdragon Compute, Snapdragon Connectivity, Snapdragon… |
CVE-2021-30256 | High | 8.4 | 2021-10-20 | Possible stack overflow due to improper validation of camera name length before copying the name in VR Service in Snapdragon Compute, Snapdragon Connectivity… |
CVE-2021-1967 | Medium | 5.3 | 2021-10-20 | Possible stack buffer overflow due to lack of check on the maximum number of post NAN discovery attributes while processing a NAN Match event in Snapdragon Aut… |
CVE-2021-1959 | High | 7.8 | 2021-10-20 | Possible memory corruption due to lack of bound check of input index in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT… |
CVE-2021-31383 | High | 7.5 | 2021-10-19 | In Point to MultiPoint (P2MP) scenarios within established sessions between network or adjacent neighbors the improper use of a source to destination copy writ… |
CVE-2021-31374 | High | 7.5 | 2021-10-19 | On Juniper Networks Junos OS and Junos OS Evolved devices processing a specially crafted BGP UPDATE or KEEPALIVE message can lead to a routing process daemon (… |
CVE-2021-30849 | High | 7.8 | 2021-10-19 | Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, watchOS 8, Safari 15, tvOS 15… |
CVE-2021-30848 | High | 7.8 | 2021-10-19 | A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, Safari 15, iOS 15 and iPadOS 15. Proces… |
CVE-2021-30846 | High | 7.8 | 2021-10-19 | A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, Safari 15, tvOS 15, iOS 15 and iPadOS 1… |
CVE-2021-30832 | High | 7.8 | 2021-10-19 | A memory corruption issue was addressed with improved state management. This issue is fixed in Security Update 2021-005 Catalina, macOS Big Sur 11.6. A local a… |
CVE-2021-30830 | High | 7.8 | 2021-10-19 | A memory corruption issue was addressed with improved memory handling. This issue is fixed in Security Update 2021-005 Catalina, macOS Big Sur 11.6. A maliciou… |
CVE-2021-30807 | High | 7.8 | 2021-10-19 | A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.5.1, iOS 14.7.1 and iPadOS 14.7.1, watchOS 7.6.1… |
CVE-2021-3872 | High | 7.8 | 2021-10-19 | vim is vulnerable to Heap-based Buffer Overflow |
CVE-2021-38442 | High | 7.8 | 2021-10-18 | FATEK Automation WinProladder versions 3.30 and prior lacks proper validation of user-supplied data when parsing project files, which could result in a heap-co… |
CVE-2021-38436 | High | 7.8 | 2021-10-18 | FATEK Automation WinProladder versions 3.30 and prior lacks proper validation of user-supplied data when parsing project files, which could result in a memory-… |
CVE-2021-38426 | High | 7.8 | 2021-10-18 | FATEK Automation WinProladder versions 3.30 and prior lacks proper validation of user-supplied data when parsing project files, which could result in an out-of… |
CVE-2021-38389 | Critical | 9.8 | 2021-10-18 | Advantech WebAccess versions 9.02 and prior are vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute code. |
CVE-2021-33023 | Critical | 9.8 | 2021-10-18 | Advantech WebAccess versions 9.02 and prior are vulnerable to a heap-based buffer overflow, which may allow an attacker to remotely execute code. |
CVE-2021-28021 | High | 7.8 | 2021-10-15 | Buffer overflow vulnerability in function stbi__extend_receive in stb_image.h in stb 2.26 via a crafted JPEG file. |
CVE-2021-40731 | High | 7.8 | 2021-10-15 | Adobe Acrobat Reader DC version 21.007.20095 (and earlier), 21.007.20096 (and earlier), 20.004.30015 (and earlier), and 17.011.30202 (and earlier) is affected… |
CVE-2021-3875 | Medium | 5.5 | 2021-10-15 | vim is vulnerable to Heap-based Buffer Overflow |
CVE-2021-3057 | High | 8.1 | 2021-10-13 | A stack-based buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect app that enables a man-in-the-middle attacker to disrupt system proc… |
CVE-2021-3330 | High | 7.1 | 2021-10-12 | RCE/DOS: Linked-list corruption leading to large out-of-bounds write while sorting for forged fragment list in Zephyr. Zephyr versions >= >=2.4.0 contain Out-o… |
CVE-2020-22678 | Medium | 5.5 | 2021-10-12 | An issue was discovered in gpac 0.8.0. The gf_media_nalu_remove_emulation_bytes function in av_parsers.c has a heap-based buffer overflow which can lead to a d… |
CVE-2020-22677 | Medium | 5.5 | 2021-10-12 | An issue was discovered in gpac 0.8.0. The dump_data_hex function in box_dump.c has a heap-based buffer overflow which can lead to a denial of service (DOS) vi… |
CVE-2020-22675 | Medium | 5.5 | 2021-10-12 | An issue was discovered in gpac 0.8.0. The GetGhostNum function in stbl_read.c has a heap-based buffer overflow which can lead to a denial of service (DOS) via… |
CVE-2021-21940 | Critical | 10.0 | 2021-10-12 | A heap-based buffer overflow vulnerability exists in the pushMuxer processRtspInfo functionality of Anker Eufy Homebase 2 2.1.6.9h. A specially-crafted network… |
CVE-2021-37199 | High | 7.5 | 2021-10-12 | A vulnerability has been identified in SINUMERIK 808D (All versions), SINUMERIK 828D (All versions < V4.95). Affected devices don't process correctly certain s… |
CVE-2021-30632 | High | 8.8 | 2021-10-08 | Out of bounds write in V8 in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-30628 | High | 8.8 | 2021-10-08 | Stack buffer overflow in ANGLE in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit stack corruption via a crafted HTML page. |
CVE-2021-30626 | High | 8.8 | 2021-10-08 | Out of bounds memory access in ANGLE in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… |
CVE-2021-25495 | High | 7.3 | 2021-10-06 | A possible heap buffer overflow vulnerability in libSPenBase library of Samsung Notes prior to Samsung Note version 4.3.02.61 allows arbitrary code execution. |
CVE-2021-25492 | High | 7.3 | 2021-10-06 | Lack of boundary checking of a buffer in libSPenBase library of Samsung Notes prior to Samsung Note version 4.3.02.61 allows OOB read. |
CVE-2021-25479 | High | 7.2 | 2021-10-06 | A possible heap-based buffer overflow vulnerability in Exynos CP Chipset prior to SMR Oct-2021 Release 1 allows arbitrary memory write and code execution. |
CVE-2021-25478 | High | 7.2 | 2021-10-06 | A possible stack-based buffer overflow vulnerability in Exynos CP Chipset prior to SMR Oct-2021 Release 1 allows arbitrary memory write and code execution. |
CVE-2021-25475 | Low | 3.9 | 2021-10-06 | A possible heap-based buffer overflow vulnerability in DSP kernel driver prior to SMR Oct-2021 Release 1 allows arbitrary memory write and code execution. |
CVE-2021-25469 | Medium | 6.0 | 2021-10-06 | A possible stack-based buffer overflow vulnerability in Widevine trustlet prior to SMR Oct-2021 Release 1 allows arbitrary code execution. |
CVE-2021-0690 | Medium | 6.5 | 2021-10-06 | In ih264d_mark_err_slice_skip of ih264d_parse_pslice.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote inform… |
CVE-2021-31986 | Medium | 6.8 | 2021-10-05 | User controlled parameters related to SMTP notifications are not correctly validated. This can lead to a buffer overflow resulting in crashes and data leakage. |
CVE-2021-3625 | Critical | 9.6 | 2021-10-05 | Buffer overflow in Zephyr USB DFU DNLOAD. Zephyr versions >= v2.5.0 contain Heap-based Buffer Overflow (CWE-122). For more information, see https://github.com/… |
CVE-2021-42008 | High | 7.8 | 2021-10-05 | The decode_data function in drivers/net/hamradio/6pack.c in the Linux kernel before 5.13.13 has a slab out-of-bounds write. Input from a process that has the C… |