VYPR

CWE-787

Out-of-bounds Write

BaseDraftLikelihood: High

Description

The product writes data past the end, or before the beginning, of the intended buffer.

Hierarchy (View 1000)

CVEs mapped to this weakness (15,182)

page 164 of 760
  • CVE-2025-29966HigMay 13, 2025
    risk 0.57cvss 8.8epss 0.01

    Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network.

  • CVE-2025-29964HigMay 13, 2025
    risk 0.57cvss 8.8epss 0.01

    Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.

  • CVE-2025-29963HigMay 13, 2025
    risk 0.57cvss 8.8epss 0.01

    Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.

  • CVE-2025-29840HigMay 13, 2025
    risk 0.57cvss 8.8epss 0.01

    Stack-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.

  • CVE-2025-45845HigMay 8, 2025
    risk 0.57cvss 8.8epss 0.01

    TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid5g parameter in the setWiFiEasyGuestCfg function.

  • CVE-2025-45844HigMay 8, 2025
    risk 0.57cvss 8.8epss 0.01

    TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid parameter in the setWiFiBasicCfg function.

  • CVE-2025-45843HigMay 8, 2025
    risk 0.57cvss 8.8epss 0.01

    TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid parameter in the setWiFiGuestCfg function.

  • CVE-2025-45842HigMay 8, 2025
    risk 0.57cvss 8.8epss 0.01

    TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid5g parameter in the setWiFiEasyCfg function.

  • CVE-2025-4356HigMay 6, 2025
    risk 0.57cvss 8.8epss 0.02

    A vulnerability was found in Tenda DAP-1520 1.10B04_BETA02. It has been declared as critical. This vulnerability affects the function mod_graph_auth_uri_handler of the file /storage of the component Authentication Handler. The manipulation leads to stack-based buffer overflow.…

  • CVE-2025-4355HigMay 6, 2025
    risk 0.57cvss 8.8epss 0.01

    A vulnerability was found in Tenda DAP-1520 1.10B04_BETA02. It has been classified as critical. This affects the function set_ws_action of the file /dws/api/. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. The exploit has…

  • CVE-2025-4354HigMay 6, 2025
    risk 0.57cvss 8.8epss 0.01

    A vulnerability was found in Tenda DAP-1520 1.10B04_BETA02 and classified as critical. Affected by this issue is the function check_dws_cookie of the file /storage. The manipulation leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been…

  • CVE-2025-4050HigMay 5, 2025
    risk 0.57cvss 8.8epss 0.00

    Out of bounds memory access in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

  • CVE-2025-35975HigMay 1, 2025
    risk 0.57cvss 8.8epss 0.01

    MicroDicom DICOM Viewer is vulnerable to an out-of-bounds write which may allow an attacker to execute arbitrary code. The user must open a malicious DCM file for exploitation.

  • CVE-2025-1050HigApr 23, 2025
    risk 0.57cvss 8.8epss 0.00

    Sonos Era 300 Out-of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Sonos Era 300 speakers. Authentication is not required to exploit this vulnerability. The specific flaw exists…

  • CVE-2025-23133HigApr 16, 2025
    risk 0.57cvss 8.8epss 0.00

    In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: update channel list in reg notifier instead reg worker Currently when ath11k gets a new channel list, it will be processed according to the following steps: 1. update new channel list to cfg80211…

  • CVE-2025-27477HigApr 8, 2025
    risk 0.57cvss 8.8epss 0.02

    Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network.

  • CVE-2025-3259HigApr 4, 2025
    risk 0.57cvss 8.8epss 0.01

    A vulnerability, which was classified as critical, has been found in Tenda RX3 16.03.13.11. This issue affects the function formSetDeviceName of the file /goform/SetOnlineDevName. The manipulation of the argument devName leads to stack-based buffer overflow. The attack may be…

  • CVE-2025-3161HigApr 3, 2025
    risk 0.57cvss 8.8epss 0.01

    A vulnerability was found in Tenda AC10 16.03.10.13 and classified as critical. This issue affects the function ShutdownSetAdd of the file /goform/ShutdownSetAdd. The manipulation of the argument list leads to stack-based buffer overflow. The attack may be initiated remotely.…

  • CVE-2025-2370HigMar 17, 2025
    risk 0.57cvss 8.8epss 0.01

    A vulnerability was found in TOTOLINK EX1800T up to 9.1.0cu.2112_B20220316. It has been declared as critical. Affected by this vulnerability is the function setWiFiExtenderConfig of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument apcliSsid leads to stack-based…

  • CVE-2025-2369HigMar 17, 2025
    risk 0.57cvss 8.8epss 0.01

    A vulnerability was found in TOTOLINK EX1800T up to 9.1.0cu.2112_B20220316. It has been classified as critical. Affected is the function setPasswordCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument admpass leads to stack-based buffer overflow. It is possible…