VYPR

CWE-787

Out-of-bounds Write

BaseDraftLikelihood: High

Description

The product writes data past the end, or before the beginning, of the intended buffer.

Hierarchy (View 1000)

CVEs mapped to this weakness (15,182)

page 204 of 760
  • CVE-2021-3520CriJun 2, 2021
    risk 0.57cvss 9.8epss 0.03

    There's a flaw in lz4. An attacker who submits a crafted file to an application linked with lz4 may be able to trigger an integer overflow, leading to calling of memmove() on a negative size argument, causing an out-of-bounds write and/or a crash. The greatest impact of this…

  • CVE-2020-22036HigJun 1, 2021
    risk 0.57cvss 8.8epss 0.02

    A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 in filter_intra at libavfilter/vf_bwdif.c, which might lead to memory corruption and other potential consequences.

  • CVE-2020-22035HigJun 1, 2021
    risk 0.57cvss 8.8epss 0.01

    A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 in get_block_row at libavfilter/vf_bm3d.c, which might lead to memory corruption and other potential consequences.

  • CVE-2020-17541HigJun 1, 2021
    risk 0.57cvss 8.8epss 0.03

    Libjpeg-turbo all version have a stack-based buffer overflow in the "transform" component. A remote attacker can send a malformed jpeg file to the service and cause arbitrary code execution or denial of service of the target service.

  • CVE-2021-20236CriMay 28, 2021
    risk 0.57cvss 9.8epss 0.02

    A flaw was found in the ZeroMQ server in versions before 4.3.3. This flaw allows a malicious client to cause a stack buffer overflow on the server by sending crafted topic subscription requests and then unsubscribing. The highest threat from this vulnerability is to…

  • CVE-2020-22034HigMay 27, 2021
    risk 0.57cvss 8.8epss 0.02

    A heap-based Buffer Overflow vulnerability exists FFmpeg 4.2 at libavfilter/vf_floodfill.c, which might lead to memory corruption and other potential consequences.

  • CVE-2020-22032HigMay 27, 2021
    risk 0.57cvss 8.8epss 0.02

    A heap-based Buffer Overflow vulnerability exists FFmpeg 4.2 at libavfilter/vf_edgedetect.c in gaussian_blur, which might lead to memory corruption and other potential consequences.

  • CVE-2020-22027HigMay 27, 2021
    risk 0.57cvss 8.8epss 0.02

    A heap-based Buffer Overflow vulnerability exits in FFmpeg 4.2 in deflate16 at libavfilter/vf_neighbor.c, which might lead to memory corruption and other potential consequences.

  • CVE-2020-22025HigMay 27, 2021
    risk 0.57cvss 8.8epss 0.02

    A heap-based Buffer Overflow vulnerability exists in gaussian_blur at libavfilter/vf_edgedetect.c, which might lead to memory corruption and other potential consequences.

  • CVE-2020-22023HigMay 27, 2021
    risk 0.57cvss 8.8epss 0.01

    A heap-based Buffer Overflow vulnerabililty exists in FFmpeg 4.2 in filter_frame at libavfilter/vf_bitplanenoise.c, which might lead to memory corruption and other potential consequences.

  • CVE-2020-22022HigMay 27, 2021
    risk 0.57cvss 8.8epss 0.02

    A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 in filter_frame at libavfilter/vf_fieldorder.c, which might lead to memory corruption and other potential consequences.

  • CVE-2020-22017HigMay 27, 2021
    risk 0.57cvss 8.8epss 0.01

    A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at ff_fill_rectangle in libavfilter/drawutils.c, which might lead to memory corruption and other potential consequences.

  • CVE-2020-22016HigMay 27, 2021
    risk 0.57cvss 8.8epss 0.02

    A heap-based Buffer Overflow vulnerability in FFmpeg 4.2 at libavcodec/get_bits.h when writing .mov files, which might lead to memory corruption and other potential consequences.

  • CVE-2020-22031HigMay 27, 2021
    risk 0.57cvss 8.8epss 0.02

    A Heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at libavfilter/vf_w3fdif.c in filter16_complex_low, which might lead to memory corruption and other potential consequences.

  • CVE-2020-22030HigMay 27, 2021
    risk 0.57cvss 8.8epss 0.01

    A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at libavfilter/af_afade.c in crossfade_samples_fltp, which might lead to memory corruption and other potential consequences.

  • CVE-2020-22029HigMay 27, 2021
    risk 0.57cvss 8.8epss 0.01

    A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at libavfilter/vf_colorconstancy.c: in slice_get_derivative, which crossfade_samples_fltp, which might lead to memory corruption and other potential consequences.

  • CVE-2020-36328CriMay 21, 2021
    risk 0.57cvss 9.8epss 0.03

    A flaw was found in libwebp in versions before 1.0.1. A heap-based buffer overflow in function WebPDecodeRGBInto is possible due to an invalid check for buffer size. The highest threat from this vulnerability is to data confidentiality and integrity as well as system…

  • CVE-2021-31439HigMay 21, 2021
    risk 0.57cvss 8.8epss 0.02

    This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Synology DiskStation Manager. Authentication is not required to exploit this vulnerablity. The specific flaw exists within the processing of DSI structures in Netatalk.…

  • CVE-2021-3517HigMay 19, 2021
    risk 0.57cvss 8.6epss 0.17

    There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11. An attacker who is able to supply a crafted file to be processed by an application linked with the affected functionality of libxml2 could trigger an out-of-bounds read. The most…

  • CVE-2020-21843HigMay 17, 2021
    risk 0.57cvss 8.8epss 0.01

    A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via bit_read_RC ../../src/bits.c:318.