VYPR

CWE-787

Out-of-bounds Write

BaseDraftLikelihood: High

Description

The product writes data past the end, or before the beginning, of the intended buffer.

Hierarchy (View 1000)

CVEs mapped to this weakness (14,531)

page 30 of 727
  • CVE-2024-46046CriSep 13, 2024
    risk 0.64cvss 9.8epss 0.01

    Tenda FH451 v1.0.0.9 has a stack overflow vulnerability located in the RouteStatic function.

  • CVE-2024-46045CriSep 13, 2024
    risk 0.64cvss 9.8epss 0.01

    Tenda CH22 V1.0.0.6(468) has a stack overflow vulnerability located in the frmL7PlotForm function.

  • CVE-2024-46044CriSep 13, 2024
    risk 0.64cvss 9.8epss 0.01

    CH22 V1.0.0.6(468) has a stack overflow vulnerability located in the fromqossetting function.

  • CVE-2024-45030CriSep 11, 2024
    risk 0.64cvss 9.8epss 0.00

    In the Linux kernel, the following vulnerability has been resolved: igb: cope with large MAX_SKB_FRAGS Sabrina reports that the igb driver does not cope well with large MAX_SKB_FRAG values: setting MAX_SKB_FRAG to 45 causes payload corruption on TX. An easy reproducer is to…

  • CVE-2024-8389CriSep 3, 2024
    risk 0.64cvss 9.8epss 0.00

    Memory safety bugs present in Firefox 129. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 130.

  • CVE-2024-8387CriSep 3, 2024
    risk 0.64cvss 9.8epss 0.01

    Memory safety bugs present in Firefox 129, Firefox ESR 128.1, and Thunderbird 128.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox <…

  • CVE-2024-8384CriSep 3, 2024
    risk 0.64cvss 9.8epss 0.01

    The JavaScript garbage collector could mis-color cross-compartment objects if OOM conditions were detected at the right point between two passes. This could have led to memory corruption. This vulnerability affects Firefox < 130, Firefox ESR < 128.2, Firefox ESR < 115.15,…

  • CVE-2024-34195CriAug 28, 2024
    risk 0.64cvss 9.8epss 0.01

    TOTOLINK AC1200 Wireless Router A3002R Firmware V1.1.1-B20200824 is vulnerable to Buffer Overflow. In the boa server program's CGI handling function formWlEncrypt, there is a lack of length restriction on the wlan_ssid field. This oversight leads to potential buffer overflow…

  • CVE-2024-44557CriAug 26, 2024
    risk 0.64cvss 9.8epss 0.01

    Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function setIptvInfo.

  • CVE-2024-44555CriAug 26, 2024
    risk 0.64cvss 9.8epss 0.01

    Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function setIptvInfo.

  • CVE-2024-44553CriAug 26, 2024
    risk 0.64cvss 9.8epss 0.01

    Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formGetIptv.

  • CVE-2024-44552CriAug 26, 2024
    risk 0.64cvss 9.8epss 0.00

    Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function formGetIptv.

  • CVE-2024-44551CriAug 26, 2024
    risk 0.64cvss 9.8epss 0.01

    Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function formGetIptv.

  • CVE-2024-44550CriAug 26, 2024
    risk 0.64cvss 9.8epss 0.01

    Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function formGetIptv.

  • CVE-2024-44549CriAug 26, 2024
    risk 0.64cvss 9.8epss 0.00

    Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function formGetIptv.

  • CVE-2024-41285CriAug 26, 2024
    risk 0.64cvss 9.8epss 0.01

    A stack overflow in FAST FW300R v1.3.13 Build 141023 Rel.61347n allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via a crafted file path.

  • CVE-2024-44558CriAug 26, 2024
    risk 0.64cvss 9.8epss 0.01

    Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function setIptvInfo.

  • CVE-2024-44556CriAug 26, 2024
    risk 0.64cvss 9.8epss 0.00

    Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function setIptvInfo.

  • CVE-2024-44565CriAug 26, 2024
    risk 0.64cvss 9.8epss 0.01

    Tenda AX1806 v1.0.0.1 contains a stack overflow via the serverName parameter in the function form_fast_setting_internet_set.

  • CVE-2024-44563CriAug 26, 2024
    risk 0.64cvss 9.8epss 0.01

    Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function setIptvInfo.