VYPR

CWE-787

Out-of-bounds Write

BaseDraftLikelihood: High

Description

The product writes data past the end, or before the beginning, of the intended buffer.

Hierarchy (View 1000)

CVEs mapped to this weakness (15,182)

page 312 of 760
  • CVE-2025-24453HigMar 11, 2025
    risk 0.51cvss 7.8epss 0.00

    InDesign Desktop versions ID20.1, ID19.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a…

  • CVE-2025-24452HigMar 11, 2025
    risk 0.51cvss 7.8epss 0.00

    InDesign Desktop versions ID20.1, ID19.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a…

  • CVE-2025-24451HigMar 11, 2025
    risk 0.51cvss 7.8epss 0.00

    Substance3D - Painter versions 10.1.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious…

  • CVE-2025-24450HigMar 11, 2025
    risk 0.51cvss 7.8epss 0.00

    Substance3D - Painter versions 10.1.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious…

  • CVE-2025-24445HigMar 11, 2025
    risk 0.51cvss 7.8epss 0.00

    Substance3D - Sampler versions 4.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious…

  • CVE-2025-24444HigMar 11, 2025
    risk 0.51cvss 7.8epss 0.00

    Substance3D - Sampler versions 4.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious…

  • CVE-2025-24443HigMar 11, 2025
    risk 0.51cvss 7.8epss 0.00

    Substance3D - Sampler versions 4.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a…

  • CVE-2025-24442HigMar 11, 2025
    risk 0.51cvss 7.8epss 0.00

    Substance3D - Sampler versions 4.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious…

  • CVE-2025-24441HigMar 11, 2025
    risk 0.51cvss 7.8epss 0.00

    Substance3D - Sampler versions 4.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious…

  • CVE-2025-24440HigMar 11, 2025
    risk 0.51cvss 7.8epss 0.00

    Substance3D - Sampler versions 4.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious…

  • CVE-2025-24439HigMar 11, 2025
    risk 0.51cvss 7.8epss 0.00

    Substance3D - Sampler versions 4.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a…

  • CVE-2025-27172HigMar 11, 2025
    risk 0.51cvss 7.8epss 0.00

    Substance3D - Designer versions 14.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious…

  • CVE-2025-21169HigMar 11, 2025
    risk 0.51cvss 7.8epss 0.00

    Substance3D - Designer versions 14.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a…

  • CVE-2025-23396HigMar 11, 2025
    risk 0.51cvss 7.8epss 0.00

    A vulnerability has been identified in Teamcenter Visualization V14.3 (All versions < V14.3.0.13), Teamcenter Visualization V2312 (All versions < V2312.0009), Teamcenter Visualization V2406 (All versions < V2406.0007), Teamcenter Visualization V2412 (All versions < V2412.0002),…

  • CVE-2024-58069HigMar 6, 2025
    risk 0.51cvss 7.8epss 0.00

    In the Linux kernel, the following vulnerability has been resolved: rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read The nvmem interface supports variable buffer sizes, while the regmap interface operates with fixed-size storage. If an nvmem client uses a buffer…

  • CVE-2024-45782HigMar 3, 2025
    risk 0.51cvss 7.8epss 0.00

    A flaw was found in the HFS filesystem. When reading an HFS volume's name at grub_fs_mount(), the HFS filesystem driver performs a strcpy() using the user-provided volume name as input without properly validating the volume name's length. This issue may read to a heap-based…

  • CVE-2025-1125HigMar 3, 2025
    risk 0.51cvss 7.8epss 0.00

    When reading data from a hfs filesystem, grub's hfs filesystem module uses user-controlled parameters from the filesystem metadata to calculate the internal buffers size, however it misses to properly check for integer overflows. A maliciouly crafted filesystem may lead some of…

  • CVE-2024-53031HigMar 3, 2025
    risk 0.51cvss 7.8epss 0.00

    Memory corruption while reading a type value from a buffer controlled by the Guest Virtual Machine.

  • CVE-2024-53030HigMar 3, 2025
    risk 0.51cvss 7.8epss 0.00

    Memory corruption while processing input message passed from FE driver.

  • CVE-2024-53029HigMar 3, 2025
    risk 0.51cvss 7.8epss 0.00

    Memory corruption while reading a value from a buffer controlled by the Guest Virtual Machine.