VYPR

CWE-787

Out-of-bounds Write

BaseDraftLikelihood: High

Description

The product writes data past the end, or before the beginning, of the intended buffer.

Hierarchy (View 1000)

CVEs mapped to this weakness (15,182)

page 319 of 760
  • CVE-2024-49551HigDec 10, 2024
    risk 0.51cvss 7.8epss 0.00

    Media Encoder versions 25.0, 24.6.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  • CVE-2024-54094HigDec 10, 2024
    risk 0.51cvss 7.8epss 0.00

    A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 5). The affected application is vulnerable to heap-based buffer overflow while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current…

  • CVE-2024-54093HigDec 10, 2024
    risk 0.51cvss 7.8epss 0.00

    A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 5). The affected application is vulnerable to heap-based buffer overflow while parsing specially crafted ASM files. This could allow an attacker to execute code in the context of the current…

  • CVE-2024-54091HigDec 10, 2024
    risk 0.51cvss 7.8epss 0.00

    A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 12), Solid Edge SE2025 (All versions < V225.0 Update 3). The affected application contains an out of bounds write past the end of an allocated buffer while parsing X_T data or a specially…

  • CVE-2024-11608HigDec 9, 2024
    risk 0.51cvss 7.8epss 0.00

    A maliciously crafted SKP file, when linked or imported into Autodesk Revit, can be used to cause a Heap-based Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

  • CVE-2024-53142HigDec 6, 2024
    risk 0.51cvss 7.8epss 0.00

    In the Linux kernel, the following vulnerability has been resolved: initramfs: avoid filename buffer overrun The initramfs filename field is defined in Documentation/driver-api/early-userspace/buffer-format.rst as: 37 cpio_file := ALGN(4) + cpio_header + filename + "\0" +…

  • CVE-2024-11156HigDec 5, 2024
    risk 0.51cvss 7.8epss 0.00

    An “out of bounds write” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to write beyond the boundaries of allocated memory in a DOE file. If exploited, a threat actor could leverage this vulnerability to execute…

  • CVE-2018-9402HigDec 5, 2024
    risk 0.51cvss 7.8epss 0.00

    In multiple functions of gl_proc.c, there is a buffer overwrite due to a missing bounds check. This could lead to escalation of privileges in the kernel.

  • CVE-2018-9414HigDec 2, 2024
    risk 0.51cvss 7.8epss 0.00

    In gattServerSendResponseNative of com_android_bluetooth_gatt.cpp, there is a possible out of bounds stack write due to a missing bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for…

  • CVE-2024-43053HigDec 2, 2024
    risk 0.51cvss 7.8epss 0.00

    Memory corruption while invoking IOCTL calls from user space to read WLAN target diagnostic information.

  • CVE-2024-43050HigDec 2, 2024
    risk 0.51cvss 7.8epss 0.00

    Memory corruption while invoking IOCTL calls from user space to issue factory test command inside WLAN driver.

  • CVE-2024-43049HigDec 2, 2024
    risk 0.51cvss 7.8epss 0.00

    Memory corruption while invoking IOCTL calls from user space to set generic private command inside WLAN driver.

  • CVE-2024-43048HigDec 2, 2024
    risk 0.51cvss 7.8epss 0.00

    Memory corruption when invalid input is passed to invoke GPU Headroom API call.

  • CVE-2024-11933HigNov 28, 2024
    risk 0.51cvss 7.8epss 0.00

    Fuji Electric Monitouch V-SFT X1 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Monitouch V-SFT. User interaction is required to exploit…

  • CVE-2024-11803HigNov 28, 2024
    risk 0.51cvss 7.8epss 0.00

    Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit…

  • CVE-2024-11802HigNov 28, 2024
    risk 0.51cvss 7.8epss 0.00

    Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to…

  • CVE-2024-11801HigNov 28, 2024
    risk 0.51cvss 7.8epss 0.00

    Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit…

  • CVE-2024-11800HigNov 28, 2024
    risk 0.51cvss 7.8epss 0.00

    Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to…

  • CVE-2024-11799HigNov 28, 2024
    risk 0.51cvss 7.8epss 0.00

    Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to…

  • CVE-2024-11798HigNov 28, 2024
    risk 0.51cvss 7.8epss 0.00

    Fuji Electric Monitouch V-SFT X1 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Monitouch V-SFT. User interaction is required to exploit this…