CWE-787

Out-of-bounds Write

BaseDraftLikelihood: High

Description

The product writes data past the end, or before the beginning, of the intended buffer.

Hierarchy (View 1000)

Parents

CWE-119

Children

CVEs mapped to this weakness (14,531)

page 35 of 727

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2023-51968	Tenda AX1803	Cri	0.64	9.8	0.01	Jan 10, 2024	Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function getIptvInfo.
CVE-2023-51967	Tenda AX1803	Cri	0.64	9.8	0.01	Jan 10, 2024	Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function getIptvInfo.
CVE-2023-51962	Tenda AX1803	Cri	0.64	9.8	0.01	Jan 10, 2024	Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function setIptvInfo.
CVE-2023-51965	Tenda AX1803	Cri	0.64	9.8	0.01	Jan 10, 2024	Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function setIptvInfo.
CVE-2023-51964	Tenda AX1803	Cri	0.64	9.8	0.01	Jan 10, 2024	Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function setIptvInfo.
CVE-2023-51963	Tenda AX1803	Cri	0.64	9.8	0.01	Jan 10, 2024	Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function setIptvInfo.
CVE-2023-51960	Tenda AX1803	Cri	0.64	9.8	0.01	Jan 10, 2024	Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function formGetIptv.
CVE-2023-51959	Tenda AX1803	Cri	0.64	9.8	0.01	Jan 10, 2024	Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function formGetIptv.
CVE-2023-51958	Tenda AX1803	Cri	0.64	9.8	0.01	Jan 10, 2024	Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function formGetIptv.
CVE-2023-51957	Tenda AX1803	Cri	0.64	9.8	0.01	Jan 10, 2024	Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formGetIptv.
CVE-2023-51956	Tenda AX1803	Cri	0.64	9.8	0.01	Jan 10, 2024	Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function formSetIptv
CVE-2023-51955	Tenda AX1803	Cri	0.64	9.8	0.00	Jan 10, 2024	Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function formSetIptv.
CVE-2023-51954	Tenda AX1803	Cri	0.64	9.8	0.01	Jan 10, 2024	Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function formSetIptv.
CVE-2023-51953	Tenda AX1803	Cri	0.64	9.8	0.01	Jan 10, 2024	Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formSetIptv.
CVE-2023-51952	Tenda AX1803	Cri	0.64	9.8	0.01	Jan 10, 2024	Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function formSetIptv.
CVE-2023-51966	Tenda AX1803	Cri	0.64	9.8	0.01	Jan 10, 2024	Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function setIptvInfo.
CVE-2023-51961	Tenda AX1803	Cri	0.64	9.8	0.01	Jan 10, 2024	Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function formGetIptv.
CVE-2023-51971	Tenda AX1803	Cri	0.64	9.8	0.01	Jan 10, 2024	Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function getIptvInfo.
CVE-2023-50585	Tenda A18	Cri	0.64	9.8	0.01	Jan 9, 2024	Tenda A18 v15.13.07.09 was discovered to contain a stack overflow via the devName parameter in the formSetDeviceName function.
CVE-2023-49236	Trendnet TV-IP1314PI	Cri	0.64	9.8	0.01	Jan 9, 2024	A stack-based buffer overflow was discovered on TRENDnet TV-IP1314PI 5.5.3 200714 devices, leading to arbitrary command execution. This occurs because of lack of length validation during an sscanf of a user-entered scale field in the RTSP playback function of davinci.

CVE-2023-51968CriJan 10, 2024
Tenda
AX1803
risk 0.64cvss 9.8epss 0.01
Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function getIptvInfo.
CVE-2023-51967CriJan 10, 2024
Tenda
AX1803
risk 0.64cvss 9.8epss 0.01
Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function getIptvInfo.
CVE-2023-51962CriJan 10, 2024
Tenda
AX1803
risk 0.64cvss 9.8epss 0.01
Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function setIptvInfo.
CVE-2023-51965CriJan 10, 2024
Tenda
AX1803
risk 0.64cvss 9.8epss 0.01
Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function setIptvInfo.
CVE-2023-51964CriJan 10, 2024
Tenda
AX1803
risk 0.64cvss 9.8epss 0.01
Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function setIptvInfo.
CVE-2023-51963CriJan 10, 2024
Tenda
AX1803
risk 0.64cvss 9.8epss 0.01
Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function setIptvInfo.
CVE-2023-51960CriJan 10, 2024
Tenda
AX1803
risk 0.64cvss 9.8epss 0.01
Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function formGetIptv.
CVE-2023-51959CriJan 10, 2024
Tenda
AX1803
risk 0.64cvss 9.8epss 0.01
Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function formGetIptv.
CVE-2023-51958CriJan 10, 2024
Tenda
AX1803
risk 0.64cvss 9.8epss 0.01
Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function formGetIptv.
CVE-2023-51957CriJan 10, 2024
Tenda
AX1803
risk 0.64cvss 9.8epss 0.01
Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formGetIptv.
CVE-2023-51956CriJan 10, 2024
Tenda
AX1803
risk 0.64cvss 9.8epss 0.01
Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function formSetIptv
CVE-2023-51955CriJan 10, 2024
Tenda
AX1803
risk 0.64cvss 9.8epss 0.00
Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function formSetIptv.
CVE-2023-51954CriJan 10, 2024
Tenda
AX1803
risk 0.64cvss 9.8epss 0.01
Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function formSetIptv.
CVE-2023-51953CriJan 10, 2024
Tenda
AX1803
risk 0.64cvss 9.8epss 0.01
Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formSetIptv.
CVE-2023-51952CriJan 10, 2024
Tenda
AX1803
risk 0.64cvss 9.8epss 0.01
Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function formSetIptv.
CVE-2023-51966CriJan 10, 2024
Tenda
AX1803
risk 0.64cvss 9.8epss 0.01
Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function setIptvInfo.
CVE-2023-51961CriJan 10, 2024
Tenda
AX1803
risk 0.64cvss 9.8epss 0.01
Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function formGetIptv.
CVE-2023-51971CriJan 10, 2024
Tenda
AX1803
risk 0.64cvss 9.8epss 0.01
Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function getIptvInfo.
CVE-2023-50585CriJan 9, 2024
Tenda
A18
risk 0.64cvss 9.8epss 0.01
Tenda A18 v15.13.07.09 was discovered to contain a stack overflow via the devName parameter in the formSetDeviceName function.
CVE-2023-49236CriJan 9, 2024
Trendnet
TV-IP1314PI
risk 0.64cvss 9.8epss 0.01
A stack-based buffer overflow was discovered on TRENDnet TV-IP1314PI 5.5.3 200714 devices, leading to arbitrary command execution. This occurs because of lack of length validation during an sscanf of a user-entered scale field in the RTSP playback function of davinci.