CWE-787
Out-of-bounds Write
Description
The product writes data past the end, or before the beginning, of the intended buffer.
Hierarchy (View 1000)
CVEs mapped to this weakness (15,183)
page 389 of 760| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2022-38229 | Hig | 0.51 | 7.8 | 0.00 | Aug 16, 2022 | XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::readHuffSym(DCTHuffTable*) at /xpdf/Stream.cc. | ||
| CVE-2022-38228 | Hig | 0.51 | 7.8 | 0.00 | Aug 16, 2022 | XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::transformDataUnit at /xpdf/Stream.cc. | ||
| CVE-2022-38227 | Hig | 0.51 | 7.8 | 0.00 | Aug 16, 2022 | XPDF commit ffaf11c was discovered to contain a stack overflow via __asan_memcpy at asan_interceptors_memintrinsics.cpp. | ||
| CVE-2022-37781 | Hig | 0.51 | 7.8 | 0.00 | Aug 16, 2022 | fdkaac v1.0.3 was discovered to contain a heap buffer overflow via __interceptor_memcpy.part.46 at /sanitizer_common/sanitizer_common_interceptors.inc. | ||
| CVE-2022-36144 | Hig | 0.51 | 7.8 | 0.00 | Aug 16, 2022 | SWFMill commit 53d7690 was discovered to contain a heap-buffer overflow via base64_encode. | ||
| CVE-2022-36143 | Hig | 0.51 | 7.8 | 0.00 | Aug 16, 2022 | SWFMill commit 53d7690 was discovered to contain a heap-buffer overflow via __interceptor_strlen.part at /sanitizer_common/sanitizer_common_interceptors.inc. | ||
| CVE-2022-36142 | Hig | 0.51 | 7.8 | 0.00 | Aug 16, 2022 | SWFMill commit 53d7690 was discovered to contain a heap-buffer overflow via SWF::Reader::getU30(). | ||
| CVE-2022-36139 | Hig | 0.51 | 7.8 | 0.00 | Aug 16, 2022 | SWFMill commit 53d7690 was discovered to contain a heap-buffer overflow via SWF::Writer::writeByte(unsigned char). | ||
| CVE-2022-38223 | Hig | 0.51 | 7.8 | 0.00 | Aug 15, 2022 | There is an out-of-bounds write in checkType located in etc.c in w3m 0.5.3. It can be triggered by sending a crafted HTML file to the w3m binary. It allows an attacker to cause Denial of Service or possibly have unspecified other impact. | ||
| CVE-2022-35667 | Hig | 0.51 | 7.8 | 0.03 | Aug 11, 2022 | Adobe Acrobat Reader versions 22.001.20169 (and earlier), 20.005.30362 (and earlier) and 17.012.30249 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue… | ||
| CVE-2022-34260 | Hig | 0.51 | 7.8 | 0.00 | Aug 11, 2022 | Adobe Illustrator versions 26.3.1 (and earlier) and 25.4.6 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim… | ||
| CVE-2022-20792 | Hig | 0.51 | 7.8 | 0.01 | Aug 10, 2022 | A vulnerability in the regex module used by the signature database load module of Clam AntiVirus (ClamAV) versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior versions could allow an authenticated, local attacker to crash ClamAV at database load time, and possibly… | ||
| CVE-2022-30176 | Hig | 0.51 | 7.8 | 0.01 | Aug 9, 2022 | Azure RTOS GUIX Studio Remote Code Execution Vulnerability | ||
| CVE-2022-37415 | Hig | 0.51 | 7.8 | 0.00 | Aug 5, 2022 | The Uniwill SparkIO.sys driver 1.0 is vulnerable to a stack-based buffer overflow via IOCTL 0x40002008. | ||
| CVE-2022-34992 | Hig | 0.51 | 7.8 | 0.00 | Aug 3, 2022 | Luadec v0.9.9 was discovered to contain a heap-buffer overflow via the function UnsetPending. | ||
| CVE-2022-28668 | Hig | 0.51 | 7.8 | 0.01 | Aug 3, 2022 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro 11.9.2. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw… | ||
| CVE-2022-34927 | Hig | 0.51 | 7.8 | 0.00 | Aug 3, 2022 | MilkyTracker v1.03.00 was discovered to contain a stack overflow via the component LoaderXM::load. This vulnerability is triggered when the program is supplied a crafted XM module file. | ||
| CVE-2022-35217 | Hig | 0.51 | 7.8 | 0.00 | Aug 2, 2022 | The NHI card’s web service component has a stack-based buffer overflow vulnerability due to insufficient validation for network packet header length. A local area network attacker with general user privilege can exploit this vulnerability to execute arbitrary code, manipulate… | ||
| CVE-2022-27865 | Hig | 0.51 | 7.8 | 0.00 | Jul 29, 2022 | A maliciously crafted TGA or PCX file may be used to write beyond the allocated buffer through DesignReview.exe application while parsing TGA and PCX files. This vulnerability may be exploited to execute arbitrary code. | ||
| CVE-2022-33967 | Hig | 0.51 | 7.8 | 0.01 | Jul 20, 2022 | squashfs filesystem implementation of U-Boot versions from v2020.10-rc2 to v2022.07-rc5 contains a heap-based buffer overflow vulnerability due to a defect in the metadata reading process. Loading a specially crafted squashfs image may lead to a denial-of-service (DoS) condition… |
- risk 0.51cvss 7.8epss 0.00
XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::readHuffSym(DCTHuffTable*) at /xpdf/Stream.cc.
- risk 0.51cvss 7.8epss 0.00
XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::transformDataUnit at /xpdf/Stream.cc.
- risk 0.51cvss 7.8epss 0.00
XPDF commit ffaf11c was discovered to contain a stack overflow via __asan_memcpy at asan_interceptors_memintrinsics.cpp.
- risk 0.51cvss 7.8epss 0.00
fdkaac v1.0.3 was discovered to contain a heap buffer overflow via __interceptor_memcpy.part.46 at /sanitizer_common/sanitizer_common_interceptors.inc.
- risk 0.51cvss 7.8epss 0.00
SWFMill commit 53d7690 was discovered to contain a heap-buffer overflow via base64_encode.
- risk 0.51cvss 7.8epss 0.00
SWFMill commit 53d7690 was discovered to contain a heap-buffer overflow via __interceptor_strlen.part at /sanitizer_common/sanitizer_common_interceptors.inc.
- risk 0.51cvss 7.8epss 0.00
SWFMill commit 53d7690 was discovered to contain a heap-buffer overflow via SWF::Reader::getU30().
- risk 0.51cvss 7.8epss 0.00
SWFMill commit 53d7690 was discovered to contain a heap-buffer overflow via SWF::Writer::writeByte(unsigned char).
- risk 0.51cvss 7.8epss 0.00
There is an out-of-bounds write in checkType located in etc.c in w3m 0.5.3. It can be triggered by sending a crafted HTML file to the w3m binary. It allows an attacker to cause Denial of Service or possibly have unspecified other impact.
- risk 0.51cvss 7.8epss 0.03
Adobe Acrobat Reader versions 22.001.20169 (and earlier), 20.005.30362 (and earlier) and 17.012.30249 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue…
- risk 0.51cvss 7.8epss 0.00
Adobe Illustrator versions 26.3.1 (and earlier) and 25.4.6 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim…
- risk 0.51cvss 7.8epss 0.01
A vulnerability in the regex module used by the signature database load module of Clam AntiVirus (ClamAV) versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior versions could allow an authenticated, local attacker to crash ClamAV at database load time, and possibly…
- risk 0.51cvss 7.8epss 0.01
Azure RTOS GUIX Studio Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.00
The Uniwill SparkIO.sys driver 1.0 is vulnerable to a stack-based buffer overflow via IOCTL 0x40002008.
- risk 0.51cvss 7.8epss 0.00
Luadec v0.9.9 was discovered to contain a heap-buffer overflow via the function UnsetPending.
- risk 0.51cvss 7.8epss 0.01
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro 11.9.2. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw…
- risk 0.51cvss 7.8epss 0.00
MilkyTracker v1.03.00 was discovered to contain a stack overflow via the component LoaderXM::load. This vulnerability is triggered when the program is supplied a crafted XM module file.
- risk 0.51cvss 7.8epss 0.00
The NHI card’s web service component has a stack-based buffer overflow vulnerability due to insufficient validation for network packet header length. A local area network attacker with general user privilege can exploit this vulnerability to execute arbitrary code, manipulate…
- risk 0.51cvss 7.8epss 0.00
A maliciously crafted TGA or PCX file may be used to write beyond the allocated buffer through DesignReview.exe application while parsing TGA and PCX files. This vulnerability may be exploited to execute arbitrary code.
- risk 0.51cvss 7.8epss 0.01
squashfs filesystem implementation of U-Boot versions from v2020.10-rc2 to v2022.07-rc5 contains a heap-based buffer overflow vulnerability due to a defect in the metadata reading process. Loading a specially crafted squashfs image may lead to a denial-of-service (DoS) condition…