VYPR

CWE-787

Out-of-bounds Write

BaseDraftLikelihood: High

Description

The product writes data past the end, or before the beginning, of the intended buffer.

Hierarchy (View 1000)

CVEs mapped to this weakness (15,183)

page 391 of 760
  • CVE-2022-2288HigJul 3, 2022
    risk 0.51cvss 7.8epss 0.01

    Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.

  • CVE-2022-33103HigJul 1, 2022
    risk 0.51cvss 7.8epss 0.00

    Das U-Boot from v2020.10 to v2022.07-rc3 was discovered to contain an out-of-bounds write via the function sqfs_readdir().

  • CVE-2022-33108HigJun 28, 2022
    risk 0.51cvss 7.8epss 0.01

    XPDF v4.04 was discovered to contain a stack overflow vulnerability via the Object::Copy class of object.cc files.

  • CVE-2022-2210HigJun 27, 2022
    risk 0.51cvss 7.8epss 0.01

    Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.

  • CVE-2022-33034HigJun 23, 2022
    risk 0.51cvss 7.8epss 0.01

    LibreDWG v0.12.4.4608 was discovered to contain a stack overflow via the function copy_bytes at decode_r2007.c.

  • CVE-2022-33032HigJun 23, 2022
    risk 0.51cvss 7.8epss 0.01

    LibreDWG v0.12.4.4608 was discovered to contain a heap-buffer-overflow via the function decode_preR13_section_hdr at decode_r11.c.

  • CVE-2022-33028HigJun 23, 2022
    risk 0.51cvss 7.8epss 0.01

    LibreDWG v0.12.4.4608 was discovered to contain a heap buffer overflow via the function dwg_add_object at decode.c.

  • CVE-2022-33026HigJun 23, 2022
    risk 0.51cvss 7.8epss 0.01

    LibreDWG v0.12.4.4608 was discovered to contain a heap buffer overflow via the function bit_calc_CRC at bits.c.

  • CVE-2022-27870HigJun 21, 2022
    risk 0.51cvss 7.8epss 0.01

    A maliciously crafted TGA file in Autodesk AutoCAD 2023 may be used to write beyond the allocated buffer while parsing TGA file. This vulnerability may be exploited to execute arbitrary code.

  • CVE-2022-27869HigJun 21, 2022
    risk 0.51cvss 7.8epss 0.01

    A maliciously crafted TIFF file in Autodesk AutoCAD 2023 can be forced to read and write beyond allocated boundaries when parsing the TIFF file. This vulnerability can be exploited to execute arbitrary code.

  • CVE-2021-41683HigJun 20, 2022
    risk 0.51cvss 7.8epss 0.01

    There is a stack-overflow at ecma-helpers.c:326 in ecma_get_lex_env_type in JerryScript 2.4.0

  • CVE-2022-2129HigJun 19, 2022
    risk 0.51cvss 7.8epss 0.01

    Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.

  • CVE-2022-2125HigJun 19, 2022
    risk 0.51cvss 7.8epss 0.02

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

  • CVE-2022-30664HigJun 16, 2022
    risk 0.51cvss 7.8epss 0.02

    Adobe Animate version 22.0.5 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  • CVE-2022-30656HigJun 16, 2022
    risk 0.51cvss 7.8epss 0.02

    Adobe InCopy versions 17.2 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must…

  • CVE-2022-30654HigJun 16, 2022
    risk 0.51cvss 7.8epss 0.06

    Adobe InCopy versions 17.2 (and earlier) and 16.4.1 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim…

  • CVE-2022-30653HigJun 16, 2022
    risk 0.51cvss 7.8epss 0.02

    Adobe InCopy versions 17.2 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must…

  • CVE-2022-30652HigJun 16, 2022
    risk 0.51cvss 7.8epss 0.02

    Adobe InCopy versions 17.2 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must…

  • CVE-2022-30650HigJun 16, 2022
    risk 0.51cvss 7.8epss 0.06

    Adobe InCopy versions 17.2 (and earlier) and 16.4.1 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim…

  • CVE-2022-30665HigJun 16, 2022
    risk 0.51cvss 7.8epss 0.02

    Adobe InDesign versions 17.2.1 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must…