VYPR

CWE-787

Out-of-bounds Write

BaseDraftLikelihood: High

Description

The product writes data past the end, or before the beginning, of the intended buffer.

Hierarchy (View 1000)

CVEs mapped to this weakness (15,183)

page 393 of 760
  • CVE-2021-43756HigJun 15, 2022
    risk 0.51cvss 7.8epss 0.02

    Adobe Media Encoder versions 22.0, 15.4.2 (and earlier) are affected by an Out-of-bounds Write vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires…

  • CVE-2021-43754HigJun 15, 2022
    risk 0.51cvss 7.8epss 0.02

    Adobe Prelude version 22.1.1 (and earlier) is affected by an Out-of-bounds Write vulnerability due to insecure handling of a malicious file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this…

  • CVE-2021-39820HigJun 15, 2022
    risk 0.51cvss 7.8epss 0.03

    Adobe InDesign versions 16.3 (and earlier), and 16.3.1 (and earlier) is affected by an Out-of-bounds Write vulnerability due to insecure handling of a malicious TIFF file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is…

  • CVE-2022-20147HigJun 15, 2022
    risk 0.51cvss 7.8epss 0.00

    In nfa_dm_check_set_config of nfa_dm_main.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:…

  • CVE-2022-29524HigJun 14, 2022
    risk 0.51cvss 7.8epss 0.01

    Out-of-bounds write vulnerability exists in V-Server v4.0.11.0 and earlier and V-Server Lite v4.0.13.0 and earlier, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file.

  • CVE-2022-26302HigJun 14, 2022
    risk 0.51cvss 7.8epss 0.01

    Heap-based buffer overflow exists in the simulator module contained in the graphic editor 'V-SFT' versions prior to v6.1.6.0, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file.

  • CVE-2021-46818HigJun 13, 2022
    risk 0.51cvss 7.8epss 0.02

    Adobe Media Encoder version 15.4 (and earlier) are affected by a memory corruption vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user…

  • CVE-2021-46817HigJun 13, 2022
    risk 0.51cvss 7.8epss 0.02

    Adobe Media Encoder version 15.4 (and earlier) are affected by a memory corruption vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user…

  • CVE-2021-46816HigJun 13, 2022
    risk 0.51cvss 7.8epss 0.02

    Adobe Premiere Pro version 15.4 (and earlier) are affected by a memory corruption vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user…

  • CVE-2022-2000HigJun 9, 2022
    risk 0.51cvss 7.8epss 0.02

    Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.

  • CVE-2022-30790HigJun 8, 2022
    risk 0.51cvss 7.8epss 0.01

    Das U-Boot 2022.01 has a Buffer Overflow, a different issue than CVE-2022-30552.

  • CVE-2022-31782HigJun 2, 2022
    risk 0.51cvss 7.8epss 0.01

    ftbench.c in FreeType Demo Programs through 2.12.1 has a heap-based buffer overflow.

  • CVE-2022-28690HigJun 2, 2022
    risk 0.51cvss 7.8epss 0.01

    The affected product is vulnerable to an out-of-bounds write via uninitialized pointer, which may allow an attacker to execute arbitrary code.

  • CVE-2022-27184HigJun 2, 2022
    risk 0.51cvss 7.8epss 0.01

    The affected product is vulnerable to an out-of-bounds write, which may allow an attacker to execute arbitrary code.

  • CVE-2022-1943HigJun 2, 2022
    risk 0.51cvss 7.8epss 0.00

    A flaw out of bounds memory write in the Linux kernel UDF file system functionality was found in the way user triggers some file operation which triggers udf_write_fi(). A local user could use this flaw to crash the system or potentially

  • CVE-2021-42204HigJun 2, 2022
    risk 0.51cvss 7.8epss 0.01

    An issue was discovered in swftools through 20201222. A heap-buffer-overflow exists in the function swf_GetBits() located in rfxswf.c. It allows an attacker to cause code execution.

  • CVE-2021-42201HigJun 2, 2022
    risk 0.51cvss 7.8epss 0.01

    An issue was discovered in swftools through 20201222. A heap-buffer-overflow exists in the function swf_GetD64() located in rfxswf.c. It allows an attacker to cause code execution.

  • CVE-2021-42199HigJun 2, 2022
    risk 0.51cvss 7.8epss 0.01

    An issue was discovered in swftools through 20201222. A heap buffer overflow exists in the function swf_FontExtract_DefineTextCallback() located in swftext.c. It allows an attacker to cause code execution.

  • CVE-2021-42195HigJun 2, 2022
    risk 0.51cvss 7.8epss 0.01

    An issue was discovered in swftools through 20201222. A heap-buffer-overflow exists in the function handleEditText() located in swfdump.c. It allows an attacker to cause code Execution.

  • CVE-2022-1942HigMay 31, 2022
    risk 0.51cvss 7.8epss 0.02

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.