CWE-787
Out-of-bounds Write
Description
The product writes data past the end, or before the beginning, of the intended buffer.
Hierarchy (View 1000)
CVEs mapped to this weakness (15,183)
page 400 of 760| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2022-24097 | Hig | 0.51 | 7.8 | 0.02 | Mar 11, 2022 | Adobe After Effects versions 22.2 (and earlier) and 18.4.4 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim… | ||
| CVE-2022-24096 | Hig | 0.51 | 7.8 | 0.04 | Mar 11, 2022 | Adobe After Effects versions 22.2 (and earlier) and 18.4.4 (and earlier) are affected by an Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a… | ||
| CVE-2022-24095 | Hig | 0.51 | 7.8 | 0.04 | Mar 11, 2022 | Adobe After Effects versions 22.2 (and earlier) and 18.4.4 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a… | ||
| CVE-2022-24094 | Hig | 0.51 | 7.8 | 0.04 | Mar 11, 2022 | Adobe After Effects versions 22.2 (and earlier) and 18.4.4 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a… | ||
| CVE-2022-25234 | Hig | 0.51 | 7.8 | 0.01 | Mar 10, 2022 | Out-of-bounds write vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows an attacker to cause information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file. This vulnerability is… | ||
| CVE-2022-21124 | Hig | 0.51 | 7.8 | 0.02 | Mar 10, 2022 | Out-of-bounds write vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows an attacker to cause information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file. This vulnerability is… | ||
| CVE-2022-20048 | Hig | 0.51 | 7.8 | 0.00 | Mar 10, 2022 | In video decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05917502; Issue ID:… | ||
| CVE-2022-20047 | Hig | 0.51 | 7.8 | 0.00 | Mar 10, 2022 | In video decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05917489; Issue ID:… | ||
| CVE-2022-24501 | Hig | 0.51 | 7.8 | 0.03 | Mar 9, 2022 | VP9 Video Extensions Remote Code Execution Vulnerability | ||
| CVE-2022-24457 | Hig | 0.51 | 7.8 | 0.02 | Mar 9, 2022 | HEIF Image Extensions Remote Code Execution Vulnerability | ||
| CVE-2022-24456 | Hig | 0.51 | 7.8 | 0.02 | Mar 9, 2022 | HEVC Video Extensions Remote Code Execution Vulnerability | ||
| CVE-2022-24453 | Hig | 0.51 | 7.8 | 0.02 | Mar 9, 2022 | HEVC Video Extensions Remote Code Execution Vulnerability | ||
| CVE-2022-24451 | Hig | 0.51 | 7.8 | 0.02 | Mar 9, 2022 | VP9 Video Extensions Remote Code Execution Vulnerability | ||
| CVE-2022-23282 | Hig | 0.51 | 7.8 | 0.02 | Mar 9, 2022 | Paint 3D Remote Code Execution Vulnerability | ||
| CVE-2022-22007 | Hig | 0.51 | 7.8 | 0.02 | Mar 9, 2022 | HEVC Video Extensions Remote Code Execution Vulnerability | ||
| CVE-2022-22006 | Hig | 0.51 | 7.8 | 0.02 | Mar 9, 2022 | HEVC Video Extensions Remote Code Execution Vulnerability | ||
| CVE-2022-24661 | Hig | 0.51 | 7.8 | 0.01 | Mar 8, 2022 | A vulnerability has been identified in Simcenter STAR-CCM+ Viewer (All versions < V2022.1). The starview+.exe contains a memory corruption vulnerability while parsing specially crafted .SCE files. This could allow an attacker to execute code in the context of the current process. | ||
| CVE-2022-25465 | Hig | 0.51 | 7.8 | 0.01 | Mar 5, 2022 | Espruino 2v11 release was discovered to contain a stack buffer overflow via src/jsvar.c in jsvGetNextSibling. | ||
| CVE-2022-25044 | Hig | 0.51 | 7.8 | 0.01 | Mar 5, 2022 | Espruino 2v11.251 was discovered to contain a stack buffer overflow via src/jsvar.c in jsvNewFromString. | ||
| CVE-2021-3575 | Hig | 0.51 | 7.8 | 0.02 | Mar 4, 2022 | A heap-based buffer overflow was found in openjpeg in color.c:379:42 in sycc420_to_rgb when decompressing a crafted .j2k file. An attacker could use this to execute arbitrary code with the permissions of the application compiled against openjpeg. |
- risk 0.51cvss 7.8epss 0.02
Adobe After Effects versions 22.2 (and earlier) and 18.4.4 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim…
- risk 0.51cvss 7.8epss 0.04
Adobe After Effects versions 22.2 (and earlier) and 18.4.4 (and earlier) are affected by an Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a…
- risk 0.51cvss 7.8epss 0.04
Adobe After Effects versions 22.2 (and earlier) and 18.4.4 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a…
- risk 0.51cvss 7.8epss 0.04
Adobe After Effects versions 22.2 (and earlier) and 18.4.4 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a…
- risk 0.51cvss 7.8epss 0.01
Out-of-bounds write vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows an attacker to cause information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file. This vulnerability is…
- risk 0.51cvss 7.8epss 0.02
Out-of-bounds write vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows an attacker to cause information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file. This vulnerability is…
- risk 0.51cvss 7.8epss 0.00
In video decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05917502; Issue ID:…
- risk 0.51cvss 7.8epss 0.00
In video decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05917489; Issue ID:…
- risk 0.51cvss 7.8epss 0.03
VP9 Video Extensions Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.02
HEIF Image Extensions Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.02
HEVC Video Extensions Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.02
HEVC Video Extensions Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.02
VP9 Video Extensions Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.02
Paint 3D Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.02
HEVC Video Extensions Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.02
HEVC Video Extensions Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
A vulnerability has been identified in Simcenter STAR-CCM+ Viewer (All versions < V2022.1). The starview+.exe contains a memory corruption vulnerability while parsing specially crafted .SCE files. This could allow an attacker to execute code in the context of the current process.
- risk 0.51cvss 7.8epss 0.01
Espruino 2v11 release was discovered to contain a stack buffer overflow via src/jsvar.c in jsvGetNextSibling.
- risk 0.51cvss 7.8epss 0.01
Espruino 2v11.251 was discovered to contain a stack buffer overflow via src/jsvar.c in jsvNewFromString.
- risk 0.51cvss 7.8epss 0.02
A heap-based buffer overflow was found in openjpeg in color.c:379:42 in sycc420_to_rgb when decompressing a crafted .j2k file. An attacker could use this to execute arbitrary code with the permissions of the application compiled against openjpeg.