VYPR

CWE-787

Out-of-bounds Write

BaseDraftLikelihood: High

Description

The product writes data past the end, or before the beginning, of the intended buffer.

Hierarchy (View 1000)

CVEs mapped to this weakness (15,183)

page 405 of 760
  • CVE-2021-46523HigJan 27, 2022
    risk 0.51cvss 7.8epss 0.01

    Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via to_json_or_debug at mjs/src/mjs_json.c.

  • CVE-2021-46522HigJan 27, 2022
    risk 0.51cvss 7.8epss 0.01

    Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via /usr/lib/x86_64-linux-gnu/libasan.so.4+0xaff53.

  • CVE-2021-46520HigJan 27, 2022
    risk 0.51cvss 7.8epss 0.01

    Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjs_jprintf at src/mjs_util.c.

  • CVE-2021-46519HigJan 27, 2022
    risk 0.51cvss 7.8epss 0.01

    Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjs_array_length at src/mjs_array.c.

  • CVE-2021-46518HigJan 27, 2022
    risk 0.51cvss 7.8epss 0.01

    Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjs_disown at src/mjs_core.c.

  • CVE-2022-0361HigJan 26, 2022
    risk 0.51cvss 7.8epss 0.02

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

  • CVE-2022-0359HigJan 26, 2022
    risk 0.51cvss 7.8epss 0.01

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

  • CVE-2021-46483HigJan 25, 2022
    risk 0.51cvss 7.8epss 0.01

    Jsish v3.5.0 was discovered to contain a heap buffer overflow via BooleanConstructor at src/jsiBool.c.

  • CVE-2021-46482HigJan 25, 2022
    risk 0.51cvss 7.8epss 0.01

    Jsish v3.5.0 was discovered to contain a heap buffer overflow via NumberConstructor at src/jsiNumber.c.

  • CVE-2022-23850HigJan 23, 2022
    risk 0.51cvss 7.8epss 0.01

    xhtml_translate_entity in xhtml.c in epub2txt (aka epub2txt2) through 2.02 allows a stack-based buffer overflow via a crafted EPUB document.

  • CVE-2022-22895HigJan 21, 2022
    risk 0.51cvss 7.8epss 0.01

    Jerryscript 3.0.0 was discovered to contain a heap-buffer-overflow via ecma_utf8_string_to_number_by_radix in /jerry-core/ecma/base/ecma-helpers-conversion.c.

  • CVE-2022-22894HigJan 21, 2022
    risk 0.51cvss 7.8epss 0.01

    Jerryscript 3.0.0 was discovered to contain a stack overflow via ecma_lcache_lookup in /jerry-core/ecma/base/ecma-lcache.c.

  • CVE-2022-22893HigJan 21, 2022
    risk 0.51cvss 7.8epss 0.01

    Jerryscript 3.0.0 was discovered to contain a stack overflow via vm_loop.lto_priv.304 in /jerry-core/vm/vm.c.

  • CVE-2022-22888HigJan 20, 2022
    risk 0.51cvss 7.8epss 0.01

    Jerryscript 3.0.0 was discovered to contain a stack overflow via ecma_op_object_find_own in /ecma/operations/ecma-objects.c.

  • CVE-2021-46334HigJan 20, 2022
    risk 0.51cvss 7.8epss 0.01

    Moddable SDK v11.5.0 was discovered to contain a stack buffer overflow via the component __interceptor_strcat.

  • CVE-2021-46332HigJan 20, 2022
    risk 0.51cvss 7.8epss 0.01

    Moddable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via xs/sources/xsDataView.c in fxUint8Getter.

  • CVE-2021-46328HigJan 20, 2022
    risk 0.51cvss 7.8epss 0.01

    Moddable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via the component __libc_start_main.

  • CVE-2021-46326HigJan 20, 2022
    risk 0.51cvss 7.8epss 0.01

    Moddable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via the component __asan_memcpy.

  • CVE-2021-46325HigJan 20, 2022
    risk 0.51cvss 7.8epss 0.01

    Espruino 2v10.246 was discovered to contain a stack buffer overflow via src/jsutils.c in vcbprintf.

  • CVE-2021-46324HigJan 20, 2022
    risk 0.51cvss 7.8epss 0.01

    Espruino 2v11.251 was discovered to contain a stack buffer overflow via src/jsvar.c in jsvNewFromString.