VYPR

CWE-787

Out-of-bounds Write

BaseDraftLikelihood: High

Description

The product writes data past the end, or before the beginning, of the intended buffer.

Hierarchy (View 1000)

CVEs mapped to this weakness (14,670)

page 444 of 734
  • CVE-2018-12174HigNov 14, 2018
    risk 0.51cvss 7.8epss 0.00

    Heap overflow in Intel Trace Analyzer 2018 in Intel Parallel Studio XE 2018 Update 3 may allow an authenticated user to potentially escalate privileges via local access.

  • CVE-2018-19087HigNov 10, 2018
    risk 0.51cvss 7.8epss 0.01

    RegFilter.sys in IOBit Malware Fighter 6.2 is susceptible to a stack-based buffer overflow when an attacker uses IOCTL 0x8006E044 with a size larger than 8 bytes. This can lead to denial of service or code execution with root privileges.

  • CVE-2018-19086HigNov 10, 2018
    risk 0.51cvss 7.8epss 0.01

    RegFilter.sys in IOBit Malware Fighter 6.2 is susceptible to a stack-based buffer overflow when an attacker uses IOCTL 0x8006E040 with a size larger than 8 bytes. This can lead to denial of service or code execution with root privileges.

  • CVE-2018-19085HigNov 10, 2018
    risk 0.51cvss 7.8epss 0.01

    RegFilter.sys in IOBit Malware Fighter 6.2 is susceptible to a stack-based buffer overflow when an attacker uses IOCTL 0x8006E048 with a size larger than 8 bytes. This can lead to denial of service or code execution with root privileges.

  • CVE-2018-19084HigNov 10, 2018
    risk 0.51cvss 7.8epss 0.01

    RegFilter.sys in IOBit Malware Fighter 6.2 is susceptible to a stack-based buffer overflow when an attacker uses IOCTL 0x8006E05C with a size larger than 8 bytes. This can lead to denial of service or code execution with root privileges.

  • CVE-2018-19105HigNov 8, 2018
    risk 0.51cvss 7.8epss 0.02

    LibreCAD 2.1.3 allows remote attackers to cause a denial of service (0x89C04589 write access violation and application crash) or possibly have unspecified other impact via a crafted file.

  • CVE-2018-9516HigNov 6, 2018
    risk 0.51cvss 7.8epss 0.00

    In hid_debug_events_read of drivers/hid/hid-debug.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android…

  • CVE-2018-9427HigNov 6, 2018
    risk 0.51cvss 7.8epss 0.04

    In CopyToOMX of OMXNodeInstance.cpp there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to remote arbitrary code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android…

  • CVE-2018-9385HigNov 6, 2018
    risk 0.51cvss 7.8epss 0.00

    In driver_override_store of bus.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions:…

  • CVE-2018-9357HigNov 6, 2018
    risk 0.51cvss 7.8epss 0.00

    In BNEP_Write of bnep_api.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0…

  • CVE-2018-16847HigNov 2, 2018
    risk 0.51cvss 7.8epss 0.01

    An OOB heap buffer r/w access issue was found in the NVM Express Controller emulation in QEMU. It could occur in nvme_cmb_ops routines in nvme device. A guest user/process could use this flaw to crash the QEMU process resulting in DoS or potentially run arbitrary code with…

  • CVE-2018-18714HigNov 1, 2018
    risk 0.51cvss 7.8epss 0.01

    RegFilter.sys in IOBit Malware Fighter 6.2 and earlier is susceptible to a stack-based buffer overflow when an attacker uses IOCTL 0x8006E010. This can lead to denial of service (DoS) or code execution with root privileges.

  • CVE-2018-11824HigOct 26, 2018
    risk 0.51cvss 7.8epss 0.00

    A stack-based buffer overflow can occur in a firmware routine in Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 835, SD 845, SD 850, SDA660

  • CVE-2018-18026HigOct 19, 2018
    risk 0.51cvss 7.8epss 0.01

    IMFCameraProtect.sys in IObit Malware Fighter 6.2 (and possibly lower versions) is vulnerable to a stack-based buffer overflow. The attacker can use DeviceIoControl to pass a user specified size which can be used to overwrite return addresses. This can lead to a denial of…

  • CVE-2018-12379HigOct 18, 2018
    risk 0.51cvss 7.8epss 0.00

    When the Mozilla Updater opens a MAR format file which contains a very long item filename, an out-of-bounds write can be triggered, leading to a potentially exploitable crash. This requires running the Mozilla Updater manually on the local system with the malicious MAR file in…

  • CVE-2018-17911HigOct 17, 2018
    risk 0.51cvss 7.8epss 0.03

    LAquis SCADA Versions 4.1.0.3870 and prior has several stack-based buffer overflow vulnerabilities, which may allow remote code execution.

  • CVE-2018-17901HigOct 17, 2018
    risk 0.51cvss 7.8epss 0.02

    LAquis SCADA Versions 4.1.0.3870 and prior, when processing project files the application fails to sanitize user input prior to performing write operations on a stack object, which may allow an attacker to execute code under the current process.

  • CVE-2018-18274HigOct 12, 2018
    risk 0.51cvss 7.8epss 0.02

    A issue was found in pdfalto 0.2. There is a heap-based buffer overflow in the TextPage::addAttributsNode function in XmlAltoOutputDev.cc.

  • CVE-2018-15945HigOct 12, 2018
    risk 0.51cvss 7.8epss 0.09

    Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.

  • CVE-2018-15944HigOct 12, 2018
    risk 0.51cvss 7.8epss 0.09

    Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.