CWE-787
Out-of-bounds Write
Description
The product writes data past the end, or before the beginning, of the intended buffer.
Hierarchy (View 1000)
CVEs mapped to this weakness (15,183)
page 459 of 760| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2019-6827 | Hig | 0.51 | 7.8 | 0.01 | Jul 15, 2019 | A CWE-787: Out-of-bounds Write vulnerability exists in Interactive Graphical SCADA System (IGSS), Version 14 and prior, which could cause a software crash when data in the mdb database is manipulated. | ||
| CVE-2019-1010006 | Hig | 0.51 | 7.8 | 0.02 | Jul 15, 2019 | Evince 3.26.0 is affected by buffer overflow. The impact is: DOS / Possible code execution. The component is: backend/tiff/tiff-document.c. The attack vector is: Victim must open a crafted PDF file. The issue occurs because of an incorrect integer overflow protection mechanism… | ||
| CVE-2019-13602 | Hig | 0.51 | 7.8 | 0.02 | Jul 14, 2019 | An Integer Underflow in MP4_EIA608_Convert() in modules/demux/mp4/mp4.c in VideoLAN VLC media player through 3.0.7.1 allows remote attackers to cause a denial of service (heap-based buffer overflow and crash) or possibly have unspecified other impact via a crafted .mp4 file. | ||
| CVE-2019-0053 | Hig | 0.51 | 7.8 | 0.01 | Jul 11, 2019 | Insufficient validation of environment variables in the telnet client supplied in Junos OS can lead to stack-based buffer overflows, which can be exploited to bypass veriexec restrictions on Junos OS. A stack-based overflow is present in the handling of environment variables… | ||
| CVE-2019-2112 | Hig | 0.51 | 7.8 | 0.00 | Jul 8, 2019 | In several functions of alarm.cc, there is possible memory corruption due to a use after free. This could lead to local code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-8.0… | ||
| CVE-2019-13362 | Hig | 0.51 | 7.8 | 0.01 | Jul 6, 2019 | Codedoc v3.2 has a stack-based buffer overflow in add_variable in codedoc.c, related to codedoc_strlcpy. | ||
| CVE-2019-13307 | Hig | 0.51 | 7.8 | 0.02 | Jul 5, 2019 | ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow at MagickCore/statistic.c in EvaluateImages because of mishandling rows. | ||
| CVE-2019-13306 | Hig | 0.51 | 7.8 | 0.02 | Jul 5, 2019 | ImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage because of off-by-one errors. | ||
| CVE-2019-13305 | Hig | 0.51 | 7.8 | 0.02 | Jul 5, 2019 | ImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage because of a misplaced strncpy and an off-by-one error. | ||
| CVE-2019-13304 | Hig | 0.51 | 7.8 | 0.02 | Jul 5, 2019 | ImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage because of a misplaced assignment. | ||
| CVE-2019-13290 | Hig | 0.51 | 7.8 | 0.03 | Jul 4, 2019 | Artifex MuPDF 1.15.0 has a heap-based buffer overflow in fz_append_display_node located at fitz/list-device.c, allowing remote attackers to execute arbitrary code via a crafted PDF file. This occurs with a large BDC property name that overflows the allocated size of a display… | ||
| CVE-2019-13281 | Hig | 0.51 | 7.8 | 0.01 | Jul 4, 2019 | In Xpdf 4.01.01, a heap-based buffer overflow could be triggered in DCTStream::decodeImage() in Stream.cc when writing to frameBuf memory. It can, for example, be triggered by sending a crafted PDF document to the pdftotext tool. It allows an attacker to use a crafted pdf file… | ||
| CVE-2019-13255 | Hig | 0.51 | 7.8 | 0.01 | Jul 4, 2019 | XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000327464. | ||
| CVE-2019-13254 | Hig | 0.51 | 7.8 | 0.01 | Jul 4, 2019 | XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x000000000032e808. | ||
| CVE-2019-13253 | Hig | 0.51 | 7.8 | 0.01 | Jul 4, 2019 | XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000385474. | ||
| CVE-2019-13252 | Hig | 0.51 | 7.8 | 0.01 | Jul 4, 2019 | ACDSee Free 1.1.21 has a User Mode Write AV starting at IDE_ACDStd!IEP_SetColorProfile+0x00000000001172b0. | ||
| CVE-2019-13251 | Hig | 0.51 | 7.8 | 0.01 | Jul 4, 2019 | ACDSee Free 1.1.21 has a User Mode Write AV starting at IDE_ACDStd!IEP_SetColorProfile+0x00000000000c47ff. | ||
| CVE-2019-13250 | Hig | 0.51 | 7.8 | 0.01 | Jul 4, 2019 | ACDSee Free 1.1.21 has a User Mode Write AV starting at IDE_ACDStd!IEP_SetColorProfile+0x00000000000b9c2f. | ||
| CVE-2019-13249 | Hig | 0.51 | 7.8 | 0.01 | Jul 4, 2019 | ACDSee Free 1.1.21 has a User Mode Write AV starting at IDE_ACDStd!IEP_SetColorProfile+0x00000000000b9e7a. | ||
| CVE-2019-13248 | Hig | 0.51 | 7.8 | 0.01 | Jul 4, 2019 | ACDSee Free 1.1.21 has a User Mode Write AV starting at IDE_ACDStd!JPEGTransW+0x0000000000002450. |
- risk 0.51cvss 7.8epss 0.01
A CWE-787: Out-of-bounds Write vulnerability exists in Interactive Graphical SCADA System (IGSS), Version 14 and prior, which could cause a software crash when data in the mdb database is manipulated.
- risk 0.51cvss 7.8epss 0.02
Evince 3.26.0 is affected by buffer overflow. The impact is: DOS / Possible code execution. The component is: backend/tiff/tiff-document.c. The attack vector is: Victim must open a crafted PDF file. The issue occurs because of an incorrect integer overflow protection mechanism…
- risk 0.51cvss 7.8epss 0.02
An Integer Underflow in MP4_EIA608_Convert() in modules/demux/mp4/mp4.c in VideoLAN VLC media player through 3.0.7.1 allows remote attackers to cause a denial of service (heap-based buffer overflow and crash) or possibly have unspecified other impact via a crafted .mp4 file.
- risk 0.51cvss 7.8epss 0.01
Insufficient validation of environment variables in the telnet client supplied in Junos OS can lead to stack-based buffer overflows, which can be exploited to bypass veriexec restrictions on Junos OS. A stack-based overflow is present in the handling of environment variables…
- risk 0.51cvss 7.8epss 0.00
In several functions of alarm.cc, there is possible memory corruption due to a use after free. This could lead to local code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-8.0…
- risk 0.51cvss 7.8epss 0.01
Codedoc v3.2 has a stack-based buffer overflow in add_variable in codedoc.c, related to codedoc_strlcpy.
- risk 0.51cvss 7.8epss 0.02
ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow at MagickCore/statistic.c in EvaluateImages because of mishandling rows.
- risk 0.51cvss 7.8epss 0.02
ImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage because of off-by-one errors.
- risk 0.51cvss 7.8epss 0.02
ImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage because of a misplaced strncpy and an off-by-one error.
- risk 0.51cvss 7.8epss 0.02
ImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage because of a misplaced assignment.
- risk 0.51cvss 7.8epss 0.03
Artifex MuPDF 1.15.0 has a heap-based buffer overflow in fz_append_display_node located at fitz/list-device.c, allowing remote attackers to execute arbitrary code via a crafted PDF file. This occurs with a large BDC property name that overflows the allocated size of a display…
- risk 0.51cvss 7.8epss 0.01
In Xpdf 4.01.01, a heap-based buffer overflow could be triggered in DCTStream::decodeImage() in Stream.cc when writing to frameBuf memory. It can, for example, be triggered by sending a crafted PDF document to the pdftotext tool. It allows an attacker to use a crafted pdf file…
- risk 0.51cvss 7.8epss 0.01
XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000327464.
- risk 0.51cvss 7.8epss 0.01
XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x000000000032e808.
- risk 0.51cvss 7.8epss 0.01
XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000385474.
- risk 0.51cvss 7.8epss 0.01
ACDSee Free 1.1.21 has a User Mode Write AV starting at IDE_ACDStd!IEP_SetColorProfile+0x00000000001172b0.
- risk 0.51cvss 7.8epss 0.01
ACDSee Free 1.1.21 has a User Mode Write AV starting at IDE_ACDStd!IEP_SetColorProfile+0x00000000000c47ff.
- risk 0.51cvss 7.8epss 0.01
ACDSee Free 1.1.21 has a User Mode Write AV starting at IDE_ACDStd!IEP_SetColorProfile+0x00000000000b9c2f.
- risk 0.51cvss 7.8epss 0.01
ACDSee Free 1.1.21 has a User Mode Write AV starting at IDE_ACDStd!IEP_SetColorProfile+0x00000000000b9e7a.
- risk 0.51cvss 7.8epss 0.01
ACDSee Free 1.1.21 has a User Mode Write AV starting at IDE_ACDStd!JPEGTransW+0x0000000000002450.