CWE-787
Out-of-bounds Write
Description
The product writes data past the end, or before the beginning, of the intended buffer.
Hierarchy (View 1000)
CVEs mapped to this weakness (14,654)
page 487 of 733| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2022-32043 | Hig | 0.49 | 7.5 | 0.01 | Jul 1, 2022 | Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formSetAccessCodeInfo. | ||
| CVE-2022-32041 | Hig | 0.49 | 7.5 | 0.01 | Jul 1, 2022 | Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formGetPassengerAnalyseData. | ||
| CVE-2022-32040 | Hig | 0.49 | 7.5 | 0.01 | Jul 1, 2022 | Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formSetCfm. | ||
| CVE-2022-32039 | Hig | 0.49 | 7.5 | 0.01 | Jul 1, 2022 | Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the listN parameter in the function fromDhcpListClient. | ||
| CVE-2022-32037 | Hig | 0.49 | 7.5 | 0.01 | Jul 1, 2022 | Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formSetAPCfg. | ||
| CVE-2022-32036 | Hig | 0.49 | 7.5 | 0.01 | Jul 1, 2022 | Tenda M3 V1.0.0.12 was discovered to contain multiple stack overflow vulnerabilities via the ssidList, storeName, and trademark parameters in the function formSetStoreWeb. | ||
| CVE-2022-32034 | Hig | 0.49 | 7.5 | 0.01 | Jul 1, 2022 | Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the items parameter in the function formdelMasteraclist. | ||
| CVE-2022-32033 | Hig | 0.49 | 7.5 | 0.01 | Jul 1, 2022 | Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the function formSetVirtualSer. | ||
| CVE-2022-32031 | Hig | 0.49 | 7.5 | 0.01 | Jul 1, 2022 | Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the list parameter in the function fromSetRouteStatic. | ||
| CVE-2022-32030 | Hig | 0.49 | 7.5 | 0.01 | Jul 1, 2022 | Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the list parameter in the function formSetQosBand. | ||
| CVE-2022-33087 | Hig | 0.49 | 7.5 | 0.02 | Jun 30, 2022 | A stack overflow in the function DM_ In fillobjbystr() of TP-Link Archer C50&A5(US)_V5_200407 allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request. | ||
| CVE-2021-33647 | Hig | 0.49 | 7.5 | 0.01 | Jun 27, 2022 | When performing the inference shape operation of the Tile operator, if the input data type is not int or int32, it will access data outside of bounds of heap allocated buffers. | ||
| CVE-2022-24893 | Hig | 0.49 | 7.5 | 0.01 | Jun 25, 2022 | ESP-IDF is the official development framework for Espressif SoCs. In Espressif’s Bluetooth Mesh SDK (`ESP-BLE-MESH`), a memory corruption vulnerability can be triggered during provisioning, because there is no check for the `SegN` field of the Transaction Start PDU. This can… | ||
| CVE-2022-20209 | Hig | 0.49 | 7.5 | 0.01 | Jun 15, 2022 | In hme_add_new_node_to_a_sorted_array of hme_utils.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product:… | ||
| CVE-2022-30937 | Hig | 0.49 | 7.5 | 0.01 | Jun 14, 2022 | A vulnerability has been identified in EN100 Ethernet module DNP3 IP variant (All versions), EN100 Ethernet module IEC 104 variant (All versions), EN100 Ethernet module IEC 61850 variant (All versions < V4.37), EN100 Ethernet module Modbus TCP variant (All versions), EN100… | ||
| CVE-2021-46814 | Hig | 0.49 | 7.5 | 0.01 | Jun 13, 2022 | The video framework has an out-of-bounds memory read/write vulnerability. Successful exploitation of this vulnerability may affect system availability. | ||
| CVE-2020-14125 | Hig | 0.49 | 7.5 | 0.07 | Jun 8, 2022 | A denial of service vulnerability exists in some Xiaomi models of phones. The vulnerability is caused by out-of-bound read/write and can be exploited by attackers to make denial of service. | ||
| CVE-2022-30475 | Hig | 0.49 | 7.5 | 0.01 | May 26, 2022 | Tenda AC Series Router AC18_V15.03.05.19(6318) was discovered to contain a stack-based buffer overflow in the httpd module when handling /goform/WifiExtraSet request. | ||
| CVE-2022-30473 | Hig | 0.49 | 7.5 | 0.01 | May 26, 2022 | Tenda AC Series Router AC18_V15.03.05.19(6318) has a stack-based buffer overflow vulnerability in function form_fast_setting_wifi_set | ||
| CVE-2022-29377 | Hig | 0.49 | 7.5 | 0.01 | May 24, 2022 | Totolink A3600R V4.1.2cu.5182_B20201102 was discovered to contain a stacker overflow in the fread function at infostat.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via the parameter CONTENT_LENGTH. |
- risk 0.49cvss 7.5epss 0.01
Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formSetAccessCodeInfo.
- risk 0.49cvss 7.5epss 0.01
Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formGetPassengerAnalyseData.
- risk 0.49cvss 7.5epss 0.01
Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formSetCfm.
- risk 0.49cvss 7.5epss 0.01
Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the listN parameter in the function fromDhcpListClient.
- risk 0.49cvss 7.5epss 0.01
Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formSetAPCfg.
- risk 0.49cvss 7.5epss 0.01
Tenda M3 V1.0.0.12 was discovered to contain multiple stack overflow vulnerabilities via the ssidList, storeName, and trademark parameters in the function formSetStoreWeb.
- risk 0.49cvss 7.5epss 0.01
Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the items parameter in the function formdelMasteraclist.
- risk 0.49cvss 7.5epss 0.01
Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the function formSetVirtualSer.
- risk 0.49cvss 7.5epss 0.01
Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the list parameter in the function fromSetRouteStatic.
- risk 0.49cvss 7.5epss 0.01
Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the list parameter in the function formSetQosBand.
- risk 0.49cvss 7.5epss 0.02
A stack overflow in the function DM_ In fillobjbystr() of TP-Link Archer C50&A5(US)_V5_200407 allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request.
- risk 0.49cvss 7.5epss 0.01
When performing the inference shape operation of the Tile operator, if the input data type is not int or int32, it will access data outside of bounds of heap allocated buffers.
- risk 0.49cvss 7.5epss 0.01
ESP-IDF is the official development framework for Espressif SoCs. In Espressif’s Bluetooth Mesh SDK (`ESP-BLE-MESH`), a memory corruption vulnerability can be triggered during provisioning, because there is no check for the `SegN` field of the Transaction Start PDU. This can…
- risk 0.49cvss 7.5epss 0.01
In hme_add_new_node_to_a_sorted_array of hme_utils.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product:…
- risk 0.49cvss 7.5epss 0.01
A vulnerability has been identified in EN100 Ethernet module DNP3 IP variant (All versions), EN100 Ethernet module IEC 104 variant (All versions), EN100 Ethernet module IEC 61850 variant (All versions < V4.37), EN100 Ethernet module Modbus TCP variant (All versions), EN100…
- risk 0.49cvss 7.5epss 0.01
The video framework has an out-of-bounds memory read/write vulnerability. Successful exploitation of this vulnerability may affect system availability.
- risk 0.49cvss 7.5epss 0.07
A denial of service vulnerability exists in some Xiaomi models of phones. The vulnerability is caused by out-of-bound read/write and can be exploited by attackers to make denial of service.
- risk 0.49cvss 7.5epss 0.01
Tenda AC Series Router AC18_V15.03.05.19(6318) was discovered to contain a stack-based buffer overflow in the httpd module when handling /goform/WifiExtraSet request.
- risk 0.49cvss 7.5epss 0.01
Tenda AC Series Router AC18_V15.03.05.19(6318) has a stack-based buffer overflow vulnerability in function form_fast_setting_wifi_set
- risk 0.49cvss 7.5epss 0.01
Totolink A3600R V4.1.2cu.5182_B20201102 was discovered to contain a stacker overflow in the fread function at infostat.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via the parameter CONTENT_LENGTH.