CWE-787

Out-of-bounds Write

BaseDraftLikelihood: High

Description

The product writes data past the end, or before the beginning, of the intended buffer.

Hierarchy (View 1000)

Parents

CWE-119

Children

CVEs mapped to this weakness (14,654)

page 517 of 733

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2023-33643	—	Hig	0.47	7.2	0.01	May 31, 2023	H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the AddWlanMacList interface at /goform/aspForm.
CVE-2023-33642	—	Hig	0.47	7.2	0.01	May 31, 2023	H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the Edit_BasicSSID interface at /goform/aspForm.
CVE-2023-33641	—	Hig	0.47	7.2	0.01	May 31, 2023	H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the AddMacList interface at /goform/aspForm.
CVE-2023-33640	—	Hig	0.47	7.2	0.01	May 31, 2023	H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the SetAPWifiorLedInfoById interface at /goform/aspForm.
CVE-2023-33639	—	Hig	0.47	7.2	0.01	May 31, 2023	H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the SetMobileAPInfoById interface at /goform/aspForm.
CVE-2023-33638	—	Hig	0.47	7.2	0.01	May 31, 2023	H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the Edit_BasicSSID_5G interface at /goform/aspForm.
CVE-2023-33637	—	Hig	0.47	7.2	0.01	May 31, 2023	H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the DelDNSHnList interface at /goform/aspForm.
CVE-2023-33636	—	Hig	0.47	7.2	0.01	May 31, 2023	H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the ipqos_lanip_editlist interface at /goform/aspForm.
CVE-2023-33635	—	Hig	0.47	7.2	0.01	May 31, 2023	H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the UpdateMacClone interface at /goform/aspForm.
CVE-2023-33634	—	Hig	0.47	7.2	0.01	May 31, 2023	H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the EdittriggerList interface at /goform/aspForm.
CVE-2023-33633	—	Hig	0.47	7.2	0.01	May 31, 2023	H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the UpdateWanParams interface at /goform/aspForm.
CVE-2023-33632	—	Hig	0.47	7.2	0.01	May 31, 2023	H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the ipqos_lanip_dellist interface at /goform/aspForm.
CVE-2023-33631	—	Hig	0.47	7.2	0.01	May 31, 2023	H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the DelSTList interface at /goform/aspForm.
CVE-2023-33630	—	Hig	0.47	7.2	0.01	May 31, 2023	H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the EditvsList interface at /goform/aspForm.
CVE-2023-33629	—	Hig	0.47	7.2	0.04	May 31, 2023	H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the DeltriggerList interface at /goform/aspForm.
CVE-2023-33628	—	Hig	0.47	7.2	0.01	May 31, 2023	H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the DelvsList interface at /goform/aspForm.
CVE-2023-33627	—	Hig	0.47	7.2	0.01	May 31, 2023	H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the UpdateSnat interface at /goform/aspForm.
CVE-2023-30382	Valve Software Half Life	Hig	0.47	7.3	0.00	May 23, 2023	A buffer overflow in the component hl.exe of Valve Half-Life up to 5433873 allows attackers to execute arbitrary code and escalate privileges by supplying crafted parameters.
CVE-2023-30763	Intel SOC Watch	Hig	0.47	7.2	0.00	May 12, 2023	Heap-based overflow in Intel(R) SoC Watch based software before version 2021.1 may allow a privileged user to potentially enable escalation of privilege via local access.
CVE-2023-21054	Google Android	Hig	0.47	7.2	0.01	Mar 24, 2023	In EUTRAN_LCS_ConvertLCS_MOLRReq of LPP_CommonUtil.c, there is a possible out of bounds write due to a logic error in the code. This could lead to remote code execution with System execution privileges needed. User interaction is not needed for exploitation.Product:…

CVE-2023-33643HigMay 31, 2023
risk 0.47cvss 7.2epss 0.01
H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the AddWlanMacList interface at /goform/aspForm.
CVE-2023-33642HigMay 31, 2023
risk 0.47cvss 7.2epss 0.01
H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the Edit_BasicSSID interface at /goform/aspForm.
CVE-2023-33641HigMay 31, 2023
risk 0.47cvss 7.2epss 0.01
H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the AddMacList interface at /goform/aspForm.
CVE-2023-33640HigMay 31, 2023
risk 0.47cvss 7.2epss 0.01
H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the SetAPWifiorLedInfoById interface at /goform/aspForm.
CVE-2023-33639HigMay 31, 2023
risk 0.47cvss 7.2epss 0.01
H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the SetMobileAPInfoById interface at /goform/aspForm.
CVE-2023-33638HigMay 31, 2023
risk 0.47cvss 7.2epss 0.01
H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the Edit_BasicSSID_5G interface at /goform/aspForm.
CVE-2023-33637HigMay 31, 2023
risk 0.47cvss 7.2epss 0.01
H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the DelDNSHnList interface at /goform/aspForm.
CVE-2023-33636HigMay 31, 2023
risk 0.47cvss 7.2epss 0.01
H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the ipqos_lanip_editlist interface at /goform/aspForm.
CVE-2023-33635HigMay 31, 2023
risk 0.47cvss 7.2epss 0.01
H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the UpdateMacClone interface at /goform/aspForm.
CVE-2023-33634HigMay 31, 2023
risk 0.47cvss 7.2epss 0.01
H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the EdittriggerList interface at /goform/aspForm.
CVE-2023-33633HigMay 31, 2023
risk 0.47cvss 7.2epss 0.01
H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the UpdateWanParams interface at /goform/aspForm.
CVE-2023-33632HigMay 31, 2023
risk 0.47cvss 7.2epss 0.01
H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the ipqos_lanip_dellist interface at /goform/aspForm.
CVE-2023-33631HigMay 31, 2023
risk 0.47cvss 7.2epss 0.01
H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the DelSTList interface at /goform/aspForm.
CVE-2023-33630HigMay 31, 2023
risk 0.47cvss 7.2epss 0.01
H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the EditvsList interface at /goform/aspForm.
CVE-2023-33629HigMay 31, 2023
risk 0.47cvss 7.2epss 0.04
H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the DeltriggerList interface at /goform/aspForm.
CVE-2023-33628HigMay 31, 2023
risk 0.47cvss 7.2epss 0.01
H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the DelvsList interface at /goform/aspForm.
CVE-2023-33627HigMay 31, 2023
risk 0.47cvss 7.2epss 0.01
H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the UpdateSnat interface at /goform/aspForm.
CVE-2023-30382HigMay 23, 2023
Valve Software
Half Life
risk 0.47cvss 7.3epss 0.00
A buffer overflow in the component hl.exe of Valve Half-Life up to 5433873 allows attackers to execute arbitrary code and escalate privileges by supplying crafted parameters.
CVE-2023-30763HigMay 12, 2023
Intel
SOC Watch
risk 0.47cvss 7.2epss 0.00
Heap-based overflow in Intel(R) SoC Watch based software before version 2021.1 may allow a privileged user to potentially enable escalation of privilege via local access.
CVE-2023-21054HigMar 24, 2023
Google
Android
risk 0.47cvss 7.2epss 0.01
In EUTRAN_LCS_ConvertLCS_MOLRReq of LPP_CommonUtil.c, there is a possible out of bounds write due to a logic error in the code. This could lead to remote code execution with System execution privileges needed. User interaction is not needed for exploitation.Product:…