VYPR

CWE-787

Out-of-bounds Write

BaseDraftLikelihood: High

Description

The product writes data past the end, or before the beginning, of the intended buffer.

Hierarchy (View 1000)

CVEs mapped to this weakness (14,531)

page 57 of 727
  • CVE-2022-22088CriJan 9, 2023
    risk 0.64cvss 9.8epss 0.01

    Memory corruption in Bluetooth HOST due to buffer overflow while parsing the command response received from remote

  • CVE-2022-47128CriDec 30, 2022
    risk 0.64cvss 9.8epss 0.01

    Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wepkey2 parameter at /goform/WifiBasicSet.

  • CVE-2022-47127CriDec 30, 2022
    risk 0.64cvss 9.8epss 0.01

    Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wrlPwd parameter at /goform/WifiBasicSet.

  • CVE-2022-47126CriDec 30, 2022
    risk 0.64cvss 9.8epss 0.01

    Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wrlEn parameter at /goform/WifiBasicSet.

  • CVE-2022-47125CriDec 30, 2022
    risk 0.64cvss 9.8epss 0.01

    Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wrlEn_5g parameter at /goform/WifiBasicSet.

  • CVE-2022-47124CriDec 30, 2022
    risk 0.64cvss 9.8epss 0.01

    Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wepkey4 parameter at /goform/WifiBasicSet.

  • CVE-2022-47123CriDec 30, 2022
    risk 0.64cvss 9.8epss 0.01

    Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wepkey3 parameter at /goform/WifiBasicSet.

  • CVE-2022-47122CriDec 30, 2022
    risk 0.64cvss 9.8epss 0.01

    Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wrlPwd_5g parameter at /goform/WifiBasicSet.

  • CVE-2022-47121CriDec 30, 2022
    risk 0.64cvss 9.8epss 0.01

    Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wepkey parameter at /goform/WifiBasicSet.

  • CVE-2022-47120CriDec 30, 2022
    risk 0.64cvss 9.8epss 0.01

    Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the security_5g parameter at /goform/WifiBasicSet.

  • CVE-2022-47119CriDec 30, 2022
    risk 0.64cvss 9.8epss 0.01

    Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the ssid parameter at /goform/WifiBasicSet.

  • CVE-2022-47118CriDec 30, 2022
    risk 0.64cvss 9.8epss 0.01

    Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wepkey1 parameter at /goform/WifiBasicSet.

  • CVE-2022-47117CriDec 30, 2022
    risk 0.64cvss 9.8epss 0.01

    Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the security parameter at /goform/WifiBasicSet.

  • CVE-2022-47115CriDec 30, 2022
    risk 0.64cvss 9.8epss 0.01

    Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wepauth parameter at /goform/WifiBasicSet.

  • CVE-2022-46601CriDec 30, 2022
    risk 0.64cvss 9.8epss 0.01

    TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the setbg_num parameter in the icp_setbg_img (sub_41DD68) function.

  • CVE-2022-46600CriDec 30, 2022
    risk 0.64cvss 9.8epss 0.01

    TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the wps_sta_enrollee_pin parameter in the action set_sta_enrollee_pin_24g function.

  • CVE-2022-46599CriDec 30, 2022
    risk 0.64cvss 9.8epss 0.01

    TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the setlogo_num parameter in the icp_setlogo_img (sub_41DBF4) function.

  • CVE-2022-46596CriDec 30, 2022
    risk 0.64cvss 9.8epss 0.01

    TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the del_num parameter in the icp_delete_img (sub_41DEDC) function.

  • CVE-2022-46594CriDec 30, 2022
    risk 0.64cvss 9.8epss 0.01

    TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the update_file_name parameter in the auto_up_fw (sub_420A04) function.

  • CVE-2022-46593CriDec 30, 2022
    risk 0.64cvss 9.8epss 0.01

    TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the wps_sta_enrollee_pin parameter in the do_sta_enrollee_wifi function.