CWE-787
Out-of-bounds Write
Description
The product writes data past the end, or before the beginning, of the intended buffer.
Hierarchy (View 1000)
CVEs mapped to this weakness (15,178)
page 584 of 759| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2023-28570 | Med | 0.44 | 6.7 | 0.00 | Nov 7, 2023 | Memory corruption while processing audio effects. | ||
| CVE-2023-32839 | Med | 0.44 | 6.7 | 0.00 | Nov 6, 2023 | In dpe, there is a possible out of bounds write due to a missing valid range checking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07262576; Issue ID: ALPS07262576. | ||
| CVE-2023-32838 | Med | 0.44 | 6.7 | 0.00 | Nov 6, 2023 | In dpe, there is a possible out of bounds write due to a missing valid range checking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07310805; Issue ID: ALPS07310805. | ||
| CVE-2023-32836 | Med | 0.44 | 6.7 | 0.00 | Nov 6, 2023 | In display, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08126725; Issue ID: ALPS08126725. | ||
| CVE-2023-21380 | Med | 0.44 | 6.7 | 0.00 | Oct 30, 2023 | In Bluetooth, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. | ||
| CVE-2023-21360 | Med | 0.44 | 6.7 | 0.00 | Oct 30, 2023 | In Bluetooth, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. | ||
| CVE-2023-21310 | Med | 0.44 | 6.7 | 0.00 | Oct 30, 2023 | In Bluetooth, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. | ||
| CVE-2023-22384 | Med | 0.44 | 6.7 | 0.00 | Oct 3, 2023 | Memory Corruption in VR Service while sending data using Fast Message Queue (FMQ). | ||
| CVE-2023-32830 | Med | 0.44 | 6.7 | 0.00 | Oct 2, 2023 | In TVAPI, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: DTV03802522; Issue ID: DTV03802522. | ||
| CVE-2023-32827 | Med | 0.44 | 6.7 | 0.00 | Oct 2, 2023 | In camera middleware, there is a possible out of bounds write due to a missing input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07993539; Issue ID:… | ||
| CVE-2023-32826 | Med | 0.44 | 6.7 | 0.00 | Oct 2, 2023 | In camera middleware, there is a possible out of bounds write due to a missing input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07993539; Issue ID:… | ||
| CVE-2023-32822 | Med | 0.44 | 6.7 | 0.00 | Oct 2, 2023 | In ftm, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07994229; Issue ID: ALPS07994229. | ||
| CVE-2023-32821 | Med | 0.44 | 6.7 | 0.00 | Oct 2, 2023 | In video, there is a possible out of bounds write due to a permissions bypass. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08013430; Issue ID: ALPS08013433. | ||
| CVE-2023-34319 | Hig | 0.44 | 7.8 | 0.00 | Sep 22, 2023 | The fix for XSA-423 added logic to Linux'es netback driver to deal with a frontend splitting a packet in a way such that not all of the headers would come in one piece. Unfortunately the logic introduced there didn't account for the extreme case of the entire packet being split… | ||
| CVE-2023-21663 | Med | 0.44 | 6.7 | 0.00 | Sep 5, 2023 | Memory Corruption while accessing metadata in Display. | ||
| CVE-2023-21654 | Med | 0.44 | 6.7 | 0.00 | Sep 5, 2023 | Memory corruption in Audio during playback session with audio effects enabled. | ||
| CVE-2023-32812 | Med | 0.44 | 6.7 | 0.00 | Sep 4, 2023 | In gnss service, there is a possible out of bounds write due to improper input validation. This could lead to local esclation of privileges with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08017365; Issue ID: ALPS08017365. | ||
| CVE-2023-32811 | Med | 0.44 | 6.7 | 0.00 | Sep 4, 2023 | In connectivity system driver, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07929848; Issue ID:… | ||
| CVE-2023-32806 | Med | 0.44 | 6.7 | 0.00 | Sep 4, 2023 | In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07441589; Issue ID: ALPS07441589. | ||
| CVE-2023-20837 | Med | 0.44 | 6.7 | 0.00 | Sep 4, 2023 | In seninf, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07992786; Issue ID: ALPS07992786. |
- risk 0.44cvss 6.7epss 0.00
Memory corruption while processing audio effects.
- risk 0.44cvss 6.7epss 0.00
In dpe, there is a possible out of bounds write due to a missing valid range checking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07262576; Issue ID: ALPS07262576.
- risk 0.44cvss 6.7epss 0.00
In dpe, there is a possible out of bounds write due to a missing valid range checking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07310805; Issue ID: ALPS07310805.
- risk 0.44cvss 6.7epss 0.00
In display, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08126725; Issue ID: ALPS08126725.
- risk 0.44cvss 6.7epss 0.00
In Bluetooth, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
- risk 0.44cvss 6.7epss 0.00
In Bluetooth, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
- risk 0.44cvss 6.7epss 0.00
In Bluetooth, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
- risk 0.44cvss 6.7epss 0.00
Memory Corruption in VR Service while sending data using Fast Message Queue (FMQ).
- risk 0.44cvss 6.7epss 0.00
In TVAPI, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: DTV03802522; Issue ID: DTV03802522.
- risk 0.44cvss 6.7epss 0.00
In camera middleware, there is a possible out of bounds write due to a missing input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07993539; Issue ID:…
- risk 0.44cvss 6.7epss 0.00
In camera middleware, there is a possible out of bounds write due to a missing input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07993539; Issue ID:…
- risk 0.44cvss 6.7epss 0.00
In ftm, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07994229; Issue ID: ALPS07994229.
- risk 0.44cvss 6.7epss 0.00
In video, there is a possible out of bounds write due to a permissions bypass. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08013430; Issue ID: ALPS08013433.
- risk 0.44cvss 7.8epss 0.00
The fix for XSA-423 added logic to Linux'es netback driver to deal with a frontend splitting a packet in a way such that not all of the headers would come in one piece. Unfortunately the logic introduced there didn't account for the extreme case of the entire packet being split…
- risk 0.44cvss 6.7epss 0.00
Memory Corruption while accessing metadata in Display.
- risk 0.44cvss 6.7epss 0.00
Memory corruption in Audio during playback session with audio effects enabled.
- risk 0.44cvss 6.7epss 0.00
In gnss service, there is a possible out of bounds write due to improper input validation. This could lead to local esclation of privileges with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08017365; Issue ID: ALPS08017365.
- risk 0.44cvss 6.7epss 0.00
In connectivity system driver, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07929848; Issue ID:…
- risk 0.44cvss 6.7epss 0.00
In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07441589; Issue ID: ALPS07441589.
- risk 0.44cvss 6.7epss 0.00
In seninf, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07992786; Issue ID: ALPS07992786.