CWE-787
Out-of-bounds Write
Description
The product writes data past the end, or before the beginning, of the intended buffer.
Hierarchy (View 1000)
CVEs mapped to this weakness (15,178)
page 587 of 759| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2023-30652 | Med | 0.44 | 6.7 | 0.00 | Jul 6, 2023 | Out of bounds read and write in callrunTspCmdNoRead of sysinput HAL service prior to SMR Jul-2023 Release 1 allows local attackers to execute arbitrary code. | ||
| CVE-2023-30651 | Med | 0.44 | 6.7 | 0.00 | Jul 6, 2023 | Out of bounds read and write in callgetTspsysfs of sysinput HAL service prior to SMR Jul-2023 Release 1 allows local attackers to execute arbitrary code. | ||
| CVE-2023-30650 | Med | 0.44 | 6.7 | 0.00 | Jul 6, 2023 | Out of bounds read and write in callrunTspCmd of sysinput HAL service prior to SMR Jul-2023 Release 1 allows local attackers to execute arbitrary code. | ||
| CVE-2023-21640 | Med | 0.44 | 6.7 | 0.00 | Jul 4, 2023 | Memory corruption in Linux when the file upload API is called with parameters having large buffer. | ||
| CVE-2023-21639 | Med | 0.44 | 6.7 | 0.00 | Jul 4, 2023 | Memory corruption in Audio while processing sva_model_serializer using memory size passed by HIDL client. | ||
| CVE-2023-21637 | Med | 0.44 | 6.7 | 0.00 | Jul 4, 2023 | Memory corruption in Linux while calling system configuration APIs. | ||
| CVE-2023-21635 | Med | 0.44 | 6.7 | 0.00 | Jul 4, 2023 | Memory Corruption in Data Network Stack & Connectivity when sim gets detected on telephony. | ||
| CVE-2023-21633 | Med | 0.44 | 6.7 | 0.00 | Jul 4, 2023 | Memory Corruption in Linux while processing QcRilRequestImsRegisterMultiIdentityMessage request. | ||
| CVE-2023-20775 | Med | 0.44 | 6.7 | 0.00 | Jul 4, 2023 | In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07978760; Issue ID: ALPS07363410. | ||
| CVE-2023-20767 | Med | 0.44 | 6.7 | 0.00 | Jul 4, 2023 | In pqframework, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07629585; Issue ID: ALPS07629584. | ||
| CVE-2023-20766 | Med | 0.44 | 6.7 | 0.00 | Jul 4, 2023 | In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07573237; Issue ID: ALPS07573202. | ||
| CVE-2023-20761 | Med | 0.44 | 6.7 | 0.00 | Jul 4, 2023 | In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628604; Issue ID: ALPS07628582. | ||
| CVE-2023-20760 | Med | 0.44 | 6.7 | 0.00 | Jul 4, 2023 | In apu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07629578; Issue ID: ALPS07629578. | ||
| CVE-2023-20757 | Med | 0.44 | 6.7 | 0.00 | Jul 4, 2023 | In cmdq, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07636133; Issue ID: ALPS07636133. | ||
| CVE-2023-20754 | Med | 0.44 | 6.7 | 0.00 | Jul 4, 2023 | In keyinstall, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07563028; Issue ID: ALPS07588343. | ||
| CVE-2023-20753 | Med | 0.44 | 6.7 | 0.00 | Jul 4, 2023 | In rpmb, there is a possible out of bounds write due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07460390; Issue ID: ALPS07588667. | ||
| CVE-2023-21236 | Med | 0.44 | 6.7 | 0.00 | Jun 28, 2023 | In aoc_service_set_read_blocked of aoc.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:… | ||
| CVE-2023-21222 | Med | 0.44 | 6.7 | 0.00 | Jun 28, 2023 | In load_dt_data of storage.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android… | ||
| CVE-2023-21161 | Med | 0.44 | 6.7 | 0.00 | Jun 28, 2023 | In Parse of simdata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android… | ||
| CVE-2023-21159 | Med | 0.44 | 6.7 | 0.00 | Jun 28, 2023 | In Parse of simdata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android… |
- risk 0.44cvss 6.7epss 0.00
Out of bounds read and write in callrunTspCmdNoRead of sysinput HAL service prior to SMR Jul-2023 Release 1 allows local attackers to execute arbitrary code.
- risk 0.44cvss 6.7epss 0.00
Out of bounds read and write in callgetTspsysfs of sysinput HAL service prior to SMR Jul-2023 Release 1 allows local attackers to execute arbitrary code.
- risk 0.44cvss 6.7epss 0.00
Out of bounds read and write in callrunTspCmd of sysinput HAL service prior to SMR Jul-2023 Release 1 allows local attackers to execute arbitrary code.
- risk 0.44cvss 6.7epss 0.00
Memory corruption in Linux when the file upload API is called with parameters having large buffer.
- risk 0.44cvss 6.7epss 0.00
Memory corruption in Audio while processing sva_model_serializer using memory size passed by HIDL client.
- risk 0.44cvss 6.7epss 0.00
Memory corruption in Linux while calling system configuration APIs.
- risk 0.44cvss 6.7epss 0.00
Memory Corruption in Data Network Stack & Connectivity when sim gets detected on telephony.
- risk 0.44cvss 6.7epss 0.00
Memory Corruption in Linux while processing QcRilRequestImsRegisterMultiIdentityMessage request.
- risk 0.44cvss 6.7epss 0.00
In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07978760; Issue ID: ALPS07363410.
- risk 0.44cvss 6.7epss 0.00
In pqframework, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07629585; Issue ID: ALPS07629584.
- risk 0.44cvss 6.7epss 0.00
In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07573237; Issue ID: ALPS07573202.
- risk 0.44cvss 6.7epss 0.00
In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628604; Issue ID: ALPS07628582.
- risk 0.44cvss 6.7epss 0.00
In apu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07629578; Issue ID: ALPS07629578.
- risk 0.44cvss 6.7epss 0.00
In cmdq, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07636133; Issue ID: ALPS07636133.
- risk 0.44cvss 6.7epss 0.00
In keyinstall, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07563028; Issue ID: ALPS07588343.
- risk 0.44cvss 6.7epss 0.00
In rpmb, there is a possible out of bounds write due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07460390; Issue ID: ALPS07588667.
- risk 0.44cvss 6.7epss 0.00
In aoc_service_set_read_blocked of aoc.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:…
- risk 0.44cvss 6.7epss 0.00
In load_dt_data of storage.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android…
- risk 0.44cvss 6.7epss 0.00
In Parse of simdata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android…
- risk 0.44cvss 6.7epss 0.00
In Parse of simdata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android…