VYPR

CWE-787

Out-of-bounds Write

BaseDraftLikelihood: High

Description

The product writes data past the end, or before the beginning, of the intended buffer.

Hierarchy (View 1000)

CVEs mapped to this weakness (15,178)

page 596 of 759
  • CVE-2022-26449MedSep 6, 2022
    risk 0.44cvss 6.7epss 0.00

    In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07177810; Issue ID: ALPS07177810.

  • CVE-2022-26448MedSep 6, 2022
    risk 0.44cvss 6.7epss 0.00

    In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07063849; Issue ID: ALPS07063849.

  • CVE-2022-21172MedAug 18, 2022
    risk 0.44cvss 6.7epss 0.00

    Out of bounds write for some Intel(R) PROSet/Wireless WiFi products may allow a privileged user to potentially enable escalation of privilege via local access.

  • CVE-2022-20313MedAug 12, 2022
    risk 0.44cvss 6.8epss 0.00

    In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID:…

  • CVE-2022-20269MedAug 12, 2022
    risk 0.44cvss 6.8epss 0.00

    In Bluetooth, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID:…

  • CVE-2022-20369MedAug 11, 2022
    risk 0.44cvss 6.7epss 0.00

    In v4l2_m2m_querybuf of v4l2-mem2mem.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:…

  • CVE-2022-33730MedAug 5, 2022
    risk 0.44cvss 6.8epss 0.00

    Heap-based buffer overflow vulnerability in Samsung Dex for PC prior to SMR Aug-2022 Release 1 allows arbitrary code execution by physical attackers.

  • CVE-2022-35222MedAug 2, 2022
    risk 0.44cvss 6.8epss 0.00

    HiCOS Citizen verification component has a stack-based buffer overflow vulnerability due to insufficient parameter length validation. An unauthenticated physical attacker can exploit this vulnerability to execute arbitrary code, manipulate system command or disrupt service.

  • CVE-2022-26445MedAug 1, 2022
    risk 0.44cvss 6.7epss 0.00

    In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220420088; Issue ID: GN20220420088.

  • CVE-2022-26444MedAug 1, 2022
    risk 0.44cvss 6.7epss 0.00

    In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220420075; Issue ID: GN20220420075.

  • CVE-2022-26443MedAug 1, 2022
    risk 0.44cvss 6.7epss 0.00

    In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220420068; Issue ID: GN20220420068.

  • CVE-2022-26442MedAug 1, 2022
    risk 0.44cvss 6.7epss 0.00

    In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220420051; Issue ID: GN20220420051.

  • CVE-2022-26441MedAug 1, 2022
    risk 0.44cvss 6.7epss 0.00

    In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220420044; Issue ID: GN20220420044.

  • CVE-2022-26440MedAug 1, 2022
    risk 0.44cvss 6.7epss 0.00

    In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220420037; Issue ID: GN20220420037.

  • CVE-2022-26439MedAug 1, 2022
    risk 0.44cvss 6.7epss 0.00

    In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220420020; Issue ID: GN20220420020.

  • CVE-2022-26438MedAug 1, 2022
    risk 0.44cvss 6.7epss 0.00

    In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220420013; Issue ID: GN20220420013.

  • CVE-2022-26435MedAug 1, 2022
    risk 0.44cvss 6.7epss 0.00

    In mailbox, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07138435; Issue ID: ALPS07138435.

  • CVE-2022-26434MedAug 1, 2022
    risk 0.44cvss 6.7epss 0.00

    In mailbox, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07138450; Issue ID: ALPS07138450.

  • CVE-2022-26432MedAug 1, 2022
    risk 0.44cvss 6.7epss 0.00

    In mailbox, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07032542; Issue ID: ALPS07032542.

  • CVE-2022-26431MedAug 1, 2022
    risk 0.44cvss 6.7epss 0.00

    In mailbox, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07032553; Issue ID: ALPS07032553.