VYPR

CWE-787

Out-of-bounds Write

BaseDraftLikelihood: High

Description

The product writes data past the end, or before the beginning, of the intended buffer.

Hierarchy (View 1000)

CVEs mapped to this weakness (14,531)

page 616 of 727
  • CVE-2025-15555HigFeb 4, 2026
    risk 0.40cvss 7.3epss 0.01

    A security flaw has been discovered in Open5GS up to 2.7.6. Affected by this vulnerability is the function hss_ogs_diam_cx_mar_cb of the file src/hss/hss-cx-path.c of the component VoLTE Cx-Test. The manipulation of the argument OGS_KEY_LEN results in stack-based buffer…

  • CVE-2025-0010MedSep 6, 2025
    risk 0.40cvss 6.1epss 0.00

    An out of bounds write in the Linux graphics driver could allow an attacker to overflow the buffer potentially resulting in loss of confidentiality, integrity, or availability.

  • CVE-2024-29222MedMay 13, 2025
    risk 0.40cvss 6.1epss 0.00

    Out-of-bounds write for some Intel(R) Graphics Driver software may allow an authenticated user to potentially enable denial of service via local access.

  • CVE-2025-0690MedFeb 24, 2025
    risk 0.40cvss 6.1epss 0.01

    The read command is used to read the keyboard input from the user, while reads it keeps the input length in a 32-bit integer value which is further used to reallocate the line buffer to accept the next character. During this process, with a line big enough it's possible to make…

  • CVE-2024-57955MedFeb 6, 2025
    risk 0.40cvss 6.1epss 0.00

    Arbitrary write vulnerability in the Gallery module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

  • CVE-2024-39439MedOct 9, 2024
    risk 0.40cvss 6.2epss 0.00

    In DRM service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.

  • CVE-2024-39433MedSep 27, 2024
    risk 0.40cvss 6.2epss 0.00

    In drm service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.

  • CVE-2024-20496MedSep 25, 2024
    risk 0.40cvss 6.1epss 0.00

    A vulnerability in the UDP packet validation code of Cisco SD-WAN vEdge Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected system. This vulnerability is due to incorrect handling of a specific type of…

  • CVE-2023-22351MedSep 16, 2024
    risk 0.40cvss 6.1epss 0.00

    Out-of-bounds write in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

  • CVE-2024-43688HigAug 20, 2024
    risk 0.40cvss 7.3epss 0.01

    cron/entry.c in vixie cron before 9cc8ab1, as used in OpenBSD 7.4 and 7.5, allows a heap-based buffer underflow and memory corruption. NOTE: this issue was introduced during a May 2023 refactoring.

  • CVE-2024-42093HigJul 29, 2024
    risk 0.40cvss 7.3epss 0.00

    In the Linux kernel, the following vulnerability has been resolved: net/dpaa2: Avoid explicit cpumask var allocation on stack For CONFIG_CPUMASK_OFFSTACK=y kernel, explicit allocation of cpumask variable on stack is not recommended since it can cause potential stack overflow. …

  • CVE-2024-40901HigJul 12, 2024
    risk 0.40cvss 7.3epss 0.00

    In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory There is a potential out-of-bounds access when using test_bit() on a single word. The test_bit() and set_bit() functions operate on long…

  • CVE-2024-20893MedJul 2, 2024
    risk 0.40cvss 6.1epss 0.00

    Improper input validation in libmediaextractorservice.so prior to SMR Jul-2024 Release 1 allows local attackers to trigger memory corruption.

  • CVE-2023-52385MedApr 8, 2024
    risk 0.40cvss 6.2epss 0.00

    Out-of-bounds write vulnerability in the RSMC module. Impact: Successful exploitation of this vulnerability will affect availability.

  • CVE-2023-28527MedDec 9, 2023
    risk 0.40cvss 6.2epss 0.00

    IBM Informix Dynamic Server 12.10 and 14.10 cdr is vulnerable to a heap buffer overflow, caused by improper bounds checking which could allow a local user to cause a segmentation fault. IBM X-Force ID: 251206.

  • CVE-2023-28526MedDec 9, 2023
    risk 0.40cvss 6.2epss 0.00

    IBM Informix Dynamic Server 12.10 and 14.10 archecker is vulnerable to a heap buffer overflow, caused by improper bounds checking which could allow a local user to cause a segmentation fault. IBM X-Force ID: 251204.

  • CVE-2023-25952MedNov 14, 2023
    risk 0.40cvss 6.1epss 0.00

    Out-of-bounds write in some Intel(R) Arc(TM) Control software before version 1.73.5335.2 may allow an authenticated user to potentially enable denial of service via local access.

  • CVE-2022-4900MedNov 2, 2023
    risk 0.40cvss 6.2epss 0.00

    A vulnerability was found in PHP where setting the environment variable PHP_CLI_SERVER_WORKERS to a large value leads to a heap buffer overflow.

  • CVE-2023-3428MedOct 4, 2023
    risk 0.40cvss 6.2epss 0.00

    A heap-based buffer overflow vulnerability was found in coders/tiff.c in ImageMagick. This issue may allow a local attacker to trick the user into opening a specially crafted file, resulting in an application crash and denial of service.

  • CVE-2023-25537MedMay 22, 2023
    risk 0.40cvss 6.1epss 0.00

    Dell PowerEdge 14G server BIOS versions prior to 2.18.1 and Dell Precision BIOS versions prior to 2.18.2, contain an Out of Bounds write vulnerability. A local attacker with low privileges could potentially exploit this vulnerability leading to exposure of some SMRAM…