CWE-787
Out-of-bounds Write
Description
The product writes data past the end, or before the beginning, of the intended buffer.
Hierarchy (View 1000)
CVEs mapped to this weakness (14,531)
page 634 of 727| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2022-45587 | Med | 0.36 | 5.5 | 0.00 | Feb 15, 2023 | Stack overflow vulnerability in function gmalloc in goo/gmem.cc in xpdf 4.04, allows local attackers to cause a denial of service. | ||
| CVE-2022-45586 | Med | 0.36 | 5.5 | 0.00 | Feb 15, 2023 | Stack overflow vulnerability in function Dict::find in xpdf/Dict.cc in xpdf 4.04, allows local attackers to cause a denial of service. | ||
| CVE-2023-20949 | Med | 0.36 | 5.5 | 0.00 | Feb 15, 2023 | In s2mpg11_pmic_probe of s2mpg11-regulator.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product:… | ||
| CVE-2022-47452 | Med | 0.36 | 5.5 | 0.00 | Feb 12, 2023 | In gnss driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in wlan services. | ||
| CVE-2022-47369 | Med | 0.36 | 5.5 | 0.00 | Feb 12, 2023 | In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services. | ||
| CVE-2022-47368 | Med | 0.36 | 5.5 | 0.00 | Feb 12, 2023 | In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services. | ||
| CVE-2022-47366 | Med | 0.36 | 5.5 | 0.00 | Feb 12, 2023 | In wlan driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in wlan services. | ||
| CVE-2022-47365 | Med | 0.36 | 5.5 | 0.00 | Feb 12, 2023 | In wlan driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in wlan services. | ||
| CVE-2022-47364 | Med | 0.36 | 5.5 | 0.00 | Feb 12, 2023 | In wlan driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in wlan services. | ||
| CVE-2022-44448 | Med | 0.36 | 5.5 | 0.00 | Feb 12, 2023 | In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services. | ||
| CVE-2022-42783 | Med | 0.36 | 5.5 | 0.00 | Feb 12, 2023 | In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services. | ||
| CVE-2022-38675 | Med | 0.36 | 5.5 | 0.00 | Feb 12, 2023 | In gpu driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. | ||
| CVE-2021-36535 | Med | 0.36 | 5.5 | 0.00 | Feb 3, 2023 | Buffer Overflow vulnerability in Cesanta mJS 1.26 allows remote attackers to cause a denial of service via crafted .js file to mjs_set_errorf. | ||
| CVE-2022-31902 | Med | 0.36 | 5.5 | 0.01 | Feb 1, 2023 | Notepad++ v8.4.1 was discovered to contain a stack overflow via the component Finder::add(). | ||
| CVE-2022-20235 | Med | 0.36 | 5.5 | 0.00 | Jan 26, 2023 | The PowerVR GPU kernel driver maintains an "Information Page" used by its cache subsystem. This page can only be written by the GPU driver itself, but prior to DDK 1.18 however, a user-space program could write arbitrary data to the page, leading to memory corruption… | ||
| CVE-2023-24056 | Med | 0.36 | 5.5 | 0.01 | Jan 22, 2023 | In pkgconf through 1.9.3, variable duplication can cause unbounded string expansion due to incorrect checks in libpkgconf/tuple.c:pkgconf_tuple_parse. For example, a .pc file containing a few hundred bytes can expand to one billion bytes. | ||
| CVE-2021-46791 | Med | 0.36 | 5.5 | 0.00 | Jan 11, 2023 | Insufficient input validation during parsing of the System Management Mode (SMM) binary may allow a maliciously crafted SMM executable binary to corrupt Dynamic Root of Trust for Measurement (DRTM) user application memory that may result in a potential denial of service. | ||
| CVE-2022-47086 | Med | 0.36 | 5.5 | 0.00 | Jan 5, 2023 | GPAC MP4Box v2.1-DEV-rev574-g9d5bb184b contains a segmentation violation via the function gf_sm_load_init_swf at scene_manager/swf_parse.c | ||
| CVE-2022-44431 | Med | 0.36 | 5.5 | 0.00 | Jan 4, 2023 | In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services. | ||
| CVE-2022-44430 | Med | 0.36 | 5.5 | 0.00 | Jan 4, 2023 | In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services. |
- risk 0.36cvss 5.5epss 0.00
Stack overflow vulnerability in function gmalloc in goo/gmem.cc in xpdf 4.04, allows local attackers to cause a denial of service.
- risk 0.36cvss 5.5epss 0.00
Stack overflow vulnerability in function Dict::find in xpdf/Dict.cc in xpdf 4.04, allows local attackers to cause a denial of service.
- risk 0.36cvss 5.5epss 0.00
In s2mpg11_pmic_probe of s2mpg11-regulator.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product:…
- risk 0.36cvss 5.5epss 0.00
In gnss driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in wlan services.
- risk 0.36cvss 5.5epss 0.00
In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.
- risk 0.36cvss 5.5epss 0.00
In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.
- risk 0.36cvss 5.5epss 0.00
In wlan driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in wlan services.
- risk 0.36cvss 5.5epss 0.00
In wlan driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in wlan services.
- risk 0.36cvss 5.5epss 0.00
In wlan driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in wlan services.
- risk 0.36cvss 5.5epss 0.00
In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.
- risk 0.36cvss 5.5epss 0.00
In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.
- risk 0.36cvss 5.5epss 0.00
In gpu driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.
- risk 0.36cvss 5.5epss 0.00
Buffer Overflow vulnerability in Cesanta mJS 1.26 allows remote attackers to cause a denial of service via crafted .js file to mjs_set_errorf.
- risk 0.36cvss 5.5epss 0.01
Notepad++ v8.4.1 was discovered to contain a stack overflow via the component Finder::add().
- risk 0.36cvss 5.5epss 0.00
The PowerVR GPU kernel driver maintains an "Information Page" used by its cache subsystem. This page can only be written by the GPU driver itself, but prior to DDK 1.18 however, a user-space program could write arbitrary data to the page, leading to memory corruption…
- risk 0.36cvss 5.5epss 0.01
In pkgconf through 1.9.3, variable duplication can cause unbounded string expansion due to incorrect checks in libpkgconf/tuple.c:pkgconf_tuple_parse. For example, a .pc file containing a few hundred bytes can expand to one billion bytes.
- risk 0.36cvss 5.5epss 0.00
Insufficient input validation during parsing of the System Management Mode (SMM) binary may allow a maliciously crafted SMM executable binary to corrupt Dynamic Root of Trust for Measurement (DRTM) user application memory that may result in a potential denial of service.
- risk 0.36cvss 5.5epss 0.00
GPAC MP4Box v2.1-DEV-rev574-g9d5bb184b contains a segmentation violation via the function gf_sm_load_init_swf at scene_manager/swf_parse.c
- risk 0.36cvss 5.5epss 0.00
In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services.
- risk 0.36cvss 5.5epss 0.00
In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services.