CWE-787
Out-of-bounds Write
Description
The product writes data past the end, or before the beginning, of the intended buffer.
Hierarchy (View 1000)
CVEs mapped to this weakness (14,531)
page 638 of 727| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2022-35090 | Med | 0.36 | 5.5 | 0.00 | Sep 21, 2022 | SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via __asan_memcpy at /asan/asan_interceptors_memintrinsics.cpp:. | ||
| CVE-2022-35088 | Med | 0.36 | 5.5 | 0.00 | Sep 21, 2022 | SWFTools commit 772e55a2 was discovered to contain a heap buffer-overflow via getGifDelayTime at /home/bupt/Desktop/swftools/src/src/gif2swf.c. | ||
| CVE-2022-35087 | Med | 0.36 | 5.5 | 0.00 | Sep 21, 2022 | SWFTools commit 772e55a2 was discovered to contain a segmentation violation via MovieAddFrame at /src/gif2swf.c. | ||
| CVE-2022-35086 | Med | 0.36 | 5.5 | 0.00 | Sep 21, 2022 | SWFTools commit 772e55a2 was discovered to contain a segmentation violation via /multiarch/memmove-vec-unaligned-erms.S. | ||
| CVE-2022-38866 | Med | 0.36 | 5.5 | 0.00 | Sep 15, 2022 | Certain The MPlayer Project products are vulnerable to Buffer Overflow via read_avi_header() of libmpdemux/aviheader.c . This affects mplayer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1. | ||
| CVE-2022-38864 | Med | 0.36 | 5.5 | 0.00 | Sep 15, 2022 | Certain The MPlayer Project products are vulnerable to Buffer Overflow via the function mp_unescape03() of libmpdemux/mpeg_hdr.c. This affects mencoder SVN-r38374-13.0.1 and mplayer SVN-r38374-13.0.1. | ||
| CVE-2022-38863 | Med | 0.36 | 5.5 | 0.00 | Sep 15, 2022 | Certain The MPlayer Project products are vulnerable to Buffer Overflow via function mp_getbits() of libmpdemux/mpeg_hdr.c which affects mencoder and mplayer. This affects mecoder SVN-r38374-13.0.1 and mplayer SVN-r38374-13.0.1. | ||
| CVE-2022-38861 | Med | 0.36 | 5.5 | 0.00 | Sep 15, 2022 | The MPlayer Project mplayer SVN-r38374-13.0.1 is vulnerable to memory corruption via function free_mp_image() of libmpcodecs/mp_image.c. | ||
| CVE-2022-38858 | Med | 0.36 | 5.5 | 0.00 | Sep 15, 2022 | Certain The MPlayer Project products are vulnerable to Buffer Overflow via function mov_build_index() of libmpdemux/demux_mov.c. This affects mplayer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1. | ||
| CVE-2022-38856 | Med | 0.36 | 5.5 | 0.00 | Sep 15, 2022 | Certain The MPlayer Project products are vulnerable to Buffer Overflow via function mov_build_index() of libmpdemux/demux_mov.c. This affects mplayer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1. | ||
| CVE-2022-38855 | Med | 0.36 | 5.5 | 0.00 | Sep 15, 2022 | Certain The MPlayer Project products are vulnerable to Buffer Overflow via function gen_sh_video () of mplayer/libmpdemux/demux_mov.c. This affects mplayer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1. | ||
| CVE-2022-38853 | Med | 0.36 | 5.5 | 0.00 | Sep 15, 2022 | Certain The MPlayer Project products are vulnerable to Buffer Overflow via function asf_init_audio_stream() of libmpdemux/asfheader.c. This affects mplayer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1. | ||
| CVE-2021-40647 | Med | 0.36 | 5.5 | 0.00 | Sep 9, 2022 | In man2html 1.6g, a specific string being read in from a file will overwrite the size parameter in the top chunk of the heap. This at least causes the program to segmentation abort if the heap size parameter isn't aligned correctly. In version before GLIBC version 2.29 and… | ||
| CVE-2022-35020 | Med | 0.36 | 5.5 | 0.00 | Aug 29, 2022 | Advancecomp v2.3 was discovered to contain a heap buffer overflow via the component __interceptor_memcpy at /sanitizer_common/sanitizer_common_interceptors.inc. | ||
| CVE-2022-35017 | Med | 0.36 | 5.5 | 0.00 | Aug 29, 2022 | Advancecomp v2.3 was discovered to contain a heap buffer overflow. | ||
| CVE-2022-35016 | Med | 0.36 | 5.5 | 0.00 | Aug 29, 2022 | Advancecomp v2.3 was discovered to contain a heap buffer overflow. | ||
| CVE-2022-35015 | Med | 0.36 | 5.5 | 0.00 | Aug 29, 2022 | Advancecomp v2.3 was discovered to contain a heap buffer overflow via le_uint32_read at /lib/endianrw.h. | ||
| CVE-2021-23172 | Med | 0.36 | 5.5 | 0.00 | Aug 25, 2022 | A vulnerability was found in SoX, where a heap-buffer-overflow occurs in function startread() in hcom.c file. The vulnerability is exploitable with a crafted hcomn file, that could cause an application to crash. | ||
| CVE-2021-23159 | Med | 0.36 | 5.5 | 0.00 | Aug 25, 2022 | A vulnerability was found in SoX, where a heap-buffer-overflow occurs in function lsx_read_w_buf() in formats_i.c file. The vulnerability is exploitable with a crafted file, that could cause an application to crash. | ||
| CVE-2022-37292 | Med | 0.36 | 5.5 | 0.00 | Aug 25, 2022 | Tenda AX12 V22.03.01.21_CN is vulnerable to Buffer Overflow. This overflow is triggered in the sub_42FDE4 function, which satisfies the request of the upper-level interface function sub_430124, that is, handles the post request under /goform/SetIpMacBind. |
- risk 0.36cvss 5.5epss 0.00
SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via __asan_memcpy at /asan/asan_interceptors_memintrinsics.cpp:.
- risk 0.36cvss 5.5epss 0.00
SWFTools commit 772e55a2 was discovered to contain a heap buffer-overflow via getGifDelayTime at /home/bupt/Desktop/swftools/src/src/gif2swf.c.
- risk 0.36cvss 5.5epss 0.00
SWFTools commit 772e55a2 was discovered to contain a segmentation violation via MovieAddFrame at /src/gif2swf.c.
- risk 0.36cvss 5.5epss 0.00
SWFTools commit 772e55a2 was discovered to contain a segmentation violation via /multiarch/memmove-vec-unaligned-erms.S.
- risk 0.36cvss 5.5epss 0.00
Certain The MPlayer Project products are vulnerable to Buffer Overflow via read_avi_header() of libmpdemux/aviheader.c . This affects mplayer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1.
- risk 0.36cvss 5.5epss 0.00
Certain The MPlayer Project products are vulnerable to Buffer Overflow via the function mp_unescape03() of libmpdemux/mpeg_hdr.c. This affects mencoder SVN-r38374-13.0.1 and mplayer SVN-r38374-13.0.1.
- risk 0.36cvss 5.5epss 0.00
Certain The MPlayer Project products are vulnerable to Buffer Overflow via function mp_getbits() of libmpdemux/mpeg_hdr.c which affects mencoder and mplayer. This affects mecoder SVN-r38374-13.0.1 and mplayer SVN-r38374-13.0.1.
- risk 0.36cvss 5.5epss 0.00
The MPlayer Project mplayer SVN-r38374-13.0.1 is vulnerable to memory corruption via function free_mp_image() of libmpcodecs/mp_image.c.
- risk 0.36cvss 5.5epss 0.00
Certain The MPlayer Project products are vulnerable to Buffer Overflow via function mov_build_index() of libmpdemux/demux_mov.c. This affects mplayer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1.
- risk 0.36cvss 5.5epss 0.00
Certain The MPlayer Project products are vulnerable to Buffer Overflow via function mov_build_index() of libmpdemux/demux_mov.c. This affects mplayer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1.
- risk 0.36cvss 5.5epss 0.00
Certain The MPlayer Project products are vulnerable to Buffer Overflow via function gen_sh_video () of mplayer/libmpdemux/demux_mov.c. This affects mplayer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1.
- risk 0.36cvss 5.5epss 0.00
Certain The MPlayer Project products are vulnerable to Buffer Overflow via function asf_init_audio_stream() of libmpdemux/asfheader.c. This affects mplayer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1.
- risk 0.36cvss 5.5epss 0.00
In man2html 1.6g, a specific string being read in from a file will overwrite the size parameter in the top chunk of the heap. This at least causes the program to segmentation abort if the heap size parameter isn't aligned correctly. In version before GLIBC version 2.29 and…
- risk 0.36cvss 5.5epss 0.00
Advancecomp v2.3 was discovered to contain a heap buffer overflow via the component __interceptor_memcpy at /sanitizer_common/sanitizer_common_interceptors.inc.
- risk 0.36cvss 5.5epss 0.00
Advancecomp v2.3 was discovered to contain a heap buffer overflow.
- risk 0.36cvss 5.5epss 0.00
Advancecomp v2.3 was discovered to contain a heap buffer overflow.
- risk 0.36cvss 5.5epss 0.00
Advancecomp v2.3 was discovered to contain a heap buffer overflow via le_uint32_read at /lib/endianrw.h.
- risk 0.36cvss 5.5epss 0.00
A vulnerability was found in SoX, where a heap-buffer-overflow occurs in function startread() in hcom.c file. The vulnerability is exploitable with a crafted hcomn file, that could cause an application to crash.
- risk 0.36cvss 5.5epss 0.00
A vulnerability was found in SoX, where a heap-buffer-overflow occurs in function lsx_read_w_buf() in formats_i.c file. The vulnerability is exploitable with a crafted file, that could cause an application to crash.
- risk 0.36cvss 5.5epss 0.00
Tenda AX12 V22.03.01.21_CN is vulnerable to Buffer Overflow. This overflow is triggered in the sub_42FDE4 function, which satisfies the request of the upper-level interface function sub_430124, that is, handles the post request under /goform/SetIpMacBind.