VYPR

CWE-787

Out-of-bounds Write

BaseDraftLikelihood: High

Description

The product writes data past the end, or before the beginning, of the intended buffer.

Hierarchy (View 1000)

CVEs mapped to this weakness (14,531)

page 667 of 727
  • CVE-2024-34676MedNov 6, 2024
    risk 0.29cvss 4.4epss 0.00

    Out-of-bounds write in parsing subtitle file in libsubextractor.so prior to SMR Nov-2024 Release 1 allows local attackers to cause memory corruption. User interaction is required for triggering this vulnerability.

  • CVE-2022-39068MedSep 18, 2024
    risk 0.29cvss 4.5epss 0.00

    There is a buffer overflow vulnerability in ZTE MF296R. Due to insufficient validation of the SMS parameter length, an authenticated attacker could use the vulnerability to perform a denial of service attack.

  • CVE-2024-27365MedSep 9, 2024
    risk 0.29cvss 4.4epss 0.00

    An issue was discovered in Samsung Mobile Processor Exynos Exynos 980, Exynos 850, Exynos 1080, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 1480, Exynos W920, Exynos W930. In the function slsi_rx_blockack_ind(), there is no input validation check on a length coming from…

  • CVE-2024-0110MedAug 31, 2024
    risk 0.29cvss 4.4epss 0.00

    NVIDIA CUDA Toolkit contains a vulnerability in command `cuobjdump` where a user may cause an out-of-bound write by passing in a malformed ELF file. A successful exploit of this vulnerability may lead to code execution or denial of service.

  • CVE-2024-40987MedJul 12, 2024
    risk 0.29cvss 5.5epss 0.00

    In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix UBSAN warning in kv_dpm.c Adds bounds check for sumo_vid_mapping_entry.

  • CVE-2024-40955MedJul 12, 2024
    risk 0.29cvss 5.5epss 0.00

    In the Linux kernel, the following vulnerability has been resolved: ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists() We can trigger a slab-out-of-bounds with the following commands: mkfs.ext4 -F /dev/$disk 10G mount /dev/$disk /tmp/test …

  • CVE-2024-39118MedJul 9, 2024
    risk 0.29cvss 5.5epss 0.00

    Mommy Heather Advanced Backups up to v3.5.3 allows attackers to write arbitrary files via restoring a crafted back up.

  • CVE-2024-27436MedMay 17, 2024
    risk 0.29cvss 5.5epss 0.01

    In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Stop parsing channels bits when all channels are found. If a usb audio device sets more bits than the amount of channels it could write outside of the map array.

  • CVE-2023-52350MedApr 8, 2024
    risk 0.29cvss 4.4epss 0.00

    In ril service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed

  • CVE-2023-52349MedApr 8, 2024
    risk 0.29cvss 4.4epss 0.00

    In ril service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed

  • CVE-2023-52348MedApr 8, 2024
    risk 0.29cvss 4.4epss 0.00

    In ril service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed

  • CVE-2024-25942MedMar 19, 2024
    risk 0.29cvss 4.4epss 0.00

    Dell PowerEdge Server BIOS contains an Improper SMM communication buffer verification vulnerability. A physical high privileged attacker could potentially exploit this vulnerability leading to arbitrary writes to SMRAM.

  • CVE-2024-20033MedMar 4, 2024
    risk 0.29cvss 4.4epss 0.00

    In nvram, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08499945; Issue ID: ALPS08499945.

  • CVE-2024-20020MedMar 4, 2024
    risk 0.29cvss 4.4epss 0.00

    In OPTEE, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08522504; Issue ID: ALPS08522504.

  • CVE-2023-5779MedFeb 18, 2024
    risk 0.29cvss 4.4epss 0.00

    can: out of bounds in remove_rx_filter function

  • CVE-2024-20016MedFeb 5, 2024
    risk 0.29cvss 4.4epss 0.00

    In ged, there is a possible out of bounds write due to an integer overflow. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation Patch ID: ALPS07835901; Issue ID: ALPS07835901.

  • CVE-2023-48359MedJan 18, 2024
    risk 0.29cvss 4.4epss 0.00

    In autotest driver, there is a possible out of bounds write due to improper input validation. This could lead to local denial of service with System execution privileges needed

  • CVE-2023-48358MedJan 18, 2024
    risk 0.29cvss 4.4epss 0.00

    In drm driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed

  • CVE-2023-48357MedJan 18, 2024
    risk 0.29cvss 4.4epss 0.00

    In vsp driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed

  • CVE-2023-48356MedJan 18, 2024
    risk 0.29cvss 4.4epss 0.00

    In jpg driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed