CWE-787
Out-of-bounds Write
Description
The product writes data past the end, or before the beginning, of the intended buffer.
Hierarchy (View 1000)
CVEs mapped to this weakness (14,531)
page 669 of 727| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2023-30696 | Med | 0.29 | 4.4 | 0.00 | Aug 10, 2023 | An improper input validation in IpcTxGetVerifyAkey in libsec-ril prior to SMR Aug-2023 Release 1 allows attacker to cause out-of-bounds write. | ||
| CVE-2023-30681 | Med | 0.29 | 4.4 | 0.00 | Aug 10, 2023 | An improper input validation vulnerability within initialize function in HAL VaultKeeper prior to SMR Aug-2023 Release 1 allows attacker to cause out-of-bounds write. | ||
| CVE-2023-20812 | Med | 0.29 | 4.4 | 0.00 | Aug 7, 2023 | In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07944987; Issue ID: ALPS07944987. | ||
| CVE-2023-20796 | Med | 0.29 | 4.4 | 0.00 | Aug 7, 2023 | In power, there is a possible memory corruption due to an incorrect bounds check. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07929790; Issue ID: ALPS07929790. | ||
| CVE-2023-20793 | Med | 0.29 | 4.4 | 0.00 | Aug 7, 2023 | In apu, there is a possible memory corruption due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07767818; Issue ID: ALPS07767818. | ||
| CVE-2023-20790 | Med | 0.29 | 4.4 | 0.00 | Aug 7, 2023 | In nvram, there is a possible out of bounds write due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07740194; Issue ID: ALPS07740194. | ||
| CVE-2023-20781 | Med | 0.29 | 4.4 | 0.00 | Aug 7, 2023 | In keyinstall, there is a possible memory corruption due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08017756; Issue ID: ALPS07905323. | ||
| CVE-2023-33905 | Med | 0.29 | 4.4 | 0.00 | Jul 12, 2023 | In iwnpi server, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. | ||
| CVE-2023-33897 | Med | 0.29 | 4.4 | 0.00 | Jul 12, 2023 | In libimpl-ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. | ||
| CVE-2023-33896 | Med | 0.29 | 4.4 | 0.00 | Jul 12, 2023 | In libimpl-ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. | ||
| CVE-2023-20759 | Med | 0.29 | 4.4 | 0.00 | Jul 4, 2023 | In cmdq, there is a possible memory corruption due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07636133; Issue ID: ALPS07634601. | ||
| CVE-2023-20758 | Med | 0.29 | 4.4 | 0.00 | Jul 4, 2023 | In cmdq, there is a possible memory corruption due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07636133; Issue ID: ALPS07636130. | ||
| CVE-2022-48439 | Med | 0.29 | 4.4 | 0.00 | Jun 6, 2023 | In cp_dump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. | ||
| CVE-2022-48438 | Med | 0.29 | 4.4 | 0.00 | Jun 6, 2023 | In cp_dump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. | ||
| CVE-2022-48389 | Med | 0.29 | 4.4 | 0.00 | May 9, 2023 | In modem control device, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. | ||
| CVE-2022-48387 | Med | 0.29 | 4.4 | 0.00 | May 9, 2023 | the apipe driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. | ||
| CVE-2022-48385 | Med | 0.29 | 4.4 | 0.00 | May 9, 2023 | In cp_dump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. | ||
| CVE-2022-48382 | Med | 0.29 | 4.4 | 0.00 | May 9, 2023 | In log service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. | ||
| CVE-2022-48381 | Med | 0.29 | 4.4 | 0.00 | May 9, 2023 | In modem control device, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. | ||
| CVE-2022-48380 | Med | 0.29 | 4.4 | 0.00 | May 9, 2023 | In modem control device, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. |
- risk 0.29cvss 4.4epss 0.00
An improper input validation in IpcTxGetVerifyAkey in libsec-ril prior to SMR Aug-2023 Release 1 allows attacker to cause out-of-bounds write.
- risk 0.29cvss 4.4epss 0.00
An improper input validation vulnerability within initialize function in HAL VaultKeeper prior to SMR Aug-2023 Release 1 allows attacker to cause out-of-bounds write.
- risk 0.29cvss 4.4epss 0.00
In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07944987; Issue ID: ALPS07944987.
- risk 0.29cvss 4.4epss 0.00
In power, there is a possible memory corruption due to an incorrect bounds check. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07929790; Issue ID: ALPS07929790.
- risk 0.29cvss 4.4epss 0.00
In apu, there is a possible memory corruption due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07767818; Issue ID: ALPS07767818.
- risk 0.29cvss 4.4epss 0.00
In nvram, there is a possible out of bounds write due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07740194; Issue ID: ALPS07740194.
- risk 0.29cvss 4.4epss 0.00
In keyinstall, there is a possible memory corruption due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08017756; Issue ID: ALPS07905323.
- risk 0.29cvss 4.4epss 0.00
In iwnpi server, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
- risk 0.29cvss 4.4epss 0.00
In libimpl-ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
- risk 0.29cvss 4.4epss 0.00
In libimpl-ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
- risk 0.29cvss 4.4epss 0.00
In cmdq, there is a possible memory corruption due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07636133; Issue ID: ALPS07634601.
- risk 0.29cvss 4.4epss 0.00
In cmdq, there is a possible memory corruption due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07636133; Issue ID: ALPS07636130.
- risk 0.29cvss 4.4epss 0.00
In cp_dump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
- risk 0.29cvss 4.4epss 0.00
In cp_dump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
- risk 0.29cvss 4.4epss 0.00
In modem control device, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
- risk 0.29cvss 4.4epss 0.00
the apipe driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
- risk 0.29cvss 4.4epss 0.00
In cp_dump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
- risk 0.29cvss 4.4epss 0.00
In log service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
- risk 0.29cvss 4.4epss 0.00
In modem control device, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
- risk 0.29cvss 4.4epss 0.00
In modem control device, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.