CWE-787
Out-of-bounds Write
Description
The product writes data past the end, or before the beginning, of the intended buffer.
Hierarchy (View 1000)
CVEs mapped to this weakness (15,178)
page 675 of 759| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2020-18781 | Med | 0.36 | 5.5 | 0.00 | Aug 22, 2023 | Heap buffer overflow vulnerability in FilePOSIX::read in File.cpp in audiofile 0.3.6 may cause denial-of-service via a crafted wav file, this bug can be triggered by the executable sfconvert. | ||
| CVE-2020-18768 | Med | 0.36 | 5.5 | 0.00 | Aug 22, 2023 | There exists one heap buffer overflow in _TIFFmemcpy in tif_unix.c in libtiff 4.0.10, which allows an attacker to cause a denial-of-service through a crafted tiff file. | ||
| CVE-2023-39741 | Med | 0.36 | 5.5 | 0.00 | Aug 17, 2023 | lrzip v0.651 was discovered to contain a heap overflow via the libzpaq::PostProcessor::write(int) function at /libzpaq/libzpaq.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted file. | ||
| CVE-2023-38857 | Med | 0.36 | 5.5 | 0.01 | Aug 15, 2023 | Buffer Overflow vulnerability infaad2 v.2.10.1 allows a remote attacker to execute arbitrary code and cause a denial of service via the stcoin function in mp4read.c. | ||
| CVE-2023-40305 | Med | 0.36 | 5.5 | 0.00 | Aug 14, 2023 | GNU indent 2.2.13 has a heap-based buffer overflow in search_brace in indent.c via a crafted file. | ||
| CVE-2023-39130 | Med | 0.36 | 5.5 | 0.00 | Jul 25, 2023 | GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap buffer overflow via the function pe_as16() at /gdb/coff-pe-read.c. | ||
| CVE-2023-39128 | Med | 0.36 | 5.5 | 0.00 | Jul 25, 2023 | GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a stack overflow via the function ada_decode at /gdb/ada-lang.c. | ||
| CVE-2023-37139 | Med | 0.36 | 5.5 | 0.01 | Jul 18, 2023 | ChakraCore branch master cbb9b was discovered to contain a stack overflow vulnerability via the function Js::ScopeSlots::IsDebuggerScopeSlotArray(). | ||
| CVE-2020-23910 | Med | 0.36 | 5.5 | 0.00 | Jul 18, 2023 | Stack-based buffer overflow vulnerability in asn1c through v0.9.28 via function genhash_get in genhash.c. | ||
| CVE-2023-37770 | Med | 0.36 | 5.5 | 0.00 | Jul 17, 2023 | faust commit ee39a19 was discovered to contain a stack overflow via the component boxppShared::print() at /boxes/ppbox.cpp. | ||
| CVE-2023-37767 | Med | 0.36 | 5.5 | 0.00 | Jul 11, 2023 | GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the BM_ParseIndexValueReplace function at /lib/libgpac.so. | ||
| CVE-2023-37766 | Med | 0.36 | 5.5 | 0.00 | Jul 11, 2023 | GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the gf_isom_remove_user_data function at /lib/libgpac.so. | ||
| CVE-2023-37765 | Med | 0.36 | 5.5 | 0.00 | Jul 11, 2023 | GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the gf_dump_vrml_sffield function at /lib/libgpac.so. | ||
| CVE-2023-37174 | Med | 0.36 | 5.5 | 0.00 | Jul 11, 2023 | GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the dump_isom_scene function at /mp4box/filedump.c. | ||
| CVE-2023-32395 | Med | 0.36 | 5.5 | 0.00 | Jun 23, 2023 | A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey 12.6.6, macOS Ventura 13.4. An app may be able to modify protected parts of the file system. | ||
| CVE-2023-26965 | Med | 0.36 | 5.5 | 0.00 | Jun 14, 2023 | loadImage() in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based use after free via a crafted TIFF image. | ||
| CVE-2023-34824 | Med | 0.36 | 5.5 | 0.00 | Jun 14, 2023 | fdkaac before 1.0.5 was discovered to contain a heap buffer overflow in caf_info function in caf_reader.c. | ||
| CVE-2023-34823 | Med | 0.36 | 5.5 | 0.00 | Jun 14, 2023 | fdkaac before 1.0.5 was discovered to contain a stack overflow in read_callback function in src/main.c. | ||
| CVE-2023-2157 | Med | 0.36 | 5.5 | 0.01 | Jun 6, 2023 | A heap-based buffer overflow vulnerability was found in the ImageMagick package that can lead to the application crashing. | ||
| CVE-2023-33613 | Med | 0.36 | 5.5 | 0.00 | Jun 6, 2023 | axTLS v2.1.5 was discovered to contain a heap buffer overflow in the bi_import function in axtls-code/crypto/bigint.c. This vulnerability allows attackers to cause a Denial of Service (DoS) when parsing a private key. |
- risk 0.36cvss 5.5epss 0.00
Heap buffer overflow vulnerability in FilePOSIX::read in File.cpp in audiofile 0.3.6 may cause denial-of-service via a crafted wav file, this bug can be triggered by the executable sfconvert.
- risk 0.36cvss 5.5epss 0.00
There exists one heap buffer overflow in _TIFFmemcpy in tif_unix.c in libtiff 4.0.10, which allows an attacker to cause a denial-of-service through a crafted tiff file.
- risk 0.36cvss 5.5epss 0.00
lrzip v0.651 was discovered to contain a heap overflow via the libzpaq::PostProcessor::write(int) function at /libzpaq/libzpaq.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted file.
- risk 0.36cvss 5.5epss 0.01
Buffer Overflow vulnerability infaad2 v.2.10.1 allows a remote attacker to execute arbitrary code and cause a denial of service via the stcoin function in mp4read.c.
- risk 0.36cvss 5.5epss 0.00
GNU indent 2.2.13 has a heap-based buffer overflow in search_brace in indent.c via a crafted file.
- risk 0.36cvss 5.5epss 0.00
GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap buffer overflow via the function pe_as16() at /gdb/coff-pe-read.c.
- risk 0.36cvss 5.5epss 0.00
GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a stack overflow via the function ada_decode at /gdb/ada-lang.c.
- risk 0.36cvss 5.5epss 0.01
ChakraCore branch master cbb9b was discovered to contain a stack overflow vulnerability via the function Js::ScopeSlots::IsDebuggerScopeSlotArray().
- risk 0.36cvss 5.5epss 0.00
Stack-based buffer overflow vulnerability in asn1c through v0.9.28 via function genhash_get in genhash.c.
- risk 0.36cvss 5.5epss 0.00
faust commit ee39a19 was discovered to contain a stack overflow via the component boxppShared::print() at /boxes/ppbox.cpp.
- risk 0.36cvss 5.5epss 0.00
GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the BM_ParseIndexValueReplace function at /lib/libgpac.so.
- risk 0.36cvss 5.5epss 0.00
GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the gf_isom_remove_user_data function at /lib/libgpac.so.
- risk 0.36cvss 5.5epss 0.00
GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the gf_dump_vrml_sffield function at /lib/libgpac.so.
- risk 0.36cvss 5.5epss 0.00
GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the dump_isom_scene function at /mp4box/filedump.c.
- risk 0.36cvss 5.5epss 0.00
A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey 12.6.6, macOS Ventura 13.4. An app may be able to modify protected parts of the file system.
- risk 0.36cvss 5.5epss 0.00
loadImage() in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based use after free via a crafted TIFF image.
- risk 0.36cvss 5.5epss 0.00
fdkaac before 1.0.5 was discovered to contain a heap buffer overflow in caf_info function in caf_reader.c.
- risk 0.36cvss 5.5epss 0.00
fdkaac before 1.0.5 was discovered to contain a stack overflow in read_callback function in src/main.c.
- risk 0.36cvss 5.5epss 0.01
A heap-based buffer overflow vulnerability was found in the ImageMagick package that can lead to the application crashing.
- risk 0.36cvss 5.5epss 0.00
axTLS v2.1.5 was discovered to contain a heap buffer overflow in the bi_import function in axtls-code/crypto/bigint.c. This vulnerability allows attackers to cause a Denial of Service (DoS) when parsing a private key.