VYPR

CWE-787

Out-of-bounds Write

BaseDraftLikelihood: High

Description

The product writes data past the end, or before the beginning, of the intended buffer.

Hierarchy (View 1000)

Parents

CVEs mapped to this weakness (14,531)

page 70 of 727
  • CVE-2022-30917CriJun 8, 2022
    risk 0.64cvss 9.8epss 0.02

    H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the AddWlanMacList parameter at /goform/aspForm.

  • CVE-2022-30916CriJun 8, 2022
    risk 0.64cvss 9.8epss 0.02

    H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the Asp_SetTelnetDebug parameter at /goform/aspForm.

  • CVE-2022-30915CriJun 8, 2022
    risk 0.64cvss 9.8epss 0.02

    H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the UpdateSnat parameter at /goform/aspForm.

  • CVE-2022-30914CriJun 8, 2022
    risk 0.64cvss 9.8epss 0.02

    H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the UpdateMacClone parameter at /goform/aspForm.

  • CVE-2022-30913CriJun 8, 2022
    risk 0.64cvss 9.8epss 0.02

    H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the ipqos_set_bandwidth parameter at /goform/aspForm.

  • CVE-2022-30912CriJun 8, 2022
    risk 0.64cvss 9.8epss 0.02

    H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the UpdateWanParams parameter at /goform/aspForm.

  • CVE-2022-30910CriJun 8, 2022
    risk 0.64cvss 9.8epss 0.02

    H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the GO parameter at /goform/aspForm.

  • CVE-2022-30909CriJun 8, 2022
    risk 0.64cvss 9.8epss 0.02

    H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the CMD parameter at /goform/aspForm.

  • CVE-2022-26723CriMay 26, 2022
    Apple Inc.
    macOS
    risk 0.64cvss 9.8epss 0.01

    A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.4, macOS Big Sur 11.6.6. Mounting a maliciously crafted Samba network share may lead to arbitrary code execution.

  • CVE-2022-22675HigKEVMay 26, 2022
    Apple Inc.
    macOS
    risk 0.64cvss 7.8epss 0.12

    An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey 12.3.1, iOS 15.4.1 and iPadOS 15.4.1. An application may be able to execute arbitrary code with kernel privileges. Apple…

  • CVE-2022-30477CriMay 26, 2022
    Tenda
    AC18
    risk 0.64cvss 9.8epss 0.01

    Tenda AC Series Router AC18_V15.03.05.19(6318) was discovered to contain a stack-based buffer overflow in the httpd module when handling /goform/SetClientState request.

  • CVE-2022-30476CriMay 26, 2022
    Tenda
    AC18
    risk 0.64cvss 9.8epss 0.01

    Tenda AC Series Router AC18_V15.03.05.19(6318) was discovered to contain a stack-based buffer overflow in the httpd module when handling /goform/SetFirewallCfg request.

  • CVE-2022-30474CriMay 26, 2022
    Tenda
    AC18
    risk 0.64cvss 9.8epss 0.01

    Tenda AC Series Router AC18_V15.03.05.19(6318) was discovered to contain a heap overflow in the httpd module when handling /goform/saveParentControlInfo request.

  • CVE-2022-30472CriMay 26, 2022
    Tenda
    AC18
    risk 0.64cvss 9.8epss 0.01

    Tenda AC Seris Router AC18_V15.03.05.19(6318) has a stack-based buffer overflow vulnerability in function fromAddressNat

  • CVE-2022-29399CriMay 10, 2022
    Totolink
    N600R
    risk 0.64cvss 9.8epss 0.02

    TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the url parameter in the function FUN_00415bf0.

  • CVE-2022-29398CriMay 10, 2022
    Totolink
    N600R
    risk 0.64cvss 9.8epss 0.02

    TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the File parameter in the function FUN_0041309c.

  • CVE-2022-29397CriMay 10, 2022
    Totolink
    N600R
    risk 0.64cvss 9.8epss 0.02

    TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the comment parameter in the function FUN_004196c8.

  • CVE-2022-29396CriMay 10, 2022
    Totolink
    N600R
    risk 0.64cvss 9.8epss 0.02

    TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the comment parameter in the function FUN_00418f10.

  • CVE-2022-29395CriMay 10, 2022
    Totolink
    N600R
    risk 0.64cvss 9.8epss 0.02

    TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the apcliKey parameter in the function FUN_0041bac4.

  • CVE-2022-29394CriMay 10, 2022
    Totolink
    N600R
    risk 0.64cvss 9.8epss 0.02

    TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the macAddress parameter in the function FUN_0041b448.