VYPR

CWE-787

Out-of-bounds Write

BaseDraftLikelihood: High

Description

The product writes data past the end, or before the beginning, of the intended buffer.

Hierarchy (View 1000)

CVEs mapped to this weakness (14,531)

page 711 of 727
  • CVE-2022-0676HigFeb 22, 2022
    risk 0.00cvss 7.8epss 0.01

    Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.4.

  • CVE-2022-0629HigFeb 17, 2022
    risk 0.00cvss 7.8epss 0.02

    Stack-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

  • CVE-2021-45005CriFeb 14, 2022
    risk 0.00cvss 9.8epss 0.01

    Artifex MuJS v1.1.3 was discovered to contain a heap buffer overflow which is caused by conflicting JumpList of nested try/finally statements.

  • CVE-2022-0518HigFeb 8, 2022
    risk 0.00cvss 7.1epss 0.01

    Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.2.

  • CVE-2020-26208MedFeb 2, 2022
    risk 0.00cvss 5.3epss 0.01

    JHEAD is a simple command line tool for displaying and some manipulation of EXIF header data embedded in Jpeg images from digital cameras. In affected versions there is a heap-buffer-overflow on jhead-3.04/jpgfile.c:285 ReadJpegSections. Crafted jpeg images can be provided to…

  • CVE-2022-24197MedFeb 1, 2022
    risk 0.00cvss 6.5epss 0.01

    iText v7.1.17 was discovered to contain a stack-based buffer overflow via the component ByteBuffer.append, which allows attackers to cause a Denial of Service (DoS) via a crafted PDF file.

  • CVE-2022-0417HigFeb 1, 2022
    risk 0.00cvss 7.8epss 0.02

    Heap-based Buffer Overflow GitHub repository vim/vim prior to 8.2.

  • CVE-2022-0408HigJan 30, 2022
    risk 0.00cvss 7.8epss 0.02

    Stack-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

  • CVE-2022-0407HigJan 30, 2022
    risk 0.00cvss 7.8epss 0.01

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

  • CVE-2022-0392HigJan 28, 2022
    risk 0.00cvss 7.8epss 0.02

    Heap-based Buffer Overflow in GitHub repository vim prior to 8.2.

  • CVE-2022-0361HigJan 26, 2022
    risk 0.00cvss 7.8epss 0.02

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

  • CVE-2022-0359HigJan 26, 2022
    risk 0.00cvss 7.8epss 0.01

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

  • CVE-2022-0318CriJan 21, 2022
    risk 0.00cvss 9.8epss 0.02

    Heap-based Buffer Overflow in vim/vim prior to 8.2.

  • CVE-2022-0261HigJan 18, 2022
    risk 0.00cvss 7.8epss 0.02

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

  • CVE-2022-0213MedJan 14, 2022
    risk 0.00cvss 6.6epss 0.01

    vim is vulnerable to Heap-based Buffer Overflow

  • CVE-2022-0158LowJan 10, 2022
    risk 0.00cvss 3.3epss 0.02

    vim is vulnerable to Heap-based Buffer Overflow

  • CVE-2021-45943MedJan 1, 2022
    risk 0.00cvss 5.5epss 0.01

    GDAL 3.3.0 through 3.4.0 has a heap-based buffer overflow in PCIDSK::CPCIDSKFile::ReadFromFile (called from PCIDSK::CPCIDSKSegment::ReadFromFile and PCIDSK::CPCIDSKBinarySegment::CPCIDSKBinarySegment).

  • CVE-2021-45942MedJan 1, 2022
    risk 0.00cvss 5.5epss 0.02

    OpenEXR 3.1.x before 3.1.4 has a heap-based buffer overflow in Imf_3_1::LineCompositeTask::execute (called from IlmThread_3_1::NullThreadPoolProvider::addTask and IlmThread_3_1::ThreadPool::addGlobalTask). NOTE: db217f2 may be inapplicable.

  • CVE-2021-45939MedJan 1, 2022
    risk 0.00cvss 5.5epss 0.01

    wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClient_DecodePacket (called from MqttClient_WaitType and MqttClient_Subscribe).

  • CVE-2021-45938MedJan 1, 2022
    risk 0.00cvss 5.5epss 0.01

    wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClient_DecodePacket (called from MqttClient_WaitType and MqttClient_Unsubscribe).