CWE-787
Out-of-bounds Write
Description
The product writes data past the end, or before the beginning, of the intended buffer.
Hierarchy (View 1000)
CVEs mapped to this weakness (14,531)
page 712 of 727| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2021-45937 | Med | 0.00 | 5.5 | 0.01 | Jan 1, 2022 | wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClient_DecodePacket (called from MqttClient_WaitType and MqttClient_Connect). | ||
| CVE-2021-45936 | Med | 0.00 | 5.5 | 0.01 | Jan 1, 2022 | wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttDecode_Disconnect (called from MqttClient_DecodePacket and MqttClient_WaitType). | ||
| CVE-2021-45934 | Med | 0.00 | 5.5 | 0.01 | Jan 1, 2022 | wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClient_DecodePacket (called from MqttClient_HandlePacket and MqttClient_WaitType). | ||
| CVE-2021-45933 | Med | 0.00 | 5.5 | 0.01 | Jan 1, 2022 | wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow (8 bytes) in MqttDecode_Publish (called from MqttClient_DecodePacket and MqttClient_HandlePacket). | ||
| CVE-2021-45932 | Med | 0.00 | 5.5 | 0.01 | Jan 1, 2022 | wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow (4 bytes) in MqttDecode_Publish (called from MqttClient_DecodePacket and MqttClient_HandlePacket). | ||
| CVE-2021-45931 | Med | 0.00 | 6.5 | 0.02 | Jan 1, 2022 | HarfBuzz 2.9.0 has an out-of-bounds write in hb_bit_set_invertible_t::set (called from hb_sparseset_t<hb_bit_set_invertible_t>::set and hb_set_copy). | ||
| CVE-2021-45930 | Med | 0.00 | 5.5 | 0.01 | Jan 1, 2022 | Qt SVG in Qt 5.0.0 through 5.15.2 and 6.0.0 through 6.2.1 has an out-of-bounds write in QtPrivate::QCommonArrayOps<QPainterPath::Element>::growAppend (called from QPainterPath::addPath and QPathClipper::intersect). | ||
| CVE-2021-45928 | Med | 0.00 | 5.5 | 0.00 | Jan 1, 2022 | libjxl b02d6b9, as used in libvips 8.11 through 8.11.2 and other products, has an out-of-bounds write in jxl::ModularFrameDecoder::DecodeGroup (called from jxl::FrameDecoder::ProcessACGroup and jxl::ThreadPool::RunCallState<jxl::FrameDecoder::ProcessSections). | ||
| CVE-2021-45927 | Hig | 0.00 | 7.8 | 0.00 | Jan 1, 2022 | MDB Tools (aka mdbtools) 0.9.2 has a stack-based buffer overflow (at 0x7ffd6e029ee0) in mdb_numeric_to_string (called from mdb_xfer_bound_data and _mdb_attempt_bind). | ||
| CVE-2021-45926 | Hig | 0.00 | 7.8 | 0.00 | Jan 1, 2022 | MDB Tools (aka mdbtools) 0.9.2 has a stack-based buffer overflow (at 0x7ffd0c689be0) in mdb_numeric_to_string (called from mdb_xfer_bound_data and _mdb_attempt_bind). | ||
| CVE-2021-45958 | Med | 0.00 | 5.5 | 0.02 | Jan 1, 2022 | UltraJSON (aka ujson) through 5.1.0 has a stack-based buffer overflow in Buffer_AppendIndentUnchecked (called from encode). Exploitation can, for example, use a large amount of indentation. | ||
| CVE-2021-4136 | Hig | 0.00 | 7.8 | 0.02 | Dec 19, 2021 | vim is vulnerable to Heap-based Buffer Overflow | ||
| CVE-2021-43814 | Hig | 0.00 | 7.7 | 0.01 | Dec 13, 2021 | Rizin is a UNIX-like reverse engineering framework and command-line toolset. In versions up to and including 0.3.1 there is a heap-based out of bounds write in parse_die() when reversing an AMD64 ELF binary with DWARF debug info. When a malicious AMD64 ELF binary is opened by a… | ||
| CVE-2021-35346 | Cri | 0.00 | 9.8 | 0.02 | Dec 3, 2021 | tsMuxer v2.6.16 was discovered to contain a heap-based buffer overflow via the function HevcSpsUnit::short_term_ref_pic_set(int) in hevc.cpp. | ||
| CVE-2021-35344 | Cri | 0.00 | 9.8 | 0.02 | Dec 3, 2021 | tsMuxer v2.6.16 was discovered to contain a heap-based buffer overflow via the function BitStreamReader::getCurVal in bitStream.h. | ||
| CVE-2021-3984 | Hig | 0.00 | 7.8 | 0.01 | Dec 1, 2021 | vim is vulnerable to Heap-based Buffer Overflow | ||
| CVE-2021-3973 | Hig | 0.00 | 7.8 | 0.02 | Nov 19, 2021 | vim is vulnerable to Heap-based Buffer Overflow | ||
| CVE-2021-3968 | Hig | 0.00 | 8.0 | 0.02 | Nov 19, 2021 | vim is vulnerable to Heap-based Buffer Overflow | ||
| CVE-2021-43975 | Med | 0.00 | 6.7 | 0.01 | Nov 17, 2021 | In the Linux kernel through 5.15.2, hw_atl_utils_fw_rpc_wait in drivers/net/ethernet/aquantia/atlantic/hw_atl/hw_atl_utils.c allows an attacker (who can introduce a crafted device) to trigger an out-of-bounds write via a crafted length value. | ||
| CVE-2021-3927 | Hig | 0.00 | 7.8 | 0.02 | Nov 5, 2021 | vim is vulnerable to Heap-based Buffer Overflow |
- risk 0.00cvss 5.5epss 0.01
wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClient_DecodePacket (called from MqttClient_WaitType and MqttClient_Connect).
- risk 0.00cvss 5.5epss 0.01
wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttDecode_Disconnect (called from MqttClient_DecodePacket and MqttClient_WaitType).
- risk 0.00cvss 5.5epss 0.01
wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClient_DecodePacket (called from MqttClient_HandlePacket and MqttClient_WaitType).
- risk 0.00cvss 5.5epss 0.01
wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow (8 bytes) in MqttDecode_Publish (called from MqttClient_DecodePacket and MqttClient_HandlePacket).
- risk 0.00cvss 5.5epss 0.01
wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow (4 bytes) in MqttDecode_Publish (called from MqttClient_DecodePacket and MqttClient_HandlePacket).
- risk 0.00cvss 6.5epss 0.02
HarfBuzz 2.9.0 has an out-of-bounds write in hb_bit_set_invertible_t::set (called from hb_sparseset_t<hb_bit_set_invertible_t>::set and hb_set_copy).
- risk 0.00cvss 5.5epss 0.01
Qt SVG in Qt 5.0.0 through 5.15.2 and 6.0.0 through 6.2.1 has an out-of-bounds write in QtPrivate::QCommonArrayOps<QPainterPath::Element>::growAppend (called from QPainterPath::addPath and QPathClipper::intersect).
- risk 0.00cvss 5.5epss 0.00
libjxl b02d6b9, as used in libvips 8.11 through 8.11.2 and other products, has an out-of-bounds write in jxl::ModularFrameDecoder::DecodeGroup (called from jxl::FrameDecoder::ProcessACGroup and jxl::ThreadPool::RunCallState<jxl::FrameDecoder::ProcessSections).
- risk 0.00cvss 7.8epss 0.00
MDB Tools (aka mdbtools) 0.9.2 has a stack-based buffer overflow (at 0x7ffd6e029ee0) in mdb_numeric_to_string (called from mdb_xfer_bound_data and _mdb_attempt_bind).
- risk 0.00cvss 7.8epss 0.00
MDB Tools (aka mdbtools) 0.9.2 has a stack-based buffer overflow (at 0x7ffd0c689be0) in mdb_numeric_to_string (called from mdb_xfer_bound_data and _mdb_attempt_bind).
- risk 0.00cvss 5.5epss 0.02
UltraJSON (aka ujson) through 5.1.0 has a stack-based buffer overflow in Buffer_AppendIndentUnchecked (called from encode). Exploitation can, for example, use a large amount of indentation.
- risk 0.00cvss 7.8epss 0.02
vim is vulnerable to Heap-based Buffer Overflow
- risk 0.00cvss 7.7epss 0.01
Rizin is a UNIX-like reverse engineering framework and command-line toolset. In versions up to and including 0.3.1 there is a heap-based out of bounds write in parse_die() when reversing an AMD64 ELF binary with DWARF debug info. When a malicious AMD64 ELF binary is opened by a…
- risk 0.00cvss 9.8epss 0.02
tsMuxer v2.6.16 was discovered to contain a heap-based buffer overflow via the function HevcSpsUnit::short_term_ref_pic_set(int) in hevc.cpp.
- risk 0.00cvss 9.8epss 0.02
tsMuxer v2.6.16 was discovered to contain a heap-based buffer overflow via the function BitStreamReader::getCurVal in bitStream.h.
- risk 0.00cvss 7.8epss 0.01
vim is vulnerable to Heap-based Buffer Overflow
- risk 0.00cvss 7.8epss 0.02
vim is vulnerable to Heap-based Buffer Overflow
- risk 0.00cvss 8.0epss 0.02
vim is vulnerable to Heap-based Buffer Overflow
- risk 0.00cvss 6.7epss 0.01
In the Linux kernel through 5.15.2, hw_atl_utils_fw_rpc_wait in drivers/net/ethernet/aquantia/atlantic/hw_atl/hw_atl_utils.c allows an attacker (who can introduce a crafted device) to trigger an out-of-bounds write via a crafted length value.
- risk 0.00cvss 7.8epss 0.02
vim is vulnerable to Heap-based Buffer Overflow