CWE-787
Out-of-bounds Write
Description
The product writes data past the end, or before the beginning, of the intended buffer.
Hierarchy (View 1000)
CVEs mapped to this weakness (14,880)
page 730 of 744| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2021-43814 | Hig | 0.00 | 7.7 | 0.01 | Dec 13, 2021 | Rizin is a UNIX-like reverse engineering framework and command-line toolset. In versions up to and including 0.3.1 there is a heap-based out of bounds write in parse_die() when reversing an AMD64 ELF binary with DWARF debug info. When a malicious AMD64 ELF binary is opened by a… | ||
| CVE-2021-35346 | Cri | 0.00 | 9.8 | 0.02 | Dec 3, 2021 | tsMuxer v2.6.16 was discovered to contain a heap-based buffer overflow via the function HevcSpsUnit::short_term_ref_pic_set(int) in hevc.cpp. | ||
| CVE-2021-35344 | Cri | 0.00 | 9.8 | 0.02 | Dec 3, 2021 | tsMuxer v2.6.16 was discovered to contain a heap-based buffer overflow via the function BitStreamReader::getCurVal in bitStream.h. | ||
| CVE-2021-3984 | Hig | 0.00 | 7.8 | 0.01 | Dec 1, 2021 | vim is vulnerable to Heap-based Buffer Overflow | ||
| CVE-2021-3973 | Hig | 0.00 | 7.8 | 0.02 | Nov 19, 2021 | vim is vulnerable to Heap-based Buffer Overflow | ||
| CVE-2021-3968 | Hig | 0.00 | 8.0 | 0.02 | Nov 19, 2021 | vim is vulnerable to Heap-based Buffer Overflow | ||
| CVE-2021-43975 | Med | 0.00 | 6.7 | 0.01 | Nov 17, 2021 | In the Linux kernel through 5.15.2, hw_atl_utils_fw_rpc_wait in drivers/net/ethernet/aquantia/atlantic/hw_atl/hw_atl_utils.c allows an attacker (who can introduce a crafted device) to trigger an out-of-bounds write via a crafted length value. | ||
| CVE-2021-3927 | Hig | 0.00 | 7.8 | 0.02 | Nov 5, 2021 | vim is vulnerable to Heap-based Buffer Overflow | ||
| CVE-2021-22564 | Med | 0.00 | 4.5 | 0.00 | Nov 1, 2021 | For certain valid JPEG XL images with a size slightly larger than an integer number of groups (256x256 pixels) when processing the groups out of order the decoder can perform an out of bounds copy of image pixels from an image buffer in the heap to another. This copy can occur… | ||
| CVE-2021-3756 | Cri | 0.00 | 9.8 | 0.01 | Oct 29, 2021 | libmysofa is vulnerable to Heap-based Buffer Overflow | ||
| CVE-2021-3903 | Hig | 0.00 | 7.8 | 0.01 | Oct 27, 2021 | vim is vulnerable to Heap-based Buffer Overflow | ||
| CVE-2021-42327 | Med | 0.00 | 6.7 | 0.01 | Oct 21, 2021 | dp_link_settings_write in drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c in the Linux kernel through 5.14.14 allows a heap-based buffer overflow by an attacker who can write a string to the AMD GPU display drivers debug filesystem. There are no checks on size within… | ||
| CVE-2021-42739 | Med | 0.00 | 6.7 | 0.00 | Oct 20, 2021 | The firewire subsystem in the Linux kernel through 5.14.13 has a buffer overflow related to drivers/media/firewire/firedtv-avc.c and drivers/media/firewire/firedtv-ci.c, because avc_ca_pmt mishandles bounds checking. | ||
| CVE-2021-3872 | Hig | 0.00 | 7.8 | 0.01 | Oct 19, 2021 | vim is vulnerable to Heap-based Buffer Overflow | ||
| CVE-2021-3875 | Med | 0.00 | 5.5 | 0.02 | Oct 15, 2021 | vim is vulnerable to Heap-based Buffer Overflow | ||
| CVE-2021-42008 | Hig | 0.00 | 7.8 | 0.02 | Oct 5, 2021 | The decode_data function in drivers/net/hamradio/6pack.c in the Linux kernel before 5.13.13 has a slab out-of-bounds write. Input from a process that has the CAP_NET_ADMIN capability can lead to root access. | ||
| CVE-2021-36218 | Hig | 0.00 | 7.5 | 0.02 | Sep 27, 2021 | An issue was discovered in SKALE sgxwallet 1.58.3. sgx_disp_ippsAES_GCMEncrypt allows an out-of-bounds write, resulting in a segfault and compromised enclave. This issue describes a buffer overflow, which was resolved prior to v1.77.0 and not reproducible in latest sgxwallet… | ||
| CVE-2021-32272 | Hig | 0.00 | 7.8 | 0.01 | Sep 20, 2021 | An issue was discovered in faad2 before 2.10.0. A heap-buffer-overflow exists in the function stszin located in mp4read.c. It allows an attacker to cause Code Execution. | ||
| CVE-2021-32268 | Hig | 0.00 | 7.8 | 0.01 | Sep 20, 2021 | Buffer overflow vulnerability in function gf_fprintf in os_file.c in gpac before 1.0.1 allows attackers to execute arbitrary code. The fixed version is 1.0.1. | ||
| CVE-2021-3778 | Hig | 0.00 | 7.8 | 0.02 | Sep 15, 2021 | vim is vulnerable to Heap-based Buffer Overflow |
- risk 0.00cvss 7.7epss 0.01
Rizin is a UNIX-like reverse engineering framework and command-line toolset. In versions up to and including 0.3.1 there is a heap-based out of bounds write in parse_die() when reversing an AMD64 ELF binary with DWARF debug info. When a malicious AMD64 ELF binary is opened by a…
- risk 0.00cvss 9.8epss 0.02
tsMuxer v2.6.16 was discovered to contain a heap-based buffer overflow via the function HevcSpsUnit::short_term_ref_pic_set(int) in hevc.cpp.
- risk 0.00cvss 9.8epss 0.02
tsMuxer v2.6.16 was discovered to contain a heap-based buffer overflow via the function BitStreamReader::getCurVal in bitStream.h.
- risk 0.00cvss 7.8epss 0.01
vim is vulnerable to Heap-based Buffer Overflow
- risk 0.00cvss 7.8epss 0.02
vim is vulnerable to Heap-based Buffer Overflow
- risk 0.00cvss 8.0epss 0.02
vim is vulnerable to Heap-based Buffer Overflow
- risk 0.00cvss 6.7epss 0.01
In the Linux kernel through 5.15.2, hw_atl_utils_fw_rpc_wait in drivers/net/ethernet/aquantia/atlantic/hw_atl/hw_atl_utils.c allows an attacker (who can introduce a crafted device) to trigger an out-of-bounds write via a crafted length value.
- risk 0.00cvss 7.8epss 0.02
vim is vulnerable to Heap-based Buffer Overflow
- risk 0.00cvss 4.5epss 0.00
For certain valid JPEG XL images with a size slightly larger than an integer number of groups (256x256 pixels) when processing the groups out of order the decoder can perform an out of bounds copy of image pixels from an image buffer in the heap to another. This copy can occur…
- risk 0.00cvss 9.8epss 0.01
libmysofa is vulnerable to Heap-based Buffer Overflow
- risk 0.00cvss 7.8epss 0.01
vim is vulnerable to Heap-based Buffer Overflow
- risk 0.00cvss 6.7epss 0.01
dp_link_settings_write in drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c in the Linux kernel through 5.14.14 allows a heap-based buffer overflow by an attacker who can write a string to the AMD GPU display drivers debug filesystem. There are no checks on size within…
- risk 0.00cvss 6.7epss 0.00
The firewire subsystem in the Linux kernel through 5.14.13 has a buffer overflow related to drivers/media/firewire/firedtv-avc.c and drivers/media/firewire/firedtv-ci.c, because avc_ca_pmt mishandles bounds checking.
- risk 0.00cvss 7.8epss 0.01
vim is vulnerable to Heap-based Buffer Overflow
- risk 0.00cvss 5.5epss 0.02
vim is vulnerable to Heap-based Buffer Overflow
- risk 0.00cvss 7.8epss 0.02
The decode_data function in drivers/net/hamradio/6pack.c in the Linux kernel before 5.13.13 has a slab out-of-bounds write. Input from a process that has the CAP_NET_ADMIN capability can lead to root access.
- risk 0.00cvss 7.5epss 0.02
An issue was discovered in SKALE sgxwallet 1.58.3. sgx_disp_ippsAES_GCMEncrypt allows an out-of-bounds write, resulting in a segfault and compromised enclave. This issue describes a buffer overflow, which was resolved prior to v1.77.0 and not reproducible in latest sgxwallet…
- risk 0.00cvss 7.8epss 0.01
An issue was discovered in faad2 before 2.10.0. A heap-buffer-overflow exists in the function stszin located in mp4read.c. It allows an attacker to cause Code Execution.
- risk 0.00cvss 7.8epss 0.01
Buffer overflow vulnerability in function gf_fprintf in os_file.c in gpac before 1.0.1 allows attackers to execute arbitrary code. The fixed version is 1.0.1.
- risk 0.00cvss 7.8epss 0.02
vim is vulnerable to Heap-based Buffer Overflow