CWE-787
Out-of-bounds Write
Description
The product writes data past the end, or before the beginning, of the intended buffer.
Hierarchy (View 1000)
CVEs mapped to this weakness (14,908)
page 738 of 746| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2022-36054 | Med | 0.00 | 6.8 | 0.01 | Sep 1, 2022 | Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. The 6LoWPAN implementation in the Contiki-NG operating system (file os/net/ipv6/sicslowpan.c) contains an input function that processes incoming packets and copies them into a packet… | ||
| CVE-2022-3028 | Hig | 0.00 | 7.0 | 0.00 | Aug 31, 2022 | A race condition was found in the Linux kernel's IP framework for transforming packets (XFRM subsystem) when multiple calls to xfrm_probe_algs occurred simultaneously. This flaw could allow a local attacker to potentially trigger an out-of-bounds write or leak kernel heap memory… | ||
| CVE-2022-1354 | Med | 0.00 | 5.5 | 0.01 | Aug 31, 2022 | A heap buffer overflow flaw was found in Libtiffs' tiffinfo.c in TIFFReadRawDataStriped() function. This flaw allows an attacker to pass a crafted TIFF file to the tiffinfo tool, triggering a heap buffer overflow issue and causing a crash that leads to a denial of service. | ||
| CVE-2022-1115 | Med | 0.00 | 5.5 | 0.01 | Aug 29, 2022 | A heap-buffer-overflow flaw was found in ImageMagick’s PushShortPixel() function of quantum-private.h file. This vulnerability is triggered when an attacker passes a specially crafted TIFF image file to ImageMagick for conversion, potentially leading to a denial of service. | ||
| CVE-2022-0367 | Hig | 0.00 | 7.8 | 0.00 | Aug 29, 2022 | A heap-based buffer overflow flaw was found in libmodbus in function modbus_reply() in src/modbus.c. | ||
| CVE-2022-2991 | Med | 0.00 | 6.7 | 0.00 | Aug 25, 2022 | A heap-based buffer overflow was found in the Linux kernel's LightNVM subsystem. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. This vulnerability allows a local attacker to… | ||
| CVE-2022-37452 | Cri | 0.00 | 9.8 | 0.04 | Aug 7, 2022 | Exim before 4.95 has a heap-based buffer overflow for the alias list in host_name_lookup in host.c when sender_host_name is set. | ||
| CVE-2022-34927 | Hig | 0.00 | 7.8 | 0.00 | Aug 3, 2022 | MilkyTracker v1.03.00 was discovered to contain a stack overflow via the component LoaderXM::load. This vulnerability is triggered when the program is supplied a crafted XM module file. | ||
| CVE-2022-2598 | Med | 0.00 | 6.5 | 0.01 | Aug 1, 2022 | Out-of-bounds Write to API in GitHub repository vim/vim prior to 9.0.0100. | ||
| CVE-2022-36752 | Med | 0.00 | 5.5 | 0.00 | Jul 28, 2022 | png2webp v1.0.4 was discovered to contain an out-of-bounds write via the function w2p. This vulnerability is exploitable via a crafted png file. | ||
| CVE-2022-34035 | Hig | 0.00 | 7.5 | 0.02 | Jul 18, 2022 | HTMLDoc v1.9.12 and below was discovered to contain a heap overflow via e_node htmldoc/htmldoc/html.cxx:588. | ||
| CVE-2022-34033 | Hig | 0.00 | 7.5 | 0.02 | Jul 18, 2022 | HTMLDoc v1.9.15 was discovered to contain a heap overflow via (write_header) /htmldoc/htmldoc/html.cxx:273. | ||
| CVE-2022-32323 | Hig | 0.00 | 7.3 | 0.01 | Jul 14, 2022 | AutoTrace v0.40.0 was discovered to contain a heap overflow via the ReadImage function at input-bmp.c:660. | ||
| CVE-2022-2380 | Med | 0.00 | 5.5 | 0.00 | Jul 13, 2022 | The Linux kernel was found vulnerable out of bounds memory access in the drivers/video/fbdev/sm712fb.c:smtcfb_read() function. The vulnerability could result in local attackers being able to crash the kernel. | ||
| CVE-2022-2344 | Hig | 0.00 | 7.8 | 0.01 | Jul 8, 2022 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0045. | ||
| CVE-2022-2304 | Hig | 0.00 | 7.8 | 0.01 | Jul 5, 2022 | Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0. | ||
| CVE-2022-2288 | Hig | 0.00 | 7.8 | 0.01 | Jul 3, 2022 | Out-of-bounds Write in GitHub repository vim/vim prior to 9.0. | ||
| CVE-2022-33099 | Hig | 0.00 | 7.5 | 0.03 | Jul 1, 2022 | An issue in the component luaG_runerror of Lua v5.4.4 and below leads to a heap-buffer overflow when a recursive error occurs. | ||
| CVE-2022-2210 | Hig | 0.00 | 7.8 | 0.01 | Jun 27, 2022 | Out-of-bounds Write in GitHub repository vim/vim prior to 8.2. | ||
| CVE-2022-2129 | Hig | 0.00 | 7.8 | 0.01 | Jun 19, 2022 | Out-of-bounds Write in GitHub repository vim/vim prior to 8.2. |
- risk 0.00cvss 6.8epss 0.01
Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. The 6LoWPAN implementation in the Contiki-NG operating system (file os/net/ipv6/sicslowpan.c) contains an input function that processes incoming packets and copies them into a packet…
- risk 0.00cvss 7.0epss 0.00
A race condition was found in the Linux kernel's IP framework for transforming packets (XFRM subsystem) when multiple calls to xfrm_probe_algs occurred simultaneously. This flaw could allow a local attacker to potentially trigger an out-of-bounds write or leak kernel heap memory…
- risk 0.00cvss 5.5epss 0.01
A heap buffer overflow flaw was found in Libtiffs' tiffinfo.c in TIFFReadRawDataStriped() function. This flaw allows an attacker to pass a crafted TIFF file to the tiffinfo tool, triggering a heap buffer overflow issue and causing a crash that leads to a denial of service.
- risk 0.00cvss 5.5epss 0.01
A heap-buffer-overflow flaw was found in ImageMagick’s PushShortPixel() function of quantum-private.h file. This vulnerability is triggered when an attacker passes a specially crafted TIFF image file to ImageMagick for conversion, potentially leading to a denial of service.
- risk 0.00cvss 7.8epss 0.00
A heap-based buffer overflow flaw was found in libmodbus in function modbus_reply() in src/modbus.c.
- risk 0.00cvss 6.7epss 0.00
A heap-based buffer overflow was found in the Linux kernel's LightNVM subsystem. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. This vulnerability allows a local attacker to…
- risk 0.00cvss 9.8epss 0.04
Exim before 4.95 has a heap-based buffer overflow for the alias list in host_name_lookup in host.c when sender_host_name is set.
- risk 0.00cvss 7.8epss 0.00
MilkyTracker v1.03.00 was discovered to contain a stack overflow via the component LoaderXM::load. This vulnerability is triggered when the program is supplied a crafted XM module file.
- risk 0.00cvss 6.5epss 0.01
Out-of-bounds Write to API in GitHub repository vim/vim prior to 9.0.0100.
- risk 0.00cvss 5.5epss 0.00
png2webp v1.0.4 was discovered to contain an out-of-bounds write via the function w2p. This vulnerability is exploitable via a crafted png file.
- risk 0.00cvss 7.5epss 0.02
HTMLDoc v1.9.12 and below was discovered to contain a heap overflow via e_node htmldoc/htmldoc/html.cxx:588.
- risk 0.00cvss 7.5epss 0.02
HTMLDoc v1.9.15 was discovered to contain a heap overflow via (write_header) /htmldoc/htmldoc/html.cxx:273.
- risk 0.00cvss 7.3epss 0.01
AutoTrace v0.40.0 was discovered to contain a heap overflow via the ReadImage function at input-bmp.c:660.
- risk 0.00cvss 5.5epss 0.00
The Linux kernel was found vulnerable out of bounds memory access in the drivers/video/fbdev/sm712fb.c:smtcfb_read() function. The vulnerability could result in local attackers being able to crash the kernel.
- risk 0.00cvss 7.8epss 0.01
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0045.
- risk 0.00cvss 7.8epss 0.01
Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.
- risk 0.00cvss 7.8epss 0.01
Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.
- risk 0.00cvss 7.5epss 0.03
An issue in the component luaG_runerror of Lua v5.4.4 and below leads to a heap-buffer overflow when a recursive error occurs.
- risk 0.00cvss 7.8epss 0.01
Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.
- risk 0.00cvss 7.8epss 0.01
Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.