VYPR

CWE-787

Out-of-bounds Write

BaseDraftLikelihood: High

Description

The product writes data past the end, or before the beginning, of the intended buffer.

Hierarchy (View 1000)

CVEs mapped to this weakness (14,908)

page 739 of 746
  • CVE-2022-2125HigJun 19, 2022
    risk 0.00cvss 7.8epss 0.02

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

  • CVE-2021-46822MedJun 18, 2022
    risk 0.00cvss 5.5epss 0.01

    The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a grayscale buffer and loading a 16-bit binary PGM file into an RGB buffer. This is related to a heap-based buffer overflow in the get_word_rgb_row function in…

  • CVE-2022-2061LowJun 13, 2022
    risk 0.00cvss 3.3epss 0.00

    Heap-based Buffer Overflow in GitHub repository hpjansson/chafa prior to 1.12.0.

  • CVE-2022-31031CriJun 9, 2022
    risk 0.00cvss 9.8epss 0.02

    PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In versions prior to and including 2.12.1 a stack buffer overflow vulnerability affects PJSIP users that use…

  • CVE-2022-2000HigJun 9, 2022
    risk 0.00cvss 7.8epss 0.02

    Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.

  • CVE-2022-31783MedJun 2, 2022
    risk 0.00cvss 5.5epss 0.01

    Liblouis 3.21.0 has an out-of-bounds write in compileRule in compileTranslationTable.c, as demonstrated by lou_trace.

  • CVE-2022-1943HigJun 2, 2022
    risk 0.00cvss 7.8epss 0.00

    A flaw out of bounds memory write in the Linux kernel UDF file system functionality was found in the way user triggers some file operation which triggers udf_write_fi(). A local user could use this flaw to crash the system or potentially

  • CVE-2022-31003CriMay 31, 2022
    risk 0.00cvss 9.1epss 0.04

    Sofia-SIP is an open-source Session Initiation Protocol (SIP) User-Agent library. Prior to version 1.13.8, when parsing each line of a sdp message, `rest = record + 2` will access the memory behind `\0` and cause an out-of-bounds write. An attacker can send a message with evil…

  • CVE-2022-1942HigMay 31, 2022
    risk 0.00cvss 7.8epss 0.02

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

  • CVE-2022-1897HigMay 27, 2022
    risk 0.00cvss 7.8epss 0.02

    Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.

  • CVE-2022-1886HigMay 26, 2022
    risk 0.00cvss 7.8epss 0.01

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

  • CVE-2022-29379CriMay 25, 2022
    risk 0.00cvss 9.8epss 0.02

    Nginx NJS v0.7.3 was discovered to contain a stack overflow in the function njs_default_module_loader at /src/njs/src/njs_module.c. NOTE: multiple third parties dispute this report, e.g., the behavior is only found in unreleased development code that was not part of the 0.7.2,…

  • CVE-2022-1785HigMay 19, 2022
    risk 0.00cvss 7.8epss 0.00

    Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.4977.

  • CVE-2022-1733HigMay 17, 2022
    risk 0.00cvss 7.8epss 0.01

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.4968.

  • CVE-2022-1621HigMay 10, 2022
    risk 0.00cvss 7.8epss 0.02

    Heap buffer overflow in vim_strncpy find_word in GitHub repository vim/vim prior to 8.2.4919. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution

  • CVE-2022-1619HigMay 8, 2022
    risk 0.00cvss 7.8epss 0.03

    Heap-based Buffer Overflow in function cmdline_erase_chars in GitHub repository vim/vim prior to 8.2.4899. This vulnerabilities are capable of crashing software, modify memory, and possible remote execution

  • CVE-2022-30292CriMay 4, 2022
    risk 0.00cvss 10.0epss 0.04

    Heap-based buffer overflow in sqbaselib.cpp in SQUIRREL 3.2 due to lack of a certain sq_reservestack call.

  • CVE-2022-27470HigMay 4, 2022
    risk 0.00cvss 7.8epss 0.01

    SDL_ttf v2.0.18 and below was discovered to contain an arbitrary memory write via the function TTF_RenderText_Solid(). This vulnerability is triggered via a crafted TTF file.

  • CVE-2022-27239HigApr 27, 2022
    risk 0.00cvss 7.8epss 0.01

    In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges.

  • CVE-2022-28085HigApr 27, 2022
    risk 0.00cvss 7.8epss 0.01

    A flaw was found in htmldoc commit 31f7804. A heap buffer overflow in the function pdf_write_names in ps-pdf.cxx may lead to arbitrary code execution and Denial of Service (DoS).