CWE-787
Out-of-bounds Write
Description
The product writes data past the end, or before the beginning, of the intended buffer.
Hierarchy (View 1000)
CVEs mapped to this weakness (15,178)
page 750 of 759| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2023-44398 | Hig | 0.00 | 8.8 | 0.01 | Nov 6, 2023 | Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds write was found in Exiv2 version v0.28.0. The vulnerable function, `BmffImage::brotliUncompress`, is new in v0.28.0, so earlier versions… | ||
| CVE-2023-46928 | Med | 0.00 | 5.5 | 0.00 | Nov 1, 2023 | GPAC 2.3-DEV-rev605-gfc9e29089-master contains a SEGV in gpac/MP4Box in gf_media_change_pl /afltest/gpac/src/media_tools/isom_tools.c:3293:42. | ||
| CVE-2023-46927 | Med | 0.00 | 5.5 | 0.00 | Nov 1, 2023 | GPAC 2.3-DEV-rev605-gfc9e29089-master contains a heap-buffer-overflow in gf_isom_use_compact_size gpac/src/isomedia/isom_write.c:3403:3 in gpac/MP4Box. | ||
| CVE-2023-46931 | Med | 0.00 | 5.5 | 0.00 | Nov 1, 2023 | GPAC 2.3-DEV-rev605-gfc9e29089-master contains a heap-buffer-overflow in ffdmx_parse_side_data /afltest/gpac/src/filters/ff_dmx.c:202:14 in gpac/MP4Box. | ||
| CVE-2023-46930 | Med | 0.00 | 5.5 | 0.00 | Nov 1, 2023 | GPAC 2.3-DEV-rev605-gfc9e29089-master contains a SEGV in gpac/MP4Box in gf_isom_find_od_id_for_track /afltest/gpac/src/isomedia/media_odf.c:522:14. | ||
| CVE-2023-46866 | Med | 0.00 | 6.5 | 0.01 | Oct 30, 2023 | In International Color Consortium DemoIccMAX 79ecb74, CIccCLUT::Interp3d in IccProfLib/IccTagLut.cpp in libSampleICC.a attempts to access array elements at out-of-bounds indexes. | ||
| CVE-2023-46602 | Hig | 0.00 | 8.8 | 0.01 | Oct 23, 2023 | In International Color Consortium DemoIccMAX 79ecb74, there is a stack-based buffer overflow in the icFixXml function in IccXML/IccLibXML/IccUtilXml.cpp in libIccXML.a. | ||
| CVE-2023-5686 | Hig | 0.00 | 8.8 | 0.01 | Oct 20, 2023 | Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.9.0. | ||
| CVE-2023-5344 | Hig | 0.00 | 7.5 | 0.01 | Oct 2, 2023 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1969. | ||
| CVE-2023-36184 | Hig | 0.00 | 7.5 | 0.01 | Sep 8, 2023 | CMysten Labs Sui blockchain v1.2.0 was discovered to contain a stack overflow via the component /spec/openrpc.json. | ||
| CVE-2023-4756 | Med | 0.00 | 5.5 | 0.00 | Sep 4, 2023 | Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3-DEV. | ||
| CVE-2023-4754 | Med | 0.00 | 5.5 | 0.00 | Sep 4, 2023 | Out-of-bounds Write in GitHub repository gpac/gpac prior to 2.3-DEV. | ||
| CVE-2022-28072 | Hig | 0.00 | 7.5 | 0.01 | Aug 22, 2023 | A heap buffer overflow in r_read_le32 function in radare25.4.2 and 5.4.0. | ||
| CVE-2022-28069 | Hig | 0.00 | 7.5 | 0.01 | Aug 22, 2023 | A heap buffer overflow in vax_opfunction in radare2 5.4.2 and 5.4.0. | ||
| CVE-2022-28068 | Hig | 0.00 | 7.5 | 0.01 | Aug 22, 2023 | A heap buffer overflow in r_sleb128 function in radare2 5.4.2 and 5.4.0. | ||
| CVE-2023-4322 | Cri | 0.00 | 9.8 | 0.01 | Aug 14, 2023 | Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.9.0. | ||
| CVE-2023-2905 | Hig | 0.00 | 8.8 | 0.01 | Aug 9, 2023 | Due to a failure in validating the length of a provided MQTT_CMD_PUBLISH parsed message with a variable length header, Cesanta Mongoose, an embeddable web server, version 7.10 is susceptible to a heap-based buffer overflow vulnerability in the default configuration. Version… | ||
| CVE-2023-3812 | Hig | 0.00 | 7.8 | 0.00 | Jul 24, 2023 | An out-of-bounds memory access flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user generates a malicious (too big) networking packet when napi frags is enabled. This flaw allows a local user to crash or potentially escalate their privileges… | ||
| CVE-2023-3745 | Med | 0.00 | 5.5 | 0.00 | Jul 24, 2023 | A heap-based buffer overflow issue was found in ImageMagick's PushCharPixel() function in quantum-private.h. This issue may allow a local attacker to trick the user into opening a specially crafted file, triggering an out-of-bounds read error and allowing an application to… | ||
| CVE-2023-3138 | Hig | 0.00 | 7.5 | 0.02 | Jun 28, 2023 | A vulnerability was found in libX11. The security flaw occurs because the functions in src/InitExt.c in libX11 do not check that the values provided for the Request, Event, or Error IDs are within the bounds of the arrays that those functions write to, using those IDs as array… |
- risk 0.00cvss 8.8epss 0.01
Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds write was found in Exiv2 version v0.28.0. The vulnerable function, `BmffImage::brotliUncompress`, is new in v0.28.0, so earlier versions…
- risk 0.00cvss 5.5epss 0.00
GPAC 2.3-DEV-rev605-gfc9e29089-master contains a SEGV in gpac/MP4Box in gf_media_change_pl /afltest/gpac/src/media_tools/isom_tools.c:3293:42.
- risk 0.00cvss 5.5epss 0.00
GPAC 2.3-DEV-rev605-gfc9e29089-master contains a heap-buffer-overflow in gf_isom_use_compact_size gpac/src/isomedia/isom_write.c:3403:3 in gpac/MP4Box.
- risk 0.00cvss 5.5epss 0.00
GPAC 2.3-DEV-rev605-gfc9e29089-master contains a heap-buffer-overflow in ffdmx_parse_side_data /afltest/gpac/src/filters/ff_dmx.c:202:14 in gpac/MP4Box.
- risk 0.00cvss 5.5epss 0.00
GPAC 2.3-DEV-rev605-gfc9e29089-master contains a SEGV in gpac/MP4Box in gf_isom_find_od_id_for_track /afltest/gpac/src/isomedia/media_odf.c:522:14.
- risk 0.00cvss 6.5epss 0.01
In International Color Consortium DemoIccMAX 79ecb74, CIccCLUT::Interp3d in IccProfLib/IccTagLut.cpp in libSampleICC.a attempts to access array elements at out-of-bounds indexes.
- risk 0.00cvss 8.8epss 0.01
In International Color Consortium DemoIccMAX 79ecb74, there is a stack-based buffer overflow in the icFixXml function in IccXML/IccLibXML/IccUtilXml.cpp in libIccXML.a.
- risk 0.00cvss 8.8epss 0.01
Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.9.0.
- risk 0.00cvss 7.5epss 0.01
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1969.
- risk 0.00cvss 7.5epss 0.01
CMysten Labs Sui blockchain v1.2.0 was discovered to contain a stack overflow via the component /spec/openrpc.json.
- risk 0.00cvss 5.5epss 0.00
Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3-DEV.
- risk 0.00cvss 5.5epss 0.00
Out-of-bounds Write in GitHub repository gpac/gpac prior to 2.3-DEV.
- risk 0.00cvss 7.5epss 0.01
A heap buffer overflow in r_read_le32 function in radare25.4.2 and 5.4.0.
- risk 0.00cvss 7.5epss 0.01
A heap buffer overflow in vax_opfunction in radare2 5.4.2 and 5.4.0.
- risk 0.00cvss 7.5epss 0.01
A heap buffer overflow in r_sleb128 function in radare2 5.4.2 and 5.4.0.
- risk 0.00cvss 9.8epss 0.01
Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.9.0.
- risk 0.00cvss 8.8epss 0.01
Due to a failure in validating the length of a provided MQTT_CMD_PUBLISH parsed message with a variable length header, Cesanta Mongoose, an embeddable web server, version 7.10 is susceptible to a heap-based buffer overflow vulnerability in the default configuration. Version…
- risk 0.00cvss 7.8epss 0.00
An out-of-bounds memory access flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user generates a malicious (too big) networking packet when napi frags is enabled. This flaw allows a local user to crash or potentially escalate their privileges…
- risk 0.00cvss 5.5epss 0.00
A heap-based buffer overflow issue was found in ImageMagick's PushCharPixel() function in quantum-private.h. This issue may allow a local attacker to trick the user into opening a specially crafted file, triggering an out-of-bounds read error and allowing an application to…
- risk 0.00cvss 7.5epss 0.02
A vulnerability was found in libX11. The security flaw occurs because the functions in src/InitExt.c in libX11 do not check that the values provided for the Request, Event, or Error IDs are within the bounds of the arrays that those functions write to, using those IDs as array…