VYPR

CWE-787

Out-of-bounds Write

BaseDraftLikelihood: High

Description

The product writes data past the end, or before the beginning, of the intended buffer.

Hierarchy (View 1000)

CVEs mapped to this weakness (14,531)

page 82 of 727
  • CVE-2020-35881CriDec 31, 2020
    risk 0.64cvss 9.8epss 0.02

    An issue was discovered in the traitobject crate through 2020-06-01 for Rust. It has false expectations about fat pointers, possibly causing memory corruption in, for example, Rust 2.x.

  • CVE-2020-14224CriDec 18, 2020
    risk 0.64cvss 9.8epss 0.02

    A vulnerability in the MIME message handling of the HCL Notes v9 client could potentially be exploited by an unauthenticated attacker resulting in a stack buffer overflow. This could allow a remote attacker to crash the Notes application or inject code into the system which…

  • CVE-2020-0456CriDec 14, 2020
    risk 0.64cvss 9.8epss 0.01

    There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-170378843

  • CVE-2020-0457CriDec 14, 2020
    risk 0.64cvss 9.8epss 0.01

    There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-170367562

  • CVE-2020-0455CriDec 14, 2020
    risk 0.64cvss 9.8epss 0.01

    There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-170372514

  • CVE-2020-14268CriDec 14, 2020
    risk 0.64cvss 9.8epss 0.02

    A vulnerability in the MIME message handling of the Notes client (versions 9 and 10) could potentially be exploited by an unauthenticated attacker resulting in a stack buffer overflow. This could allow a remote attacker to crash the client or inject code into the system which…

  • CVE-2020-14244CriDec 14, 2020
    risk 0.64cvss 9.8epss 0.03

    A vulnerability in the MIME message handling of the Domino server (versions 9 and 10) could potentially be exploited by an unauthenticated attacker resulting in a stack buffer overflow. This could allow a remote attacker to crash the server or inject code into the system which…

  • CVE-2020-13556CriDec 11, 2020
    risk 0.64cvss 9.8epss 0.05

    An out-of-bounds write vulnerability exists in the Ethernet/IP server functionality of EIP Stack Group OpENer 2.3 and development commit 8c73bf3. A specially crafted series of network requests can lead to remote code execution. An attacker can send a sequence of requests to…

  • CVE-2020-17529CriDec 9, 2020
    risk 0.64cvss 9.8epss 0.03

    Out-of-bounds Write vulnerability in TCP Stack of Apache NuttX (incubating) versions up to and including 9.1.0 and 10.0.0 allows attacker to corrupt memory by supplying and invalid fragmentation offset value specified in the IP header. This is only impacts builds with both…

  • CVE-2020-27930HigKEVDec 8, 2020
    risk 0.64cvss 7.8epss 0.22

    A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave, iOS 14.2 and iPadOS 14.2, watchOS 5.3.9, macOS…

  • CVE-2020-25462CriDec 4, 2020
    risk 0.64cvss 9.8epss 0.02

    Heap buffer overflow in the fxCheckArrowFunction function at moddable/xs/sources/xsSyntaxical.c:3562 in Moddable SDK before OS200903.

  • CVE-2020-26762CriDec 1, 2020
    risk 0.64cvss 9.8epss 0.02

    A stack-based buffer-overflow exists in Edimax IP-Camera IC-3116W (v3.06) and IC-3140W (v3.07), which allows an unauthenticated, unauthorized attacker to perform remote-code-execution due to a crafted GET-Request. The overflow occurs in binary ipcam_cgi due to a missing type…

  • CVE-2020-25014CriNov 27, 2020
    risk 0.64cvss 9.8epss 0.04

    A stack-based buffer overflow in fbwifi_continue.cgi on Zyxel UTM and VPN series of gateways running firmware version V4.30 through to V4.55 allows remote unauthenticated attackers to execute arbitrary code via a crafted http packet.

  • CVE-2020-25159CriNov 24, 2020
    risk 0.64cvss 9.8epss 0.03

    499ES EtherNet/IP (ENIP) Adaptor Source Code is vulnerable to a stack-based buffer overflow, which may allow an attacker to send a specially crafted packet that may result in a denial-of-service condition or code execution.

  • CVE-2020-8752CriNov 12, 2020
    risk 0.64cvss 9.8epss 0.02

    Out-of-bounds write in IPv6 subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 14.0.45 may allow an unauthenticated user to potentially enable escalation of privileges via network access.

  • CVE-2020-0452CriNov 10, 2020
    risk 0.64cvss 9.8epss 0.03

    In exif_entry_get_value of exif-entry.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution if a third party app used this library to process remote image data with no additional execution privileges needed. User…

  • CVE-2020-0447CriNov 10, 2020
    risk 0.64cvss 9.8epss 0.01

    There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-168251617

  • CVE-2020-0446CriNov 10, 2020
    risk 0.64cvss 9.8epss 0.01

    There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-168264528

  • CVE-2020-0445CriNov 10, 2020
    risk 0.64cvss 9.8epss 0.01

    There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-168264527

  • CVE-2020-11153CriNov 2, 2020
    risk 0.64cvss 9.8epss 0.02

    u'Out of bound memory access while processing GATT data received due to lack of check of pdu data length and leads to remote code execution' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT,…