cve.bz

CWE-787: Out-of-bounds Write, page 115

Filter

The product writes data past the end, or before the beginning, of the intended buffer.

What the weakness is: CWE-787 at MITRE

Ask an AI about CWE-787

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-787: Out-of-bounds Write and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/787.html and https://cve.bz/cve/cwe/787?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.8CVE-2023-44330EPSS 0.3%

    Adobe Photoshop versions 24.7.1 (and earlier) and 25.0 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires…

  2. 7.8CVE-2023-44366EPSS 1.8%

    Adobe Acrobat Reader versions 23.006.20360 (and earlier) and 20.005.30524 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of …

  3. 7.8CVE-2023-47470EPSS 0.7%

    Buffer Overflow vulnerability in Ffmpeg before github commit 4565747056a11356210ed8edcecb920105e40b60 allows a remote attacker to achieve an out-of-array write, execute arbitrary code, and cause a denial of service (DoS) via the ref_pic_li…

  4. 7.8CVE-2023-48014EPSS 0.4%

    GPAC v2.3-DEV-rev566-g50c2ab06f-master was discovered to contain a stack overflow via the hevc_parse_vps_extension function at /media_tools/av_parsers.c.

  5. 7.8CVE-2023-47586EPSS 0.3%

    Multiple heap-based buffer overflow vulnerabilities exist in V-Server V4.0.18.0 and earlier and V-Server Lite V4.0.18.0 and earlier. If a user opens a specially crafted VPR file, information may be disclosed and/or arbitrary code may be ex…

  6. 7.8CVE-2023-47584EPSS 0.3%

    Out-of-bounds write vulnerability exists in V-Server V4.0.18.0 and earlier and V-Server Lite V4.0.18.0 and earlier. If a user opens a specially crafted VPR file, information may be disclosed and/or arbitrary code may be executed.

  7. 8.8CVE-2022-45781EPSS 0.7%

    Buffer Overflow vulnerability in Tenda AX1803 v1.0.0.1_2994 and earlier allows attackers to run arbitrary code via /goform/SetOnlineDevName.

  8. 7.8CVE-2023-28401EPSS 0.2%

    Out-of-bounds write in some Intel(R) Arc(TM) & Iris(R) Xe Graphics - WHQL - Windows drivers before version 31.0.101.4255 may allow authenticated user to potentially enable escalation of privilege via local access.

  9. 5.5CVE-2023-25952EPSS 0.2%

    Out-of-bounds write in some Intel(R) Arc(TM) Control software before version 1.73.5335.2 may allow an authenticated user to potentially enable denial of service via local access.

  10. 4.4CVE-2023-22327EPSS 0.2%

    Out-of-bounds write in firmware for some Intel(R) FPGA products before version 2.8.1 may allow a privileged user to potentially enable information disclosure via local access.

  11. 7.8CVE-2023-36036KEVEPSS 17%

    Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

  12. 8.8CVE-2023-36017EPSS 25%

    Windows Scripting Engine Memory Corruption Vulnerability

  13. 9.8CVE-2023-31247EPSS 1.7%

    A memory corruption vulnerability exists in the HTTP Server Host header parsing functionality of Weston Embedded uC-HTTP v3.01.01. A specially crafted network packet can lead to code execution. An attacker can send a malicious packet to tr…

  14. 9.8CVE-2023-28391EPSS 1.5%

    A memory corruption vulnerability exists in the HTTP Server header parsing functionality of Weston Embedded uC-HTTP v3.01.01. Specially crafted network packets can lead to code execution. An attacker can send a malicious packet to trigger …

  15. 9.8CVE-2023-28379EPSS 1.7%

    A memory corruption vulnerability exists in the HTTP Server form boundary functionality of Weston Embedded uC-HTTP v3.01.01. A specially crafted network packet can lead to code execution. An attacker can send a malicious packet to trigger …

  16. 9.8CVE-2023-27882EPSS 1.8%

    A heap-based buffer overflow vulnerability exists in the HTTP Server form boundary functionality of Weston Embedded uC-HTTP v3.01.01. A specially crafted network packet can lead to code execution. An attacker can send a malicious packet to…

  17. 9.8CVE-2023-25181EPSS 1.7%

    A heap-based buffer overflow vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP v3.01.01. A specially crafted set of network packets can lead to arbitrary code execution. An attacker can send a malicious packe…

  18. 9.8CVE-2023-24585EPSS 1.2%

    An out-of-bounds write vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP v3.01.01. A specially crafted network packet can lead to memory corruption. An attacker can send a network request to trigger this vuln…

  19. 9.8CVE-2023-45878ExploitEPSS 63%

    GibbonEdu Gibbon version 25.0.1 and before allows Arbitrary File Write because rubrics_visualise_saveAjax.phps does not require authentication. The endpoint accepts the img, path, and gibbonPersonID parameters. The img parameter is expecte…

  20. 6.7CVE-2023-4949EPSS 0.2%

    An attacker with local access to a system (either through a disk or external drive) can present a modified XFS partition to grub-legacy in such a way to exploit a memory corruption in grub’s XFS file system implementation.

  21. 9.8CVE-2023-45225EPSS 1.6%

    Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 IP Cameras  with firmware version M2.1.6.05 are vulnerable to multiple instances of stack-based overflows. While parsing certain XML element…

  22. 9.8CVE-2023-43755EPSS 1.6%

    Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 IP Cameras with firmware version M2.1.6.05 are vulnerable to multiple instances of stack-based overflows. During the processing and parsin…

  23. 9.8CVE-2023-3959EPSS 49%

    Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 IP Cameras with firmware version M2.1.6.05 are vulnerable to multiple instances of stack-based overflows. While processing XML elements fro…

  24. 9.8CVE-2023-39435EPSS 1.6%

    Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 IP Cameras with firmware version M2.1.6.05 are vulnerable to stack-based overflows. During the process of updating certain settings sent fro…

  25. 7.5CVE-2023-46772EPSS 0.6%

    Vulnerability of parameters being out of the value range in the QMI service module. Successful exploitation of this vulnerability may cause errors in reading file data.

  26. 7.5CVE-2023-46767EPSS 0.6%

    Out-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this vulnerability may cause process exceptions.

  27. 7.5CVE-2023-46766EPSS 0.6%

    Out-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this vulnerability may cause process exceptions.

  28. 7.5CVE-2023-46762EPSS 0.6%

    Out-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this vulnerability may cause process exceptions.

  29. 7.5CVE-2023-46761EPSS 0.6%

    Out-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this vulnerability may cause process exceptions.

  30. 7.5CVE-2023-46760EPSS 0.6%

    Out-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this vulnerability may cause process exceptions.

  31. 9.8CVE-2023-5941EPSS 1.1%

    In versions of FreeBSD 12.4-RELEASE prior to 12.4-RELEASE-p7 and FreeBSD 13.2-RELEASE prior to 13.2-RELEASE-p5 the __sflush() stdio function in libc does not correctly update FILE objects' write space members for write-buffered streams whe…

  32. 7.5CVE-2023-41111EPSS 0.6%

    An issue was discovered in Samsung Mobile Processor, Wearable Processor, Automotive Processor, and Modem (Exynos 9810, 9610, 9820, 980, 850, 1080, 2100, 2200, 1280, 1380, 1330, 9110, W920, Modem 5123, Modem 5300, and Auto T5123). Improper …

  33. 7.5CVE-2023-46770EPSS 0.6%

    Out-of-bounds vulnerability in the sensor module. Successful exploitation of this vulnerability may cause mistouch prevention errors on users' mobile phones.

  34. 6.5CVE-2023-4154EPSS 1.4%

    A design flaw was found in Samba's DirSync control implementation, which exposes passwords and secrets in Active Directory to privileged users and Read-Only Domain Controllers (RODCs). This flaw allows RODCs and users possessing the GET_CH…

  35. 9.8CVE-2023-47359EPSS 1.1%

    Videolan VLC prior to version 3.0.20 contains an incorrect offset read that leads to a Heap-Based Buffer Overflow in function GetPacket() and results in a memory corruption.

  36. 9.1CVE-2023-47456EPSS 0.8%

    Tenda AX1806 V1.0.0.1 contains a stack overflow vulnerability in function sub_455D4, called by function fromSetWirelessRepeat.

  37. 9.1CVE-2023-47455EPSS 0.8%

    Tenda AX1806 V1.0.0.1 contains a heap overflow vulnerability in setSchedWifi function, in which the src and v12 are directly obtained from http request parameter schedStartTime and schedEndTime without checking their size.

  38. 7.1CVE-2023-43886EPSS 0.6%

    A buffer overflow in the HTTP server component of Tenda RX9 Pro v22.03.02.20 might allow an authenticated attacker to overwrite memory.

  39. 7.8CVE-2023-42538EPSS 0.2%

    An improper input validation in saped_rec_silence in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write.

  40. 7.8CVE-2023-42537EPSS 0.2%

    An improper input validation in get_head_crc in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write.

  41. 7.8CVE-2023-42536EPSS 0.2%

    An improper input validation in saped_dec in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write.

  42. 7.8CVE-2023-42535EPSS 0.2%

    Out-of-bounds Write in read_block of vold prior to SMR Nov-2023 Release 1 allows local attacker to execute arbitrary code.

  43. 7.8CVE-2023-42529EPSS 0.2%

    Out-of-bound write vulnerability in libsec-ril prior to SMR Nov-2023 Release 1 allows local attackers to execute arbitrary code.

  44. 7.8CVE-2023-42528EPSS 0.2%

    Improper Input Validation vulnerability in ProcessNvBuffering of libsec-ril prior to SMR Nov-2023 Release 1 allows local attacker to execute arbitrary code.

  45. 7.8CVE-2023-33074EPSS 0.1%

    Memory corruption in Audio when SSR event is triggered after music playback is stopped.

  46. 7.8CVE-2023-33059EPSS 0.1%

    Memory corruption in Audio while processing the VOC packet data from ADSP.

  47. 7.8CVE-2023-33055EPSS 0.1%

    Memory Corruption in Audio while invoking callback function in driver from ADSP.

  48. 9.8CVE-2023-33045EPSS 0.5%

    Memory corruption in WLAN Firmware while parsing a NAN management frame carrying a S3 attribute.

  49. 7.8CVE-2023-33031EPSS 0.1%

    Memory corruption in Automotive Audio while copying data from ADSP shared buffer to the VOC packet data buffer.

  50. 7.8CVE-2023-28574EPSS 0.1%

    Memory corruption in core services when Diag handler receives a command to configure event listeners.