cve.bz

CWE-787: Out-of-bounds Write, page 119

Filter

The product writes data past the end, or before the beginning, of the intended buffer.

What the weakness is: CWE-787 at MITRE

Ask an AI about CWE-787

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-787: Out-of-bounds Write and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/787.html and https://cve.bz/cve/cwe/787?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 9.8CVE-2023-35646EPSS 0.5%

    In TBD of TBD, there is a possible stack buffer overflow due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

  2. 6.4CVE-2023-35645EPSS 0.07%

    In tbd of tbd, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

  3. 9.8CVE-2023-35968EPSS 0.9%

    Two heap-based buffer overflow vulnerabilities exist in the gwcfg_cgi_set_manage_post_data functionality of Yifan YF325 v1.0_20221108. A specially crafted network request can lead to a heap buffer overflow. An attacker can send a network r…

  4. 9.8CVE-2023-35967EPSS 0.9%

    Two heap-based buffer overflow vulnerabilities exist in the gwcfg_cgi_set_manage_post_data functionality of Yifan YF325 v1.0_20221108. A specially crafted network request can lead to a heap buffer overflow. An attacker can send a network r…

  5. 9.8CVE-2023-35966EPSS 0.9%

    Two heap-based buffer overflow vulnerabilities exist in the httpd manage_post functionality of Yifan YF325 v1.0_20221108. A specially crafted network request can lead to a heap buffer overflow. An attacker can send a network request to tri…

  6. 9.8CVE-2023-35965EPSS 0.9%

    Two heap-based buffer overflow vulnerabilities exist in the httpd manage_post functionality of Yifan YF325 v1.0_20221108. A specially crafted network request can lead to a heap buffer overflow. An attacker can send a network request to tri…

  7. 9.8CVE-2023-34426EPSS 0.9%

    A stack-based buffer overflow vulnerability exists in the httpd manage_request functionality of Yifan YF325 v1.0_20221108. A specially crafted network request can lead to stack-based buffer overflow. An attacker can send a network request …

  8. 9.8CVE-2023-34365EPSS 0.9%

    A stack-based buffer overflow vulnerability exists in the libutils.so nvram_restore functionality of Yifan YF325 v1.0_20221108. A specially crafted network request can lead to a buffer overflow. An attacker can send a network request to tr…

  9. 9.8CVE-2023-34346EPSS 1.4%

    A stack-based buffer overflow vulnerability exists in the httpd gwcfg.cgi get functionality of Yifan YF325 v1.0_20221108. A specially crafted network packet can lead to command execution. An attacker can send a network request to trigger t…

  10. 9.8CVE-2023-31272EPSS 0.7%

    A stack-based buffer overflow vulnerability exists in the httpd do_wds functionality of Yifan YF325 v1.0_20221108. A specially crafted network request can lead to stack-based buffer overflow. An attacker can send a network request to trigg…

  11. 7.8CVE-2023-31096EPSS 0.5%

    An issue was discovered in Broadcom) LSI PCI-SV92EX Soft Modem Kernel Driver through 2.2.100.1 (aka AGRSM64.sys). There is Local Privilege Escalation to SYSTEM via a Stack Overflow in RTLCopyMemory (IOCTL 0x1b2150). An attacker can exploit…

  12. 5.5CVE-2023-43785EPSS 0.7%

    A vulnerability was found in libX11 due to a boundary condition within the _XkbReadKeySyms() function. This flaw allows a local user to trigger an out-of-bounds read error and read the contents of memory on the system.

  13. 7.8CVE-2023-45601EPSS 0.2%

    A vulnerability has been identified in Parasolid V35.0 (All versions < V35.0.262), Parasolid V35.1 (All versions < V35.1.250), Parasolid V36.0 (All versions < V36.0.169), Tecnomatix Plant Simulation V2201 (All versions < V2201.0009), Tecno…

  14. 7.8CVE-2023-44083EPSS 0.2%

    A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0009), Tecnomatix Plant Simulation V2302 (All versions < V2302.0003). The affected application contains an out of bounds write past the end of a…

  15. 7.8CVE-2023-44082EPSS 0.2%

    A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0009), Tecnomatix Plant Simulation V2302 (All versions < V2302.0003). The affected application contains an out of bounds write past the end of a…

  16. 7.8CVE-2023-44081EPSS 0.2%

    A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0009), Tecnomatix Plant Simulation V2302 (All versions < V2302.0003). The affected application contains an out of bounds write past the end of a…

  17. 8.8CVE-2023-43641EPSS 17%

    libcue provides an API for parsing and extracting data from CUE sheets. Versions 2.2.1 and prior are vulnerable to out-of-bounds array access. A user of the GNOME desktop environment can be exploited by downloading a cue sheet from a malic…

  18. 4.4CVE-2023-40652EPSS 0.09%

    In jpg driver, there is a possible out of bounds write due to improper input validation. This could lead to local denial of service with System execution privileges needed

  19. 4.4CVE-2023-40651EPSS 0.09%

    In urild service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed

  20. 9.8CVE-2023-3725EPSS 1.3%

    Potential buffer overflow vulnerability in the Zephyr CAN bus subsystem

  21. 9.8CVE-2023-44807EPSS 1.3%

    D-Link DIR-820L 1.05B03 has a stack overflow vulnerability in the cancelPing function.

  22. 7.2CVE-2023-32972EPSS 0.6%

    A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have…

  23. 7.2CVE-2023-32971EPSS 0.6%

    A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have…

  24. 5.5CVE-2023-3428EPSS 0.3%

    A heap-based buffer overflow vulnerability was found in coders/tiff.c in ImageMagick. This issue may allow a local attacker to trick the user into opening a specially crafted file, resulting in an application crash and denial of service.

  25. 7.8CVE-2023-30733EPSS 0.2%

    Stack-based Buffer Overflow in vulnerability HDCP trustlet prior to SMR Oct-2023 Release 1 allows local privileged attackers to perform code execution.

  26. 7.8CVE-2023-4911KEVExploitEPSS 64%

    A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables …

  27. 4.7CVE-2023-34970EPSS 0.2%

    A local non-privileged user can make improper GPU processing operations to access a limited amount outside of buffer bounds or to exploit a software race condition. If the system’s memory is carefully prepared by the user, then this in tur…

  28. 7.8CVE-2023-33034EPSS 0.1%

    Memory corruption while parsing the ADSP response command.

  29. 9.8CVE-2023-33028EPSS 0.5%

    Memory corruption in WLAN Firmware while doing a memory copy of pmk cache.

  30. 9.8CVE-2023-24855EPSS 0.5%

    Memory corruption in Modem while processing security related configuration before AS Security Exchange.

  31. 7.8CVE-2023-24853EPSS 0.1%

    Memory Corruption in HLOS while registering for key provisioning notify.

  32. 9.8CVE-2023-22385EPSS 0.4%

    Memory Corruption in Data Modem while making a MO call or MT VOLTE call.

  33. 7.8CVE-2023-22384EPSS 0.1%

    Memory Corruption in VR Service while sending data using Fast Message Queue (FMQ).

  34. 7.8CVE-2023-43361EPSS 0.4%

    Buffer Overflow vulnerability in Vorbis-tools v.1.4.2 allows a local attacker to execute arbitrary code and cause a denial of service during the conversion of wav files to ogg files.

  35. 7.5CVE-2023-5344EPSS 1.3%

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1969.

  36. 6.7CVE-2023-32830EPSS 0.10%

    In TVAPI, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: DTV038025…

  37. 6.7CVE-2023-32827EPSS 0.10%

    In camera middleware, there is a possible out of bounds write due to a missing input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Pat…

  38. 6.7CVE-2023-32826EPSS 0.10%

    In camera middleware, there is a possible out of bounds write due to a missing input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Pat…

  39. 6.7CVE-2023-32822EPSS 0.09%

    In ftm, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS0799422…

  40. 6.7CVE-2023-32821EPSS 0.09%

    In video, there is a possible out of bounds write due to a permissions bypass. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS0801343…

  41. 9.8CVE-2023-20819EPSS 0.7%

    In CDMA PPP protocol, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privilege needed. User interaction is not needed for exploitation. …

  42. 6.5CVE-2023-3024EPSS 0.3%

    Forcing the Bluetooth LE stack to segment 'prepare write response' packets can lead to an out-of-bounds memory access.

  43. 8.8CVE-2023-5217KEVEPSS 49%

    Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  44. 7.5CVE-2023-43868EPSS 0.9%

    D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via websGetVar function.

  45. 7.5CVE-2023-43867EPSS 1.0%

    D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWanL2TP function.

  46. 7.5CVE-2023-43866EPSS 1.0%

    D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWAN_Wizard7 function.

  47. 7.5CVE-2023-43865EPSS 1.0%

    D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWanPPTP function.

  48. 7.5CVE-2023-43864EPSS 1.0%

    D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWAN_Wizard55 function.

  49. 7.5CVE-2023-43863EPSS 1.0%

    D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWanDhcpplus function.

  50. 7.5CVE-2023-43862EPSS 0.9%

    D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formLanguageChange function.