cve.bz

CWE-787: Out-of-bounds Write, page 121

Filter

The product writes data past the end, or before the beginning, of the intended buffer.

What the weakness is: CWE-787 at MITRE

Ask an AI about CWE-787

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-787: Out-of-bounds Write and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/787.html and https://cve.bz/cve/cwe/787?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.8CVE-2023-38070EPSS 0.4%

    A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), Teamcenter Visualization V14.0 (All versions), Teamcenter Visualization V14.1 (All versions < V14.1.0.11),…

  2. 7.5CVE-2023-40308EPSS 0.8%

    SAP CommonCryptoLib allows an unauthenticated attacker to craft a request, which when submitted to an open port causes a memory corruption error in a library which in turn causes the target component to crash making it unavailable. There i…

  3. 8.8CVE-2023-35684EPSS 0.2%

    In avdt_msg_asmbl of avdt_msg.cc, there is a possible out of bounds write due to an integer overflow. This could lead to paired device escalation of privilege with no additional execution privileges needed. User interaction is not needed f…

  4. 9.8CVE-2023-35681EPSS 0.6%

    In eatt_l2cap_reconfig_completed of eatt_impl.h, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed fo…

  5. 7.5CVE-2020-19323EPSS 1.3%

    An issue was discovered in /bin/mini_upnpd on D-Link DIR-619L 2.06beta devices. There is a heap buffer overflow allowing remote attackers to restart router via the M-search request ST parameter. No authentication required

  6. 8.8CVE-2020-19318EPSS 1.1%

    Buffer Overflow vulnerability in D-Link DIR-605L, hardware version AX, firmware version 1.17beta and below, allows authorized attackers execute arbitrary code via sending crafted data to the webserver service program.

  7. 7.8CVE-2022-28836EPSS 0.4%

    Adobe InCopy versions 17.1 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires u…

  8. 7.8CVE-2022-28834EPSS 0.4%

    Adobe InCopy versions 17.1 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires u…

  9. 7.8CVE-2022-28833EPSS 0.4%

    Adobe InDesign versions 17.1 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires …

  10. 7.8CVE-2022-28831EPSS 0.4%

    Adobe InDesign versions 17.1 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires …

  11. 7.8CVE-2019-16470EPSS 0.5%

    Adobe Acrobat Reader versions 2019.021.20056 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user…

  12. 8.8CVE-2023-4585EPSS 0.8%

    Memory safety bugs present in Firefox 116, Firefox ESR 115.1, and Thunderbird 115.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary co…

  13. 8.8CVE-2023-4584EPSS 0.8%

    Memory safety bugs present in Firefox 116, Firefox ESR 102.14, Firefox ESR 115.1, Thunderbird 102.14, and Thunderbird 115.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could…

  14. 7.5CVE-2023-36184EPSS 1.1%

    CMysten Labs Sui blockchain v1.2.0 was discovered to contain a stack overflow via the component /spec/openrpc.json.

  15. 7.1CVE-2021-33834EPSS 0.2%

    An issue was discovered in iscflashx64.sys 3.9.3.0 in Insyde H2OFFT 6.20.00. When handling IOCTL 0x22229a, the input used to allocate a buffer and copy memory is mishandled. This could cause memory corruption or a system crash.

  16. 7.8CVE-2023-4685EPSS 0.2%

    Delta Electronics' CNCSoft-B version 1.0.0.4 and DOPSoft versions 4.0.0.82 and prior are vulnerable to stack-based buffer overflow, which could allow an attacker to execute arbitrary code.

  17. 7.5CVE-2023-30800EPSS 1.7%

    The web server used by MikroTik RouterOS version 6 is affected by a heap memory corruption issue. A remote and unauthenticated attacker can corrupt the server's heap memory by sending a crafted HTTP request. As a result, the web interface …

  18. 9.8CVE-2023-40942EPSS 0.8%

    Tenda AC9 V3.0BR_V15.03.06.42_multi_TD01 was discovered stack overflow via parameter 'firewall_value' at url /goform/SetFirewallCfg.

  19. 7.8CVE-2022-30646EPSS 0.4%

    Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requ…

  20. 7.8CVE-2022-30645EPSS 0.4%

    Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requ…

  21. 7.8CVE-2022-30643EPSS 0.4%

    Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requ…

  22. 7.8CVE-2022-30642EPSS 0.4%

    Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requ…

  23. 7.8CVE-2022-30641EPSS 0.3%

    Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requ…

  24. 7.8CVE-2022-30640EPSS 0.4%

    Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requ…

  25. 7.8CVE-2022-30639EPSS 0.4%

    Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requ…

  26. 7.8CVE-2022-30638EPSS 0.4%

    Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requ…

  27. 7.8CVE-2022-30637EPSS 0.4%

    Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requ…

  28. 7.8CVE-2021-43018EPSS 0.4%

    Adobe Photoshop versions 23.0.2 and 22.5.4 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user intera…

  29. 6.4CVE-2023-38485EPSS 0.4%

    Vulnerabilities exist in the BIOS implementation of Aruba 9200 and 9000 Series Controllers and Gateways that could allow an attacker to execute arbitrary code early in the boot sequence. An attacker could exploit this vulnerability to gain…

  30. 7.2CVE-2023-20250EPSS 0.9%

    A vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code on an affected device. This vulnerability is…

  31. 9.8CVE-2023-28581EPSS 0.5%

    Memory corruption in WLAN Firmware while parsing receieved GTK Keys in GTK KDE.

  32. 7.8CVE-2023-28573EPSS 0.1%

    Memory corruption in WLAN HAL while parsing WMI command parameters.

  33. 7.8CVE-2023-28567EPSS 0.1%

    Memory corruption in WLAN HAL while handling command through WMI interfaces.

  34. 7.8CVE-2023-28565EPSS 0.1%

    Memory corruption in WLAN HAL while handling command streams through WMI interfaces.

  35. 7.8CVE-2023-28564EPSS 0.1%

    Memory corruption in WLAN HAL while passing command parameters through WMI interfaces.

  36. 9.8CVE-2023-28562EPSS 0.4%

    Memory corruption while handling payloads from remote ESL.

  37. 7.8CVE-2023-28560EPSS 0.1%

    Memory corruption in WLAN HAL while processing devIndex from untrusted WMI payload.

  38. 7.8CVE-2023-28559EPSS 0.1%

    Memory corruption in WLAN FW while processing command parameters from untrusted WMI payload.

  39. 7.8CVE-2023-28558EPSS 0.1%

    Memory corruption in WLAN handler while processing PhyID in Tx status handler.

  40. 7.8CVE-2023-28538EPSS 0.1%

    Memory corruption in WIN Product while invoking WinAcpi update driver in the UEFI region.

  41. 7.8CVE-2023-21664EPSS 0.1%

    Memory Corruption in Core Platform while printing the response buffer in log.

  42. 7.8CVE-2023-21663EPSS 0.1%

    Memory Corruption while accessing metadata in Display.

  43. 7.8CVE-2023-21654EPSS 0.1%

    Memory corruption in Audio during playback session with audio effects enabled.

  44. 5.5CVE-2023-4756EPSS 0.3%

    Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3-DEV.

  45. 5.5CVE-2023-4754EPSS 0.3%

    Out-of-bounds Write in GitHub repository gpac/gpac prior to 2.3-DEV.

  46. 4.4CVE-2023-32813EPSS 0.10%

    In gnss service, there is a possible out of bounds write due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: …

  47. 6.7CVE-2023-32812EPSS 0.1%

    In gnss service, there is a possible out of bounds write due to improper input validation. This could lead to local esclation of privileges with System execution privileges needed. User interaction is not needed for exploitation. Patch ID:…

  48. 6.7CVE-2023-32811EPSS 0.10%

    In connectivity system driver, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitat…

  49. 6.7CVE-2023-32806EPSS 0.10%

    In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: …

  50. 6.5CVE-2023-32805EPSS 0.10%

    In power, there is a possible out of bounds write due to an insecure default value. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS081028…