cve.bz

CWE-787: Out-of-bounds Write, page 123

Filter

The product writes data past the end, or before the beginning, of the intended buffer.

What the weakness is: CWE-787 at MITRE

Ask an AI about CWE-787

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-787: Out-of-bounds Write and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/787.html and https://cve.bz/cve/cwe/787?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 6.5CVE-2023-40781EPSS 0.7%

    Buffer Overflow vulnerability in Libming Libming v.0.4.8 allows a remote attacker to cause a denial of service via a crafted .swf file to the makeswf function.

  2. 9.8CVE-2023-40846EPSS 0.8%

    Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function sub_90998.

  3. 7.5CVE-2023-40915EPSS 0.7%

    Tenda AX3 v16.03.12.11 has a stack buffer overflow vulnerability detected at function form_fast_setting_wifi_set. This vulnerability allows attackers to cause a Denial of Service (DoS) via the ssid parameter.

  4. 6.5CVE-2023-40802EPSS 0.8%

    The get_parentControl_list_Info function does not verify the parameters entered by the user, causing a post-authentication heap overflow vulnerability in Tenda AC23 v16.03.07.45_cn

  5. 9.8CVE-2023-40799EPSS 0.9%

    Tenda AC23 Vv16.03.07.45_cn is vulnerable to Buffer Overflow via sub_450A4C function.

  6. 9.8CVE-2023-40904EPSS 0.9%

    Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter macFilterType and parameter deviceList at /goform/setMacFilterCfg.

  7. 9.8CVE-2023-40902EPSS 1.2%

    Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter list and bindnum at /goform/SetIpMacBind.

  8. 9.8CVE-2023-40901EPSS 1.3%

    Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter macFilterType and parameter deviceList at url /goform/setMacFilterCfg.

  9. 9.8CVE-2023-40900EPSS 0.9%

    Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter list at /goform/SetNetControlList.

  10. 9.8CVE-2023-40899EPSS 0.9%

    Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter macFilterType and parameter deviceList at /goform/setMacFilterCfg.

  11. 9.8CVE-2023-40898EPSS 0.8%

    Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter timeZone at /goform/SetSysTimeCfg.

  12. 9.8CVE-2023-40897EPSS 0.8%

    Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter mac at /goform/GetParentControlInfo.

  13. 9.8CVE-2023-40896EPSS 1.2%

    Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter list and bindnum at /goform/SetIpMacBind.

  14. 9.8CVE-2023-40895EPSS 0.9%

    Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter list at /goform/SetVirtualServerCfg.

  15. 9.8CVE-2023-40894EPSS 0.8%

    Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter list at /goform/SetStaticRouteCfg.

  16. 9.8CVE-2023-40893EPSS 0.9%

    Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter time at /goform/PowerSaveSet.

  17. 9.8CVE-2023-40892EPSS 0.8%

    Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter schedStartTime and schedEndTime at /goform/openSchedWifi.

  18. 9.8CVE-2023-40891EPSS 0.8%

    Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter firewallEn at /goform/SetFirewallCfg.

  19. 8.8CVE-2023-41028EPSS 0.9%

    A stack-based buffer overflow exists in Juplink RX4-1500, a WiFi router, in versions 1.0.2 through 1.0.5. An authenticated attacker can exploit this vulnerability to achieve code execution as root.

  20. 5.5CVE-2023-4042EPSS 0.3%

    A flaw was found in ghostscript. The fix for CVE-2020-16305 in ghostscript was not included in RHSA-2021:1852-06 advisory as it was claimed to be. This issue only affects the ghostscript package as shipped with Red Hat Enterprise Linux 8.

  21. 9.8CVE-2023-4041EPSS 0.4%

    Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Out-of-bounds Write, Download of Code Without Integrity Check vulnerability in Silicon Labs Gecko Bootloader on ARM (Firmware Update File Parser modules) allows Code I…

  22. 7.8CVE-2023-3495EPSS 0.2%Unsupported when assigned

    Out-of-bounds Write vulnerability in Hitachi EH-VIEW (KeypadDesigner) allows local attackers to potentially execute arbitray code on affected EH-VIEW installations. User interaction is required to exploit the vulnerabilities in that the us…

  23. 7.8CVE-2023-39985EPSS 0.2%Unsupported when assigned

    Out-of-bounds Write vulnerability in Hitachi EH-VIEW (Designer) allows local attackers to potentially execute arbitray code on affected EH-VIEW installations. User interaction is required to exploit the vulnerabilities in that the user mus…

  24. 7.8CVE-2023-34853EPSS 0.4%

    Buffer Overflow vulnerability in Supermicro motherboard X12DPG-QR 1.4b allows local attackers to hijack control flow via manipulation of SmcSecurityEraseSetupVar variable.

  25. 7.5CVE-2022-48570EPSS 1.0%

    Crypto++ through 8.4 contains a timing side channel in ECDSA signature generation. Function FixedSizeAllocatorWithCleanup could write to memory outside of the allocation if the allocated memory was not 16-byte aligned. NOTE: this issue exi…

  26. 9.8CVE-2022-48522EPSS 3.5%

    In Perl 5.34.0, function S_find_uninit_var in sv.c has a stack-based crash that can lead to remote code execution or local privilege escalation.

  27. 9.8CVE-2022-48174EPSS 3.2%

    There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can be executed from command to arbitrary code execution.

  28. 7.8CVE-2022-47069EPSS 0.3%

    p7zip 16.02 was discovered to contain a heap-buffer-overflow vulnerability via the function NArchive::NZip::CInArchive::FindCd(bool) at CPP/7zip/Archive/Zip/ZipIn.cpp. NOTE: the Supplier has found that this is not a buffer overflow; at mos…

  29. 7.8CVE-2022-45703EPSS 0.5%

    Heap buffer overflow vulnerability in binutils readelf before 2.40 via function display_debug_section in file readelf.c.

  30. 7.8CVE-2022-44840EPSS 0.5%

    Heap buffer overflow vulnerability in binutils readelf before 2.40 via function find_section_in_set in file readelf.c.

  31. 7.5CVE-2022-43358EPSS 1.5%

    Stack overflow vulnerability in ast_selectors.cpp: in function Sass::ComplexSelector::has_placeholder in libsass:3.6.5-8-g210218, which can be exploited by attackers to cause a denial of service (DoS).

  32. 7.5CVE-2022-43357EPSS 1.5%

    Stack overflow vulnerability in ast_selectors.cpp in function Sass::CompoundSelector::has_real_parent_ref in libsass:3.6.5-8-g210218, which can be exploited by attackers to causea denial of service (DoS). Also affects the command line driv…

  33. 7.5CVE-2022-34038EPSS 1.8%

    Etcd v3.5.4 allows remote attackers to cause a denial of service via function PageWriter.write in pagewriter.go. NOTE: the vendor's position is that this is not a vulnerability.

  34. 7.5CVE-2022-28072EPSS 0.9%

    A heap buffer overflow in r_read_le32 function in radare25.4.2 and 5.4.0.

  35. 7.5CVE-2022-28069EPSS 0.9%

    A heap buffer overflow in vax_opfunction in radare2 5.4.2 and 5.4.0.

  36. 7.5CVE-2022-28068EPSS 0.9%

    A heap buffer overflow in r_sleb128 function in radare2 5.4.2 and 5.4.0.

  37. 8.8CVE-2022-26592EPSS 0.9%

    Stack Overflow vulnerability in libsass 3.6.5 via the CompoundSelector::has_real_parent_ref function.

  38. 7.5CVE-2021-46174EPSS 0.8%

    Heap-based Buffer Overflow in function bfd_getl32 in Binutils objdump 3.37.

  39. 8.8CVE-2021-40265EPSS 0.9%

    A heap overflow bug exists FreeImage before 1.18.0 via ofLoad function in PluginJPEG.cpp.

  40. 8.8CVE-2021-40263EPSS 1.2%

    A heap overflow vulnerability in FreeImage 1.18.0 via the ofLoad function in PluginTIFF.cpp.

  41. 6.5CVE-2021-40262EPSS 0.7%

    A stack exhaustion issue was discovered in FreeImage before 1.18.0 via the Validate function in PluginRAW.cpp.

  42. 7.5CVE-2021-34193EPSS 1.4%

    Stack overflow vulnerability in OpenSC smart card middleware before 0.23 via crafted responses to APDUs.

  43. 9.8CVE-2021-33388EPSS 0.8%

    dpic 2021.04.10 has a Heap Buffer Overflow in themakevar() function in dpic.y

  44. 7.5CVE-2021-32420EPSS 0.8%

    dpic 2021.01.01 has a Heap-based Buffer Overflow in thestorestring function in dpic.y.

  45. 9.8CVE-2021-32292EPSS 1.4%

    An issue was discovered in json-c from 20200420 (post 0.14 unreleased code) through 0.15-20200726. A stack-buffer-overflow exists in the auxiliary sample program json_parse which is located in the function parseit.

  46. 7.1CVE-2021-29390EPSS 0.8%

    libjpeg-turbo version 2.0.90 has a heap-based buffer over-read (2 bytes) in decompress_smooth_data in jdcoefct.c.

  47. 7.5CVE-2020-22218EPSS 1.2%

    An issue was discovered in function _libssh2_packet_add in libssh2 1.10.0 allows attackers to access out of bounds memory.

  48. 7.8CVE-2020-21890EPSS 0.8%

    Buffer Overflow vulnerability in clj_media_size function in devices/gdevclj.c in Artifex Ghostscript 9.50 allows remote attackers to cause a denial of service or other unspecified impact(s) via opening of crafted PDF document.

  49. 7.8CVE-2020-21724EPSS 0.4%

    Buffer Overflow vulnerability in ExtractorInformation function in streamExtractor.cpp in oggvideotools 0.9.1 allows remaote attackers to run arbitrary code via opening of crafted ogg file.

  50. 5.5CVE-2020-21723EPSS 0.5%

    A Segmentation Fault issue discovered StreamSerializer::extractStreams function in streamSerializer.cpp in oggvideotools 0.9.1 allows remote attackers to cause a denial of service (crash) via opening of crafted ogg file.