cve.bz

CWE-787: Out-of-bounds Write, page 130

Filter

The product writes data past the end, or before the beginning, of the intended buffer.

What the weakness is: CWE-787 at MITRE

Ask an AI about CWE-787

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-787: Out-of-bounds Write and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/787.html and https://cve.bz/cve/cwe/787?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.8CVE-2023-30645EPSS 0.2%

    Heap out of bound write vulnerability in IpcRxIncomingCBMsg of RILD prior to SMR Jul-2023 Release 1 allows attackers to execute arbitrary code.

  2. 7.8CVE-2023-30644EPSS 0.2%

    Stack out of bound write vulnerability in CdmaSmsParser of RILD prior to SMR Jul-2023 Release 1 allows attackers to execute arbitrary code.

  3. 7.8CVE-2023-35001EPSS 1.5%

    Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability; nft_byteorder poorly handled vm register contents when CAP_NET_ADMIN is in any user or network namespace

  4. 7.8CVE-2023-27390EPSS 0.5%

    A heap-based buffer overflow vulnerability exists in the Sequence::DrawText functionality of Diagon v1.0.139. A specially crafted markdown file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger t…

  5. 8.8CVE-2023-37212EPSS 0.6%

    Memory safety bugs present in Firefox 114. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 1…

  6. 8.8CVE-2023-37211EPSS 0.8%

    Memory safety bugs present in Firefox 114, Firefox ESR 102.12, and Thunderbird 102.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary …

  7. 7.8CVE-2023-24854EPSS 0.1%

    Memory Corruption in WLAN HOST while parsing QMI WLAN Firmware response message.

  8. 7.8CVE-2023-24851EPSS 0.1%

    Memory Corruption in WLAN HOST while parsing QMI response message from firmware.

  9. 7.8CVE-2023-22386EPSS 0.1%

    Memory Corruption in WLAN HOST while processing WLAN FW request to allocate memory.

  10. 7.8CVE-2023-21640EPSS 0.1%

    Memory corruption in Linux when the file upload API is called with parameters having large buffer.

  11. 7.8CVE-2023-21639EPSS 0.1%

    Memory corruption in Audio while processing sva_model_serializer using memory size passed by HIDL client.

  12. 7.8CVE-2023-21637EPSS 0.1%

    Memory corruption in Linux while calling system configuration APIs.

  13. 7.8CVE-2023-21635EPSS 0.1%

    Memory Corruption in Data Network Stack & Connectivity when sim gets detected on telephony.

  14. 7.8CVE-2023-21633EPSS 0.1%

    Memory Corruption in Linux while processing QcRilRequestImsRegisterMultiIdentityMessage request.

  15. 6.7CVE-2023-20775EPSS 0.1%

    In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS079…

  16. 6.4CVE-2023-20771EPSS 0.08%

    In display, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07671046; I…

  17. 6.7CVE-2023-20767EPSS 0.1%

    In pqframework, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALP…

  18. 6.7CVE-2023-20766EPSS 0.1%

    In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS0757323…

  19. 6.7CVE-2023-20761EPSS 0.1%

    In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS0762860…

  20. 6.7CVE-2023-20760EPSS 0.1%

    In apu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS0762957…

  21. 4.4CVE-2023-20759EPSS 0.1%

    In cmdq, there is a possible memory corruption due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07636133; Issu…

  22. 4.4CVE-2023-20758EPSS 0.1%

    In cmdq, there is a possible memory corruption due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07636133; Issu…

  23. 6.7CVE-2023-20757EPSS 0.1%

    In cmdq, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS076361…

  24. 6.7CVE-2023-20754EPSS 0.1%

    In keyinstall, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS075…

  25. 6.7CVE-2023-20753EPSS 0.10%

    In rpmb, there is a possible out of bounds write due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07460390; Issue…

  26. 8.8CVE-2023-35177EPSS 0.4%

    Certain HP LaserJet Pro print products are potentially vulnerable to a stack-based buffer overflow related to the compact font format parser.

  27. 7.8CVE-2023-26085EPSS 0.3%

    A possible out-of-bounds read and write (due to an improper length check of shared memory) was discovered in Arm NN Android-NN-Driver before 23.02.

  28. 7.5CVE-2023-3138EPSS 1.7%

    A vulnerability was found in libX11. The security flaw occurs because the functions in src/InitExt.c in libX11 do not check that the values provided for the Request, Event, or Error IDs are within the bounds of the arrays that those functi…

  29. 9.8CVE-2023-21517EPSS 1.6%

    Heap out-of-bound write vulnerability in Exynos baseband prior to SMR Jun-2023 Release 1 allows remote attacker to execute arbitrary code.

  30. 7.8CVE-2023-3090EPSS 0.5%

    A heap out-of-bounds write vulnerability in the Linux Kernel ipvlan network driver can be exploited to achieve local privilege escalation. The out-of-bounds write is caused by missing skb->cb initialization in the ipvlan network driver. …

  31. 6.7CVE-2023-21236EPSS 0.10%

    In aoc_service_set_read_blocked of aoc.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for e…

  32. 6.7CVE-2023-21222EPSS 0.10%

    In load_dt_data of storage.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.…

  33. 6.7CVE-2023-21161EPSS 0.10%

    In Parse of simdata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Produ…

  34. 6.7CVE-2023-21159EPSS 0.10%

    In Parse of simdata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Produ…

  35. 6.7CVE-2023-21157EPSS 0.1%

    In encode of wlandata.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Pro…

  36. 6.7CVE-2023-21151EPSS 0.10%

    In the Google BMS kernel module, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitati…

  37. 9.8CVE-2023-21066EPSS 0.5%

    In cd_CodeMsg of cd_codec.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Pr…

  38. 7.5CVE-2023-34937EPSS 0.8%

    A stack overflow in the UpdateSnat function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

  39. 7.5CVE-2023-34936EPSS 0.8%

    A stack overflow in the UpdateMacClone function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

  40. 7.5CVE-2023-34935EPSS 0.8%

    A stack overflow in the AddWlanMacList function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

  41. 7.5CVE-2023-34934EPSS 0.8%

    A stack overflow in the Edit_BasicSSID_5G function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

  42. 7.5CVE-2023-34933EPSS 0.8%

    A stack overflow in the UpdateWanParams function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

  43. 7.5CVE-2023-34932EPSS 0.8%

    A stack overflow in the UpdateWanMode function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

  44. 7.5CVE-2023-34931EPSS 0.8%

    A stack overflow in the EditWlanMacList function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

  45. 7.5CVE-2023-34930EPSS 0.8%

    A stack overflow in the EditMacList function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

  46. 7.5CVE-2023-34929EPSS 0.8%

    A stack overflow in the AddMacList function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

  47. 7.5CVE-2023-34928EPSS 1.3%

    A stack overflow in the Edit_BasicSSID function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

  48. 7.8CVE-2023-29068EPSS 0.2%

    A maliciously crafted file consumed through pskernel.dll file could lead to memory corruption vulnerabilities. These vulnerabilities in conjunction with other vulnerabilities could lead to code execution in the context of the current proce…

  49. 7.5CVE-2023-34924EPSS 0.9%

    H3C Magic B1STW B1STV100R012 was discovered to contain a stack overflow via the function SetAPInfoById. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

  50. 6.7CVE-2023-2290EPSS 0.2%

    A potential vulnerability in the LenovoFlashDeviceInterface SMI handler may allow an attacker with local access and elevated privileges to execute arbitrary code.