cve.bz

CWE-787: Out-of-bounds Write, page 133

Filter

The product writes data past the end, or before the beginning, of the intended buffer.

What the weakness is: CWE-787 at MITRE

Ask an AI about CWE-787

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-787: Out-of-bounds Write and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/787.html and https://cve.bz/cve/cwe/787?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 6.7CVE-2023-20715EPSS 0.09%

    In wlan, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS077969…

  2. 6.7CVE-2023-20712EPSS 0.09%

    In wlan, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS077969…

  3. 7.5CVE-2023-33659EPSS 1.1%

    A heap buffer overflow vulnerability exists in NanoMQ 0.17.2. The vulnerability can be triggered by calling the function nmq_subinfo_decode() in the file mqtt_parser.c. An attacker could exploit this vulnerability to cause a denial of serv…

  4. 7.8CVE-2023-21632EPSS 0.1%

    Memory corruption in Automotive GPU while querying a gsl memory node.

  5. 7.8CVE-2023-21628EPSS 0.1%

    Memory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command.

  6. 7.8CVE-2022-33267EPSS 0.1%

    Memory corruption in Linux while sending DRM request.

  7. 7.8CVE-2022-33264EPSS 0.1%

    Memory corruption in modem due to stack based buffer overflow while parsing OTASP Key Generation Request Message.

  8. 4.4CVE-2022-48439EPSS 0.09%

    In cp_dump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.

  9. 4.4CVE-2022-48438EPSS 0.08%

    In cp_dump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.

  10. 7.8CVE-2022-48188EPSS 0.2%

    A buffer overflow vulnerability in the SecureBootDXE BIOS driver of some Lenovo Desktop and ThinkStation models could allow an attacker with local access to elevate their privileges to execute arbitrary code.

  11. 7.8CVE-2022-48181EPSS 0.2%

    An ErrorMessage driver stack-based buffer overflow vulnerability in BIOS of some ThinkPad models could allow an attacker with local access to elevate their privileges and execute arbitrary code.

  12. 5.5CVE-2023-33693EPSS 0.4%

    A buffer overflow in EasyPlayerPro-Win v3.2.19.0106 to v3.6.19.0823 allows attackers to cause a Denial of Service (DoS) via a crafted XML file.

  13. 9.8CVE-2023-33675EPSS 1.2%

    Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the time parameter in the get_parentControl_list_Info function.

  14. 9.8CVE-2023-33673EPSS 1.1%

    Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the firewallEn parameter in the formSetFirewallCfg function.

  15. 7.5CVE-2023-33672EPSS 0.9%

    Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the shareSpeed parameter in the fromSetWifiGusetBasic function.

  16. 9.8CVE-2023-33671EPSS 0.9%

    Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the deviceId parameter in the saveParentControlInfo function.

  17. 9.8CVE-2023-33670EPSS 1.1%

    Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the time parameter in the sub_4a79ec function.

  18. 9.8CVE-2023-33669EPSS 2.1%

    Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the timeZone parameter in the sub_44db3c function.

  19. 8.8CVE-2023-32215EPSS 0.8%

    Mozilla developers and community members Gabriele Svelto, Andrew Osmond, Emily McDonough, Sebastian Hengst, Andrew McCreight and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 112 and Firefox ESR 102.10. Some of th…

  20. 8.8CVE-2023-29551EPSS 0.5%

    Memory safety bugs present in Firefox 111. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox for…

  21. 8.8CVE-2023-28177EPSS 0.5%

    Memory safety bugs present in Firefox 110. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 1…

  22. 8.8CVE-2023-28176EPSS 0.7%

    Memory safety bugs present in Firefox 110 and Firefox ESR 102.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerabili…

  23. 8.8CVE-2023-25746EPSS 0.7%

    Memory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thund…

  24. 8.8CVE-2023-25745EPSS 0.7%

    Memory safety bugs present in Firefox 109. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 1…

  25. 8.8CVE-2023-25744EPSS 0.7%

    Mmemory safety bugs present in Firefox 109 and Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerabil…

  26. 8.8CVE-2023-25732EPSS 0.7%

    When encoding data from an <code>inputStream</code> in <code>xpcom</code> the size of the input being encoded was not correctly calculated potentially leading to an out of bounds memory write. This vulnerability affects Firefox < 110, Thun…

  27. 8.8CVE-2023-23606EPSS 0.5%

    Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 108. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to r…

  28. 8.8CVE-2023-23605EPSS 0.7%

    Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 108 and Firefox ESR 102.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could ha…

  29. 6.5CVE-2023-1945EPSS 0.6%

    Unexpected data returned from the Safe Browsing API could have led to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird < 102.10 and Firefox ESR < 102.10.

  30. 3.3CVE-2023-2687EPSS 0.2%

    Buffer overflow in Platform CLI component in Silicon Labs Gecko SDK v4.2.1 and earlier allows user to overwrite limited structures on the heap.

  31. 9.8CVE-2023-33476EPSS 2.1%

    ReadyMedia (MiniDLNA) versions from 1.1.15 up to 1.3.2 is vulnerable to Buffer Overflow. The vulnerability is caused by incorrect validation logic when handling HTTP requests using chunked transport encoding. This results in other code lat…

  32. 5.5CVE-2023-32324EPSS 1.5%

    OpenPrinting CUPS is an open source printing system. In versions 2.4.2 and prior, a heap buffer overflow vulnerability would allow a remote attacker to launch a denial of service (DoS) attack. A buffer overflow vulnerability in the functio…

  33. 7.8CVE-2023-33552EPSS 0.7%

    Heap Buffer Overflow in the erofs_read_one_data function at data.c in erofs-utils v1.6 allows remote attackers to execute arbitrary code via a crafted erofs filesystem image.

  34. 7.8CVE-2023-33551EPSS 0.8%

    Heap Buffer Overflow in the erofsfsck_dirent_iter function in fsck/main.c in erofs-utils v1.6 allows remote attackers to execute arbitrary code via a crafted erofs filesystem image.

  35. 5.5CVE-2023-33546EPSS 0.3%

    Janino 3.1.9 and earlier are subject to denial of service (DOS) attacks when using the expression evaluator.guess parameter name method. If the parser runs on user-supplied input, an attacker could supply content that causes the parser to …

  36. 7.8CVE-2023-2598EPSS 1.4%

    A flaw was found in the fixed buffer registration code for io_uring (io_sqe_buffer_register in io_uring/rsrc.c) in the Linux kernel that allows out-of-bounds access to physical memory beyond the end of the buffer. This flaw enables full lo…

  37. 7.2CVE-2023-33643EPSS 0.9%

    H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the AddWlanMacList interface at /goform/aspForm.

  38. 7.2CVE-2023-33642EPSS 0.9%

    H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the Edit_BasicSSID interface at /goform/aspForm.

  39. 7.2CVE-2023-33641EPSS 0.9%

    H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the AddMacList interface at /goform/aspForm.

  40. 7.2CVE-2023-33640EPSS 0.9%

    H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the SetAPWifiorLedInfoById interface at /goform/aspForm.

  41. 7.2CVE-2023-33639EPSS 0.9%

    H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the SetMobileAPInfoById interface at /goform/aspForm.

  42. 7.2CVE-2023-33638EPSS 0.9%

    H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the Edit_BasicSSID_5G interface at /goform/aspForm.

  43. 7.2CVE-2023-33637EPSS 0.9%

    H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the DelDNSHnList interface at /goform/aspForm.

  44. 7.2CVE-2023-33636EPSS 0.9%

    H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the ipqos_lanip_editlist interface at /goform/aspForm.

  45. 7.2CVE-2023-33635EPSS 0.9%

    H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the UpdateMacClone interface at /goform/aspForm.

  46. 7.2CVE-2023-33634EPSS 0.9%

    H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the EdittriggerList interface at /goform/aspForm.

  47. 7.2CVE-2023-33633EPSS 0.9%

    H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the UpdateWanParams interface at /goform/aspForm.

  48. 7.2CVE-2023-33632EPSS 0.9%

    H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the ipqos_lanip_dellist interface at /goform/aspForm.

  49. 7.2CVE-2023-33631EPSS 0.9%

    H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the DelSTList interface at /goform/aspForm.

  50. 7.2CVE-2023-33630EPSS 0.9%

    H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the EditvsList interface at /goform/aspForm.