cve.bz

CWE-787: Out-of-bounds Write, page 136

Filter

The product writes data past the end, or before the beginning, of the intended buffer.

What the weakness is: CWE-787 at MITRE

Ask an AI about CWE-787

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-787: Out-of-bounds Write and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/787.html and https://cve.bz/cve/cwe/787?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 4.4CVE-2022-48382EPSS 0.1%

    In log service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.

  2. 4.4CVE-2022-48381EPSS 0.1%

    In modem control device, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.

  3. 4.4CVE-2022-48380EPSS 0.1%

    In modem control device, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.

  4. 4.4CVE-2022-48374EPSS 0.10%

    In tee service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.

  5. 4.4CVE-2022-48373EPSS 0.10%

    In tee service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.

  6. 4.4CVE-2022-48372EPSS 0.10%

    In bootcp service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.

  7. 4.4CVE-2022-48240EPSS 0.10%

    In camera driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.

  8. 4.4CVE-2022-48239EPSS 0.10%

    In camera driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.

  9. 4.4CVE-2022-48238EPSS 0.10%

    In Image filter, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.

  10. 4.4CVE-2022-48237EPSS 0.10%

    In Image filter, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.

  11. 4.4CVE-2022-48235EPSS 0.10%

    In MP3 encoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.

  12. 5.5CVE-2022-48234EPSS 0.09%

    In FM service , there is a possible missing params check. This could lead to local denial of service in FM service .

  13. 5.5CVE-2022-48233EPSS 0.09%

    In FM service , there is a possible missing params check. This could lead to local denial of service in FM service .

  14. 5.5CVE-2022-48232EPSS 0.09%

    In FM service , there is a possible missing params check. This could lead to local denial of service in FM service .

  15. 4.4CVE-2022-47486EPSS 0.10%

    In ext4fsfilter driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.

  16. 4.4CVE-2022-47485EPSS 0.10%

    In modem control device, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.

  17. 4.4CVE-2022-47470EPSS 0.10%

    In ext4fsfilter driver, there is a possible out of bounds read due to a missing bounds check. This could local denial of service with System execution privileges needed.

  18. 4.4CVE-2022-47469EPSS 0.10%

    In ext4fsfilter driver, there is a possible out of bounds read due to a missing bounds check. This could local denial of service with System execution privileges needed.

  19. 5.5CVE-2022-47340EPSS 0.09%

    In h265 codec firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges.

  20. 7.8CVE-2023-27970EPSS 0.2%

    An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 16.4 and iPadOS 16.4. An app may be able to execute arbitrary code with kernel privileges.

  21. 7.8CVE-2023-27965EPSS 0.3%

    A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Studio Display Firmware Update 16.4. An app may be able to execute arbitrary code with kernel privileges.

  22. 7.8CVE-2023-27959EPSS 0.2%

    The issue was addressed with improved memory handling. This issue is fixed in iOS 16.4 and iPadOS 16.4. An app may be able to execute arbitrary code with kernel privileges.

  23. 9.8CVE-2023-27953EPSS 1.6%

    The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. A remote user may be able to cause unexpected system termination or corrupt kernel memory.

  24. 7.8CVE-2023-27936EPSS 0.3%

    An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. An app may be able to cause unexpected system …

  25. 6.7CVE-2023-27933EPSS 0.3%

    The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Monterey 12.6.4, tvOS 16.4, watchOS 9.4. An app with root privileges may be able to execute arbitrary code wi…

  26. 8.8CVE-2022-32885EPSS 0.8%

    A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5, Safari 15.6. Processing maliciously crafted web content may lead to arbitrary code execution

  27. 9.8CVE-2023-29696EPSS 0.9%

    H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function version_set.

  28. 9.8CVE-2023-29693EPSS 0.9%

    H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function set_tftp_upgrad.

  29. 8.8CVE-2023-2575EPSS 15%

    Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by a Stack-based Buffer Overflow vulnerability, which can be triggered by authenticated users via a crafted POST request.

  30. 7.8CVE-2023-21509EPSS 0.2%

    Out-of-bounds Write vulnerability while processing BC_TUI_CMD_UPDATE_SCREEN in bc_tui trustlet from Samsung Blockchain Keystore prior to version 1.3.12.1 allows local attacker to execute arbitrary code.

  31. 7.8CVE-2023-21508EPSS 0.2%

    Out-of-bounds Write vulnerability while processing BC_TUI_CMD_SEND_RESOURCE_DATA command in bc_tui trustlet from Samsung Blockchain Keystore prior to version 1.3.12.1 allows local attacker to execute arbitrary code.

  32. 7.8CVE-2023-21506EPSS 0.2%

    Out-of-bounds Write vulnerability while processing BC_TUI_CMD_SEND_RESOURCE_DATA_ARRAY command in bc_tui trustlet from Samsung Blockchain Keystore prior to version 1.3.12.1 allows local attacker to execute arbitrary code.

  33. 7.8CVE-2023-21499EPSS 0.2%

    Out-of-bounds write vulnerability in TA_Communication_mpos_encrypt_pin in mPOS TUI trustlet prior to SMR May-2023 Release 1 allows local attackers to execute arbitrary code.

  34. 6.8CVE-2023-21489EPSS 0.3%

    Heap out-of-bounds write vulnerability in bootloader prior to SMR May-2023 Release 1 allows a physical attacker to execute arbitrary code.

  35. 7.8CVE-2023-31284EPSS 0.3%

    illumos illumos-gate before 676abcb has a stack buffer overflow in /dev/net, leading to privilege escalation via a stat on a long file name in /dev/net.

  36. 7.5CVE-2023-29995EPSS 0.7%

    In NanoMQ v0.15.0-0, a Heap overflow occurs in copyn_utf8_str function of mqtt_parser.c

  37. 7.5CVE-2023-29994EPSS 0.7%

    In NanoMQ v0.15.0-0, Heap overflow occurs in read_byte function of mqtt_code.c.

  38. 8.8CVE-2023-24958EPSS 1.1%

    A vulnerability in the IBM TS7700 Management Interface 8.51.2.12, 8.52.200.111, 8.52.102.13, and 8.53.0.63 could allow an authenticated user to submit a specially crafted URL leading to privilege escalation and remote code execution. IBM …

  39. 8.8CVE-2023-22640EPSS 0.9%

    A out-of-bounds write vulnerability in Fortinet FortiOS 7.2.0 through 7.2.3, FortiOS 7.0.0 through 7.0.10, FortiOS 6.4.0 through 6.4.11, FortiOS 6.2.0 through 6.2.13, FortiOS 6.0.0 through 6.0.16, FortiProxy 7.2.0 through 7.2.1, FortiProxy…

  40. 9.8CVE-2023-31470EPSS 1.1%

    SmartDNS through 41 before 56d0332 allows an out-of-bounds write because of a stack-based buffer overflow in the _dns_encode_domain function in the dns.c file, via a crafted DNS request.

  41. 9.8CVE-2023-27973EPSS 1.5%

    Certain HP LaserJet Pro print products are potentially vulnerable to Heap Overflow and/or Remote Code Execution.

  42. 7.8CVE-2023-31436EPSS 0.6%

    qfq_change_class in net/sched/sch_qfq.c in the Linux kernel before 6.2.13 allows an out-of-bounds write because lmax can exceed QFQ_MIN_LMAX.

  43. 5.5CVE-2023-29950EPSS 0.3%

    swfrender v0.9.2 was discovered to contain a heap buffer overflow in the function enumerateUsedIDs_fillstyle at modules/swftools.c

  44. 8.2CVE-2023-20869EPSS 2.0%

    VMware Workstation (17.x) and VMware Fusion (13.x) contain a stack-based buffer-overflow vulnerability that exists in the functionality for sharing host Bluetooth devices with the virtual machine.

  45. 8.8CVE-2023-20872EPSS 0.9%

    VMware Workstation and Fusion contain an out-of-bounds read/write vulnerability in SCSI CD/DVD device emulation.

  46. 5.5CVE-2023-30402EPSS 0.3%

    YASM v1.3.0 was discovered to contain a heap overflow via the function handle_dot_label at /nasm/nasm-token.re. Note: This has been disputed by third parties who argue this is a bug and not a security issue because yasm is a standalone pro…

  47. 5.5CVE-2023-30414EPSS 0.3%

    Jerryscript commit 1a2c047 was discovered to contain a stack overflow via the component vm_loop at /jerry-core/vm/vm.c.

  48. 5.5CVE-2023-30410EPSS 0.3%

    Jerryscript commit 1a2c047 was discovered to contain a stack overflow via the component ecma_op_function_construct at /operations/ecma-function-object.c.

  49. 9.8CVE-2023-24823EPSS 1.0%

    RIOT-OS, an operating system that supports Internet of Things devices, contains a network stack with the ability to process 6LoWPAN frames. Prior to version 2022.10, an attacker can send a crafted frame to the device resulting in a type co…

  50. 7.5CVE-2023-24821EPSS 0.9%

    RIOT-OS, an operating system that supports Internet of Things devices, contains a network stack with the ability to process 6LoWPAN frames. Prior to version 2022.10, an attacker can send a crafted frame to the device resulting in a large o…