CWE-787: Out-of-bounds Write, page 149
Filter
The product writes data past the end, or before the beginning, of the intended buffer.
What the weakness is: CWE-787 at MITRE
Ask an AI about CWE-787
Show the prompt
Explain CWE-787: Out-of-bounds Write and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/787.html and https://cve.bz/cve/cwe/787?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 9.9CVE-2017-16256EPSS 0.9%
Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based …
- 9.8CVE-2022-4873EPSS 7.2%
On Netcomm router models NF20MESH, NF20, and NL1902 a stack based buffer overflow affects the sessionKey parameter. By providing a specific number of bytes, the instruction pointer is able to be overwritten on the stack and crashes the app…
- 9.8CVE-2022-4498EPSS 1.9%
In TP-Link routers, Archer C5 and WR710N-V1, running the latest available code, when receiving HTTP Basic Authentication the httpd service can be sent a crafted packet that causes a heap overflow. This can result in either a DoS (by crashi…
- 5.5CVE-2021-46791EPSS 0.2%
Insufficient input validation during parsing of the System Management Mode (SMM) binary may allow a maliciously crafted SMM executable binary to corrupt Dynamic Root of Trust for Measurement (DRTM) user application memory that may result i…
- 7.1CVE-2021-46779EPSS 0.2%
Insufficient input validation in SVC_ECC_PRIMITIVE system call in a compromised user application or ABL may allow an attacker to corrupt ASP (AMD Secure Processor) OS memory which may lead to potential loss of integrity and availability.
- 7.1CVE-2021-26402EPSS 0.2%
Insufficient bounds checking in ASP (AMD Secure Processor) firmware while handling BIOS mailbox commands, may allow an attacker to write partially-controlled data out-of-bounds to SMM or SEV-ES regions which may lead to a potential loss of…
- 7.8CVE-2021-26398EPSS 0.2%
Insufficient input validation in SYS_KEY_DERIVE system call in a compromised user application or ABL may allow an attacker to corrupt ASP (AMD Secure Processor) OS memory which may lead to potential arbitrary code execution.
- 7.5CVE-2022-46449EPSS 0.9%
An issue in MPD (Music Player Daemon) v0.23.10 allows attackers to cause a Denial of Service (DoS) via a crafted input.
- 8.8CVE-2023-0138EPSS 0.7%
Heap buffer overflow in libphonenumber in Google Chrome prior to 109.0.5414.74 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Low)
- 8.8CVE-2023-0137EPSS 0.5%
Heap buffer overflow in Platform Apps in Google Chrome on Chrome OS prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium …
- 8.8CVE-2023-0129EPSS 0.5%
Heap buffer overflow in Network Service in Google Chrome prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page and specific interacti…
- 7.8CVE-2022-47967EPSS 0.3%
A vulnerability has been identified in Solid Edge (All versions < V2023 MP1). The DOCMGMT.DLL contains a memory corruption vulnerability that could be triggered while parsing files in different file formats such as PAR, ASM, DFT. This coul…
- 7.8CVE-2022-47935EPSS 0.3%
A vulnerability has been identified in JT Open (All versions < V11.1.1.0), JT Utilities (All versions < V13.1.1.0), Solid Edge (All versions < V2023). The Jt1001.dll contains a memory corruption vulnerability while parsing specially crafte…
- 7.2CVE-2022-43970EPSS 19%
A buffer overflow vulnerability exists in Linksys WRT54GL Wireless-G Broadband Router with firmware <= 4.30.18.006. A stack-based buffer overflow in the Start_EPI function within the httpd binary allows an authenticated attacker with admin…
- 7.8CVE-2022-40520EPSS 0.7%
Memory corruption due to stack-based buffer overflow in Core
- 7.8CVE-2022-40517EPSS 0.1%
Memory corruption in core due to stack-based buffer overflow
- 7.8CVE-2022-40516EPSS 0.9%
Memory corruption in Core due to stack-based buffer overflow.
- 7.8CVE-2022-33300EPSS 0.1%
Memory corruption in Automotive Android OS due to improper input validation.
- 6.5CVE-2022-33286EPSS 0.4%
Transient DOS due to buffer over-read in WLAN while processing 802.11 management frames.
- 6.5CVE-2022-33285EPSS 0.4%
Transient DOS due to buffer over-read in WLAN while parsing WLAN CSA action frames.
- 6.5CVE-2022-33284EPSS 0.4%
Information disclosure due to buffer over-read in WLAN while parsing BTM action frame.
- 6.5CVE-2022-33283EPSS 0.4%
Information disclosure due to buffer over-read in WLAN while WLAN frame parsing due to missing frame length check.
- 9.8CVE-2022-33265EPSS 0.4%
Memory corruption due to information exposure in Powerline Communication Firmware while sending different MMEs from a single, unassociated device.
- 6.5CVE-2022-33255EPSS 0.4%
Information disclosure due to buffer over-read in Bluetooth HOST while processing GetFolderItems and GetItemAttribute Cmds from peer device.
- 7.8CVE-2022-33218EPSS 0.1%
Memory corruption in Automotive due to improper input validation.
- 8.8CVE-2022-22088EPSS 0.5%
Memory corruption in Bluetooth HOST due to buffer overflow while parsing the command response received from remote
- 7.8CVE-2022-45126EPSS 0.2%
Kernel subsystem within OpenHarmony-v3.1.4 and prior versions in kernel_liteos_a has a kernel stack overflow vulnerability when call SysClockGettime. 4 bytes padding data from kernel stack are copied to user space incorrectly and leaked.
- 7.8CVE-2022-43662EPSS 0.2%
Kernel subsystem within OpenHarmony-v3.1.4 and prior versions in kernel_liteos_a has a kernel stack overflow vulnerability when call SysTimerGettime. 4 bytes padding data from kernel stack are copied to user space incorrectly and leaked.
- 7.8CVE-2022-4378EPSS 0.4%
A stack overflow flaw was found in the Linux kernel's SYSCTL subsystem in how a user changes certain kernel parameters and variables. This flaw allows a local user to crash or potentially escalate their privileges on the system.
- 7.8CVE-2022-47661EPSS 0.4%
GPAC MP4Box 2.1-DEV-rev649-ga8f438d20 is vulnerable to Buffer Overflow via media_tools/av_parsers.c:4988 in gf_media_nalu_add_emulation_bytes
- 7.8CVE-2022-47659EPSS 0.4%
GPAC MP4box 2.1-DEV-rev644-g5c4df2a67 is vulnerable to Buffer Overflow in gf_bs_read_data
- 7.8CVE-2022-47655EPSS 0.4%
Libde265 1.0.9 is vulnerable to Buffer Overflow in function void put_qpel_fallback<unsigned short>
- 5.5CVE-2022-47086EPSS 0.3%
GPAC MP4Box v2.1-DEV-rev574-g9d5bb184b contains a segmentation violation via the function gf_sm_load_init_swf at scene_manager/swf_parse.c
- 7.8CVE-2022-3715EPSS 0.4%
A flaw was found in the bash package, where a heap-buffer overflow can occur in valid parameter_transform. This issue may lead to memory problems.
- 7.8CVE-2023-0054EPSS 0.5%
Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1145.
- 5.5CVE-2022-44431EPSS 0.1%
In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services.
- 5.5CVE-2022-44430EPSS 0.09%
In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services.
- 5.5CVE-2022-44429EPSS 0.09%
In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services.
- 5.5CVE-2022-44428EPSS 0.09%
In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services.
- 5.5CVE-2022-44427EPSS 0.1%
In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services.
- 5.5CVE-2022-39118EPSS 0.1%
In sprd_sysdump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.
- 5.5CVE-2022-39116EPSS 0.1%
In sprd_sysdump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.
- 6.7CVE-2022-32647EPSS 0.10%
In ccu, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS0755…
- 6.7CVE-2022-32646EPSS 0.1%
In gpu drm, there is a possible stack overflow due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07363501…
- 6.7CVE-2022-32640EPSS 0.1%
In meta wifi, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS0…
- 6.7CVE-2022-32637EPSS 0.1%
In hevc decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: AL…
- 6.7CVE-2022-32636EPSS 0.10%
In keyinstall, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS075…
- 7.8CVE-2022-32635EPSS 0.10%
In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS…
- 6.7CVE-2022-32623EPSS 0.10%
In mdp, there is a possible out of bounds write due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07342…
- 7.8CVE-2022-47908EPSS 0.3%
Stack-based buffer overflow vulnerability in V-Server v4.0.12.0 and earlier allows a local attacker to obtain the information and/or execute arbitrary code by having a user to open a specially crafted project file.