cve.bz

CWE-787: Out-of-bounds Write, page 154

Filter

The product writes data past the end, or before the beginning, of the intended buffer.

What the weakness is: CWE-787 at MITRE

Ask an AI about CWE-787

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-787: Out-of-bounds Write and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/787.html and https://cve.bz/cve/cwe/787?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.5CVE-2022-45519EPSS 0.9%

    Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the Go parameter at /goform/SafeMacFilter.

  2. 7.5CVE-2022-45518EPSS 0.9%

    Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/SetIpBind.

  3. 7.5CVE-2022-45517EPSS 0.9%

    Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/VirtualSer.

  4. 7.5CVE-2022-45516EPSS 0.9%

    Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/NatStaticSetting.

  5. 7.5CVE-2022-45515EPSS 0.9%

    Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the entries parameter at /goform/addressNat.

  6. 7.5CVE-2022-45514EPSS 0.9%

    Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/webExcptypemanFilter.

  7. 7.5CVE-2022-45513EPSS 0.9%

    Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/P2pListFilter.

  8. 7.5CVE-2022-45512EPSS 0.9%

    Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/SafeEmailFilter.

  9. 7.5CVE-2022-45511EPSS 1.0%

    Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the PPPOEPassword parameter at /goform/QuickIndex.

  10. 7.5CVE-2022-45510EPSS 0.9%

    Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the mit_ssid_index parameter at /goform/AdvSetWrlsafeset.

  11. 7.5CVE-2022-45509EPSS 0.9%

    Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the account parameter at /goform/addUserName.

  12. 7.5CVE-2022-45508EPSS 0.9%

    Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the new_account parameter at /goform/editUserName.

  13. 7.5CVE-2022-45507EPSS 0.9%

    Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the editNameMit parameter at /goform/editFileName.

  14. 7.5CVE-2022-45505EPSS 0.9%

    Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the cmdinput parameter at /goform/exeCommand.

  15. 7.5CVE-2022-45503EPSS 0.9%

    Tenda W6-S v1.0.0.4(510) was discovered to contain a stack overflow via the linkEn parameter at /goform/setAutoPing.

  16. 7.5CVE-2022-45501EPSS 0.9%

    Tenda W6-S v1.0.0.4(510) was discovered to contain a stack overflow via the wl_radio parameter at /goform/wifiSSIDset.

  17. 7.5CVE-2022-45499EPSS 0.9%

    Tenda W6-S v1.0.0.4(510) was discovered to contain a stack overflow via the wl_radio parameter at /goform/WifiMacFilterGet.

  18. 7.5CVE-2022-44931EPSS 0.9%

    Tenda A18 v15.13.07.09 was discovered to contain a stack overflow via the security_5g parameter at /goform/WifiBasicSet.

  19. 3.3CVE-2022-41802EPSS 0.2%

    Kernel subsystem within OpenHarmony-v3.1.4 and prior versions in kernel_liteos_a has a kernel stack overflow vulnerability when call SysClockGetres. 4 bytes padding data from kernel stack are copied to user space incorrectly and leaked.

  20. 10.0CVE-2022-4291EPSS 0.4%

    The aswjsflt.dll library from Avast Antivirus windows contained a potentially exploitable heap corruption vulnerability that could enable an attacker to bypass the sandbox of the application it was loaded into, if applicable. This issue wa…

  21. 7.8CVE-2022-3092EPSS 0.2%

    GE CIMPICITY versions 2022 and prior is vulnerable to an out-of-bounds write, which could allow an attacker to execute arbitrary code.

  22. 8.8CVE-2022-44373EPSS 1.6%

    A stack overflow vulnerability exists in TrendNet Wireless AC Easy-Upgrader TEW-820AP (Version v1.0R, firmware version 1.01.B01) which may result in remote code execution.

  23. 7.8CVE-2022-43667EPSS 0.3%

    Stack-based buffer overflow vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file.

  24. 7.8CVE-2022-43509EPSS 0.3%

    Out-of-bounds write vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file.

  25. 9.1CVE-2022-41902EPSS 0.5%

    TensorFlow is an open source platform for machine learning. The function MakeGrapplerFunctionItem takes arguments that determine the sizes of inputs and outputs. If the inputs given are greater than or equal to the sizes of the outputs, an…

  26. 5.5CVE-2022-42772EPSS 0.1%

    In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.

  27. 5.5CVE-2022-42755EPSS 0.1%

    In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.

  28. 5.5CVE-2022-39133EPSS 0.1%

    In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.

  29. 5.5CVE-2022-39132EPSS 0.1%

    In camera driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.

  30. 5.5CVE-2022-39129EPSS 0.1%

    In face detect driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.

  31. 5.5CVE-2022-39106EPSS 0.1%

    In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.

  32. 7.8CVE-2022-45283EPSS 0.4%

    GPAC MP4box v2.0.0 was discovered to contain a stack overflow in the smil_parse_time_list parameter at /scenegraph/svg_attributes.c.

  33. 9.8CVE-2022-40918EPSS 1.9%

    Buffer overflow in firmware lewei_cam binary version 2.0.10 in Force 1 Discovery Wifi U818A HD+ FPV Drone allows attacker to gain remote code execution as root user via a specially crafted UDP packet. Please update the Reference section to…

  34. 6.5CVE-2022-35260EPSS 2.7%

    curl can be told to parse a `.netrc` file for credentials. If that file endsin a line with 4095 consecutive non-white space letters and no newline, curlwould first read past the end of the stack-based buffer, and if the readworks, write a …

  35. 7.5CVE-2022-37325EPSS 1.2%

    In Sangoma Asterisk through 16.28.0, 17.x and 18.x through 18.14.0, and 19.x through 19.6.0, an incoming Setup message to addons/ooh323c/src/ooq931.c with a malformed Calling or Called Party IE can cause a crash.

  36. 6.7CVE-2022-32634EPSS 0.10%

    In ccci, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS071…

  37. 6.7CVE-2022-32632EPSS 0.1%

    In Wi-Fi, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07…

  38. 6.7CVE-2022-32631EPSS 0.1%

    In Wi-Fi, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07…

  39. 6.7CVE-2022-32629EPSS 0.10%

    In isp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS0731077…

  40. 6.7CVE-2022-32628EPSS 0.10%

    In isp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS0731078…

  41. 6.7CVE-2022-32626EPSS 0.10%

    In display, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS…

  42. 6.7CVE-2022-32625EPSS 0.10%

    In display, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS…

  43. 6.7CVE-2022-32622EPSS 0.1%

    In gz, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07363786; …

  44. 6.4CVE-2022-32621EPSS 0.1%

    In isp, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07310829; Iss…

  45. 6.7CVE-2022-32620EPSS 0.1%

    In mpu, there is a possible memory corruption due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07541753; Issue ID…

  46. 6.7CVE-2022-32619EPSS 0.1%

    In keyinstall, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: A…

  47. 6.7CVE-2022-32598EPSS 0.1%

    In widevine, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALP…

  48. 6.7CVE-2022-32597EPSS 0.1%

    In widevine, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALP…

  49. 6.7CVE-2022-32596EPSS 0.1%

    In widevine, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALP…

  50. 6.7CVE-2022-32594EPSS 0.1%

    In widevine, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALP…