cve.bz

CWE-787: Out-of-bounds Write, page 155

Filter

The product writes data past the end, or before the beginning, of the intended buffer.

What the weakness is: CWE-787 at MITRE

Ask an AI about CWE-787

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-787: Out-of-bounds Write and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/787.html and https://cve.bz/cve/cwe/787?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.8CVE-2022-3491EPSS 0.5%

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0742.

  2. 9.8CVE-2022-3520EPSS 1.1%

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0765.

  3. 9.8CVE-2022-44367EPSS 1.0%

    Tenda i21 V1.0.0.14(4656) is vulnerable to Buffer Overflow via /goform/setUplinkInfo.

  4. 9.8CVE-2022-44366EPSS 9.9%

    Tenda i21 V1.0.0.14(4656) is vulnerable to Buffer Overflow via /goform/setDiagnoseInfo.

  5. 9.8CVE-2022-44365EPSS 1.0%

    Tenda i21 V1.0.0.14(4656) has a stack overflow vulnerability via /goform/setSysPwd.

  6. 9.8CVE-2022-44363EPSS 0.8%

    Tenda i21 V1.0.0.14(4656) is vulnerable to Buffer Overflow via /goform/setSnmpInfo.

  7. 9.8CVE-2022-44362EPSS 1.0%

    Tenda i21 V1.0.0.14(4656) is vulnerable to Buffer Overflow via /goform/AddSysLogRule.

  8. 7.5CVE-2022-45640EPSS 1.1%

    Tenda Tenda AC6V1.0 V15.03.05.19 is affected by buffer overflow. Causes a denial of service (local).

  9. 7.5CVE-2022-45337EPSS 0.9%

    Tenda TX9 Pro v22.03.02.10 was discovered to contain a stack overflow via the list parameter at /goform/SetIpMacBind.

  10. 7.8CVE-2022-45332EPSS 0.3%

    LibreDWG v0.12.4.4643 was discovered to contain a heap buffer overflow via the function decode_preR13_section_hdr at decode_r11.c.

  11. 8.8CVE-2022-4176EPSS 0.7%

    Out of bounds write in Lacros Graphics in Google Chrome on Chrome OS and Lacros prior to 108.0.5359.71 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via UI inter…

  12. 7.8CVE-2022-45202EPSS 0.4%

    GPAC v2.1-DEV-rev428-gcb8ae46c8-master was discovered to contain a stack overflow via the function dimC_box_read at isomedia/box_code_3gpp.c.

  13. 7.8CVE-2022-4141EPSS 0.5%

    Heap based buffer overflow in vim/vim 9.0.0946 and below by allowing an attacker to CTRL-W gf in the expression used in the RHS of the substitute command.

  14. 9.6CVE-2022-4135KEVEPSS 32%

    Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

  15. 8.8CVE-2022-44789EPSS 2.5%

    A logical issue in O_getOwnPropertyDescriptor() in Artifex MuJS 1.0.0 through 1.3.x before 1.3.2 allows an attacker to achieve Remote Code Execution through memory corruption, via the loading of a crafted JavaScript file.

  16. 8.8CVE-2022-44260EPSS 2.3%

    TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via parameter sPort/ePort in the setIpPortFilterRules function.

  17. 8.8CVE-2022-44259EPSS 2.3%

    TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via parameter week, sTime, and eTime in the setParentalRules function.

  18. 8.8CVE-2022-44258EPSS 2.5%

    TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via parameter command in the setTracerouteCfg function.

  19. 8.8CVE-2022-44257EPSS 2.3%

    TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via parameter pppoeUser in the setOpModeCfg function.

  20. 8.8CVE-2022-44256EPSS 2.3%

    TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via parameter lang in the setLanguageCfg function.

  21. 9.8CVE-2022-44255EPSS 2.3%

    TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a pre-authentication buffer overflow in the main function via long post data.

  22. 8.8CVE-2022-44254EPSS 2.3%

    TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via parameter text in the setSmsCfg function.

  23. 8.8CVE-2022-44253EPSS 2.3%

    TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via parameter ip in the setDiagnosisCfg function.

  24. 8.2CVE-2022-36337EPSS 0.2%

    An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. A stack buffer overflow vulnerability in the MebxConfiguration driver leads to arbitrary code execution. Control of a UEFI variable under the OS can cause this overfl…

  25. 9.8CVE-2022-44807EPSS 1.3%

    D-Link DIR-882 1.10B02 and 1.20B06 is vulnerable to Buffer Overflow via webGetVarString.

  26. 9.8CVE-2022-44806EPSS 1.3%

    D-Link DIR-882 1.10B02 and 1.20B06 is vulnerable to Buffer Overflow.

  27. 9.8CVE-2022-44804EPSS 1.3%

    D-Link DIR-882 1.10B02 and1.20B06 is vulnerable to Buffer Overflow via the websRedirect function.

  28. 9.8CVE-2022-44202EPSS 1.3%

    D-Link DIR878 1.02B04 and 1.02B05 are vulnerable to Buffer Overflow.

  29. 9.8CVE-2022-44184EPSS 1.1%

    Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow in /usr/sbin/httpd via parameter wan_dns1_sec.

  30. 9.8CVE-2022-44200EPSS 1.0%

    Netgear R7000P V1.3.0.8, V1.3.1.64 is vulnerable to Buffer Overflow via parameters: stamode_dns1_pri and stamode_dns1_sec.

  31. 9.8CVE-2022-44199EPSS 1.0%

    Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow via parameter openvpn_server_ip.

  32. 9.8CVE-2022-44198EPSS 1.0%

    Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow via parameter openvpn_push1.

  33. 9.8CVE-2022-44197EPSS 1.2%

    Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow via parameter openvpn_server_ip.

  34. 9.8CVE-2022-44196EPSS 1.2%

    Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow via parameter openvpn_push1.

  35. 9.8CVE-2022-44194EPSS 1.5%

    Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow via parameters apmode_dns1_pri and apmode_dns1_sec.

  36. 9.8CVE-2022-44193EPSS 1.2%

    Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow in /usr/sbin/httpd via parameters: starthour, startminute , endhour, and endminute.

  37. 9.8CVE-2022-44191EPSS 1.2%

    Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow via parameters KEY1 and KEY2.

  38. 9.8CVE-2022-44190EPSS 1.2%

    Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow via parameter enable_band_steering.

  39. 9.8CVE-2022-44188EPSS 1.2%

    Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow in /usr/sbin/httpd via parameter enable_band_steering.

  40. 9.8CVE-2022-44187EPSS 1.2%

    Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow via wan_dns1_pri.

  41. 9.8CVE-2022-44186EPSS 1.2%

    Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow in /usr/sbin/httpd via parameter wan_dns1_pri.

  42. 7.8CVE-2022-35407EPSS 0.2%

    An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. A stack buffer overflow leads to arbitrary code execution in the SetupUtility driver on Intel platforms. An attacker can change the values of certain UEFI variables. …

  43. 6.8CVE-2022-35897EPSS 0.4%

    An stack buffer overflow vulnerability leads to arbitrary code execution issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. If the attacker modifies specific UEFI variables, it can cause a stack overflow, leading to arbi…

  44. 7.5CVE-2022-44163EPSS 0.9%

    Tenda AC21 V16.03.08.15 is vulnerable to Buffer Overflow via function formSetMacFilterCfg.

  45. 7.5CVE-2022-44158EPSS 0.9%

    Tenda AC21 V16.03.08.15 is vulnerable to Buffer Overflow via function via set_device_name.

  46. 7.5CVE-2022-44156EPSS 0.9%

    Tenda AC15 V15.03.05.19 is vulnerable to Buffer Overflow via function formSetIpMacBind.

  47. 7.5CVE-2022-44169EPSS 0.9%

    Tenda AC15 V15.03.05.18 is vulnerable to Buffer Overflow via function formSetVirtualSer.

  48. 7.5CVE-2022-44168EPSS 0.9%

    Tenda AC15 V15.03.05.18 is vulnerable to Buffer Overflow via function fromSetRouteStatic..

  49. 7.5CVE-2022-44167EPSS 0.9%

    Tenda AC15 V15.03.05.18 is avulnerable to Buffer Overflow via function formSetPPTPServer.

  50. 4.4CVE-2022-34667EPSS 0.4%

    NVIDIA CUDA Toolkit SDK contains a stack-based buffer overflow vulnerability in cuobjdump, where an unprivileged remote attacker could exploit this buffer overflow condition by persuading a local user to download a specially crafted corrup…