cve.bz

CWE-787: Out-of-bounds Write, page 171

Filter

The product writes data past the end, or before the beginning, of the intended buffer.

What the weakness is: CWE-787 at MITRE

Ask an AI about CWE-787

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-787: Out-of-bounds Write and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/787.html and https://cve.bz/cve/cwe/787?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.8CVE-2022-32813EPSS 0.3%

    The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.5, macOS Big Sur 11.6.8, Security Update 2022-005 Catalina, iOS 15.6 and iPadOS 15.6, tvOS 15.6, watchOS 8.7. An app with root privileges may b…

  2. 7.8CVE-2022-32812EPSS 0.6%

    The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.5, macOS Big Sur 11.6.8, Security Update 2022-005 Catalina. An app may be able to execute arbitrary code with kernel privileges.

  3. 7.8CVE-2022-32810EPSS 0.7%

    The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.5, watchOS 8.7, iOS 15.6 and iPadOS 15.6. An app may be able to execute arbitrary code with kernel privileges.

  4. 7.5CVE-2022-32793EPSS 1.1%

    Multiple out-of-bounds write issues were addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.5, watchOS 8.7, tvOS 15.6, iOS 15.6 and iPadOS 15.6. An app may be able to disclose kernel memory.

  5. 5.5CVE-2021-4214EPSS 0.5%

    A heap overflow flaw was found in libpngs' pngimage.c program. This flaw allows an attacker with local network access to pass a specially crafted PNG file to the pngimage utility, causing an application to crash, leading to a denial of ser…

  6. 5.3CVE-2021-4040EPSS 3.2%

    A flaw was found in AMQ Broker. This issue can cause a partial interruption to the availability of AMQ Broker via an Out of memory (OOM) condition. This flaw allows an attacker to partially disrupt availability to the broker through a sust…

  7. 7.5CVE-2022-25903EPSS 1.4%

    The package opcua from 0.0.0 are vulnerable to Denial of Service (DoS) via the ExtensionObjects and Variants objects, when it allows unlimited nesting levels, which could result in a stack overflow even if the message size is less than the…

  8. 7.5CVE-2021-3839EPSS 1.7%

    A flaw was found in the vhost library in DPDK. Function vhost_user_set_inflight_fd() does not validate `msg->payload.inflight.num_queues`, possibly causing out-of-bounds memory read/write. Any software using DPDK vhost library may crash as…

  9. 7.5CVE-2021-20298EPSS 1.6%

    A flaw was found in OpenEXR's B44Compressor. This flaw allows an attacker who can submit a crafted file to be processed by OpenEXR, to exhaust all memory accessible to the application. The highest threat from this vulnerability is to syste…

  10. 7.8CVE-2022-26061EPSS 0.7%

    A heap-based buffer overflow vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.

  11. 7.8CVE-2022-25972EPSS 0.6%

    An out-of-bounds write vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.

  12. 5.5CVE-2022-36233EPSS 0.3%

    Tenda AC9 V15.03.2.13 is vulnerable to Buffer Overflow via httpd, form_fast_setting_wifi_set. httpd.

  13. 9.8CVE-2022-37175EPSS 1.1%

    Tenda ac15 firmware V15.03.05.18 httpd server has stack buffer overflow in /goform/formWifiBasicSet.

  14. 9.8CVE-2022-36947EPSS 3.0%

    Unsafe Parsing of a PNG tRNS chunk in FastStone Image Viewer through 7.5 results in a stack buffer overflow.

  15. 7.8CVE-2022-37049EPSS 0.4%

    The component tcpprep in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer overflow in parse_mpls at common/get.c:150. NOTE: this is different from CVE-2022-27942.

  16. 7.8CVE-2022-37048EPSS 0.4%

    The component tcprewrite in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer overflow in get_l2len_protocol at common/get.c:344. NOTE: this is different from CVE-2022-27941.

  17. 7.8CVE-2022-37047EPSS 0.4%

    The component tcprewrite in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer overflow in get_ipv6_next at common/get.c:713. NOTE: this is different from CVE-2022-27940.

  18. 6.7CVE-2022-21172EPSS 0.2%

    Out of bounds write for some Intel(R) PROSet/Wireless WiFi products may allow a privileged user to potentially enable escalation of privilege via local access.

  19. 7.8CVE-2021-33060EPSS 0.3%

    Out-of-bounds write in the BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via local access.

  20. 5.5CVE-2022-2869EPSS 0.3%

    libtiff's tiffcrop tool has a uint32_t underflow which leads to out of bounds read and write in the extractContigSamples8bits routine. An attacker who supplies a crafted file to tiffcrop could trigger this flaw, most likely by tricking a u…

  21. 5.5CVE-2022-2867EPSS 0.3%

    libtiff's tiffcrop utility has a uint32_t underflow that can lead to out of bounds read and write. An attacker who supplies a crafted file to tiffcrop (likely via tricking a user to run tiffcrop on it with certain parameters) could cause a…

  22. 5.5CVE-2022-36191EPSS 0.4%

    A heap-buffer-overflow had occurred in function gf_isom_dovi_config_get of isomedia/avc_ext.c:2490, as demonstrated by MP4Box. This vulnerability was fixed in commit fef6242.

  23. 7.8CVE-2022-38238EPSS 0.3%

    XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::lookChar() at /xpdf/Stream.cc.

  24. 7.8CVE-2022-38237EPSS 0.3%

    XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::readScan() at /xpdf/Stream.cc.

  25. 7.8CVE-2022-38231EPSS 0.3%

    XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::getChar() at /xpdf/Stream.cc.

  26. 7.8CVE-2022-38229EPSS 0.3%

    XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::readHuffSym(DCTHuffTable*) at /xpdf/Stream.cc.

  27. 7.8CVE-2022-38228EPSS 0.3%

    XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::transformDataUnit at /xpdf/Stream.cc.

  28. 7.8CVE-2022-38227EPSS 0.3%

    XPDF commit ffaf11c was discovered to contain a stack overflow via __asan_memcpy at asan_interceptors_memintrinsics.cpp.

  29. 7.8CVE-2022-37781EPSS 0.4%

    fdkaac v1.0.3 was discovered to contain a heap buffer overflow via __interceptor_memcpy.part.46 at /sanitizer_common/sanitizer_common_interceptors.inc.

  30. 5.5CVE-2022-36150EPSS 0.3%

    tifig v0.2.2 was discovered to contain a heap-buffer overflow via __asan_memmove at /asan/asan_interceptors_memintrinsics.cpp.

  31. 7.8CVE-2022-36144EPSS 0.3%

    SWFMill commit 53d7690 was discovered to contain a heap-buffer overflow via base64_encode.

  32. 7.8CVE-2022-36143EPSS 0.3%

    SWFMill commit 53d7690 was discovered to contain a heap-buffer overflow via __interceptor_strlen.part at /sanitizer_common/sanitizer_common_interceptors.inc.

  33. 7.8CVE-2022-36142EPSS 0.3%

    SWFMill commit 53d7690 was discovered to contain a heap-buffer overflow via SWF::Reader::getU30().

  34. 7.8CVE-2022-36139EPSS 0.3%

    SWFMill commit 53d7690 was discovered to contain a heap-buffer overflow via SWF::Writer::writeByte(unsigned char).

  35. 6.5CVE-2022-35475EPSS 0.9%

    OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6e41a8.

  36. 6.5CVE-2022-35474EPSS 0.8%

    OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6b544e.

  37. 6.5CVE-2022-35472EPSS 0.8%

    OTFCC v0.10.4 was discovered to contain a global overflow via /release-x64/otfccdump+0x718693.

  38. 6.5CVE-2022-35471EPSS 0.8%

    OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6e41b0.

  39. 6.5CVE-2022-35470EPSS 0.9%

    OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x65fc97.

  40. 6.5CVE-2022-35468EPSS 0.8%

    OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6e420d.

  41. 6.5CVE-2022-35467EPSS 0.9%

    OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6e41b8.

  42. 6.5CVE-2022-35466EPSS 0.9%

    OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6c0473.

  43. 6.5CVE-2022-35465EPSS 0.8%

    OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6c0414.

  44. 6.5CVE-2022-35464EPSS 0.8%

    OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6171b2.

  45. 6.5CVE-2022-35463EPSS 0.8%

    OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6b0478.

  46. 6.5CVE-2022-35462EPSS 0.8%

    OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6c0bc3.

  47. 6.5CVE-2022-35461EPSS 0.8%

    OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6c0a32.

  48. 6.5CVE-2022-35460EPSS 0.8%

    OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x61731f.

  49. 6.5CVE-2022-35459EPSS 0.8%

    OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6e412a.

  50. 6.5CVE-2022-35458EPSS 0.9%

    OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6b05ce.