cve.bz

CWE-787: Out-of-bounds Write, page 174

Filter

The product writes data past the end, or before the beginning, of the intended buffer.

What the weakness is: CWE-787 at MITRE

Ask an AI about CWE-787

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-787: Out-of-bounds Write and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/787.html and https://cve.bz/cve/cwe/787?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 6.5CVE-2022-1482EPSS 0.9%

    Inappropriate implementation in WebGL in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

  2. 5.5CVE-2021-33464EPSS 0.3%

    An issue was discovered in yasm version 1.3.0. There is a heap-buffer-overflow in inc_fopen() in modules/preprocs/nasm/nasm-pp.c.

  3. 5.5CVE-2021-33448EPSS 0.3%

    An issue was discovered in mjs(mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is stack buffer overflow at 0x7fffe9049390.

  4. 5.5CVE-2021-33443EPSS 0.3%

    An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is stack buffer overflow in mjs_execute() in mjs.c.

  5. 5.5CVE-2021-33438EPSS 0.3%

    An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is stack buffer overflow in json_parse_array() in mjs.c.

  6. 8.8CVE-2022-1042EPSS 0.8%

    In Zephyr bluetooth mesh core stack, an out-of-bound write vulnerability can be triggered during provisioning.

  7. 8.8CVE-2022-1041EPSS 0.9%

    In Zephyr bluetooth mesh core stack, an out-of-bound write vulnerability can be triggered during provisioning.

  8. 8.8CVE-2022-1143EPSS 0.9%

    Heap buffer overflow in WebUI in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via specific input into DevTools.

  9. 8.8CVE-2022-1142EPSS 0.8%

    Heap buffer overflow in WebUI in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via specific input into DevTools.

  10. 6.5CVE-2022-34503EPSS 0.8%

    QPDF v8.4.2 was discovered to contain a heap buffer overflow via the function QPDF::processXRefStream. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted PDF file.

  11. 5.5CVE-2022-34502EPSS 0.3%

    Radare2 v5.7.0 was discovered to contain a heap buffer overflow via the function consume_encoded_name_new at format/wasm/wasm.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted binary file.

  12. 8.8CVE-2022-0976EPSS 1.1%

    Heap buffer overflow in GPU in Google Chrome prior to 99.0.4844.74 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

  13. 9.8CVE-2022-34610EPSS 1.4%

    H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the URL /ihomers/app.

  14. 9.8CVE-2022-34609EPSS 1.4%

    H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the INTF parameter at /doping.asp.

  15. 9.8CVE-2022-34608EPSS 1.2%

    H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the ajaxmsg parameter at /AJAX/ajaxget.

  16. 9.8CVE-2022-34607EPSS 14%

    H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the HOST parameter at /doping.asp.

  17. 9.8CVE-2022-34606EPSS 1.2%

    H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the EditvsList parameter at /dotrace.asp.

  18. 9.8CVE-2022-34605EPSS 1.2%

    H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the HOST parameter at /dotrace.asp.

  19. 9.8CVE-2022-34604EPSS 1.2%

    H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the INTF parameter at /dotrace.asp.

  20. 9.8CVE-2022-34603EPSS 1.2%

    H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the DelDNSHnList interface at /goform/aspForm.

  21. 9.8CVE-2022-34602EPSS 1.2%

    H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the ipqos_lanip_editlist interface at /goform/aspForm.

  22. 9.8CVE-2022-34601EPSS 1.2%

    H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the Delstlist interface at /goform/aspForm.

  23. 9.8CVE-2022-34600EPSS 1.2%

    H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the EditSTList interface at /goform/aspForm.

  24. 9.8CVE-2022-34599EPSS 1.2%

    H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the EdittriggerList interface at /goform/aspForm.

  25. 7.8CVE-2022-33967EPSS 0.6%

    squashfs filesystem implementation of U-Boot versions from v2020.10-rc2 to v2022.07-rc5 contains a heap-based buffer overflow vulnerability due to a defect in the metadata reading process. Loading a specially crafted squashfs image may lea…

  26. 6.8CVE-2022-32961EPSS 0.2%

    HICOS’ client-side citizen digital certificate component has a stack-based buffer overflow vulnerability when reading IC card due to insufficient parameter length validation for token information. An unauthenticated physical attacker can e…

  27. 6.8CVE-2022-32960EPSS 0.2%

    HiCOS’ client-side citizen digital certificate component has a stack-based buffer overflow vulnerability when reading IC card due to insufficient parameter length validation for card number. An unauthenticated physical attacker can exploit…

  28. 6.8CVE-2022-32959EPSS 0.2%

    HiCOS’ client-side citizen digital certificate component has a stack-based buffer overflow vulnerability when reading IC card due to insufficient parameter length validation for OS information. An unauthenticated physical attacker can expl…

  29. 8.8CVE-2022-31144EPSS 3.2%

    Redis is an in-memory database that persists on disk. A specially crafted `XAUTOCLAIM` command on a stream key in a specific state may result with heap overflow, and potentially remote code execution. This problem affects versions on the 7…

  30. 7.8CVE-2022-2122EPSS 0.5%

    DOS / potential heap overwrite in qtdemux using zlib decompression. Integer overflow in qtdemux element in qtdemux_inflate function which causes a segfault, or could cause a heap overwrite, depending on libc and OS. Depending on the libc u…

  31. 7.8CVE-2022-1920EPSS 0.5%

    Integer overflow in matroskademux element in gst_matroska_demux_add_wvpk_header function which allows a heap overwrite while parsing matroska files. Potential for arbitrary code execution through heap overwrite.

  32. 7.5CVE-2022-34035EPSS 1.7%

    HTMLDoc v1.9.12 and below was discovered to contain a heap overflow via e_node htmldoc/htmldoc/html.cxx:588.

  33. 7.5CVE-2022-34033EPSS 1.7%

    HTMLDoc v1.9.15 was discovered to contain a heap overflow via (write_header) /htmldoc/htmldoc/html.cxx:273.

  34. 7.5CVE-2022-23745EPSS 17%

    A potential memory corruption issue was found in Capsule Workspace Android app (running on GrapheneOS). This could result in application crashing but could not be used to gather any sensitive information.

  35. 6.7CVE-2021-44170EPSS 0.2%

    A stack-based buffer overflow vulnerability [CWE-121] in the command line interpreter of FortiOS before 7.0.4 and FortiProxy before 2.0.8 may allow an authenticated attacker to execute unauthorized code or commands via specially crafted co…

  36. 6.8CVE-2021-33656EPSS 0.6%

    When setting font with malicous data by ioctl cmd PIO_FONT,kernel will write memory out of bounds.

  37. 6.7CVE-2021-33655EPSS 0.3%

    When sending malicous data to kernel by ioctl cmd FBIOPUT_VSCREENINFO,kernel will write memory out of bounds.

  38. 7.8CVE-2022-32434EPSS 0.9%

    EIPStackGroup OpENer v2.3.0 was discovered to contain a stack overflow via /bin/posix/src/ports/POSIX/OpENer+0x56073d.

  39. 7.8CVE-2022-34251EPSS 0.3%

    Adobe InCopy versions 17.2 (and earlier) and 16.4.1 (and earlier) are affected by an Out-Of-Bounds Write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires us…

  40. 7.8CVE-2022-34247EPSS 0.3%

    Adobe InDesign versions 17.2.1 (and earlier) and 16.4.1 (and earlier) are affected by an Out-Of-Bounds Write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue require…

  41. 7.8CVE-2022-34245EPSS 0.5%

    Adobe InDesign versions 17.2.1 (and earlier) and 16.4.1 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue r…

  42. 7.8CVE-2022-34217EPSS 3.0%

    Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are affected by an Out-Of-Bounds Write vulnerability that could result in arbitrary code execution in the context of the cu…

  43. 7.3CVE-2022-32323EPSS 0.9%

    AutoTrace v0.40.0 was discovered to contain a heap overflow via the ReadImage function at input-bmp.c:660.

  44. 7.8CVE-2021-26384EPSS 0.2%

    A malformed SMI (System Management Interface) command may allow an attacker to establish a corrupted SMI Trigger Info data structure, potentially leading to out-of-bounds memory reads and writes when triggering an SMI resulting in a potent…

  45. 7.5CVE-2020-14127EPSS 1.1%

    A denial of service vulnerability exists in some Xiaomi models of phones. The vulnerability is caused by heap overflow and can be exploited by attackers to make remote denial of service.

  46. 7.5CVE-2022-34759EPSS 0.8%

    A CWE-787: Out-of-bounds Write vulnerability exists that could cause a denial of service of the webserver due to improper parsing of the HTTP Headers. Affected Products: X80 advanced RTU Communication Module (BMENOR2200H) (V1.0), OPC UA Mo…

  47. 7.8CVE-2022-32117EPSS 0.3%

    Jerryscript v2.4.0 was discovered to contain a stack buffer overflow via the function jerryx_print_unhandled_exception in /util/print.c.

  48. 5.5CVE-2022-2380EPSS 0.2%

    The Linux kernel was found vulnerable out of bounds memory access in the drivers/video/fbdev/sm712fb.c:smtcfb_read() function. The vulnerability could result in local attackers being able to crash the kernel.

  49. 9.8CVE-2022-20229EPSS 3.0%

    In bta_hf_client_handle_cind_list_item of bta_hf_client_at.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction…

  50. 9.8CVE-2022-20222EPSS 1.2%

    In read_attr_value of gatt_db.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitati…