cve.bz

CWE-787: Out-of-bounds Write, page 175

Filter

The product writes data past the end, or before the beginning, of the intended buffer.

What the weakness is: CWE-787 at MITRE

Ask an AI about CWE-787

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-787: Out-of-bounds Write and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/787.html and https://cve.bz/cve/cwe/787?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.8CVE-2022-22049EPSS 1.1%

    Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

  2. 8.8CVE-2022-22026EPSS 1.0%

    Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

  3. 7.5CVE-2022-1737EPSS 1.3%

    Pyramid Solutions' affected products, the Developer and DLL kits for EtherNet/IP Adapter and EtherNet/IP Scanner, are vulnerable to an out-of-bounds write, which may allow an unauthorized attacker to send a specially crafted packet that ma…

  4. 7.5CVE-2022-34742EPSS 0.9%

    The system module has a read/write vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.

  5. 7.5CVE-2021-41396EPSS 1.4%

    Live555 through 1.08 does not handle socket connections properly. A huge number of incoming socket connections in a short time invokes the error-handling module, in which a heap-based buffer overflow happens. An attacker can leverage this …

  6. 10.0CVE-2022-34819EPSS 2.1%

    A vulnerability has been identified in SIMATIC CP 1242-7 V2 (All versions < V3.3.46), SIMATIC CP 1243-1 (All versions < V3.3.46), SIMATIC CP 1243-7 LTE EU (All versions < V3.3.46), SIMATIC CP 1243-7 LTE US (All versions < V3.3.46), SIMATIC…

  7. 7.8CVE-2022-34748EPSS 1.0%

    A vulnerability has been identified in Simcenter Femap (All versions < V2022.2). The affected application contains an out of bounds write past the end of an allocated structure while parsing specially crafted X_T files. This could allow an…

  8. 5.5CVE-2022-34291EPSS 1.1%

    A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application contains a stack corruption vulnerability while parsing PCB files. An attacker could leverage this vulnerability to leak information …

  9. 5.5CVE-2022-34290EPSS 1.1%

    A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application contains a stack corruption vulnerability while parsing PCB files. An attacker could leverage this vulnerability to leak information …

  10. 7.8CVE-2022-34289EPSS 1.4%

    A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application contains an out of bounds write past the end of an allocated structure while parsing specially crafted PCB files. This could allow an…

  11. 5.5CVE-2022-34287EPSS 1.1%

    A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application contains a stack corruption vulnerability while parsing PCB files. An attacker could leverage this vulnerability to leak information …

  12. 7.8CVE-2022-34286EPSS 1.4%

    A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application contains an out of bounds write past the end of an allocated structure while parsing specially crafted PCB files. This could allow an…

  13. 7.8CVE-2022-34284EPSS 1.4%

    A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application contains an out of bounds write past the end of an allocated structure while parsing specially crafted PCB files. This could allow an…

  14. 7.8CVE-2022-34276EPSS 1.4%

    A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application contains an out of bounds write past the end of an allocated structure while parsing specially crafted PCB files. This could allow an…

  15. 7.8CVE-2022-34275EPSS 1.4%

    A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application contains an out of bounds write past the end of an allocated structure while parsing specially crafted PCB files. This could allow an…

  16. 7.8CVE-2022-34274EPSS 1.4%

    A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application contains an out of bounds write past the end of an allocated structure while parsing specially crafted PCB files. This could allow an…

  17. 7.8CVE-2022-34273EPSS 1.4%

    A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application contains an out of bounds write past the end of an allocated structure while parsing specially crafted PCB files. This could allow an…

  18. 7.5CVE-2022-30938EPSS 1.3%

    A vulnerability has been identified in EN100 Ethernet module DNP3 IP variant (All versions), EN100 Ethernet module IEC 104 variant (All versions), EN100 Ethernet module IEC 61850 variant (All versions < V4.40), EN100 Ethernet module Modbus…

  19. 7.8CVE-2022-2344EPSS 1.3%

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0045.

  20. 5.5CVE-2022-32441EPSS 0.7%

    A memory corruption in Hex Rays Ida Pro v6.6 allows attackers to cause a Denial of Service (DoS) via a crafted file. Related to Data from Faulting Address controls subsequent Write Address starting at msvcrt!memcpy+0x0000000000000056.

  21. 5.9CVE-2022-32208EPSS 8.4%

    When curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures wrongly. This flaw makes it possible for a Man-In-The-Middle attack to go unnoticed and even allows it to inject data to the client.

  22. 9.8CVE-2022-33047EPSS 1.2%

    OTFCC v0.10.4 was discovered to contain a heap buffer overflow after free via otfccbuild.c.

  23. 7.0CVE-2021-3697EPSS 0.5%

    A crafted JPEG image may lead the JPEG reader to underflow its data pointer, allowing user-controlled data to be written in heap. To a successful to be performed the attacker needs to perform some triage over the heap layout and craft an i…

  24. 4.5CVE-2021-3696EPSS 0.5%

    A heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader. This may lead to data corruption in the heap space. Confidentiality, Integrity and Availablity impact may be considered Low as it's very complex…

  25. 4.5CVE-2021-3695EPSS 0.5%

    A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An attacker may take advantage of that to cause heap data corruption or eventually arbitrary code execution and circumvent secure boot protections. Th…

  26. 6.7CVE-2022-21787EPSS 0.1%

    In audio DSP, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS0…

  27. 6.7CVE-2022-21785EPSS 0.1%

    In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALP…

  28. 6.7CVE-2022-21784EPSS 0.1%

    In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALP…

  29. 6.7CVE-2022-21783EPSS 0.1%

    In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALP…

  30. 6.7CVE-2022-21782EPSS 0.1%

    In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALP…

  31. 6.7CVE-2022-21781EPSS 0.1%

    In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALP…

  32. 6.7CVE-2022-21780EPSS 0.1%

    In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALP…

  33. 6.7CVE-2022-21779EPSS 0.1%

    In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALP…

  34. 8.8CVE-2022-21768EPSS 0.3%

    In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID…

  35. 8.8CVE-2022-21767EPSS 0.3%

    In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID…

  36. 6.7CVE-2022-21766EPSS 0.1%

    In CCCI, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS066416…

  37. 6.7CVE-2022-21765EPSS 0.1%

    In CCCI, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS066416…

  38. 9.8CVE-2022-21744EPSS 3.5%

    In Modem 2G RR, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution when decoding GPRS Packet Neighbour Cell Data (PNCD) improper neighbouring cell size with no additional executi…

  39. 9.8CVE-2022-20083EPSS 2.8%

    In Modem 2G/3G CC, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution when decoding combined FACILITY with no additional execution privileges needed. User interaction is not need…

  40. 9.8CVE-2022-32386EPSS 10%

    Tenda AC23 v16.03.07.44 was discovered to contain a buffer overflow via fromAdvSetMacMtuWan.

  41. 9.8CVE-2022-32385EPSS 2.0%

    Tenda AC23 v16.03.07.44 is vulnerable to Stack Overflow that will allow for the execution of arbitrary code (remote).

  42. 9.8CVE-2022-32383EPSS 1.5%

    Tenda AC23 v16.03.07.44 was discovered to contain a stack overflow via the AdvSetMacMtuWan function.

  43. 7.8CVE-2022-2304EPSS 1.5%

    Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.

  44. 6.7CVE-2022-31602EPSS 0.2%

    NVIDIA DGX A100 contains a vulnerability in SBIOS in the IpSecDxe, where a user with elevated privileges and a preconditioned heap can exploit an out-of-bounds write vulnerability, which may lead to code execution, denial of service, data …

  45. 6.7CVE-2022-31601EPSS 0.2%

    NVIDIA DGX A100 contains a vulnerability in SBIOS in the SmbiosPei, which may allow a highly privileged local attacker to cause an out-of-bounds write, which may lead to code execution, denial of service, compromised integrity, and informa…

  46. 7.8CVE-2022-2288EPSS 1.4%

    Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.

  47. 9.8CVE-2022-34913EPSS 2.9%

    md2roff 1.7 has a stack-based buffer overflow via a Markdown file containing a large number of consecutive characters to be processed. NOTE: the vendor's position is that the product is not intended for untrusted input

  48. 8.2CVE-2022-28200EPSS 0.2%

    NVIDIA DGX A100 contains a vulnerability in SBIOS in the BiosCfgTool, where a local user with elevated privileges can read and write beyond intended bounds in SMRAM, which may lead to code execution, escalation of privileges, denial of ser…

  49. 9.8CVE-2022-32324EPSS 1.2%

    PDFAlto v0.4 was discovered to contain a heap buffer overflow via the component /pdfalto/src/pdfalto.cc.

  50. 8.8CVE-2022-32384EPSS 0.6%

    Tenda AC23 v16.03.07.44 was discovered to contain a stack overflow via the security_5g parameter in the function formWifiBasicSet.