cve.bz

CWE-787: Out-of-bounds Write, page 176

Filter

The product writes data past the end, or before the beginning, of the intended buffer.

What the weakness is: CWE-787 at MITRE

Ask an AI about CWE-787

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-787: Out-of-bounds Write and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/787.html and https://cve.bz/cve/cwe/787?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.5CVE-2022-32053EPSS 1.1%

    TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the cloneMac parameter in the function FUN_0041621c.

  2. 7.5CVE-2022-32052EPSS 1.1%

    TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the desc parameter in the function FUN_004137a4.

  3. 7.5CVE-2022-32051EPSS 1.1%

    TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the desc, week, sTime, eTime parameters in the function FUN_004133c4.

  4. 7.5CVE-2022-32050EPSS 1.1%

    TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the cloneMac parameter in the function FUN_0041af40.

  5. 7.5CVE-2022-32049EPSS 1.1%

    TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the url parameter in the function FUN_00418540.

  6. 7.5CVE-2022-32048EPSS 1.1%

    TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the command parameter in the function FUN_0041cc88.

  7. 7.5CVE-2022-32047EPSS 1.1%

    TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the desc parameter in the function FUN_00412ef4.

  8. 7.5CVE-2022-32046EPSS 1.1%

    TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the desc parameter in the function FUN_0041880c.

  9. 7.5CVE-2022-32045EPSS 1.1%

    TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the desc parameter in the function FUN_00413be4.

  10. 7.5CVE-2022-32044EPSS 1.1%

    TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the password parameter in the function FUN_00413f80.

  11. 7.5CVE-2022-32043EPSS 1.1%

    Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formSetAccessCodeInfo.

  12. 7.5CVE-2022-32041EPSS 1.1%

    Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formGetPassengerAnalyseData.

  13. 7.5CVE-2022-32040EPSS 1.1%

    Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formSetCfm.

  14. 7.5CVE-2022-32039EPSS 1.1%

    Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the listN parameter in the function fromDhcpListClient.

  15. 7.5CVE-2022-32037EPSS 1.1%

    Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formSetAPCfg.

  16. 7.5CVE-2022-32036EPSS 1.2%

    Tenda M3 V1.0.0.12 was discovered to contain multiple stack overflow vulnerabilities via the ssidList, storeName, and trademark parameters in the function formSetStoreWeb.

  17. 7.5CVE-2022-32035EPSS 15%

    Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formMasterMng.

  18. 7.5CVE-2022-32034EPSS 1.2%

    Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the items parameter in the function formdelMasteraclist.

  19. 7.5CVE-2022-32033EPSS 1.2%

    Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the function formSetVirtualSer.

  20. 9.8CVE-2022-32032EPSS 10%

    Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the deviceList parameter in the function formAddMacfilterRule.

  21. 7.5CVE-2022-32031EPSS 1.2%

    Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the list parameter in the function fromSetRouteStatic.

  22. 7.5CVE-2022-32030EPSS 1.2%

    Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the list parameter in the function formSetQosBand.

  23. 7.8CVE-2022-33103EPSS 0.5%

    Das U-Boot from v2020.10 to v2022.07-rc3 was discovered to contain an out-of-bounds write via the function sqfs_readdir().

  24. 7.5CVE-2022-33099EPSS 2.8%

    An issue in the component luaG_runerror of Lua v5.4.4 and below leads to a heap-buffer overflow when a recursive error occurs.

  25. 9.8CVE-2022-2274EPSS 48%

    The OpenSSL 3.0.4 release introduced a serious bug in the RSA implementation for X86_64 CPUs supporting the AVX512IFMA instructions. This issue makes the RSA implementation with 2048 bit private keys incorrect on such machines and memory c…

  26. 7.5CVE-2022-33087EPSS 1.6%

    A stack overflow in the function DM_ In fillobjbystr() of TP-Link Archer C50&A5(US)_V5_200407 allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request.

  27. 9.8CVE-2022-34835EPSS 2.3%

    In Das U-Boot through 2022.07-rc5, an integer signedness error and resultant stack-based buffer overflow in the "i2c md" command enables the corruption of the return address pointer of the do_i2c_md function.

  28. 7.8CVE-2021-3434EPSS 0.2%

    Stack based buffer overflow in le_ecred_conn_req(). Zephyr versions >= v2.5.0 Stack-based Buffer Overflow (CWE-121). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-8w87-6rfp-cfrm

  29. 7.8CVE-2022-33108EPSS 1.1%

    XPDF v4.04 was discovered to contain a stack overflow vulnerability via the Object::Copy class of object.cc files.

  30. 8.8CVE-2022-33007EPSS 0.8%

    TRENDnet Wi-Fi routers TEW751DR v1.03 and TEW-752DRU v1.03 were discovered to contain a stack overflow via the function genacgi_main.

  31. 5.5CVE-2021-40942EPSS 0.7%

    In GPAC MP4Box v1.1.0, there is a heap-buffer-overflow in the function filter_parse_dyn_args function in filter_core/filter.c:1454, as demonstrated by GPAC. This can cause a denial of service (DOS).

  32. 7.5CVE-2021-33647EPSS 0.9%

    When performing the inference shape operation of the Tile operator, if the input data type is not int or int32, it will access data outside of bounds of heap allocated buffers.

  33. 7.8CVE-2022-2210EPSS 1.4%

    Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.

  34. 8.8CVE-2022-24893EPSS 0.5%

    ESP-IDF is the official development framework for Espressif SoCs. In Espressif’s Bluetooth Mesh SDK (`ESP-BLE-MESH`), a memory corruption vulnerability can be triggered during provisioning, because there is no check for the `SegN` field of…

  35. 7.8CVE-2022-33034EPSS 0.7%

    LibreDWG v0.12.4.4608 was discovered to contain a stack overflow via the function copy_bytes at decode_r2007.c.

  36. 7.8CVE-2022-33032EPSS 0.7%

    LibreDWG v0.12.4.4608 was discovered to contain a heap-buffer-overflow via the function decode_preR13_section_hdr at decode_r11.c.

  37. 7.8CVE-2022-33028EPSS 0.7%

    LibreDWG v0.12.4.4608 was discovered to contain a heap buffer overflow via the function dwg_add_object at decode.c.

  38. 7.8CVE-2022-33026EPSS 0.7%

    LibreDWG v0.12.4.4608 was discovered to contain a heap buffer overflow via the function bit_calc_CRC at bits.c.

  39. 7.8CVE-2022-27870EPSS 0.8%

    A maliciously crafted TGA file in Autodesk AutoCAD 2023 may be used to write beyond the allocated buffer while parsing TGA file. This vulnerability may be exploited to execute arbitrary code.

  40. 7.8CVE-2022-27869EPSS 0.8%

    A maliciously crafted TIFF file in Autodesk AutoCAD 2023 can be forced to read and write beyond allocated boundaries when parsing the TIFF file. This vulnerability can be exploited to execute arbitrary code.

  41. 7.8CVE-2021-41683EPSS 0.7%

    There is a stack-overflow at ecma-helpers.c:326 in ecma_get_lex_env_type in JerryScript 2.4.0

  42. 7.8CVE-2022-2129EPSS 1.4%

    Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.

  43. 7.8CVE-2022-2125EPSS 1.6%

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

  44. 5.5CVE-2014-125025EPSS 0.7%

    A vulnerability classified as problematic has been found in FFmpeg 2.0. This affects the function decode_pulses. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. It is recommended to apply a patc…

  45. 7.8CVE-2014-125024EPSS 0.5%

    A vulnerability was found in FFmpeg 2.0. It has been rated as critical. Affected by this issue is the function lag_decode_frame. The manipulation leads to memory corruption. The attack may be launched remotely. It is recommended to apply a…

  46. 5.5CVE-2014-125023EPSS 0.7%

    A vulnerability was found in FFmpeg 2.0. It has been declared as problematic. Affected by this vulnerability is the function truemotion1_decode_header of the component Truemotion1 Handler. The manipulation leads to memory corruption. The a…

  47. 5.5CVE-2014-125022EPSS 0.7%

    A vulnerability was found in FFmpeg 2.0. It has been classified as problematic. Affected is the function shorten_decode_frame of the component Bitstream Buffer. The manipulation leads to memory corruption. It is possible to launch the atta…

  48. 5.5CVE-2014-125021EPSS 0.7%

    A vulnerability was found in FFmpeg 2.0 and classified as problematic. This issue affects the function cmv_process_header. The manipulation leads to memory corruption. The attack may be initiated remotely. It is recommended to apply a patc…

  49. 7.8CVE-2014-125020EPSS 0.5%

    A vulnerability has been found in FFmpeg 2.0 and classified as critical. This vulnerability affects the function decode_update_thread_context. The manipulation leads to memory corruption. The attack can be initiated remotely. It is recomme…

  50. 5.5CVE-2014-125019EPSS 0.7%

    A vulnerability, which was classified as problematic, was found in FFmpeg 2.0. This affects the function decode_nal_unit of the component Slice Segment Handler. The manipulation leads to memory corruption. It is possible to initiate the at…