CWE-787: Out-of-bounds Write, page 187

The product writes data past the end, or before the beginning, of the intended buffer.

What the weakness is: CWE-787 at MITRE

1. 7.5CVE-2022-25555EPSS 1.2%2022-03-10

   Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function fromSetSysTime. This vulnerability allows attackers to cause a Denial of Service (DoS) via the ntpServer parameter.

2. 7.5CVE-2022-25554EPSS 1.2%2022-03-10

   Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function saveParentControlInfo. This vulnerability allows attackers to cause a Denial of Service (DoS) via the deviceId parameter.

3. 7.5CVE-2022-25553EPSS 1.2%2022-03-10

   Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function formSetSysToolDDNS. This vulnerability allows attackers to cause a Denial of Service (DoS) via the ddnsPwd parameter.

4. 7.5CVE-2022-25552EPSS 1.2%2022-03-10

   Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function form_fast_setting_wifi_set. This vulnerability allows attackers to cause a Denial of Service (DoS) via the ssid parameter.

5. 7.5CVE-2022-25551EPSS 1.2%2022-03-10

   Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function formSetSysToolDDNS. This vulnerability allows attackers to cause a Denial of Service (DoS) via the ddnsDomain parameter.

6. 7.5CVE-2022-25550EPSS 1.2%2022-03-10

   Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function saveParentControlInfo. This vulnerability allows attackers to cause a Denial of Service (DoS) via the deviceName parameter.

7. 7.5CVE-2022-25549EPSS 1.2%2022-03-10

   Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function formSetSysToolDDNS. This vulnerability allows attackers to cause a Denial of Service (DoS) via the ddnsEn parameter.

8. 7.5CVE-2022-25548EPSS 1.2%2022-03-10

   Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function fromSetSysTime. This vulnerability allows attackers to cause a Denial of Service (DoS) via the serverName parameter.

9. 7.5CVE-2022-25547EPSS 8.8%2022-03-10

   Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function fromSetSysTime. This vulnerability allows attackers to cause a Denial of Service (DoS) via the time parameter.

10. 7.5CVE-2022-25546EPSS 12%2022-03-10

    Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function formSetSysToolDDNS. This vulnerability allows attackers to cause a Denial of Service (DoS) via the ddnsUser parameter.

11. 7.8CVE-2022-25234EPSS 1.0%2022-03-10

    Out-of-bounds write vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows an attacker to cause information disclosure and/or arbitrary code execution by having a user to open a specially crafted …

12. 9.8CVE-2022-24995EPSS 14%2022-03-10

    Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromSetSysTime. This vulnerability allows attackers to cause a Denial of Service (DoS) via the time parameter.

13. 7.8CVE-2022-21124EPSS 1.5%2022-03-10

    Out-of-bounds write vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows an attacker to cause information disclosure and/or arbitrary code execution by having a user to open a specially crafted …

14. 6.6CVE-2022-20059EPSS 0.1%2022-03-10

    In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges nee…

15. 6.6CVE-2022-20058EPSS 0.1%2022-03-10

    In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges nee…

16. 6.6CVE-2022-20056EPSS 0.1%2022-03-10

    In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges nee…

17. 6.8CVE-2022-20055EPSS 0.1%2022-03-10

    In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges nee…

18. 7.8CVE-2022-20048EPSS 0.1%2022-03-10

    In video decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patc…

19. 7.8CVE-2022-20047EPSS 0.1%2022-03-10

    In video decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patc…

20. 6.5CVE-2022-0904EPSS 0.9%2022-03-10

    A stack overflow bug in the document extractor in Mattermost Server in versions up to and including 6.3.2 allows an attacker to crash the server via submitting a maliciously crafted Apple Pages document.

21. 7.5CVE-2022-0903EPSS 0.8%2022-03-10

    A call stack overflow bug in the SAML login feature in Mattermost server in versions up to and including 6.3.2 allows an attacker to crash the server via submitting a maliciously crafted POST body.

22. 7.1CVE-2022-0891EPSS 1.5%2022-03-10

    A heap buffer overflow in ExtractImageSection function in tiffcrop.c in libtiff library Version 4.3.0 allows attacker to trigger unsafe or out of bounds memory access via crafted TIFF image file which could result into application crash, p…

23. 7.5CVE-2021-46408EPSS 1.2%2022-03-10

    Tenda AX12 v22.03.01.21 was discovered to contain a stack buffer overflow in the function sub_422CE4. This vulnerability allows attackers to cause a Denial of Service (DoS) via the strcpy parameter.

24. 7.5CVE-2021-40064EPSS 0.8%2022-03-10

    There is a heap-based buffer overflow vulnerability in system components. Successful exploitation of this vulnerability may affect system stability.

25. 7.5CVE-2021-40060EPSS 0.7%2022-03-10

    There is a heap-based buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerability may affect availability.

26. 7.5CVE-2021-40058EPSS 0.7%2022-03-10

    There is a heap-based buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerability may affect availability.

27. 7.5CVE-2021-40057EPSS 0.7%2022-03-10

    There is a heap-based and stack-based buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerability may affect availability.

28. 6.5CVE-2021-34340EPSS 0.9%2022-03-10

    Ming 0.4.8 has an out-of-bounds buffer access issue in the function decompileINCR_DECR() in decompiler.c file that causes a direct segmentation fault and leads to denial of service.

29. 6.5CVE-2021-34339EPSS 1.0%2022-03-10

    Ming 0.4.8 has an out-of-bounds buffer access issue in the function getString() in decompiler.c file that causes a direct segmentation fault and leads to denial of service.

30. 6.5CVE-2021-34338EPSS 1.1%2022-03-10

    Ming 0.4.8 has an out-of-bounds buffer overwrite issue in the function getName() in decompiler.c file that causes a direct segmentation fault and leads to denial of service.

31. 5.5CVE-2021-32435EPSS 1.3%2022-03-10

    Stack-based buffer overflow in the function get_key in parse.c of abcm2ps v8.14.11 allows remote attackers to cause a Denial of Service (DoS) via unspecified vectors.

32. 7.8CVE-2022-24501EPSS 2.6%2022-03-09

    VP9 Video Extensions Remote Code Execution Vulnerability

33. 7.8CVE-2022-24457EPSS 2.3%2022-03-09

    HEIF Image Extensions Remote Code Execution Vulnerability

34. 7.8CVE-2022-24456EPSS 2.3%2022-03-09

    HEVC Video Extensions Remote Code Execution Vulnerability

35. 7.8CVE-2022-24453EPSS 2.3%2022-03-09

    HEVC Video Extensions Remote Code Execution Vulnerability

36. 7.8CVE-2022-24451EPSS 2.3%2022-03-09

    VP9 Video Extensions Remote Code Execution Vulnerability

37. 7.8CVE-2022-23282EPSS 2.4%2022-03-09

    Paint 3D Remote Code Execution Vulnerability

38. 7.8CVE-2022-22007EPSS 2.3%2022-03-09

    HEVC Video Extensions Remote Code Execution Vulnerability

39. 7.8CVE-2022-22006EPSS 2.3%2022-03-09

    HEVC Video Extensions Remote Code Execution Vulnerability

40. 7.8CVE-2022-24661EPSS 0.8%2022-03-08

    A vulnerability has been identified in Simcenter STAR-CCM+ Viewer (All versions < V2022.1). The starview+.exe contains a memory corruption vulnerability while parsing specially crafted .SCE files. This could allow an attacker to execute co…

41. 5.9CVE-2021-42018EPSS 1.0%2022-03-08

    A vulnerability has been identified in RUGGEDCOM i800, RUGGEDCOM i800NC, RUGGEDCOM i801, RUGGEDCOM i801NC, RUGGEDCOM i802, RUGGEDCOM i802NC, RUGGEDCOM i803, RUGGEDCOM i803NC, RUGGEDCOM M2100, RUGGEDCOM M2100F, RUGGEDCOM M2100NC, RUGGEDCOM …

42. 9.8CVE-2022-26496EPSS 3.6%2022-03-06

    In nbd-server in nbd before 3.24, there is a stack-based buffer overflow. An attacker can cause a buffer overflow in the parsing of the name field by sending a crafted NBD_OPT_INFO or NBD_OPT_GO message with an large value as the length of…

43. 7.8CVE-2022-25465EPSS 0.7%2022-03-05

    Espruino 2v11 release was discovered to contain a stack buffer overflow via src/jsvar.c in jsvGetNextSibling.

44. 7.8CVE-2022-25044EPSS 0.9%2022-03-05

    Espruino 2v11.251 was discovered to contain a stack buffer overflow via src/jsvar.c in jsvNewFromString.

45. 5.5CVE-2022-25106EPSS 8.6%2022-03-04

    D-Link DIR-859 v1.05 was discovered to contain a stack-based buffer overflow via the function genacgi_main. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted payload.

46. 7.8CVE-2021-3575EPSS 1.5%2022-03-04

    A heap-based buffer overflow was found in openjpeg in color.c:379:42 in sycc420_to_rgb when decompressing a crafted .j2k file. An attacker could use this to execute arbitrary code with the permissions of the application compiled against op…

47. 9.8CVE-2021-46394EPSS 2.7%2022-03-04

    There is a stack buffer overflow vulnerability in the formSetPPTPServer function of Tenda-AX3 router V16.03.12.10_CN. The v13 variable is directly retrieved from the http request parameter startIp. Then v13 will be splice to stack by funct…

48. 9.8CVE-2021-46393EPSS 16%2022-03-04

    There is a stack buffer overflow vulnerability in the formSetPPTPServer function of Tenda-AX3 router V16.03.12.10_CN. The v10 variable is directly retrieved from the http request parameter startIp. Then v10 will be splice to stack by funct…

49. 6.5CVE-2021-3638EPSS 0.4%2022-03-03

    An out-of-bounds memory access flaw was found in the ATI VGA device emulation of QEMU. This flaw occurs in the ati_2d_blt() routine while handling MMIO write operations when the guest provides invalid values for the destination display par…

50. 7.8CVE-2021-26259EPSS 1.2%2022-03-03

    A flaw was found in htmldoc in v1.9.12. Heap buffer overflow in render_table_row(),in ps-pdf.cxx may lead to arbitrary code execution and denial of service.