CWE-787: Out-of-bounds Write, page 192

The product writes data past the end, or before the beginning, of the intended buffer.

What the weakness is: CWE-787 at MITRE

1. 7.2CVE-2021-36193EPSS 0.8%2022-02-02

   Multiple stack-based buffer overflows in the command line interpreter of FortiWeb before 6.4.2 may allow an authenticated attacker to achieve arbitrary code execution via specially crafted commands.

2. 6.1CVE-2020-26208EPSS 0.9%2022-02-02

   JHEAD is a simple command line tool for displaying and some manipulation of EXIF header data embedded in Jpeg images from digital cameras. In affected versions there is a heap-buffer-overflow on jhead-3.04/jpgfile.c:285 ReadJpegSections. C…

3. 6.5CVE-2022-24197EPSS 1.3%2022-02-01

   iText v7.1.17 was discovered to contain a stack-based buffer overflow via the component ByteBuffer.append, which allows attackers to cause a Denial of Service (DoS) via a crafted PDF file.

4. 7.8CVE-2022-0417EPSS 1.5%2022-02-01

   Heap-based Buffer Overflow GitHub repository vim/vim prior to 8.2.

5. 7.8CVE-2022-0408EPSS 1.5%2022-01-30

   Stack-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

6. 7.8CVE-2022-0407EPSS 1.2%2022-01-30

   Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

7. 7.8CVE-2022-0392EPSS 1.5%2022-01-28

   Heap-based Buffer Overflow in GitHub repository vim prior to 8.2.

8. 8.2CVE-2022-21796EPSS 1.1%2022-01-28

   A memory corruption vulnerability exists in the netserver parse_command_list functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to an out-of-bounds write. An attacker can send an HTTP request t…

9. 9.8CVE-2022-21217EPSS 1.2%2022-01-28

   An out-of-bounds write vulnerability exists in the device TestEmail functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted network request can lead to an out-of-bounds write. An attacker can send an HTTP request to trig…

10. 7.8CVE-2021-4034KEVExploitEPSS 95%2022-01-28

    A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current ve…

11. 7.8CVE-2021-22807EPSS 0.8%2022-01-28

    A CWE-787: Out-of-bounds Write vulnerability exists that could cause arbitrary code execution when a malicious *.gd1 configuration file is loaded into the GUIcon tool. Affected Product: Eurotherm by Schneider Electric GUIcon Version 2.0 (B…

12. 7.8CVE-2021-46527EPSS 0.7%2022-01-27

    Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjs_get_cstring at src/mjs_string.c.

13. 7.8CVE-2021-46524EPSS 0.7%2022-01-27

    Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via snquote at mjs/src/mjs_json.c.

14. 7.8CVE-2021-46523EPSS 0.7%2022-01-27

    Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via to_json_or_debug at mjs/src/mjs_json.c.

15. 7.8CVE-2021-46522EPSS 0.7%2022-01-27

    Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via /usr/lib/x86_64-linux-gnu/libasan.so.4+0xaff53.

16. 7.8CVE-2021-46520EPSS 0.7%2022-01-27

    Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjs_jprintf at src/mjs_util.c.

17. 7.8CVE-2021-46519EPSS 0.7%2022-01-27

    Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjs_array_length at src/mjs_array.c.

18. 7.8CVE-2021-46518EPSS 0.7%2022-01-27

    Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjs_disown at src/mjs_core.c.

19. 7.8CVE-2022-0361EPSS 1.6%2022-01-26

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

20. 7.8CVE-2022-0359EPSS 1.3%2022-01-26

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

21. 7.2CVE-2021-36347EPSS 2.2%2022-01-25

    iDRAC9 versions prior to 5.00.20.00 and iDRAC8 versions prior to 2.82.82.82 contain a stack-based buffer overflow vulnerability. An authenticated remote attacker with high privileges could potentially exploit this vulnerability to control …

22. 7.8CVE-2021-46483EPSS 0.8%2022-01-25

    Jsish v3.5.0 was discovered to contain a heap buffer overflow via BooleanConstructor at src/jsiBool.c.

23. 7.8CVE-2021-46482EPSS 0.8%2022-01-25

    Jsish v3.5.0 was discovered to contain a heap buffer overflow via NumberConstructor at src/jsiNumber.c.

24. 5.5CVE-2021-46480EPSS 0.7%2022-01-25

    Jsish v3.5.0 was discovered to contain a heap buffer overflow via jsiValueObjDelete in src/jsiEval.c. This vulnerability can lead to a Denial of Service (DoS).

25. 5.5CVE-2021-46478EPSS 0.7%2022-01-25

    Jsish v3.5.0 was discovered to contain a heap buffer overflow via jsiClearStack in src/jsiEval.c. This vulnerability can lead to a Denial of Service (DoS).

26. 5.5CVE-2021-46477EPSS 0.7%2022-01-25

    Jsish v3.5.0 was discovered to contain a heap buffer overflow via RegExp_constructor in src/jsiRegexp.c. This vulnerability can lead to a Denial of Service (DoS).

27. 5.5CVE-2021-46475EPSS 0.7%2022-01-25

    Jsish v3.5.0 was discovered to contain a heap buffer overflow via jsi_ArraySliceCmd in src/jsiArray.c. This vulnerability can lead to a Denial of Service (DoS).

28. 5.5CVE-2021-46474EPSS 0.7%2022-01-25

    Jsish v3.5.0 was discovered to contain a heap buffer overflow via jsiEvalCodeSub in src/jsiEval.c. This vulnerability can lead to a Denial of Service (DoS).

29. 7.8CVE-2022-23850EPSS 0.9%2022-01-23

    xhtml_translate_entity in xhtml.c in epub2txt (aka epub2txt2) through 2.02 allows a stack-based buffer overflow via a crafted EPUB document.

30. 5.5CVE-2021-46238EPSS 0.6%2022-01-21

    GPAC v1.1.0 was discovered to contain a stack overflow via the function gf_node_get_name () at scenegraph/base_scenegraph.c. This vulnerability can lead to a program crash, causing a Denial of Service (DoS).

31. 9.8CVE-2022-0318EPSS 2.0%2022-01-21

    Heap-based Buffer Overflow in vim/vim prior to 8.2.

32. 7.8CVE-2022-21933EPSS 0.3%2022-01-21

    ASUS VivoMini/Mini PC device has an improper input validation vulnerability. A local attacker with system privilege can use system management interrupt (SMI) to modify memory, resulting in arbitrary code execution for controlling the syste…

33. 7.8CVE-2022-22895EPSS 0.8%2022-01-21

    Jerryscript 3.0.0 was discovered to contain a heap-buffer-overflow via ecma_utf8_string_to_number_by_radix in /jerry-core/ecma/base/ecma-helpers-conversion.c.

34. 7.8CVE-2022-22894EPSS 0.7%2022-01-21

    Jerryscript 3.0.0 was discovered to contain a stack overflow via ecma_lcache_lookup in /jerry-core/ecma/base/ecma-lcache.c.

35. 7.8CVE-2022-22893EPSS 0.7%2022-01-21

    Jerryscript 3.0.0 was discovered to contain a stack overflow via vm_loop.lto_priv.304 in /jerry-core/vm/vm.c.

36. 7.8CVE-2022-22888EPSS 0.7%2022-01-20

    Jerryscript 3.0.0 was discovered to contain a stack overflow via ecma_op_object_find_own in /ecma/operations/ecma-objects.c.

37. 7.8CVE-2021-46334EPSS 0.8%2022-01-20

    Moddable SDK v11.5.0 was discovered to contain a stack buffer overflow via the component __interceptor_strcat.

38. 7.8CVE-2021-46332EPSS 1.0%2022-01-20

    Moddable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via xs/sources/xsDataView.c in fxUint8Getter.

39. 7.8CVE-2021-46328EPSS 0.8%2022-01-20

    Moddable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via the component __libc_start_main.

40. 7.8CVE-2021-46326EPSS 0.9%2022-01-20

    Moddable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via the component __asan_memcpy.

41. 7.8CVE-2021-46325EPSS 0.7%2022-01-20

    Espruino 2v10.246 was discovered to contain a stack buffer overflow via src/jsutils.c in vcbprintf.

42. 7.8CVE-2021-46324EPSS 0.7%2022-01-20

    Espruino 2v11.251 was discovered to contain a stack buffer overflow via src/jsvar.c in jsvNewFromString.

43. 7.8CVE-2021-45417EPSS 0.5%2022-01-20

    AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata (such as XFS extended attributes or tmpfs ACLs), because of a heap-based buffer overflow.

44. 9.8CVE-2021-33913EPSS 9.6%2022-01-19

    libspf2 before 1.2.11 has a heap-based buffer overflow that might allow remote attackers to execute arbitrary code (via an unauthenticated e-mail message from anywhere on the Internet) with a crafted SPF DNS record, because of SPF_record_e…

45. 9.8CVE-2021-33912EPSS 9.6%2022-01-19

    libspf2 before 1.2.11 has a four-byte heap-based buffer overflow that might allow remote attackers to execute arbitrary code (via an unauthenticated e-mail message from anywhere on the Internet) with a crafted SPF DNS record, because of in…

46. 6.7CVE-2021-34402EPSS 0.3%2022-01-18

    NVIDIA Tegra kernel driver contains a vulnerability in NVIDIA NVDEC, where a user with high privileges might be able to read from or write to a memory location that is outside the intended boundary of the buffer, which may lead to denial o…

47. 7.5CVE-2020-14107EPSS 1.0%2022-01-18

    A stack overflow in the HTTP server of Cast can be exploited to make the app crash in LAN.

48. 7.8CVE-2022-0261EPSS 1.7%2022-01-18

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

49. 7.5CVE-2021-38783EPSS 1.8%2022-01-18

    There is a Out-of-Bound Write in the Allwinner R818 SoC Android Q SDK V1.0 camera driver "/dev/cedar_dev" through iotcl cmd IOCTL_SET_PROC_INFO and IOCTL_COPY_PROC_INFO, which could cause a system crash or EoP.

50. 7.8CVE-2022-23095EPSS 1.1%2022-01-15

    Open Design Alliance Drawings SDK before 2022.12.1 mishandles the loading of JPG files. Unchecked input data from a crafted JPG file leads to memory corruption. An attacker can leverage this vulnerability to execute code in the context of …