CWE-787: Out-of-bounds Write, page 194

The product writes data past the end, or before the beginning, of the intended buffer.

What the weakness is: CWE-787 at MITRE

1. 7.8CVE-2021-34893EPSS 2.1%2022-01-13

   This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a …

2. 7.8CVE-2021-34892EPSS 2.0%2022-01-13

   This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a …

3. 7.8CVE-2021-34878EPSS 1.9%2022-01-13

   This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a …

4. 7.8CVE-2021-34877EPSS 1.9%2022-01-13

   This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a …

5. 7.8CVE-2021-34876EPSS 1.9%2022-01-13

   This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a …

6. 7.8CVE-2021-34875EPSS 2.0%2022-01-13

   This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a …

7. 7.8CVE-2021-34873EPSS 2.0%2022-01-13

   This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a …

8. 7.8CVE-2021-34871EPSS 2.0%2022-01-13

   This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a …

9. 9.8CVE-2022-22989EPSS 1.3%2022-01-13

   My Cloud OS 5 was vulnerable to a pre-authenticated stack overflow vulnerability on the FTP service that could be exploited by unauthenticated attackers on the network. Addressed the vulnerability by adding defenses against stack overflow …

10. 7.8CVE-2021-45058EPSS 2.2%2022-01-13

    Adobe InDesign version 16.4 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a …

11. 7.8CVE-2021-45057EPSS 2.2%2022-01-13

    Adobe InDesign version 16.4 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a …

12. 7.8CVE-2021-45056EPSS 2.3%2022-01-13

    Adobe InCopy version 16.4 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a vi…

13. 7.8CVE-2021-45053EPSS 2.2%2022-01-13

    Adobe InCopy version 16.4 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a vi…

14. 5.5CVE-2021-37530EPSS 0.7%2022-01-12

    A denial of service vulnerabiity exists in fig2dev through 3.28a due to a segfault in the open_stream function in readpics.c.

15. 7.8CVE-2021-36417EPSS 1.1%2022-01-12

    A heap-based buffer overflow vulnerability exists in GPAC v1.0.1 in the gf_isom_dovi_config_get function in MP4Box, which causes a denial of service or execute arbitrary code via a crafted file.

16. 8.8CVE-2021-44648EPSS 1.9%2022-01-12

    GNOME gdk-pixbuf 2.42.6 is vulnerable to a heap-buffer overflow vulnerability when decoding the lzw compressed stream of image data in GIF files with lzw minimum code size equals to 12.

17. 7.8CVE-2022-21917EPSS 3.8%2022-01-11

    HEVC Video Extensions Remote Code Execution Vulnerability

18. 7.8CVE-2022-21882KEVExploitEPSS 59%2022-01-11

    Win32k Elevation of Privilege Vulnerability

19. 7.5CVE-2021-34704EPSS 1.4%2022-01-11

    A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a denial of service (DoS) condit…

20. 7.5CVE-2021-1573EPSS 1.4%2022-01-11

    A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a denial of service (DoS) condit…

21. 7.8CVE-2021-36414EPSS 1.2%2022-01-10

    A heab-based buffer overflow vulnerability exists in MP4Box in GPAC 1.0.1 via media.c, which allows attackers to cause a denial of service or execute arbitrary code via a crafted file.

22. 7.8CVE-2021-36412EPSS 0.9%2022-01-10

    A heap-based buffer overflow vulnerability exists in MP4Box in GPAC 1.0.1 via the gp_rtp_builder_do_mpeg12_video function, which allows attackers to possibly have unspecified other impact via a crafted file in the MP4Box command,

23. 5.5CVE-2021-36410EPSS 0.9%2022-01-10

    A stack-buffer-overflow exists in libde265 v1.0.8 via fallback-motion.cc in function put_epel_hv_fallback when running program dec265.

24. 3.3CVE-2022-0158EPSS 1.8%2022-01-10

    vim is vulnerable to Heap-based Buffer Overflow

25. 7.8CVE-2021-43579ExploitEPSS 7.3%2022-01-10

    A stack-based buffer overflow in image_load_bmp() in HTMLDOC <= 1.9.13 results in remote code execution if the victim converts an HTML document linking to a crafted BMP file.

26. 7.5CVE-2021-40028EPSS 0.6%2022-01-10

    The eID module has an out-of-bounds memory write vulnerability,Successful exploitation of this vulnerability may affect data integrity.

27. 7.5CVE-2021-40026EPSS 0.6%2022-01-10

    There is a Heap-based buffer overflow vulnerability in the AOD module in smartphones. Successful exploitation of this vulnerability may affect service integrity.

28. 7.5CVE-2021-40021EPSS 0.7%2022-01-10

    The eID module has an out-of-bounds memory write vulnerability,Successful exploitation of this vulnerability may affect data confidentiality.

29. 7.5CVE-2021-40014EPSS 1.0%2022-01-10

    The bone voice ID trusted application (TA) has a heap overflow vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.

30. 9.8CVE-2021-40010EPSS 1.3%2022-01-10

    The bone voice ID TA has a heap overflow vulnerability.Successful exploitation of this vulnerability may result in malicious code execution.

31. 5.3CVE-2021-40009EPSS 0.7%2022-01-10

    There is an Out-of-bounds write vulnerability in the AOD module in smartphones. Successful exploitation of this vulnerability may affect service integrity.

32. 8.8CVE-2021-40002EPSS 0.4%2022-01-10

    The Bluetooth module has an out-of-bounds write vulnerability. Successful exploitation of this vulnerability may result in malicious command execution at the remote end.

33. 8.8CVE-2021-40000EPSS 0.4%2022-01-10

    The Bluetooth module has an out-of-bounds write vulnerability. Successful exploitation of this vulnerability may result in malicious command execution at the remote end.

34. 9.8CVE-2021-39996EPSS 0.9%2022-01-10

    There is a Heap-based buffer overflow vulnerability with the NFC module in smartphones. Successful exploitation of this vulnerability may cause memory overflow.

35. 7.4CVE-2021-32998EPSS 1.3%2022-01-10

    The FANUC R-30iA and R-30iB series controllers are vulnerable to an out-of-bounds write, which may allow an attacker to remotely execute arbitrary code. INIT START/restore from backup required.

36. 8.8CVE-2021-20048EPSS 2.0%2022-01-10

    A Stack-based buffer overflow in the SonicOS SessionID HTTP response header allows a remote authenticated attacker to cause Denial of Service (DoS) and potentially results in code execution in the firewall. This vulnerability affected Soni…

37. 8.8CVE-2021-20046EPSS 2.0%2022-01-10

    A Stack-based buffer overflow in the SonicOS HTTP Content-Length response header allows a remote authenticated attacker to cause Denial of Service (DoS) and potentially results in code execution in the firewall. This vulnerability affected…

38. 5.9CVE-2022-22707EPSS 9.7%2022-01-06

    In lighttpd 1.4.46 through 1.4.63, the mod_extforward_Forwarded function of the mod_extforward plugin has a stack-based buffer overflow (4 bytes representing -1), as demonstrated by remote denial of service (daemon crash) in a non-default …

39. 8.2CVE-2021-45971EPSS 0.3%2022-01-06

    An issue was discovered in SdHostDriver in Insyde InsydeH2O with kernel 5.1 before 05.16.25, 5.2 before 05.26.25, 5.3 before 05.35.25, 5.4 before 05.43.25, and 5.5 before 05.51.25. A vulnerability exists in the SMM (System Management Mode)…

40. 8.2CVE-2021-45970EPSS 0.4%2022-01-05

    An issue was discovered in IdeBusDxe in Insyde InsydeH2O with kernel 5.1 before 05.16.25, 5.2 before 05.26.25, 5.3 before 05.35.25, 5.4 before 05.43.25, and 5.5 before 05.51.25. A vulnerability exists in the SMM (System Management Mode) br…

41. 8.2CVE-2021-45969EPSS 0.3%2022-01-05

    An issue was discovered in AhciBusDxe in Insyde InsydeH2O with kernel 5.1 before 05.16.25, 5.2 before 05.26.25, 5.3 before 05.35.25, 5.4 before 05.43.25, and 5.5 before 05.51.25. A vulnerability exists in the SMM (System Management Mode) b…

42. 5.5CVE-2021-45833EPSS 0.7%2022-01-05

    A Stack-based Buffer Overflow Vulnerability exists in HDF5 1.13.1-1 via the H5D__create_chunk_file_map_hyper function in /hdf5/src/H5Dchunk.c, which causes a Denial of Service (context-dependent).

43. 5.5CVE-2021-45830EPSS 0.7%2022-01-05

    A heap-based buffer overflow vulnerability exists in HDF5 1.13.1-1 via H5F_addr_decode_len in /hdf5/src/H5Fint.c, which could cause a Denial of Service.

44. 7.8CVE-2021-22045EPSS 4.7%2022-01-04

    VMware ESXi (7.0, 6.7 before ESXi670-202111101-SG and 6.5 before ESXi650-202110101-SG), VMware Workstation (16.2.0) and VMware Fusion (12.2.0) contains a heap-overflow vulnerability in CD-ROM device emulation. A malicious actor with access…

45. 9.8CVE-2021-24042EPSS 1.3%2022-01-04

    The calling logic for WhatsApp for Android prior to v2.21.23, WhatsApp Business for Android prior to v2.21.23, WhatsApp for iOS prior to v2.21.230, WhatsApp Business for iOS prior to v2.21.230, WhatsApp for KaiOS prior to v2.2143, WhatsApp…

46. 6.7CVE-2022-20014EPSS 0.1%2022-01-04

    In vow driver, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALP…

47. 9.8CVE-2021-39990EPSS 0.8%2022-01-03

    The screen lock module has a Stack-based Buffer Overflow vulnerability.Successful exploitation of this vulnerability may affect user experience.

48. 6.5CVE-2021-35093EPSS 0.3%2022-01-03

    Possible memory corruption in BT controller when it receives an oversized LMP packet over 2-DH1 link and leads to denial of service in BlueCore

49. 5.5CVE-2021-45943EPSS 1.5%2022-01-01

    GDAL 3.3.0 through 3.4.0 has a heap-based buffer overflow in PCIDSK::CPCIDSKFile::ReadFromFile (called from PCIDSK::CPCIDSKSegment::ReadFromFile and PCIDSK::CPCIDSKBinarySegment::CPCIDSKBinarySegment).

50. 5.5CVE-2021-45942EPSS 1.8%2022-01-01

    OpenEXR 3.1.x before 3.1.4 has a heap-based buffer overflow in Imf_3_1::LineCompositeTask::execute (called from IlmThread_3_1::NullThreadPoolProvider::addTask and IlmThread_3_1::ThreadPool::addGlobalTask). NOTE: db217f2 may be inapplicable.