Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

CVEs (15,588)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-21898 3Debian FedoraprojectLibrecad 3Debian Linux FedoraLibdxfrw Jun 17, 2026 Nov 19, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 A code execution vulnerability exists in the dwgCompressor::decompress18() functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dwg file can lead to an out-of-bounds write. An attacker can prov...Show more A code execution vulnerability exists in the dwgCompressor::decompress18() functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dwg file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability.Show less
CVE-2021-40391 3Debian FedoraprojectGerbv Project 3Debian Linux FedoraGerbv Jun 17, 2026 Nov 19, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 An out-of-bounds write vulnerability exists in the drill format T-code tool number functionality of Gerbv 2.7.0, dev (commit b5f1eacd), and the forked version of Gerbv (commit 71493260). A specially-crafted drill file ca...Show more An out-of-bounds write vulnerability exists in the drill format T-code tool number functionality of Gerbv 2.7.0, dev (commit b5f1eacd), and the forked version of Gerbv (commit 71493260). A specially-crafted drill file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.Show less
CVE-2021-21899 3Debian FedoraprojectLibrecad 3Debian Linux FedoraLibdxfrw Jun 17, 2026 Nov 19, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 A code execution vulnerability exists in the dwgCompressor::copyCompBytes21 functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dwg file can lead to a heap buffer overflow. An attacker can pro...Show more A code execution vulnerability exists in the dwgCompressor::copyCompBytes21 functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dwg file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.Show less
CVE-2021-29327 1Moddable 1Moddable Jun 17, 2026 Nov 19, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 OpenSource Moddable v10.5.0 was discovered to contain a heap buffer overflow in the fx_ArrayBuffer function at /moddable/xs/sources/xsDataView.c.
CVE-2021-29326 1Moddable 1Moddable Jun 17, 2026 Nov 19, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 OpenSource Moddable v10.5.0 was discovered to contain a heap buffer overflow in the fxIDToString function at /moddable/xs/sources/xsSymbol.c.
CVE-2021-29325 1Moddable 1Moddable Jun 17, 2026 Nov 19, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 OpenSource Moddable v10.5.0 was discovered to contain a heap buffer overflow in the fx_String_prototype_repeat function at /moddable/xs/sources/xsString.c.
CVE-2021-29323 1Moddable 1Moddable Jun 17, 2026 Nov 19, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 OpenSource Moddable v10.5.0 was discovered to contain a heap buffer overflow via the component /modules/network/wifi/esp/modwifi.c.
CVE-2021-37592 1Oisf 1Suricata Jun 17, 2026 Nov 19, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Suricata before 5.0.8 and 6.x before 6.0.4 allows TCP evasion via a client with a crafted TCP/IP stack that can send a certain sequence of segments.
CVE-2021-3973 3Debian FedoraprojectVim 3Debian Linux FedoraVim Oct 8, 2026 Nov 19, 2021 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 vim is vulnerable to Heap-based Buffer Overflow
CVE-2021-3968 2Fedoraproject Vim 2Fedora Vim Oct 8, 2026 Nov 19, 2021 N/A· v4 8.0 HIGH· v3 8.5 HIGH· v2 vim is vulnerable to Heap-based Buffer Overflow
CVE-2021-42524 1Adobe 1Animate Jun 17, 2026 Nov 18, 2021 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 Adobe Animate version 21.0.9 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user i...Show more Adobe Animate version 21.0.9 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious BMP file.Show less
CVE-2021-42272 1Adobe 1Animate Jun 17, 2026 Nov 18, 2021 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 Adobe Animate version 21.0.9 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user i...Show more Adobe Animate version 21.0.9 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious GIF file.Show less
CVE-2021-42271 1Adobe 1Animate Jun 17, 2026 Nov 18, 2021 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 Adobe Animate version 21.0.9 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user i...Show more Adobe Animate version 21.0.9 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious BMP file.Show less
CVE-2021-42270 1Adobe 1Animate Jun 17, 2026 Nov 18, 2021 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 Adobe Animate version 21.0.9 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user i...Show more Adobe Animate version 21.0.9 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious BMP file.Show less
CVE-2021-0671 1Google 1Android Jun 17, 2026 Nov 18, 2021 N/A· v4 6.7 MEDIUM· v3 7.2 HIGH· v2 In apusys, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. P...Show more In apusys, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05664273; Issue ID: ALPS05664273.Show less
CVE-2021-0658 1Google 1Android Jun 17, 2026 Nov 18, 2021 N/A· v4 6.7 MEDIUM· v3 4.6 MEDIUM· v2 In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation....Show more In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05672107; Issue ID: ALPS05672107.Show less
CVE-2021-0657 1Google 1Android Jun 17, 2026 Nov 18, 2021 N/A· v4 6.7 MEDIUM· v3 4.6 MEDIUM· v2 In apusys, there is a possible out of bounds write due to a stack-based buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploi...Show more In apusys, there is a possible out of bounds write due to a stack-based buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05672103; Issue ID: ALPS05672103.Show less
CVE-2021-0655 1Google 1Android Jun 17, 2026 Nov 18, 2021 N/A· v4 6.7 MEDIUM· v3 4.6 MEDIUM· v2 In mdlactl driver, there is a possible memory corruption due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for expl...Show more In mdlactl driver, there is a possible memory corruption due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05673424; Issue ID: ALPS05673424.Show less
CVE-2021-0200 1Intel 11Ethernet Controller V710 At2 Firmware Ethernet Controller X710 Am2 FirmwareEthernet Controller X710 At2 Firmware+8 more Jun 17, 2026 Nov 17, 2021 N/A· v4 6.7 MEDIUM· v3 4.6 MEDIUM· v2 Out-of-bounds write in the firmware for Intel(R) Ethernet 700 Series Controllers before version 8.2 may allow a privileged user to potentially enable an escalation of privilege via local access.
CVE-2021-0075 1Intel 167265 Firmware 9260 FirmwareAc1550 Firmware+13 more Jun 17, 2026 Nov 17, 2021 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 Out-of-bounds write in firmware for some Intel(R) PROSet/Wireless WiFi in multiple operating systems and some Killer(TM) WiFi in Windows 10 may allow a privileged user to potentially enable denial of service via local ac...Show more Out-of-bounds write in firmware for some Intel(R) PROSet/Wireless WiFi in multiple operating systems and some Killer(TM) WiFi in Windows 10 may allow a privileged user to potentially enable denial of service via local access.Show less

Previous 1...500501502...780 Next