Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

CVEs (15,593)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-38426 1Fatek 1Winproladder Jun 17, 2026 Oct 18, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 FATEK Automation WinProladder versions 3.30 and prior lacks proper validation of user-supplied data when parsing project files, which could result in an out-of-bounds write. An attacker could leverage this vulnerability...Show more FATEK Automation WinProladder versions 3.30 and prior lacks proper validation of user-supplied data when parsing project files, which could result in an out-of-bounds write. An attacker could leverage this vulnerability to execute arbitrary code.Show less
CVE-2021-38389 1Advantech 1Webaccess Jun 17, 2026 Oct 18, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Advantech WebAccess versions 9.02 and prior are vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute code.
CVE-2021-33023 1Advantech 1Webaccess Jun 17, 2026 Oct 18, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Advantech WebAccess versions 9.02 and prior are vulnerable to a heap-based buffer overflow, which may allow an attacker to remotely execute code.
CVE-2021-28021 3Debian FedoraprojectStb Project 3Debian Linux FedoraStb Jun 17, 2026 Oct 15, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Buffer overflow vulnerability in function stbi__extend_receive in stb_image.h in stb 2.26 via a crafted JPEG file.
CVE-2021-40731 1Adobe 4Acrobat Acrobat DcAcrobat Reader+1 more Jun 17, 2026 Oct 15, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Adobe Acrobat Reader DC version 21.007.20095 (and earlier), 21.007.20096 (and earlier), 20.004.30015 (and earlier), and 17.011.30202 (and earlier) is affected by an out-of-bounds write vulnerability when parsing a crafte...Show more Adobe Acrobat Reader DC version 21.007.20095 (and earlier), 21.007.20096 (and earlier), 20.004.30015 (and earlier), and 17.011.30202 (and earlier) is affected by an out-of-bounds write vulnerability when parsing a crafted JPEG2000 file, which could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2021-3875 2Fedoraproject Vim 2Fedora Vim Jun 17, 2026 Oct 15, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 vim is vulnerable to Heap-based Buffer Overflow
CVE-2021-3057 1Paloaltonetworks 1Globalprotect Jun 17, 2026 Oct 13, 2021 N/A· v4 8.1 HIGH· v3 9.3 HIGH· v2 A stack-based buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect app that enables a man-in-the-middle attacker to disrupt system processes and potentially execute arbitrary code with SYSTEM priv...Show more A stack-based buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect app that enables a man-in-the-middle attacker to disrupt system processes and potentially execute arbitrary code with SYSTEM privileges. This issue impacts: GlobalProtect app 5.1 versions earlier than GlobalProtect app 5.1.9 on Windows; GlobalProtect app 5.2 versions earlier than GlobalProtect app 5.2.8 on Windows; GlobalProtect app 5.2 versions earlier than GlobalProtect app 5.2.8 on the Universal Windows Platform; GlobalProtect app 5.3 versions earlier than GlobalProtect app 5.3.1 on Linux.Show less
CVE-2021-3330 1Zephyrproject 1Zephyr Jun 17, 2026 Oct 12, 2021 N/A· v4 8.8 HIGH· v3 5.8 MEDIUM· v2 RCE/DOS: Linked-list corruption leading to large out-of-bounds write while sorting for forged fragment list in Zephyr. Zephyr versions >= >=2.4.0 contain Out-of-bounds Write (CWE-787). For more information, see https://g...Show more RCE/DOS: Linked-list corruption leading to large out-of-bounds write while sorting for forged fragment list in Zephyr. Zephyr versions >= >=2.4.0 contain Out-of-bounds Write (CWE-787). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-fj4r-373f-9456Show less
CVE-2020-22678 1Gpac 1Gpac Jun 17, 2026 Oct 12, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 An issue was discovered in gpac 0.8.0. The gf_media_nalu_remove_emulation_bytes function in av_parsers.c has a heap-based buffer overflow which can lead to a denial of service (DOS) via a crafted input.
CVE-2020-22677 1Gpac 1Gpac Jun 17, 2026 Oct 12, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 An issue was discovered in gpac 0.8.0. The dump_data_hex function in box_dump.c has a heap-based buffer overflow which can lead to a denial of service (DOS) via a crafted input.
CVE-2020-22675 1Gpac 1Gpac Jun 17, 2026 Oct 12, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 An issue was discovered in gpac 0.8.0. The GetGhostNum function in stbl_read.c has a heap-based buffer overflow which can lead to a denial of service (DOS) via a crafted input.
CVE-2021-21940 1Anker 1Eufy Homebase 2 Firmware Jun 17, 2026 Oct 12, 2021 N/A· v4 10.0 CRITICAL· v3 7.5 HIGH· v2 A heap-based buffer overflow vulnerability exists in the pushMuxer processRtspInfo functionality of Anker Eufy Homebase 2 2.1.6.9h. A specially-crafted network packet can lead to a heap buffer overflow. An attacker can s...Show more A heap-based buffer overflow vulnerability exists in the pushMuxer processRtspInfo functionality of Anker Eufy Homebase 2 2.1.6.9h. A specially-crafted network packet can lead to a heap buffer overflow. An attacker can send a malicious packet to trigger this vulnerability.Show less
CVE-2021-37199 1Siemens 2Sinumerik 808d Firmware Sinumerik 828d Firmware Jun 17, 2026 Oct 12, 2021 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 A vulnerability has been identified in SINUMERIK 808D (All versions), SINUMERIK 828D (All versions < V4.95). Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allo...Show more A vulnerability has been identified in SINUMERIK 808D (All versions), SINUMERIK 828D (All versions < V4.95). Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial-of-service in the device.Show less
CVE-2021-30632 2Fedoraproject Google 2Chrome Fedora Jun 17, 2026 Oct 8, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Out of bounds write in V8 in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2021-30628 2Fedoraproject Google 2Chrome Fedora Jun 17, 2026 Oct 8, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Stack buffer overflow in ANGLE in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit stack corruption via a crafted HTML page.
CVE-2021-30626 2Fedoraproject Google 2Chrome Fedora Jun 17, 2026 Oct 8, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Out of bounds memory access in ANGLE in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2021-25495 1Samsung 1Notes Jun 17, 2026 Oct 6, 2021 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 A possible heap buffer overflow vulnerability in libSPenBase library of Samsung Notes prior to Samsung Note version 4.3.02.61 allows arbitrary code execution.
CVE-2021-25492 1Samsung 1Notes Jun 17, 2026 Oct 6, 2021 N/A· v4 7.1 HIGH· v3 3.6 LOW· v2 Lack of boundary checking of a buffer in libSPenBase library of Samsung Notes prior to Samsung Note version 4.3.02.61 allows OOB read.
CVE-2021-25479 1Google 1Android Jun 17, 2026 Oct 6, 2021 N/A· v4 7.2 HIGH· v3 6.5 MEDIUM· v2 A possible heap-based buffer overflow vulnerability in Exynos CP Chipset prior to SMR Oct-2021 Release 1 allows arbitrary memory write and code execution.
CVE-2021-25478 1Google 1Android Jun 17, 2026 Oct 6, 2021 N/A· v4 7.2 HIGH· v3 6.5 MEDIUM· v2 A possible stack-based buffer overflow vulnerability in Exynos CP Chipset prior to SMR Oct-2021 Release 1 allows arbitrary memory write and code execution.

Previous 1...507508509...780 Next