Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

CVEs (15,593)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-32272 2Debian Faad2 Project 2Debian Linux Faad2 Jun 17, 2026 Sep 20, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 An issue was discovered in faad2 before 2.10.0. A heap-buffer-overflow exists in the function stszin located in mp4read.c. It allows an attacker to cause Code Execution.
CVE-2021-32271 1Gpac 1Gpac Jun 17, 2026 Sep 20, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 An issue was discovered in gpac through 20200801. A stack-buffer-overflow exists in the function DumpRawUIConfig located in odf_dump.c. It allows an attacker to cause code Execution.
CVE-2021-32268 1Gpac 1Gpac Jun 17, 2026 Sep 20, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Buffer overflow vulnerability in function gf_fprintf in os_file.c in gpac before 1.0.1 allows attackers to execute arbitrary code. The fixed version is 1.0.1.
CVE-2021-39218 2Bytecodealliance Fedoraproject 2Fedora Wasmtime Jun 17, 2026 Sep 17, 2021 N/A· v4 6.3 MEDIUM· v3 3.3 LOW· v2 Wasmtime is an open source runtime for WebAssembly & WASI. In Wasmtime from version 0.26.0 and before version 0.30.0 is affected by a memory unsoundness vulnerability. There was an invalid free and out-of-bounds read and...Show more Wasmtime is an open source runtime for WebAssembly & WASI. In Wasmtime from version 0.26.0 and before version 0.30.0 is affected by a memory unsoundness vulnerability. There was an invalid free and out-of-bounds read and write bug when running Wasm that uses `externref`s in Wasmtime. To trigger this bug, Wasmtime needs to be running Wasm that uses `externref`s, the host creates non-null `externrefs`, Wasmtime performs a garbage collection (GC), and there has to be a Wasm frame on the stack that is at a GC safepoint where there are no live references at this safepoint, and there is a safepoint with live references earlier in this frame's function. Under this scenario, Wasmtime would incorrectly use the GC stack map for the safepoint from earlier in the function instead of the empty safepoint. This would result in Wasmtime treating arbitrary stack slots as `externref`s that needed to be rooted for GC. At the next GC, it would be determined that nothing was referencing these bogus `externref`s (because nothing could ever reference them, because they are not really `externref`s) and then Wasmtime would deallocate them and run `<ExternRef as Drop>::drop` on them. This results in a free of memory that is not necessarily on the heap (and shouldn't be freed at this moment even if it was), as well as potential out-of-bounds reads and writes. Even though support for `externref`s (via the reference types proposal) is enabled by default, unless you are creating non-null `externref`s in your host code or explicitly triggering GCs, you cannot be affected by this bug. We have reason to believe that the effective impact of this bug is relatively small because usage of `externref` is currently quite rare. This bug has been patched and users should upgrade to Wasmtime version 0.30.0. If you cannot upgrade Wasmtime at this time, you can avoid this bug by disabling the reference types proposal by passing `false` to `wasmtime::Config::wasm_reference_types`.Show less
CVE-2020-21548 2Libsixel Project Saitoha 2Libsixel Libsixel Jun 17, 2026 Sep 17, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Libsixel 1.8.3 contains a heap-based buffer overflow in the sixel_encode_highcolor function in tosixel.c.
CVE-2020-21547 2Libsixel Project Saitoha 2Libsixel Libsixel Jun 17, 2026 Sep 17, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Libsixel 1.8.2 contains a heap-based buffer overflow in the dither_func_fs function in tosixel.c.
CVE-2021-38406 1Deltaww 1Dopsoft Jun 17, 2026 Sep 17, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Delta Electronic DOPSoft 2 (Version 2.00.07 and prior) lacks proper validation of user-supplied data when parsing specific project files. This could result in multiple out-of-bounds write instances. An attacker could lev...Show more Delta Electronic DOPSoft 2 (Version 2.00.07 and prior) lacks proper validation of user-supplied data when parsing specific project files. This could result in multiple out-of-bounds write instances. An attacker could leverage this vulnerability to execute code in the context of the current process.Show less
CVE-2020-21606 1Struktur 1Libde265 Jun 17, 2026 Sep 16, 2021 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 libde265 v1.0.4 contains a heap buffer overflow fault in the put_epel_16_fallback function, which can be exploited via a crafted a file.
CVE-2020-21604 1Struktur 1Libde265 Jun 17, 2026 Sep 16, 2021 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 libde265 v1.0.4 contains a heap buffer overflow fault in the _mm_loadl_epi64 function, which can be exploited via a crafted a file.
CVE-2020-21603 1Struktur 1Libde265 Jun 17, 2026 Sep 16, 2021 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 libde265 v1.0.4 contains a heap buffer overflow in the put_qpel_0_0_fallback_16 function, which can be exploited via a crafted a file.
CVE-2020-21602 1Struktur 1Libde265 Jun 17, 2026 Sep 16, 2021 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 libde265 v1.0.4 contains a heap buffer overflow in the put_weighted_bipred_16_fallback function, which can be exploited via a crafted a file.
CVE-2020-21601 1Struktur 1Libde265 Jun 17, 2026 Sep 16, 2021 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 libde265 v1.0.4 contains a stack buffer overflow in the put_qpel_fallback function, which can be exploited via a crafted a file.
CVE-2020-21600 1Struktur 1Libde265 Jun 17, 2026 Sep 16, 2021 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 libde265 v1.0.4 contains a heap buffer overflow in the put_weighted_pred_avg_16_fallback function, which can be exploited via a crafted a file.
CVE-2020-21599 2Debian Struktur 2Debian Linux Libde265 Jun 17, 2026 Sep 16, 2021 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 libde265 v1.0.4 contains a heap buffer overflow in the de265_image::available_zscan function, which can be exploited via a crafted a file.
CVE-2020-21598 2Debian Struktur 2Debian Linux Libde265 Jun 17, 2026 Sep 16, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 libde265 v1.0.4 contains a heap buffer overflow in the ff_hevc_put_unweighted_pred_8_sse function, which can be exploited via a crafted a file.
CVE-2020-21597 2Debian Struktur 2Debian Linux Libde265 Jun 17, 2026 Sep 16, 2021 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 libde265 v1.0.4 contains a heap buffer overflow in the mc_chroma function, which can be exploited via a crafted a file.
CVE-2020-21595 1Struktur 1Libde265 Jun 17, 2026 Sep 16, 2021 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 libde265 v1.0.4 contains a heap buffer overflow in the mc_luma function, which can be exploited via a crafted a file.
CVE-2020-21594 1Struktur 1Libde265 Jun 17, 2026 Sep 16, 2021 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 libde265 v1.0.4 contains a heap buffer overflow in the put_epel_hv_fallback function, which can be exploited via a crafted a file.
CVE-2020-21533 2Debian Xfig Project 2Debian Linux Fig2dev Jun 17, 2026 Sep 16, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 fig2dev 3.2.7b contains a stack buffer overflow in the read_textobject function in read.c.
CVE-2020-21529 2Debian Xfig Project 2Debian Linux Fig2dev Jun 17, 2026 Sep 16, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 fig2dev 3.2.7b contains a stack buffer overflow in the bezier_spline function in genepic.c.

Previous 1...512513514...780 Next