Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

CVEs (15,593)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-39275 6Apache DebianFedoraproject+3 more 11Cloud Backup Clustered Data OntapDebian Linux+8 more Jun 17, 2026 Sep 16, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 ap_escape_quotes() may write beyond the end of a buffer when given malicious input. No included modules pass untrusted data to these functions, but third-party / external modules may. This issue affects Apache HTTP Serve...Show more ap_escape_quotes() may write beyond the end of a buffer when given malicious input. No included modules pass untrusted data to these functions, but third-party / external modules may. This issue affects Apache HTTP Server 2.4.48 and earlier.Show less
CVE-2021-40156 1Autodesk 1Navisworks Jun 17, 2026 Sep 15, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 A maliciously crafted DWG file in Autodesk Navisworks 2019, 2020, 2021, 2022 can be forced to write beyond allocated boundaries when parsing the DWG files. This vulnerability can be exploited to execute arbitrary code.
CVE-2021-27046 1Autodesk 1Navisworks Jun 17, 2026 Sep 15, 2021 N/A· v4 7.8 HIGH· v3 4.4 MEDIUM· v2 A Memory Corruption vulnerability for PDF files in Autodesk Navisworks 2019, 2020, 2021, 2022 may lead to code execution through maliciously crafted DLL files.
CVE-2021-27044 1Autodesk 1Fbx Review Jun 17, 2026 Sep 15, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 A Out-Of-Bounds Read/Write Vulnerability in Autodesk FBX Review version 1.4.0 may lead to remote code execution through maliciously crafted DLL files or information disclosure.
CVE-2021-38653 1Microsoft 2365 Apps Office Aug 10, 2026 Sep 15, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Microsoft Office Visio Remote Code Execution Vulnerability
CVE-2021-36952 1Microsoft 2Visual Studio 2017 Visual Studio 2019 Aug 10, 2026 Sep 15, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Visual Studio Remote Code Execution Vulnerability
CVE-2021-26435 1Microsoft 9Windows 10 Windows 7Windows 8.1+6 more Aug 10, 2026 Sep 15, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Windows Scripting Engine Memory Corruption Vulnerability
CVE-2021-3778 4Debian FedoraprojectNetapp+1 more 4Debian Linux FedoraOntap Select Deploy Administration Utility+1 more Jun 17, 2026 Sep 15, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 vim is vulnerable to Heap-based Buffer Overflow
CVE-2021-3751 1Libmobi Project 1Libmobi Jun 17, 2026 Sep 15, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 libmobi is vulnerable to Out-of-bounds Write
CVE-2020-21050 2Libsixel Project Saitoha 2Libsixel Libsixel Jun 17, 2026 Sep 14, 2021 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 Libsixel prior to v1.8.3 contains a stack buffer overflow in the function gif_process_raster at fromgif.c.
CVE-2021-25665 1Siemens 1Simcenter Star Ccm+ Jun 17, 2026 Sep 14, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 A vulnerability has been identified in Simcenter STAR-CCM+ Viewer (All versions < V2021.2.1). The starview+.exe application lacks proper validation of user-supplied data when parsing scene files. This could result in an...Show more A vulnerability has been identified in Simcenter STAR-CCM+ Viewer (All versions < V2021.2.1). The starview+.exe application lacks proper validation of user-supplied data when parsing scene files. This could result in an out of bounds write past the end of an allocated structure. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-13700)Show less
CVE-2021-33362 1Gpac 1Gpac Jun 17, 2026 Sep 13, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Stack buffer overflow in the hevc_parse_vps_extension function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted file.
CVE-2021-33545 1Geutebrueck 16G Cam Ebc 2110 Firmware G Cam Ebc 2111 FirmwareG Cam Ebc 2112 Firmware+13 more Jun 17, 2026 Sep 13, 2021 N/A· v4 7.2 HIGH· v3 6.5 MEDIUM· v2 Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the counter parameter which may allow an attacker to remotely execute arbitrary code.
CVE-2021-32137 1Gpac 1Gpac Jun 17, 2026 Sep 13, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Heap buffer overflow in the URL_GetProtocolType function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted file.
CVE-2021-32136 1Gpac 1Gpac Jun 17, 2026 Sep 13, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Heap buffer overflow in the print_udta function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted file.
CVE-2021-34346 1Qnap 1Nvr Storage Expansion Firmware Jun 17, 2026 Sep 10, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 A stack buffer overflow vulnerability has been reported to affect QNAP device running NVR Storage Expansion. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnera...Show more A stack buffer overflow vulnerability has been reported to affect QNAP device running NVR Storage Expansion. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of NVR Storage Expansion: NVR Storage Expansion 1.0.6 ( 2021/08/03 ) and laterShow less
CVE-2021-34345 1Qnap 14Ej1600 Firmware Tl D1600s FirmwareTl D400s Firmware+11 more Jun 17, 2026 Sep 10, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 A stack buffer overflow vulnerability has been reported to affect QNAP device running NVR Storage Expansion. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnera...Show more A stack buffer overflow vulnerability has been reported to affect QNAP device running NVR Storage Expansion. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of NVR Storage Expansion: NVR Storage Expansion 1.0.6 ( 2021/08/03 ) and laterShow less
CVE-2021-34344 1Qnap 1Qusbcam2 Jun 17, 2026 Sep 10, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 A stack buffer overflow vulnerability has been reported to affect QNAP device running QUSBCam2. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the...Show more A stack buffer overflow vulnerability has been reported to affect QNAP device running QUSBCam2. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of QUSBCam2: QTS 4.5.4: QUSBCam2 1.1.4 ( 2021/07/30 ) and later QTS 5.0: QUSBCam2 2.0.1 ( 2021/08/03 ) and later QTS 4.3.6: QUSBCam2 1.1.4 ( 2021/07/30 ) and later QTS 4.3.3: QUSBCam2 1.1.4 ( 2021/08/06 ) and later QuTS hero 4.5.3: QUSBCam2 1.1.4 ( 2021/07/30 ) and laterShow less
CVE-2021-34343 1Qnap 3Qts Quts HeroQutscloud Jun 17, 2026 Sep 10, 2021 N/A· v4 7.2 HIGH· v3 6.5 MEDIUM· v2 A stack buffer overflow vulnerability has been reported to affect QNAP device running QTS, QuTScloud, QuTS hero. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vul...Show more A stack buffer overflow vulnerability has been reported to affect QNAP device running QTS, QuTScloud, QuTS hero. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of QTS, QuTScloud, QuTS hero: QTS 4.5.4.1715 build 20210630 and later QTS 5.0.0.1716 build 20210701 and later QuTScloud c4.5.6.1755 and later QuTS hero h4.5.4.1771 build 20210825 and laterShow less
CVE-2021-28816 1Qnap 3Qts Quts HeroQutscloud Jun 17, 2026 Sep 10, 2021 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 A stack buffer overflow vulnerability has been reported to affect QNAP device running QTS, QuTScloud, QuTS hero. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vul...Show more A stack buffer overflow vulnerability has been reported to affect QNAP device running QTS, QuTScloud, QuTS hero. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of QTS, QuTScloud, QuTS hero: QTS 4.5.4.1715 build 20210630 and later QTS 5.0.0.1716 build 20210701 and later QTS 4.3.3.1693 build 20210624 and later QTS 4.3.6.1750 build 20210730 and later QuTScloud c4.5.6.1755 and later QuTS hero h4.5.4.1771 build 20210825 and laterShow less

Previous 1...513514515...780 Next