Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

CVEs (15,593)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-25461 1Google 1Android Jun 17, 2026 Sep 9, 2021 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 An improper length check in APAService prior to SMR Sep-2021 Release 1 results in stack based Buffer Overflow.
CVE-2021-32487 1Mediatek 1Modem Jun 17, 2026 Sep 9, 2021 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 In modem 2G RRM, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...Show more In modem 2G RRM, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00500736; Issue ID: ALPS04938456.Show less
CVE-2021-32486 1Mediatek 1Modem Jun 17, 2026 Sep 9, 2021 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 In modem 2G RRM, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...Show more In modem 2G RRM, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00500621; Issue ID: ALPS04964928.Show less
CVE-2021-32485 1Mediatek 1Modem Jun 17, 2026 Sep 9, 2021 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 In modem 2G RRM, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...Show more In modem 2G RRM, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00500621; Issue ID: ALPS04964926.Show less
CVE-2021-32484 1Mediatek 1Modem Jun 17, 2026 Sep 9, 2021 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 In modem 2G RRM, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...Show more In modem 2G RRM, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00500621; Issue ID: ALPS04964917.Show less
CVE-2020-19144 3Debian NetappSimplesystems 3Debian Linux LibtiffOntap Select Deploy Administration Utility Jun 17, 2026 Sep 9, 2021 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 Buffer Overflow in LibTiff v4.0.10 allows attackers to cause a denial of service via the 'in _TIFFmemcpy' funtion in the component 'tif_unix.c'.
CVE-2020-19143 2Debian Simplesystems 2Debian Linux Libtiff Jun 17, 2026 Sep 9, 2021 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 Buffer Overflow in LibTiff v4.0.10 allows attackers to cause a denial of service via the "TIFFVGetField" funtion in the component 'libtiff/tif_dir.c'.
CVE-2021-3761 2Cloudflare Debian 2Debian Linux Octorpki Jun 17, 2026 Sep 9, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Any CA issuer in the RPKI can trick OctoRPKI prior to 1.3.0 into emitting an invalid VRP "MaxLength" value, causing RTR sessions to terminate. An attacker can use this to disable RPKI Origin Validation in a victim networ...Show more Any CA issuer in the RPKI can trick OctoRPKI prior to 1.3.0 into emitting an invalid VRP "MaxLength" value, causing RTR sessions to terminate. An attacker can use this to disable RPKI Origin Validation in a victim network (for example AS 13335 - Cloudflare) prior to launching a BGP hijack which during normal operations would be rejected as "RPKI invalid". Additionally, in certain deployments RTR session flapping in and of itself also could cause BGP routing churn, causing availability issues.Show less
CVE-2021-26603 1Bandisoft 1Ark Library Jun 17, 2026 Sep 9, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 A heap overflow issue was found in ARK library of bandisoft Co., Ltd when the Ark_DigPathA function parsed a file path. This vulnerability is due to missing support for string length check.
CVE-2021-21105 1Adobe 1Illustrator Jun 17, 2026 Sep 8, 2021 N/A· v4 8.8 HIGH· v3 9.3 HIGH· v2 Adobe Illustrator version 25.2 (and earlier) is affected by a memory corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve remote code ex...Show more Adobe Illustrator version 25.2 (and earlier) is affected by a memory corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve remote code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2021-21104 1Adobe 1Illustrator Jun 17, 2026 Sep 8, 2021 N/A· v4 8.8 HIGH· v3 9.3 HIGH· v2 Adobe Illustrator version 25.2 (and earlier) is affected by a memory corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to remote code execution...Show more Adobe Illustrator version 25.2 (and earlier) is affected by a memory corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to remote code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2021-21103 1Adobe 1Illustrator Jun 17, 2026 Sep 8, 2021 N/A· v4 8.8 HIGH· v3 9.3 HIGH· v2 Adobe Illustrator version 25.2 (and earlier) is affected by a memory corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose sensitive mem...Show more Adobe Illustrator version 25.2 (and earlier) is affected by a memory corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose sensitive memory information in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2021-21897 3Debian FedoraprojectRibbonsoft 4Debian Linux DxflibExtra Packages For Enterprise Linux+1 more Jun 17, 2026 Sep 8, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 A code execution vulnerability exists in the DL_Dxf::handleLWPolylineData functionality of Ribbonsoft dxflib 3.17.0. A specially-crafted .dxf file can lead to a heap buffer overflow. An attacker can provide a malicious f...Show more A code execution vulnerability exists in the DL_Dxf::handleLWPolylineData functionality of Ribbonsoft dxflib 3.17.0. A specially-crafted .dxf file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.Show less
CVE-2021-30717 1Apple 2Mac Os X Macos Jun 17, 2026 Sep 8, 2021 N/A· v4 8.1 HIGH· v3 6.8 MEDIUM· v2 A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave. An attacker in a privileged network p...Show more A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave. An attacker in a privileged network position may be able to execute arbitrary code.Show less
CVE-2021-30710 1Apple 6Ipados Iphone OsMac Os X+3 more Jun 17, 2026 Sep 8, 2021 N/A· v4 7.1 HIGH· v3 5.8 MEDIUM· v2 A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 14.6, Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6, Security Update 2021-003 Catalina, macOS Big Sur 11.4,...Show more A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 14.6, Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6, Security Update 2021-003 Catalina, macOS Big Sur 11.4, watchOS 7.5. A malicious application may cause a denial of service or potentially disclose memory contents.Show less
CVE-2021-30675 1Apple 1Boot Camp Jun 17, 2026 Sep 8, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 A memory corruption issue was addressed with improved state management. This issue is fixed in Boot Camp 6.1.14. A malicious application may be able to elevate privileges.
CVE-2021-30672 1Apple 2Mac Os X Macos Jun 17, 2026 Sep 8, 2021 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave. A malicious application may be able t...Show more A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave. A malicious application may be able to gain root privileges.Show less
CVE-2021-30665 1Apple 5Ipados Iphone OsMacos+2 more Jun 17, 2026 Sep 8, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 A memory corruption issue was addressed with improved state management. This issue is fixed in watchOS 7.4.1, iOS 14.5.1 and iPadOS 14.5.1, tvOS 14.6, iOS 12.5.3, macOS Big Sur 11.3.1. Processing maliciously crafted web...Show more A memory corruption issue was addressed with improved state management. This issue is fixed in watchOS 7.4.1, iOS 14.5.1 and iPadOS 14.5.1, tvOS 14.6, iOS 12.5.3, macOS Big Sur 11.3.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..Show less
CVE-2021-30664 1Apple 5Ipados Iphone OsMacos+2 more Jun 17, 2026 Sep 8, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. Processing a maliciously crafted file may lead to arb...Show more An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. Processing a maliciously crafted file may lead to arbitrary code execution.Show less
CVE-2021-1883 1Apple 6Ipados Iphone OsMac Os X+3 more Jun 17, 2026 Sep 8, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 This issue was addressed with improved checks. This issue is fixed in Security Update 2021-004 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, Security Update 2021-003 Catalina, tvOS 14.5, macOS Big Sur 11.3. Processing m...Show more This issue was addressed with improved checks. This issue is fixed in Security Update 2021-004 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, Security Update 2021-003 Catalina, tvOS 14.5, macOS Big Sur 11.3. Processing maliciously crafted server messages may lead to heap corruption.Show less

Previous 1...514515516...780 Next