Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

CVEs (15,593)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-38517 1Netgear 4R6400 Firmware Rax75 FirmwareRax80 Firmware+1 more Jun 17, 2026 Aug 11, 2021 N/A· v4 7.2 HIGH· v3 6.5 MEDIUM· v2 Certain NETGEAR devices are affected by out-of-bounds reads and writes. This affects R6400 before 1.0.1.70, RAX75 before 1.0.4.120, RAX80 before 1.0.4.120, and XR300 before 1.0.3.50.
CVE-2020-21680 1Fig2dev Project 1Fig2dev Jun 17, 2026 Aug 10, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 A stack-based buffer overflow in the put_arrow() component in genpict2e.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into pict2e format.
CVE-2020-21677 2Libsixel Project Saitoha 2Libsixel Libsixel Jun 17, 2026 Aug 10, 2021 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 A heap-based buffer overflow in the sixel_encoder_output_without_macro function in encoder.c of Libsixel 1.8.4 allows attackers to cause a denial of service (DOS) via converting a crafted PNG file into Sixel format.
CVE-2020-21676 2Debian Fig2dev Project 2Debian Linux Fig2dev Jun 17, 2026 Aug 10, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 A stack-based buffer overflow in the genpstrx_text() component in genpstricks.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into pstricks format.
CVE-2020-21675 2Debian Fig2dev Project 2Debian Linux Fig2dev Jun 17, 2026 Aug 10, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 A stack-based buffer overflow in the genptk_text component in genptk.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into ptk format.
CVE-2021-32943 1Advantech 1Webaccess/scada Jun 17, 2026 Aug 10, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 The affected product is vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute arbitrary code on the WebAccess/SCADA (WebAccess/SCADA versions prior to 8.4.5, WebAccess/SCADA version...Show more The affected product is vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute arbitrary code on the WebAccess/SCADA (WebAccess/SCADA versions prior to 8.4.5, WebAccess/SCADA versions prior to 9.0.1).Show less
CVE-2021-20349 1Ibm 1Tivoli Workload Scheduler Jun 17, 2026 Aug 9, 2021 N/A· v4 5.3 MEDIUM· v3 4.6 MEDIUM· v2 IBM Tivoli Workload Scheduler 9.4 and 9.5 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A local attacker could overflow a buffer and gain lower level privileges. IBM X-Force ID: 1945...Show more IBM Tivoli Workload Scheduler 9.4 and 9.5 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A local attacker could overflow a buffer and gain lower level privileges. IBM X-Force ID: 194599.Show less
CVE-2021-38166 3Debian FedoraprojectLinux 3Debian Linux FedoraLinux Kernel Oct 8, 2026 Aug 7, 2021 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 In kernel/bpf/hashtab.c in the Linux kernel through 5.13.8, there is an integer overflow and out-of-bounds write when many elements are placed in a single bucket. NOTE: exploitation might be impractical without the CAP_S...Show more In kernel/bpf/hashtab.c in the Linux kernel through 5.13.8, there is an integer overflow and out-of-bounds write when many elements are placed in a single bucket. NOTE: exploitation might be impractical without the CAP_SYS_ADMIN capability.Show less
CVE-2021-35325 1Totolink 1A720r Firmware Jun 17, 2026 Aug 5, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 A stack overflow in the checkLoginUser function of TOTOLINK A720R A720R_Firmware v4.1.5cu.470_B20200911 allows attackers to cause a denial of service (DOS).
CVE-2021-36584 1Gpac 1Gpac Jun 17, 2026 Aug 5, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 An issue was discovered in GPAC 1.0.1. There is a heap-based buffer overflow in the function gp_rtp_builder_do_tx3g function in ietf/rtp_pck_3gpp.c, as demonstrated by MP4Box. This can cause a denial of service (DOS).
CVE-2021-29977 1Mozilla 1Firefox Jun 17, 2026 Aug 5, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Mozilla developers reported memory safety bugs present in Firefox 89. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrar...Show more Mozilla developers reported memory safety bugs present in Firefox 89. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 90.Show less
CVE-2021-29976 1Mozilla 3Firefox Firefox EsrThunderbird Jun 17, 2026 Aug 5, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Mozilla developers reported memory safety bugs present in code shared between Firefox and Thunderbird. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could ha...Show more Mozilla developers reported memory safety bugs present in code shared between Firefox and Thunderbird. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird < 78.12, Firefox ESR < 78.12, and Firefox < 90.Show less
CVE-2021-29970 1Mozilla 3Firefox Firefox EsrThunderbird Jun 17, 2026 Aug 5, 2021 N/A· v4 8.8 HIGH· v3 5.1 MEDIUM· v2 A malicious webpage could have triggered a use-after-free, memory corruption, and a potentially exploitable crash. This bug could only be triggered when accessibility was enabled.. This vulnerability affects Thunderbir...Show more A malicious webpage could have triggered a use-after-free, memory corruption, and a potentially exploitable crash. This bug could only be triggered when accessibility was enabled.. This vulnerability affects Thunderbird < 78.12, Firefox ESR < 78.12, and Firefox < 90.Show less
CVE-2020-24829 1Gpac 1Gpac Jun 17, 2026 Aug 4, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 An issue was discovered in GPAC from v0.5.2 to v0.8.0, as demonstrated by MP4Box. It contains a heap-based buffer overflow in gf_m2ts_section_complete in media_tools/mpegts.c that can cause a denial of service (DOS) via...Show more An issue was discovered in GPAC from v0.5.2 to v0.8.0, as demonstrated by MP4Box. It contains a heap-based buffer overflow in gf_m2ts_section_complete in media_tools/mpegts.c that can cause a denial of service (DOS) via a crafted MP4 file.Show less
CVE-2021-26096 1Fortinet 1Fortisandbox Jun 17, 2026 Aug 4, 2021 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 Multiple instances of heap-based buffer overflow in the command shell of FortiSandbox before 4.0.0 may allow an authenticated attacker to manipulate memory and alter its content by means of specifically crafted command l...Show more Multiple instances of heap-based buffer overflow in the command shell of FortiSandbox before 4.0.0 may allow an authenticated attacker to manipulate memory and alter its content by means of specifically crafted command line arguments.Show less
CVE-2021-24018 1Fortinet 1Fortios Jun 17, 2026 Aug 4, 2021 N/A· v4 8.8 HIGH· v3 5.8 MEDIUM· v2 A buffer underwrite vulnerability in the firmware verification routine of FortiOS before 7.0.1 may allow an attacker located in the adjacent network to potentially execute arbitrary code via a specifically crafted firmwa...Show more A buffer underwrite vulnerability in the firmware verification routine of FortiOS before 7.0.1 may allow an attacker located in the adjacent network to potentially execute arbitrary code via a specifically crafted firmware image.Show less
CVE-2021-37232 1Atomicparsley Project 1Atomicparsley Jun 17, 2026 Aug 4, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 A stack overflow vulnerability occurs in Atomicparsley 20210124.204813.840499f through APar_read64() in src/util.cpp due to the lack of buffer size of uint32_buffer while reading more bytes in APar_read64.
CVE-2021-37231 1Atomicparsley Project 1Atomicparsley Jun 17, 2026 Aug 4, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 A stack-buffer-overflow occurs in Atomicparsley 20210124.204813.840499f through APar_readX() in src/util.cpp while parsing a crafted mp4 file because of the missing boundary check.
CVE-2021-30575 2Fedoraproject Google 2Chrome Fedora Jun 17, 2026 Aug 3, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Out of bounds write in Autofill in Google Chrome prior to 92.0.4515.107 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.
CVE-2021-30568 2Fedoraproject Google 2Chrome Fedora Jun 17, 2026 Aug 3, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Heap buffer overflow in WebGL in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Previous 1...524525526...780 Next