Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

CVEs (15,593)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-30566 2Fedoraproject Google 2Chrome Fedora Jun 17, 2026 Aug 3, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Stack buffer overflow in Printing in Google Chrome prior to 92.0.4515.107 allowed a remote attacker who had compromised the renderer process to potentially exploit stack corruption via a crafted HTML page.
CVE-2021-30565 2Fedoraproject Google 2Chrome Fedora Jun 17, 2026 Aug 3, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Out of bounds write in Tab Groups in Google Chrome on Linux and ChromeOS prior to 92.0.4515.107 allowed an attacker who convinced a user to install a malicious extension to perform an out of bounds memory write via a cra...Show more Out of bounds write in Tab Groups in Google Chrome on Linux and ChromeOS prior to 92.0.4515.107 allowed an attacker who convinced a user to install a malicious extension to perform an out of bounds memory write via a crafted HTML page.Show less
CVE-2021-30564 1Google 1Chrome Jun 17, 2026 Aug 3, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Heap buffer overflow in WebXR in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2021-30559 1Google 1Chrome Jun 17, 2026 Aug 3, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Out of bounds write in ANGLE in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2021-22423 1Huawei 1Harmonyos Jun 17, 2026 Aug 3, 2021 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 A component of the HarmonyOS has a Out-of-bounds Write Vulnerability. Local attackers may exploit this vulnerability to cause integer overflow.
CVE-2021-33485 1Codesys 7Control Control RteControl Runtime System Toolkit+4 more Jun 17, 2026 Aug 3, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 CODESYS Control Runtime system before 3.5.17.10 has a Heap-based Buffer Overflow.
CVE-2021-27954 1Ecobee 1Ecobee3 Lite Firmware Jun 17, 2026 Aug 3, 2021 N/A· v4 8.2 HIGH· v3 6.4 MEDIUM· v2 A heap-based buffer overflow vulnerability exists on the ecobee3 lite 4.5.81.200 device in the HKProcessConfig function of the HomeKit Wireless Access Control setup process. A threat actor can exploit this vulnerability...Show more A heap-based buffer overflow vulnerability exists on the ecobee3 lite 4.5.81.200 device in the HKProcessConfig function of the HomeKit Wireless Access Control setup process. A threat actor can exploit this vulnerability to force the device to connect to a SSID or cause a denial of service.Show less
CVE-2021-22438 1Huawei 2Emui Magic Ui Jun 17, 2026 Aug 2, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 There is a Memory Buffer Improper Operation Limit Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause malicious code to be executed.
CVE-2021-22427 1Huawei 2Emui Magic Ui Jun 17, 2026 Aug 2, 2021 N/A· v4 8.1 HIGH· v3 6.8 MEDIUM· v2 There is a Heap-based Buffer Overflow Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to authentication bypass.
CVE-2021-22414 1Huawei 2Emui Magic Ui Jun 17, 2026 Aug 2, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 There is a Memory Buffer Errors Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause the system to reset.
CVE-2021-37164 1Swisslog Healthcare 1Hmi 3 Control Panel Firmware Jun 17, 2026 Aug 2, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 A buffer overflow issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus Panel operated by released versions of software before Nexus Software 7.2.5.7. In the tcpTxThread function, the received data is c...Show more A buffer overflow issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus Panel operated by released versions of software before Nexus Software 7.2.5.7. In the tcpTxThread function, the received data is copied to a stack buffer. An off-by-3 condition can occur, resulting in a stack-based buffer overflow.Show less
CVE-2021-36004 1Adobe 1Indesign Jun 17, 2026 Jul 30, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Adobe InDesign version 16.0 (and earlier) is affected by an Out-of-bounds Write vulnerability in the CoolType library. An unauthenticated attacker could leverage this vulnerability to achieve remote code execution in the...Show more Adobe InDesign version 16.0 (and earlier) is affected by an Out-of-bounds Write vulnerability in the CoolType library. An unauthenticated attacker could leverage this vulnerability to achieve remote code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2021-37576 2Fedoraproject Linux 2Fedora Linux Kernel Jun 17, 2026 Jul 26, 2021 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 arch/powerpc/kvm/book3s_rtas.c in the Linux kernel through 5.13.5 on the powerpc platform allows KVM guest OS users to cause host OS memory corruption via rtas_args.nargs, aka CID-f62f3c20647e.
CVE-2015-2100 1Webgate 2Control Center Edvr Manager Nov 21, 2024 Jul 22, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Multiple stack-based buffer overflows in WebGate eDVR Manager and Control Center allow remote attackers to execute arbitrary code via unspecified vectors to the (1) TCPDiscover or (2) TCPDiscover2 function in the WESPDis...Show more Multiple stack-based buffer overflows in WebGate eDVR Manager and Control Center allow remote attackers to execute arbitrary code via unspecified vectors to the (1) TCPDiscover or (2) TCPDiscover2 function in the WESPDiscovery.WESPDiscoveryCtrl.1 control.Show less
CVE-2021-35522 1Idemia 10Ma Vp Md Firmware Morphowave Compact Md FirmwareMorphowave Compact Mdpi M Firmware+7 more Jun 17, 2026 Jul 22, 2021 N/A· v4 9.8 CRITICAL· v3 9.0 HIGH· v2 A Buffer Overflow in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2, Sigma devices before 4.9.4, and MA VP MD devices before 4.9.7 allows remote attackers to achieve code execut...Show more A Buffer Overflow in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2, Sigma devices before 4.9.4, and MA VP MD devices before 4.9.7 allows remote attackers to achieve code execution, denial of services, and information disclosure via TCP/IP packets.Show less
CVE-2021-35520 1Idemia 4Morphowave Compact Mdpi M Firmware Morphowave Compact Mdpi FirmwareVisionpass Mdpi M Firmware+1 more Jun 17, 2026 Jul 22, 2021 N/A· v4 6.2 MEDIUM· v3 4.6 MEDIUM· v2 A Buffer Overflow in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2 allows physically proximate authenticated attackers to achieve code execution, denial of services, and inform...Show more A Buffer Overflow in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2 allows physically proximate authenticated attackers to achieve code execution, denial of services, and information disclosure via serial ports.Show less
CVE-2021-37220 2Artifex Fedoraproject 2Fedora Mupdf Jun 17, 2026 Jul 21, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 MuPDF through 1.18.1 has an out-of-bounds write because the cached color converter does not properly consider the maximum key size of a hash table. This can, for example, be seen with crafted "mutool draw" input.
CVE-2020-19491 1Sam2p Project 1Sam2p Jun 17, 2026 Jul 21, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 There is an invalid memory access bug in cgif.c that leads to a Segmentation fault in sam2p 0.49.4. A crafted input will lead to a denial of service or possibly unspecified other impact.
CVE-2020-19475 1Flowpaper 1Pdf2json Jun 17, 2026 Jul 21, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 An issue has been found in function CCITTFaxStream::lookChar in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid write of size 2 .
CVE-2020-19469 1Flowpaper 1Pdf2json Jun 17, 2026 Jul 21, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 An issue has been found in function DCTStream::reset in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid write of size 8 .

Previous 1...525526527...780 Next