Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

CVEs (15,601)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-21099 1Adobe 1Indesign Jun 17, 2026 Jun 28, 2021 N/A· v4 8.8 HIGH· v3 9.3 HIGH· v2 Adobe InDesign version 16.0 (and earlier) is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve remote code execution in...Show more Adobe InDesign version 16.0 (and earlier) is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve remote code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2021-21098 1Adobe 1Indesign Jun 17, 2026 Jun 28, 2021 N/A· v4 8.8 HIGH· v3 9.3 HIGH· v2 Adobe InDesign version 16.0 (and earlier) is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve remote code execution in...Show more Adobe InDesign version 16.0 (and earlier) is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve remote code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2021-27043 1Autodesk 11Advance Steel AutocadAutocad Architecture+8 more Jun 17, 2026 Jun 25, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 An Arbitrary Address Write issue in the Autodesk DWG application can allow a malicious user to leverage the application to write in unexpected paths. In order to exploit this the attacker would need the victim to enable...Show more An Arbitrary Address Write issue in the Autodesk DWG application can allow a malicious user to leverage the application to write in unexpected paths. In order to exploit this the attacker would need the victim to enable full page heap in the application.Show less
CVE-2021-27041 3Autodesk IconicsMitsubishielectric 13Advance Steel AutocadAutocad Architecture+10 more Jun 17, 2026 Jun 25, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 A maliciously crafted DWG file can be used to write beyond the allocated buffer while parsing DWG files. This vulnerability can be exploited to execute arbitrary code
CVE-2021-3500 2Debian Djvulibre Project 2Debian Linux Djvulibre Jun 17, 2026 Jun 24, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 A flaw was found in djvulibre-3.5.28 and earlier. A Stack overflow in function DJVU::DjVuDocument::get_djvu_file() via crafted djvu file may lead to application crash and other consequences.
CVE-2021-32493 2Debian Djvulibre Project 2Debian Linux Djvulibre Jun 17, 2026 Jun 24, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 A flaw was found in djvulibre-3.5.28 and earlier. A heap buffer overflow in function DJVU::GBitmap::decode() via crafted djvu file may lead to application crash and other consequences.
CVE-2021-32490 2Debian Djvulibre Project 2Debian Linux Djvulibre Jun 17, 2026 Jun 24, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 A flaw was found in djvulibre-3.5.28 and earlier. An out of bounds write in function DJVU::filter_bv() via crafted djvu file may lead to application crash and other consequences.
CVE-2021-33004 1Advantech 1Webaccess/hmi Designer Jun 17, 2026 Jun 24, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 The affected product is vulnerable to memory corruption condition due to lack of proper validation of user supplied files, which may allow an attacker to execute arbitrary code. User interaction is required on the WebAcc...Show more The affected product is vulnerable to memory corruption condition due to lack of proper validation of user supplied files, which may allow an attacker to execute arbitrary code. User interaction is required on the WebAccess HMI Designer (versions 2.1.9.95 and prior).Show less
CVE-2021-33002 1Advantech 1Webaccess/hmi Designer Jun 17, 2026 Jun 24, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Opening a maliciously crafted project file may cause an out-of-bounds write, which may allow an attacker to execute arbitrary code. User interaction is require on the WebAccess HMI Designer (versions 2.1.9.95 and prior).
CVE-2021-33000 1Advantech 1Webaccess/hmi Designer Jun 17, 2026 Jun 24, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Parsing a maliciously crafted project file may cause a heap-based buffer overflow, which may allow an attacker to perform arbitrary code execution. User interaction is required on the WebAccess HMI Designer (versions 2.1...Show more Parsing a maliciously crafted project file may cause a heap-based buffer overflow, which may allow an attacker to perform arbitrary code execution. User interaction is required on the WebAccess HMI Designer (versions 2.1.9.95 and prior).Show less
CVE-2021-21574 1Dell 128Alienware M15 R6 Firmware Chengming 3990 FirmwareChengming 3991 Firmware+125 more Jun 17, 2026 Jun 24, 2021 N/A· v4 7.5 HIGH· v3 6.9 MEDIUM· v2 Dell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious admin user with local access to the system may potentially exploit this vulnerability to run arbitrary code and bypass UEFI re...Show more Dell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious admin user with local access to the system may potentially exploit this vulnerability to run arbitrary code and bypass UEFI restrictions.Show less
CVE-2021-21573 1Dell 128Alienware M15 R6 Firmware Chengming 3990 FirmwareChengming 3991 Firmware+125 more Jun 17, 2026 Jun 24, 2021 N/A· v4 7.5 HIGH· v3 6.9 MEDIUM· v2 Dell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious admin user with local access to the system may potentially exploit this vulnerability to run arbitrary code and bypass UEFI re...Show more Dell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious admin user with local access to the system may potentially exploit this vulnerability to run arbitrary code and bypass UEFI restrictions.Show less
CVE-2021-21572 1Dell 128Alienware M15 R6 Firmware Chengming 3990 FirmwareChengming 3991 Firmware+125 more Jun 17, 2026 Jun 24, 2021 N/A· v4 7.5 HIGH· v3 6.9 MEDIUM· v2 Dell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious admin user with local access to the system may potentially exploit this vulnerability to run arbitrary code and bypass UEFI re...Show more Dell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious admin user with local access to the system may potentially exploit this vulnerability to run arbitrary code and bypass UEFI restrictions.Show less
CVE-2021-29967 1Mozilla 3Firefox Firefox EsrThunderbird Jun 17, 2026 Jun 24, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Mozilla developers reported memory safety bugs present in Firefox 88 and Firefox ESR 78.11. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exp...Show more Mozilla developers reported memory safety bugs present in Firefox 88 and Firefox ESR 78.11. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird < 78.11, Firefox < 89, and Firefox ESR < 78.11.Show less
CVE-2021-29966 1Mozilla 1Firefox Jun 17, 2026 Jun 24, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Mozilla developers reported memory safety bugs present in Firefox 88. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrar...Show more Mozilla developers reported memory safety bugs present in Firefox 88. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 89.Show less
CVE-2021-29947 1Mozilla 1Firefox Jun 17, 2026 Jun 24, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Mozilla developers and community members reported memory safety bugs present in Firefox 87. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exp...Show more Mozilla developers and community members reported memory safety bugs present in Firefox 87. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 88.Show less
CVE-2021-34071 1Tsmuxer Project 1Tsmuxer Jun 17, 2026 Jun 23, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Heap based buffer overflow in tsMuxer 2.6.16 allows attackers to cause a Denial of Service (DoS) by running the application with a crafted file.
CVE-2021-34068 1Tsmuxer Project 1Tsmuxer Jun 17, 2026 Jun 23, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Heap based buffer overflow in tsMuxer 2.6.16 allows attackers to cause a Denial of Service (DoS) by running the application with a crafted file.
CVE-2021-34067 1Tsmuxer Project 1Tsmuxer Jun 17, 2026 Jun 23, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Heap based buffer overflow in tsMuxer 2.6.16 allows attackers to cause a Denial of Service (DoS) by running the application with a crafted file.
CVE-2021-34397 1Nvidia 1Jetson Linux Jun 17, 2026 Jun 22, 2021 N/A· v4 2.3 LOW· v3 2.1 LOW· v2 Bootloader contains a vulnerability in NVIDIA MB2, which may cause free-the-wrong-heap, which may lead to limited denial of service.

Previous 1...532533534...781 Next