Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

CVEs (14,759)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2020-13768 1Minishare Project 1Minishare Jun 17, 2026 Jun 4, 2020 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 In MiniShare before 1.4.2, there is a stack-based buffer overflow via an HTTP PUT request, which allows an attacker to achieve arbitrary code execution, a similar issue to CVE-2018-19861, CVE-2018-19862, and CVE-2019-176...Show more In MiniShare before 1.4.2, there is a stack-based buffer overflow via an HTTP PUT request, which allows an attacker to achieve arbitrary code execution, a similar issue to CVE-2018-19861, CVE-2018-19862, and CVE-2019-17601. NOTE: this product is discontinued.Show less
CVE-2019-20830 1Foxitsoftware 2Phantompdf Reader Jun 17, 2026 Jun 4, 2020 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 An issue was discovered in Foxit Reader and PhantomPDF before 9.6. It has an out-of-bounds write when Internet Explorer is used.
CVE-2019-20827 1Foxitsoftware 2Phantompdf Reader Jun 17, 2026 Jun 4, 2020 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 An issue was discovered in Foxit PhantomPDF Mac 3.3 and Foxit Reader for Mac before 3.3. It allows stack consumption because of interaction between ICC-Based color space and Alternate color space.
CVE-2019-20825 1Foxitsoftware 1Phantompdf Jun 17, 2026 Jun 4, 2020 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 An issue was discovered in Foxit PhantomPDF before 8.3.11. It has an out-of-bounds write when Internet Explorer is used.
CVE-2020-13811 1Foxitsoftware 1Foxit Studio Photo Jun 17, 2026 Jun 4, 2020 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 An issue was discovered in Foxit Studio Photo before 3.6.6.922. It has an out-of-bounds write via a crafted TIFF file.
CVE-2020-13765 3Canonical DebianQemu 3Debian Linux QemuUbuntu Linux Jun 17, 2026 Jun 4, 2020 N/A· v4 5.6 MEDIUM· v3 6.8 MEDIUM· v2 rom_copy() in hw/core/loader.c in QEMU 4.0 and 4.1.0 does not validate the relationship between two addresses, which allows attackers to trigger an invalid memory copy operation.
CVE-2019-20822 1Foxitsoftware 13d Jun 17, 2026 Jun 4, 2020 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 An issue was discovered in the 3D Plugin Beta for Foxit Reader and PhantomPDF before 9.7.0.29430. It has an out-of-bounds write via incorrect image data.
CVE-2020-6453 1Google 1Chrome Jun 17, 2026 Jun 3, 2020 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Inappropriate implementation in V8 in Google Chrome prior to 80.0.3987.162 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2020-6419 1Google 1Chrome Jun 17, 2026 Jun 3, 2020 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Out of bounds write in V8 in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2020-3198 1Cisco 1Ios Jun 17, 2026 Jun 3, 2020 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 Multiple vulnerabilities in Cisco IOS Software for Cisco 809 and 829 Industrial Integrated Services Routers (Industrial ISRs) and Cisco 1000 Series Connected Grid Routers (CGR1000) could allow an unauthenticated, remote...Show more Multiple vulnerabilities in Cisco IOS Software for Cisco 809 and 829 Industrial Integrated Services Routers (Industrial ISRs) and Cisco 1000 Series Connected Grid Routers (CGR1000) could allow an unauthenticated, remote attacker or an authenticated, local attacker to execute arbitrary code on an affected system or cause an affected system to crash and reload. For more information about these vulnerabilities, see the Details section of this advisory.Show less
CVE-2019-17603 1Asus 1Aura Sync Jun 17, 2026 Jun 2, 2020 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 Ene.sys in Asus Aura Sync through 1.07.71 does not properly validate input to IOCTL 0x80102044, 0x80102050, and 0x80102054, which allows local users to cause a denial of service (system crash) or gain privileges via IOCT...Show more Ene.sys in Asus Aura Sync through 1.07.71 does not properly validate input to IOCTL 0x80102044, 0x80102050, and 0x80102054, which allows local users to cause a denial of service (system crash) or gain privileges via IOCTL requests using crafted kernel addresses that trigger memory corruption.Show less
CVE-2014-7175 1Farsite 1Farlinx X25 Gateway Firmware Nov 21, 2024 Jun 1, 2020 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 FarLinX X25 Gateway through 2014-09-25 allows attackers to write arbitrary data to fsUI.xyz via fsSaveUIPersistence.php.
CVE-2020-1832 1Huawei 1E6878 370 Firmware Jun 17, 2026 May 29, 2020 N/A· v4 8.8 HIGH· v3 5.8 MEDIUM· v2 E6878-370 products with versions of 10.0.3.1(H557SP27C233) and 10.0.3.1(H563SP1C00) have a stack buffer overflow vulnerability. The program copies an input buffer to an output buffer without verification. An attacker in...Show more E6878-370 products with versions of 10.0.3.1(H557SP27C233) and 10.0.3.1(H563SP1C00) have a stack buffer overflow vulnerability. The program copies an input buffer to an output buffer without verification. An attacker in the adjacent network could send a crafted message, successful exploit could lead to stack buffer overflow which may cause malicious code execution.Show less
CVE-2020-13361 4Canonical DebianOpensuse+1 more 4Debian Linux LeapQemu+1 more Jun 17, 2026 May 28, 2020 N/A· v4 3.9 LOW· v3 3.3 LOW· v2 In QEMU 5.0.0 and earlier, es1370_transfer_audio in hw/audio/es1370.c does not properly validate the frame count, which allows guest OS users to trigger an out-of-bounds access during an es1370_write() operation.
CVE-2020-6831 4Canonical DebianMozilla+1 more 6Debian Linux FirefoxFirefox Esr+3 more Jun 17, 2026 May 26, 2020 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 A buffer overflow could occur when parsing and validating SCTP chunks in WebRTC. This could have led to memory corruption and a potentially exploitable crash. This vulnerability affects Firefox ESR < 68.8, Firefox < 76,...Show more A buffer overflow could occur when parsing and validating SCTP chunks in WebRTC. This could have led to memory corruption and a potentially exploitable crash. This vulnerability affects Firefox ESR < 68.8, Firefox < 76, and Thunderbird < 68.8.0.Show less
CVE-2020-12396 1Mozilla 1Firefox Jun 17, 2026 May 26, 2020 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Mozilla developers and community members reported memory safety bugs present in Firefox 75. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exp...Show more Mozilla developers and community members reported memory safety bugs present in Firefox 75. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 76.Show less
CVE-2020-12395 2Canonical Mozilla 4Firefox Firefox EsrThunderbird+1 more Jun 17, 2026 May 26, 2020 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 Mozilla developers and community members reported memory safety bugs present in Firefox 75 and Firefox ESR 68.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of thes...Show more Mozilla developers and community members reported memory safety bugs present in Firefox 75 and Firefox ESR 68.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 68.8, Firefox < 76, and Thunderbird < 68.8.0.Show less
CVE-2020-13440 1Rockcarry 1Ffjpeg Jun 17, 2026 May 24, 2020 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 ffjpeg through 2020-02-24 has an invalid write in bmp_load in bmp.c.
CVE-2020-13398 4Canonical DebianFreerdp+1 more 4Debian Linux FreerdpLeap+1 more Jun 17, 2026 May 22, 2020 N/A· v4 8.3 HIGH· v3 6.5 MEDIUM· v2 An issue was discovered in FreeRDP before 2.1.1. An out-of-bounds (OOB) write vulnerability has been detected in crypto_rsa_common in libfreerdp/crypto/crypto.c.
CVE-2020-1150 1Microsoft 2Windows 7 Windows Server 2008 Aug 19, 2026 May 21, 2020 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exploited the vulnerability could install programs; view, change, or delete data;...Show more A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exploited the vulnerability could install programs; view, change, or delete data; or create new accounts with full user rights. There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document, or by convincing a user to visit a malicious webpage. The security update addresses the vulnerability by correcting how Windows Media Foundation handles objects in memory.Show less

Previous 1...567568569...738 Next