Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

CVEs (15,601)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-21456 1Sap 13d Visual Enterprise Viewer Jun 17, 2026 Jan 12, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated DIB file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user re...Show more SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated DIB file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation.Show less
CVE-2021-21455 1Sap 13d Visual Enterprise Viewer Jun 17, 2026 Jan 12, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated DIB file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user re...Show more SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated DIB file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation.Show less
CVE-2021-21454 1Sap 13d Visual Enterprise Viewer Jun 17, 2026 Jan 12, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated RLE file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user re...Show more SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated RLE file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation.Show less
CVE-2020-35654 2Fedoraproject Python 2Fedora Pillow Jun 17, 2026 Jan 12, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 In Pillow before 8.1.0, TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode.
CVE-2021-0318 1Google 1Android Jun 17, 2026 Jan 11, 2021 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 In appendEventsToCacheLocked of SensorEventConnection.cpp, there is a possible out of bounds write due to a use-after-free. This could lead to local escalation of privilege with no additional execution privileges needed....Show more In appendEventsToCacheLocked of SensorEventConnection.cpp, there is a possible out of bounds write due to a use-after-free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-9, Android-8.1, Android-10, Android-11; Android ID: A-168211968.Show less
CVE-2021-0316 1Google 1Android Jun 17, 2026 Jan 11, 2021 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 In avrc_pars_vendor_cmd of avrc_pars_tg.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. U...Show more In avrc_pars_vendor_cmd of avrc_pars_tg.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11, Android-8.0, Android-8.1, Android-9, Android-10; Android ID: A-168802990.Show less
CVE-2021-0312 1Google 1Android Jun 17, 2026 Jan 11, 2021 N/A· v4 6.5 MEDIUM· v3 7.1 HIGH· v2 In WAVSource::read of WAVExtractor.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interactio...Show more In WAVSource::read of WAVExtractor.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android; Versions: Android-8.1, Android-9, Android-10, Android-11, Android-8.0; Android ID: A-170583712.Show less
CVE-2021-0311 1Google 1Android Jun 17, 2026 Jan 11, 2021 N/A· v4 6.5 MEDIUM· v3 7.1 HIGH· v2 In ElementaryStreamQueue::dequeueAccessUnitH264() of ESQueue.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote information disclosure with no additional execution privi...Show more In ElementaryStreamQueue::dequeueAccessUnitH264() of ESQueue.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android; Versions: Android-9, Android-10, Android-11, Android-8.0, Android-8.1; Android ID: A-170240631.Show less
CVE-2021-0308 2Debian Google 2Android Debian Linux Jun 17, 2026 Jan 11, 2021 N/A· v4 6.8 MEDIUM· v3 7.2 HIGH· v2 In ReadLogicalParts of basicmbr.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction...Show more In ReadLogicalParts of basicmbr.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-8.1, Android-9, Android-10, Android-11, Android-8.0; Android ID: A-158063095.Show less
CVE-2021-0301 1Google 1Android Jun 17, 2026 Jan 11, 2021 N/A· v4 6.7 MEDIUM· v3 4.6 MEDIUM· v2 In ged, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Pr...Show more In ged, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android SoC; Android ID: A-172514667.Show less
CVE-2020-24027 1Live555 1Liblivemedia Jun 17, 2026 Jan 11, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 In Live Networks, Inc., liblivemedia version 20200625, there is a potential buffer overflow bug in the server handling of a RTSP "PLAY" command, when the command specifies seeking by absolute time.
CVE-2020-27287 1Deltaww 1Cncsoft B Jun 17, 2026 Jan 11, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Delta Electronics CNCSoft-B Versions 1.0.0.2 and prior is vulnerable to an out-of-bounds write while processing project files, which may allow an attacker to execute arbitrary code.
CVE-2020-27281 1Deltaww 1Cncsoft Screeneditor Jun 17, 2026 Jan 11, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 A stack-based buffer overflow may exist in Delta Electronics CNCSoft ScreenEditor versions 1.01.26 and prior when processing specially crafted project files, which may allow an attacker to execute arbitrary code.
CVE-2020-27275 1Deltaww 1Dopsoft Jun 17, 2026 Jan 11, 2021 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 Delta Electronics DOPSoft Version 4.0.8.21 and prior is vulnerable to an out-of-bounds write while processing project files, which may allow an attacker to execute arbitrary code.
CVE-2018-11010 1K7computing 4Antivrius Enterprise SecurityTotal Security+1 more Nov 21, 2024 Jan 11, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 A Buffer Overflow issue was discovered in K7Computing K7AntiVirus Premium 15.01.00.53.
CVE-2018-11009 1K7computing 4Antivrius Enterprise SecurityTotal Security+1 more Nov 21, 2024 Jan 11, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 A Buffer Overflow issue was discovered in K7Computing K7AntiVirus Premium 15.01.00.53.
CVE-2018-11007 1K7computing 4Antivrius Enterprise SecurityTotal Security+1 more Nov 21, 2024 Jan 11, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 A Memory Leak issue was discovered in K7Computing K7AntiVirus Premium 15.01.00.53.
CVE-2020-26800 1Ethereum 1Aleth Jun 17, 2026 Jan 11, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 A stack overflow vulnerability in Aleth Ethereum C++ client version <= 1.8.0 using a specially crafted a config.json file may result in a denial of service.
CVE-2021-21116 3Debian FedoraprojectGoogle 3Chrome Debian LinuxFedora Jun 17, 2026 Jan 8, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Heap buffer overflow in audio in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2021-21113 3Debian FedoraprojectGoogle 3Chrome Debian LinuxFedora Jun 17, 2026 Jan 8, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Heap buffer overflow in Skia in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Previous 1...569570571...781 Next