Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

CVEs (14,730)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2018-14451 1Linuxsampler 1Libgig Nov 21, 2024 Jul 20, 2018 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 An issue was discovered in libgig 4.1.0. There is a heap-based buffer overflow in the function RIFF::Chunk::Read in RIFF.cpp.
CVE-2018-14446 1Techsmith 1Mp4v2 Nov 21, 2024 Jul 20, 2018 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 MP4Integer32Property::Read in atom_avcC.cpp in MP4v2 2.1.0 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted M...Show more MP4Integer32Property::Read in atom_avcC.cpp in MP4v2 2.1.0 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted MP4 file.Show less
CVE-2018-3871 1Acdsystems 1Canvas Draw Nov 21, 2024 Jul 19, 2018 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 An exploitable out-of-bounds write exists in the PCX parsing functionality of Canvas Draw version 4.0.0. A specially crafted PCX image processed via the application can lead to an out-of-bounds write, overwriting arbitra...Show more An exploitable out-of-bounds write exists in the PCX parsing functionality of Canvas Draw version 4.0.0. A specially crafted PCX image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a PCX image to trigger this vulnerability and gain code execution. A different vulnerability than CVE-2018-3870.Show less
CVE-2018-3870 1Acdsystems 1Canvas Draw Nov 21, 2024 Jul 19, 2018 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 An exploitable out-of-bounds write exists in the PCX parsing functionality of Canvas Draw version 4.0.0. A specially crafted PCX image processed via the application can lead to an out-of-bounds write, overwriting arbitra...Show more An exploitable out-of-bounds write exists in the PCX parsing functionality of Canvas Draw version 4.0.0. A specially crafted PCX image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a PCX image to trigger this vulnerability and gain code execution. A different vulnerability than CVE-2018-3871.Show less
CVE-2018-3860 1Acdsystems 1Canvas Draw Nov 21, 2024 Jul 19, 2018 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 An exploitable out-of-bounds write exists in the TIFF parsing functionality of Canvas Draw version 4.0.0. A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbit...Show more An exploitable out-of-bounds write exists in the TIFF parsing functionality of Canvas Draw version 4.0.0. A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a TIFF image to trigger this vulnerability and gain the ability to execute code. A different vulnerability than CVE-2018-3859.Show less
CVE-2018-3859 1Acdsystems 1Canvas Draw Nov 21, 2024 Jul 19, 2018 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 An exploitable out-of-bounds write exists in the TIFF parsing functionality of Canvas Draw version 4.0.0. A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbit...Show more An exploitable out-of-bounds write exists in the TIFF parsing functionality of Canvas Draw version 4.0.0. A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a TIFF image to trigger this vulnerability and gain code execution. A different vulnerability than CVE-2018-3860.Show less
CVE-2018-3858 1Acdsystems 1Canvas Draw Nov 21, 2024 Jul 19, 2018 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 An exploitable heap overflow exists in the TIFF parsing functionality of Canvas Draw version 4.0.0. A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary d...Show more An exploitable heap overflow exists in the TIFF parsing functionality of Canvas Draw version 4.0.0. A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a TIFF image to trigger this vulnerability and gain the ability to execute code. A different vulnerability than CVE-2018-3857.Show less
CVE-2018-3857 1Acdsystems 1Canvas Draw Nov 21, 2024 Jul 19, 2018 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 An exploitable heap overflow exists in the TIFF parsing functionality of Canvas Draw version 4.0.0. A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary d...Show more An exploitable heap overflow exists in the TIFF parsing functionality of Canvas Draw version 4.0.0. A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a TIFF image to trigger this vulnerability and gain code execution. A different vulnerability than CVE-2018-3858.Show less
CVE-2018-10620 1Aveva 2Indusoft Web Studio Intouch Machine 2017 Nov 21, 2024 Jul 19, 2018 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 AVEVA InduSoft Web Studio v8.1 and v8.1SP1, and InTouch Machine Edition v2017 8.1 and v2017 8.1 SP1 a remote user could send a carefully crafted packet to exploit a stack-based buffer overflow vulnerability during tag, a...Show more AVEVA InduSoft Web Studio v8.1 and v8.1SP1, and InTouch Machine Edition v2017 8.1 and v2017 8.1 SP1 a remote user could send a carefully crafted packet to exploit a stack-based buffer overflow vulnerability during tag, alarm, or event related actions such as read and write, with potential for code to be executed.Show less
CVE-2018-12911 2Canonical Webkitgtk 2Ubuntu Linux Webkitgtk Nov 21, 2024 Jul 19, 2018 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 WebKitGTK+ 2.20.3 has an off-by-one error, with a resultant out-of-bounds write, in the get_simple_globs functions in ThirdParty/xdgmime/src/xdgmimecache.c and ThirdParty/xdgmime/src/xdgmimeglob.c.
CVE-2018-14402 1Axmldec Project 1Axmldec Nov 21, 2024 Jul 19, 2018 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 axmldec 1.2.0 has an out-of-bounds write in the jitana::axml_parser::parse_start_namespace function in lib/jitana/util/axml_parser.cpp.
CVE-2018-14360 2Debian Neomutt 2Debian Linux Neomutt Nov 21, 2024 Jul 17, 2018 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 An issue was discovered in NeoMutt before 2018-07-16. nntp_add_group in newsrc.c has a stack-based buffer overflow because of incorrect sscanf usage.
CVE-2018-14358 4Canonical DebianMutt+1 more 4Debian Linux MuttNeomutt+1 more Nov 21, 2024 Jul 17, 2018 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/message.c has a stack-based buffer overflow for a FETCH response with a long RFC822.SIZE field.
CVE-2018-14352 4Canonical DebianMutt+1 more 4Debian Linux MuttNeomutt+1 more Nov 21, 2024 Jul 17, 2018 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap_quote_string in imap/util.c does not leave room for quote characters, leading to a stack-based buffer overflow.
CVE-2018-14350 4Canonical DebianMutt+1 more 4Debian Linux MuttNeomutt+1 more Nov 21, 2024 Jul 17, 2018 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/message.c has a stack-based buffer overflow for a FETCH response with a long INTERNALDATE field.
CVE-2018-14346 2Debian Gnu 2Debian Linux Libextractor Nov 21, 2024 Jul 17, 2018 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 GNU Libextractor before 1.7 has a stack-based buffer overflow in ec_read_file_func (unzip.c).
CVE-2018-10840 3Canonical LinuxRedhat 3Enterprise Linux Linux KernelUbuntu Linux Nov 21, 2024 Jul 16, 2018 N/A· v4 6.6 MEDIUM· v3 7.2 HIGH· v2 Linux kernel is vulnerable to a heap-based buffer overflow in the fs/ext4/xattr.c:ext4_xattr_set_entry() function. An attacker could exploit this by operating on a mounted crafted ext4 image.
CVE-2018-1046 1Powerdns 1Pdns Nov 21, 2024 Jul 16, 2018 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 pdns before version 4.1.2 is vulnerable to a buffer overflow in dnsreplay. In the dnsreplay tool provided with PowerDNS Authoritative, replaying a specially crafted PCAP file can trigger a stack-based buffer overflow, le...Show more pdns before version 4.1.2 is vulnerable to a buffer overflow in dnsreplay. In the dnsreplay tool provided with PowerDNS Authoritative, replaying a specially crafted PCAP file can trigger a stack-based buffer overflow, leading to a crash and potentially arbitrary code execution. This buffer overflow only occurs when the -ecs-stamp option of dnsreplay is used.Show less
CVE-2018-8847 1Eaton 19000x Firmware Jun 17, 2026 Jul 13, 2018 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Eaton 9000X DriveA versions 2.0.29 and prior has a stack-based buffer overflow vulnerability, which may allow remote code execution.
CVE-2018-3936 1Antennahouse 1Office Server Document Converter Nov 21, 2024 Jul 11, 2018 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 In Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 (6,1,2018,0312), a crafted Microsoft Word (DOC) document can lead to an out-of-bounds write, resulting in remote code execution.

Previous 1...683684685...737 Next