Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

CVEs (14,093)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2025-49530 1Adobe 1Illustrator Jul 10, 2025 Jul 8, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Illustrator versions 28.7.6, 29.5.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires u...Show more Illustrator versions 28.7.6, 29.5.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2025-49526 1Adobe 1Illustrator Jul 10, 2025 Jul 8, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Illustrator versions 28.7.6, 29.5.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires u...Show more Illustrator versions 28.7.6, 29.5.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2025-43594 1Adobe 1Indesign Jul 10, 2025 Jul 8, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 InDesign Desktop versions 19.5.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user...Show more InDesign Desktop versions 19.5.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2025-30312 1Adobe 1Dimension Jul 11, 2025 Jul 8, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Dimension versions 4.1.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interac...Show more Dimension versions 4.1.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2025-48805 1Microsoft 15Windows 10 1507 Windows 10 1607Windows 10 1809+12 more Jul 15, 2025 Jul 8, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Heap-based buffer overflow in Microsoft MPEG-2 Video Extension allows an authorized attacker to execute code locally.
CVE-2025-47998 1Microsoft 7Windows Server 2008 Windows Server 2012Windows Server 2016+4 more Jul 15, 2025 Jul 8, 2025 N/A· v4 8.8 HIGH· v3 N/A· v2 Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.
CVE-2025-21166 1Adobe 1Substance 3d Designer Jul 11, 2025 Jul 8, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Substance3D - Designer versions 14.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires...Show more Substance3D - Designer versions 14.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2025-21165 1Adobe 1Substance 3d Designer Jul 11, 2025 Jul 8, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Substance3D - Designer versions 14.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires...Show more Substance3D - Designer versions 14.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2025-21164 1Adobe 1Substance 3d Designer Jul 11, 2025 Jul 8, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Substance3D - Designer versions 14.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires...Show more Substance3D - Designer versions 14.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2025-5451 1Ivanti 2Connect Secure Policy Secure Jul 15, 2025 Jul 8, 2025 N/A· v4 4.9 MEDIUM· v3 N/A· v2 A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version 22.7R1.5 allows a remote authenticated attacker with admin rights to trigger a denial of service.
CVE-2025-27061 1Qualcomm 337315 5g Iot Firmware Aqt1000 FirmwareAr8031 Firmware+334 more Aug 11, 2025 Jul 8, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmware.
CVE-2025-27044 1Qualcomm 8Fastconnect 6900 Firmware Fastconnect 7800 FirmwareSc8380xp Firmware+5 more Jul 21, 2025 Jul 8, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption while executing timestamp video decode command with large input values.
CVE-2025-21007 1Samsung 1Android Jul 15, 2025 Jul 8, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Out-of-bounds write in accessing uninitialized memory in libsavsvc.so prior to Android 15 allows local attackers to cause memory corruption.
CVE-2025-21006 1Samsung 1Android Jul 15, 2025 Jul 8, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Out-of-bounds write in handling of macro blocks for MPEG4 codec in libsavsvc.so prior to Android 15 allows local attackers to write out-of-bounds memory.
CVE-2025-20983 1Samsung 1Android Jul 14, 2025 Jul 8, 2025 N/A· v4 6.7 MEDIUM· v3 N/A· v2 Out-of-bounds write in checking auth secret in KnoxVault trustlet prior to SMR Jul-2025 Release 1 allows local privileged attackers to write out-of-bounds memory.
CVE-2025-20982 1Samsung 1Android Jul 14, 2025 Jul 8, 2025 N/A· v4 6.7 MEDIUM· v3 N/A· v2 Out-of-bounds write in setting auth secret in KnoxVault trustlet prior to SMR Jul-2025 Release 1 allows local privileged attackers to write out-of-bounds memory.
CVE-2025-20695 3Google MediatekOpenwrt 3Android OpenwrtSoftware Development Kit Jul 14, 2025 Jul 8, 2025 N/A· v4 6.5 MEDIUM· v3 N/A· v2 In Bluetooth FW, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation....Show more In Bluetooth FW, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09741871; Issue ID: MSV-3317.Show less
CVE-2025-20684 1Mediatek 1Software Development Kit Jul 9, 2025 Jul 8, 2025 N/A· v4 9.8 CRITICAL· v3 N/A· v2 In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for expl...Show more In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00416939; Issue ID: MSV-3422.Show less
CVE-2025-20683 2Mediatek Openwrt 2Openwrt Software Development Kit Jul 9, 2025 Jul 8, 2025 N/A· v4 9.8 CRITICAL· v3 N/A· v2 In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for expl...Show more In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00416938; Issue ID: MSV-3444.Show less
CVE-2025-20682 2Mediatek Openwrt 2Openwrt Software Development Kit Jul 9, 2025 Jul 8, 2025 N/A· v4 9.8 CRITICAL· v3 N/A· v2 In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for expl...Show more In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00416937; Issue ID: MSV-3445.Show less

Previous 1...707172...705 Next