Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

CVEs (15,473)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-27379 1Samsung 5Exynos 1280 Firmware Exynos 1330 FirmwareExynos 1380 Firmware+2 more Jun 17, 2026 Jun 5, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_nan_subscribe_get_nl_params(), there is no input validation check on hal_req->nu...Show more An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_nan_subscribe_get_nl_params(), there is no input validation check on hal_req->num_intf_addr_present coming from userspace, which can lead to a heap overwrite.Show less
CVE-2024-27377 1Samsung 5Exynos 1280 Firmware Exynos 1330 FirmwareExynos 1380 Firmware+2 more Jun 17, 2026 Jun 5, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_nan_get_security_info_nl(), there is no input validation check on sec_info->key_...Show more An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_nan_get_security_info_nl(), there is no input validation check on sec_info->key_info.body.pmk_info.pmk_len coming from userspace, which can lead to a heap overwrite.Show less
CVE-2024-27376 1Samsung 5Exynos 1280 Firmware Exynos 1330 FirmwareExynos 1380 Firmware+2 more Jun 17, 2026 Jun 5, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_nan_subscribe_get_nl_params(), there is no input validation check on hal_req->rx...Show more An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_nan_subscribe_get_nl_params(), there is no input validation check on hal_req->rx_match_filter_len coming from userspace, which can lead to a heap overwrite.Show less
CVE-2024-27375 1Samsung 5Exynos 1280 Firmware Exynos 1330 FirmwareExynos 1380 Firmware+2 more Jun 17, 2026 Jun 5, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_nan_followup_get_nl_params(), there is no input validation check on hal_req->sde...Show more An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_nan_followup_get_nl_params(), there is no input validation check on hal_req->sdea_service_specific_info_len coming from userspace, which can lead to a heap overwrite.Show less
CVE-2024-27374 1Samsung 5Exynos 1280 Firmware Exynos 1330 FirmwareExynos 1380 Firmware+2 more Jun 17, 2026 Jun 5, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_nan_publish_get_nl_params(), there is no input validation check on hal_req->serv...Show more An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_nan_publish_get_nl_params(), there is no input validation check on hal_req->service_specific_info_len coming from userspace, which can lead to a heap overwrite.Show less
CVE-2024-27373 1Samsung 5Exynos 1280 Firmware Exynos 1330 FirmwareExynos 1380 Firmware+2 more Jun 17, 2026 Jun 5, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_nan_config_get_nl_params(), there is no input validation check on disc_attr->mes...Show more An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_nan_config_get_nl_params(), there is no input validation check on disc_attr->mesh_id_len coming from userspace, which can lead to a heap overwrite.Show less
CVE-2024-27372 1Samsung 5Exynos 1280 Firmware Exynos 1330 FirmwareExynos 1380 Firmware+2 more Jun 17, 2026 Jun 5, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_nan_config_get_nl_params(), there is no input validation check on disc_attr->inf...Show more An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_nan_config_get_nl_params(), there is no input validation check on disc_attr->infrastructure_ssid_len coming from userspace, which can lead to a heap overwrite.Show less
CVE-2024-27371 1Samsung 5Exynos 1280 Firmware Exynos 1330 FirmwareExynos 1380 Firmware+2 more Jun 17, 2026 Jun 5, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_nan_followup_get_nl_params(), there is no input validation check on hal_req->ser...Show more An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_nan_followup_get_nl_params(), there is no input validation check on hal_req->service_specific_info_len coming from userspace, which can lead to a heap overwrite.Show less
CVE-2024-27370 1Samsung 5Exynos 1280 Firmware Exynos 1330 FirmwareExynos 1380 Firmware+2 more Jun 17, 2026 Jun 5, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_nan_config_get_nl_params(), there is no input validation check on hal_req->num_c...Show more An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_nan_config_get_nl_params(), there is no input validation check on hal_req->num_config_discovery_attr coming from userspace, which can lead to a heap overwrite.Show less
CVE-2024-34364 1Envoyproxy 1Envoy Jun 17, 2026 Jun 4, 2024 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Envoy is a cloud-native, open source edge and service proxy. Envoy exposed an out-of-memory (OOM) vector from the mirror response, since async HTTP client will buffer the response with an unbounded buffer.
CVE-2024-20880 1Samsung 1Android Jun 17, 2026 Jun 4, 2024 N/A· v4 6.8 MEDIUM· v3 N/A· v2 Stack-based buffer overflow vulnerability in bootloader prior to SMR Jun-2024 Release 1 allows physical attackers to overwrite memory.
CVE-2024-20878 1Samsung 1Android Jun 17, 2026 Jun 4, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Heap out-of-bound write vulnerability in parsing grid image in libsavscmn.so prior to SMR June-2024 Release 1 allows local attackers to execute arbitrary code.
CVE-2024-20877 1Samsung 1Android Jun 17, 2026 Jun 4, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Heap out-of-bound write vulnerability in parsing grid image header in libsavscmn.so prior to SMR Jun-2024 Release 1 allows local attackers to execute arbitrary code.
CVE-2024-20873 1Samsung 1Android Jun 17, 2026 Jun 4, 2024 N/A· v4 6.0 MEDIUM· v3 N/A· v2 Improper input validation vulnerability in caminfo driver prior to SMR Jun-2024 Release 1 allows local privileged attackers to write out-of-bounds memory.
CVE-2024-20075 1Google 1Android Jun 17, 2026 Jun 3, 2024 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In eemgpu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation....Show more In eemgpu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08713302; Issue ID: MSV-1393.Show less
CVE-2024-20074 1Google 1Android Jun 17, 2026 Jun 3, 2024 N/A· v4 6.6 MEDIUM· v3 N/A· v2 In dmc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Pa...Show more In dmc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08668110; Issue ID: MSV-1333.Show less
CVE-2024-20073 2Mediatek Openwrt 2Openwrt Software Development Kit Jun 17, 2026 Jun 3, 2024 N/A· v4 6.6 MEDIUM· v3 N/A· v2 In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for expl...Show more In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00367704; Issue ID: MSV-1411.Show less
CVE-2024-20072 2Mediatek Openwrt 2Openwrt Software Development Kit Jun 17, 2026 Jun 3, 2024 N/A· v4 6.6 MEDIUM· v3 N/A· v2 In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for explo...Show more In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00364732; Issue ID: MSV-1332.Show less
CVE-2024-20068 1Mediatek 2Nr16 Nr17 Jun 17, 2026 Jun 3, 2024 N/A· v4 5.9 MEDIUM· v3 N/A· v2 In modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is no needed for exploitation. Pat...Show more In modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is no needed for exploitation. Patch ID: MOLY01270721; Issue ID: MSV-1479.Show less
CVE-2024-20067 1Mediatek 2Nr16 Nr17 Jun 17, 2026 Jun 3, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 In modem, there is a possible out of bounds write due to improper input invalidation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploit...Show more In modem, there is a possible out of bounds write due to improper input invalidation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01267285; Issue ID: MSV-1462.Show less

Previous 1...221222223...774 Next