Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

CVEs (14,796)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-32887 1Mediatek 3Nr15 Nr16Nr17 Jun 17, 2026 Jan 2, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 In Modem IMS Stack, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitat...Show more In Modem IMS Stack, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01161837; Issue ID: MOLY01161837 (MSV-892).Show less
CVE-2023-32886 1Mediatek 3Nr15 Nr16Nr17 Jun 17, 2026 Jan 2, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 In Modem IMS SMS UA, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for e...Show more In Modem IMS SMS UA, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00730807; Issue ID: MOLY00730807.Show less
CVE-2023-32883 1Google 1Android Jun 17, 2026 Jan 2, 2024 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In Engineer Mode, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploi...Show more In Engineer Mode, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08282249; Issue ID: ALPS08282249.Show less
CVE-2023-32882 1Google 1Android Jun 17, 2026 Jan 2, 2024 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In battery, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation....Show more In battery, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08308070; Issue ID: ALPS08308616.Show less
CVE-2023-32879 1Google 1Android Jun 17, 2026 Jan 2, 2024 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...Show more In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08308070; Issue ID: ALPS08308064.Show less
CVE-2023-32877 1Google 1Android Jun 17, 2026 Jan 2, 2024 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...Show more In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08308070; Issue ID: ALPS08308070.Show less
CVE-2023-32874 1Mediatek 4Lr13 Nr15Nr16+1 more Jun 17, 2026 Jan 2, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 In Modem IMS Stack, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for explo...Show more In Modem IMS Stack, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01161803; Issue ID: MOLY01161803 (MSV-893).Show less
CVE-2023-32872 1Google 1Android Jun 17, 2026 Jan 2, 2024 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In keyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitat...Show more In keyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08308607; Issue ID: ALPS08308607.Show less
CVE-2021-46901 1Cetic 1Cetic 6lbr Jun 17, 2026 Dec 31, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 examples/6lbr/apps/6lbr-webserver/httpd.c in CETIC-6LBR (aka 6lbr) 1.5.0 has a strcat stack-based buffer overflow via a request for a long URL over a 6LoWPAN network.
CVE-2023-52277 1Royalapps 1Royaltsx Jun 17, 2026 Dec 31, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Royal RoyalTSX before 6.0.2.1 allows attackers to cause a denial of service (Heap Memory Corruption and application crash) or possibly have unspecified other impact via a long hostname in an RTSZ file, if the victim clic...Show more Royal RoyalTSX before 6.0.2.1 allows attackers to cause a denial of service (Heap Memory Corruption and application crash) or possibly have unspecified other impact via a long hostname in an RTSZ file, if the victim clicks on Test Connection. This occurs during SecureGatewayHost object processing in RAPortCheck.createNWConnection.Show less
CVE-2023-51136 1Totolink 1X2000r Firmware Jun 17, 2026 Dec 30, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formRebootSchedule.
CVE-2023-51135 1Totolink 1X2000r Firmware Jun 17, 2026 Dec 30, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formPasswordSetup.
CVE-2023-51133 1Totolink 1X2000r Firmware Jun 17, 2026 Dec 30, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formRoute.
CVE-2023-50572 1Jline 1Jline Jun 17, 2026 Dec 29, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 An issue in the component GroovyEngine.execute of jline-groovy v3.24.1 allows attackers to cause an OOM (OutofMemory) error.
CVE-2023-7158 1Micropython 1Micropython Jun 17, 2026 Dec 29, 2023 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 A vulnerability was found in MicroPython up to 1.21.0. It has been classified as critical. Affected is the function slice_indices of the file objslice.c. The manipulation leads to heap-based buffer overflow. It is possib...Show more A vulnerability was found in MicroPython up to 1.21.0. It has been classified as critical. Affected is the function slice_indices of the file objslice.c. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.22.0 is able to address this issue. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-249180.Show less
CVE-2023-52174 1Xnview 1Xnview Classic Jun 17, 2026 Dec 29, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 XnView Classic before 2.51.3 on Windows has a Write Access Violation at xnview.exe+0x3125D6.
CVE-2023-52173 1Xnview 1Xnview Classic Jun 17, 2026 Dec 29, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 XnView Classic before 2.51.3 on Windows has a Write Access Violation at xnview.exe+0x3ADBD0.
CVE-2023-6879 2Aomedia Fedoraproject 2Aomedia Fedora Jun 23, 2026 Dec 27, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Increasing the resolution of video frames, while performing a multi-threaded encode, can result in a heap overflow in av1_loop_restoration_dealloc().
CVE-2023-51084 1Hyavijava 1Hyavijava Jun 17, 2026 Dec 27, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 hyavijava v6.0.07.1 was discovered to contain a stack overflow via the ResultConverter.convert2Xml method.
CVE-2023-51080 1Hutool 1Hutool Jun 17, 2026 Dec 27, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 The NumberUtil.toBigDecimal method in hutool-core v5.8.23 was discovered to contain a stack overflow.

Previous 1...239240241...740 Next