Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

CVEs (14,826)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-28581 1Qualcomm 25Fastconnect 6800 Firmware Fastconnect 6900 FirmwareFastconnect 7800 Firmware+22 more Jun 17, 2026 Sep 5, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Memory corruption in WLAN Firmware while parsing receieved GTK Keys in GTK KDE.
CVE-2023-28573 1Qualcomm 195315 5g Iot Firmware Aqt1000 FirmwareAr8035 Firmware+192 more Jun 17, 2026 Sep 5, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in WLAN HAL while parsing WMI command parameters.
CVE-2023-28567 1Qualcomm 285315 5g Iot Firmware Aqt1000 FirmwareAr8031 Firmware+282 more Jun 17, 2026 Sep 5, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in WLAN HAL while handling command through WMI interfaces.
CVE-2023-28565 1Qualcomm 2929205 Lte Firmware Apq8017 FirmwareApq8064au Firmware+289 more Jun 17, 2026 Sep 5, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in WLAN HAL while handling command streams through WMI interfaces.
CVE-2023-28564 1Qualcomm 247Aqt1000 Firmware Ar8031 FirmwareAr9380 Firmware+244 more Jun 17, 2026 Sep 5, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in WLAN HAL while passing command parameters through WMI interfaces.
CVE-2023-28562 1Qualcomm 66Aqt1000 Firmware Fastconnect 6200 FirmwareFastconnect 6800 Firmware+63 more Jun 17, 2026 Sep 5, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Memory corruption while handling payloads from remote ESL.
CVE-2023-28560 1Qualcomm 2678098 Firmware 8998 FirmwareApq5053 Aa Firmware+264 more Jun 17, 2026 Sep 5, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in WLAN HAL while processing devIndex from untrusted WMI payload.
CVE-2023-28559 1Qualcomm 211Aqt1000 Firmware Ar8031 FirmwareAr9380 Firmware+208 more Jun 17, 2026 Sep 5, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in WLAN FW while processing command parameters from untrusted WMI payload.
CVE-2023-28558 1Qualcomm 195315 5g Iot Modem Firmware Aqt1000 FirmwareAr8031 Firmware+192 more Jun 17, 2026 Sep 5, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in WLAN handler while processing PhyID in Tx status handler.
CVE-2023-28538 1Qualcomm 130Aqt1000 Firmware Csra6620 FirmwareCsra6640 Firmware+127 more Jun 17, 2026 Sep 5, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in WIN Product while invoking WinAcpi update driver in the UEFI region.
CVE-2023-21664 1Qualcomm 137Aqt1000 Firmware Ar8035 FirmwareFsm10056 Firmware+134 more Jun 17, 2026 Sep 5, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory Corruption in Core Platform while printing the response buffer in log.
CVE-2023-21663 1Qualcomm 38Aqt1000 Firmware Qca6420 FirmwareQca6430 Firmware+35 more Jun 17, 2026 Sep 5, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory Corruption while accessing metadata in Display.
CVE-2023-21654 1Qualcomm 56Apq8096au Firmware Aqt1000 FirmwareMdm9150 Firmware+53 more Jun 17, 2026 Sep 5, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in Audio during playback session with audio effects enabled.
CVE-2023-4756 1Gpac 1Gpac Jun 17, 2026 Sep 4, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3-DEV.
CVE-2023-4754 1Gpac 1Gpac Jun 17, 2026 Sep 4, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Out-of-bounds Write in GitHub repository gpac/gpac prior to 2.3-DEV.
CVE-2023-32813 3Google LinuxfoundationOpenwrt 3Android OpenwrtYocto Jun 17, 2026 Sep 4, 2023 N/A· v4 4.4 MEDIUM· v3 N/A· v2 In gnss service, there is a possible out of bounds write due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for explo...Show more In gnss service, there is a possible out of bounds write due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08017370; Issue ID: ALPS08017370.Show less
CVE-2023-32812 3Google LinuxfoundationOpenwrt 3Android OpenwrtYocto Jun 17, 2026 Sep 4, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In gnss service, there is a possible out of bounds write due to improper input validation. This could lead to local esclation of privileges with System execution privileges needed. User interaction is not needed for expl...Show more In gnss service, there is a possible out of bounds write due to improper input validation. This could lead to local esclation of privileges with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08017365; Issue ID: ALPS08017365.Show less
CVE-2023-32811 3Google LinuxfoundationMediatek 3Android Iot YoctoYocto Jun 17, 2026 Sep 4, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In connectivity system driver, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not n...Show more In connectivity system driver, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07929848; Issue ID: ALPS07929848.Show less
CVE-2023-32806 4Google LinuxfoundationMediatek+1 more 4Android Iot YoctoOpenwrt+1 more Jun 17, 2026 Sep 4, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for explo...Show more In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07441589; Issue ID: ALPS07441589.Show less
CVE-2023-32805 1Google 1Android Jun 17, 2026 Sep 4, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 In power, there is a possible out of bounds write due to an insecure default value. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. P...Show more In power, there is a possible out of bounds write due to an insecure default value. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS08102892; Issue ID: ALPS08102892.Show less

Previous 1...269270271...742 Next