Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

CVEs (14,832)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-20805 2Google Linuxfoundation 2Android Yocto Jun 17, 2026 Aug 7, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation....Show more In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07199773; Issue ID: ALPS07326411.Show less
CVE-2023-20804 2Google Linuxfoundation 2Android Yocto Jun 17, 2026 Aug 7, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation....Show more In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07199773; Issue ID: ALPS07326384.Show less
CVE-2023-20803 2Google Linuxfoundation 2Android Yocto Jun 17, 2026 Aug 7, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 In imgsys, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Pa...Show more In imgsys, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS07326455; Issue ID: ALPS07326374.Show less
CVE-2023-20802 2Google Linuxfoundation 2Android Yocto Jun 17, 2026 Aug 7, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 In imgsys, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Pa...Show more In imgsys, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS07420968; Issue ID: ALPS07420976.Show less
CVE-2023-20797 1Google 1Android Jun 17, 2026 Aug 7, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In camera middleware, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for ex...Show more In camera middleware, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07629582; Issue ID: ALPS07629582.Show less
CVE-2023-20796 4Google LinuxfoundationOpenwrt+1 more 4Android OpenwrtRdk B+1 more Jun 17, 2026 Aug 7, 2023 N/A· v4 4.4 MEDIUM· v3 N/A· v2 In power, there is a possible memory corruption due to an incorrect bounds check. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch...Show more In power, there is a possible memory corruption due to an incorrect bounds check. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07929790; Issue ID: ALPS07929790.Show less
CVE-2023-20795 1Google 1Android Jun 17, 2026 Aug 7, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Pa...Show more In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07864900; Issue ID: ALPS07864900.Show less
CVE-2023-20793 1Google 1Android Jun 17, 2026 Aug 7, 2023 N/A· v4 4.4 MEDIUM· v3 N/A· v2 In apu, there is a possible memory corruption due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch ID:...Show more In apu, there is a possible memory corruption due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07767818; Issue ID: ALPS07767818.Show less
CVE-2023-20790 4Google LinuxfoundationOpenwrt+1 more 4Android OpenwrtRdk B+1 more Jun 17, 2026 Aug 7, 2023 N/A· v4 4.4 MEDIUM· v3 N/A· v2 In nvram, there is a possible out of bounds write due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. P...Show more In nvram, there is a possible out of bounds write due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07740194; Issue ID: ALPS07740194.Show less
CVE-2023-20786 1Google 1Android Jun 17, 2026 Aug 7, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Pa...Show more In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07767811; Issue ID: ALPS07767811.Show less
CVE-2023-20785 1Google 1Android Jun 17, 2026 Aug 7, 2023 N/A· v4 6.4 MEDIUM· v3 N/A· v2 In audio, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation....Show more In audio, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628524; Issue ID: ALPS07628524.Show less
CVE-2023-20784 1Google 1Android Jun 17, 2026 Aug 7, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In keyinstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitat...Show more In keyinstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07826989; Issue ID: ALPS07826989.Show less
CVE-2023-20783 1Google 1Android Jun 17, 2026 Aug 7, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In keyinstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitat...Show more In keyinstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07826905; Issue ID: ALPS07826905.Show less
CVE-2023-20781 1Google 1Android Jun 17, 2026 Aug 7, 2023 N/A· v4 4.4 MEDIUM· v3 N/A· v2 In keyinstall, there is a possible memory corruption due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Pat...Show more In keyinstall, there is a possible memory corruption due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08017756; Issue ID: ALPS07905323.Show less
CVE-2023-33913 1Google 1Android Jun 17, 2026 Aug 7, 2023 N/A· v4 7.2 HIGH· v3 N/A· v2 In DRM/oemcrypto, there is a possible out of bounds write due to an incorrect calculation of buffer size.This could lead to remote escalation of privilege with System execution privileges needed
CVE-2023-33375 1Connectedio 1Connected Io Jun 17, 2026 Aug 4, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Connected IO v2.1.0 and prior has a stack-based buffer overflow vulnerability in its communication protocol, enabling attackers to take control over devices.
CVE-2023-3180 3Debian FedoraprojectQemu 3Debian Linux FedoraQemu Jun 17, 2026 Aug 3, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 A flaw was found in the QEMU virtual crypto device while handling data encryption/decryption requests in virtio_crypto_handle_sym_req. There is no check for the value of `src_len` and `dst_len` in virtio_crypto_sym_op_he...Show more A flaw was found in the QEMU virtual crypto device while handling data encryption/decryption requests in virtio_crypto_handle_sym_req. There is no check for the value of `src_len` and `dst_len` in virtio_crypto_sym_op_helper, potentially leading to a heap buffer overflow when the two values differ.Show less
CVE-2023-37557 1Codesys 16Control For Beaglebone Sl Control For Empc A/imx6 SlControl For Iot2000 Sl+13 more Jun 17, 2026 Aug 3, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted remote communication requests can cause the CmpAppBP component to overwrite a heap-based buffer, which can lea...Show more After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted remote communication requests can cause the CmpAppBP component to overwrite a heap-based buffer, which can lead to a denial-of-service condition.Show less
CVE-2023-38747 1Omron 1Cx Programmer Jun 17, 2026 Aug 3, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Heap-based buffer overflow vulnerability exists in CX-Programmer Included in CX-One CXONE-AL[][]D-V4 V9.80 and earlier. By having a user open a specially crafted CXP file, information disclosure and/or arbitrary code exe...Show more Heap-based buffer overflow vulnerability exists in CX-Programmer Included in CX-One CXONE-AL[][]D-V4 V9.80 and earlier. By having a user open a specially crafted CXP file, information disclosure and/or arbitrary code execution may occur.Show less
CVE-2023-4072 1Google 1Chrome Jun 17, 2026 Aug 3, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Out of bounds read and write in WebGL in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Previous 1...281282283...742 Next