Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

CVEs (14,836)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-21639 1Qualcomm 22Aqt1000 Firmware Fastconnect 6200 FirmwareQca6420 Firmware+19 more Jun 17, 2026 Jul 4, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in Audio while processing sva_model_serializer using memory size passed by HIDL client.
CVE-2023-21637 1Qualcomm 54Aqt1000 Firmware Fastconnect 6200 FirmwareFastconnect 6800 Firmware+51 more Jun 17, 2026 Jul 4, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in Linux while calling system configuration APIs.
CVE-2023-21635 1Qualcomm 48Aqt1000 Firmware Csrb31024 FirmwareFastconnect 6200 Firmware+45 more Jun 17, 2026 Jul 4, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory Corruption in Data Network Stack & Connectivity when sim gets detected on telephony.
CVE-2023-21633 1Qualcomm 96Apq8064au Firmware Aqt1000 FirmwareFastconnect 6200 Firmware+93 more Jun 17, 2026 Jul 4, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory Corruption in Linux while processing QcRilRequestImsRegisterMultiIdentityMessage request.
CVE-2023-20775 2Google Openwrt 2Android Openwrt Jun 17, 2026 Jul 4, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...Show more In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07978760; Issue ID: ALPS07363410.Show less
CVE-2023-20771 1Google 1Android Jun 17, 2026 Jul 4, 2023 N/A· v4 6.4 MEDIUM· v3 N/A· v2 In display, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch...Show more In display, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07671046; Issue ID: ALPS07671046.Show less
CVE-2023-20767 1Google 1Android Jun 17, 2026 Jul 4, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In pqframework, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploita...Show more In pqframework, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07629585; Issue ID: ALPS07629584.Show less
CVE-2023-20766 1Google 1Android Jun 17, 2026 Jul 4, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Pa...Show more In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07573237; Issue ID: ALPS07573202.Show less
CVE-2023-20761 1Google 1Android Jun 17, 2026 Jul 4, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Pa...Show more In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628604; Issue ID: ALPS07628582.Show less
CVE-2023-20760 1Google 1Android Jun 17, 2026 Jul 4, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In apu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Pa...Show more In apu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07629578; Issue ID: ALPS07629578.Show less
CVE-2023-20759 1Google 1Android Jun 17, 2026 Jul 4, 2023 N/A· v4 4.4 MEDIUM· v3 N/A· v2 In cmdq, there is a possible memory corruption due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch ID:...Show more In cmdq, there is a possible memory corruption due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07636133; Issue ID: ALPS07634601.Show less
CVE-2023-20758 1Google 1Android Jun 17, 2026 Jul 4, 2023 N/A· v4 4.4 MEDIUM· v3 N/A· v2 In cmdq, there is a possible memory corruption due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch ID:...Show more In cmdq, there is a possible memory corruption due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07636133; Issue ID: ALPS07636130.Show less
CVE-2023-20757 1Google 1Android Jun 17, 2026 Jul 4, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In cmdq, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. P...Show more In cmdq, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07636133; Issue ID: ALPS07636133.Show less
CVE-2023-20754 1Google 1Android Jun 17, 2026 Jul 4, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In keyinstall, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...Show more In keyinstall, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07563028; Issue ID: ALPS07588343.Show less
CVE-2023-20753 1Google 1Android Jun 17, 2026 Jul 4, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In rpmb, there is a possible out of bounds write due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID:...Show more In rpmb, there is a possible out of bounds write due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07460390; Issue ID: ALPS07588667.Show less
CVE-2023-35177 1Hp 46Laserjet Pro M304 M305 W1a46a Firmware Laserjet Pro M304 M305 W1a47a FirmwareLaserjet Pro M304 M305 W1a48a Firmware+43 more Jun 25, 2026 Jun 30, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Certain HP LaserJet Pro print products are potentially vulnerable to a stack-based buffer overflow related to the compact font format parser.
CVE-2023-26085 1Arm 1Nn Android Neural Networks Driver Jun 17, 2026 Jun 29, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 A possible out-of-bounds read and write (due to an improper length check of shared memory) was discovered in Arm NN Android-NN-Driver before 23.02.
CVE-2023-3138 2Redhat X.org 2Enterprise Linux Libx11 Jun 17, 2026 Jun 28, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 A vulnerability was found in libX11. The security flaw occurs because the functions in src/InitExt.c in libX11 do not check that the values provided for the Request, Event, or Error IDs are within the bounds of the array...Show more A vulnerability was found in libX11. The security flaw occurs because the functions in src/InitExt.c in libX11 do not check that the values provided for the Request, Event, or Error IDs are within the bounds of the arrays that those functions write to, using those IDs as array indexes. They trust that they were called with values provided by an Xserver adhering to the bounds specified in the X11 protocol, as all X servers provided by X.Org do. As the protocol only specifies a single byte for these values, an out-of-bounds value provided by a malicious server (or a malicious proxy-in-the-middle) can only overwrite other portions of the Display structure and not write outside the bounds of the Display structure itself, possibly causing the client to crash with this memory corruption.Show less
CVE-2023-21517 1Samsung 1Exynos Jun 17, 2026 Jun 28, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Heap out-of-bound write vulnerability in Exynos baseband prior to SMR Jun-2023 Release 1 allows remote attacker to execute arbitrary code.
CVE-2023-3090 2Debian Linux 2Debian Linux Linux Kernel Jun 17, 2026 Jun 28, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 A heap out-of-bounds write vulnerability in the Linux Kernel ipvlan network driver can be exploited to achieve local privilege escalation. The out-of-bounds write is caused by missing skb->cb initialization in the ipvl...Show more A heap out-of-bounds write vulnerability in the Linux Kernel ipvlan network driver can be exploited to achieve local privilege escalation. The out-of-bounds write is caused by missing skb->cb initialization in the ipvlan network driver. The vulnerability is reachable if CONFIG_IPVLAN is enabled. We recommend upgrading past commit 90cbed5247439a966b645b34eb0a2e037836ea8e.Show less

Previous 1...291292293...742 Next