Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

CVEs (14,844)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-33675 1Tenda 1Ac8 Firmware Jun 17, 2026 Jun 2, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the time parameter in the get_parentControl_list_Info function.
CVE-2023-33673 1Tenda 1Ac8 Firmware Jun 17, 2026 Jun 2, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the firewallEn parameter in the formSetFirewallCfg function.
CVE-2023-33672 1Tenda 1Ac8 Firmware Jun 17, 2026 Jun 2, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the shareSpeed parameter in the fromSetWifiGusetBasic function.
CVE-2023-33671 1Tenda 1Ac8 Firmware Jun 17, 2026 Jun 2, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the deviceId parameter in the saveParentControlInfo function.
CVE-2023-33670 1Tenda 1Ac8 Firmware Jun 17, 2026 Jun 2, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the time parameter in the sub_4a79ec function.
CVE-2023-33669 1Tenda 1Ac8 Firmware Jun 17, 2026 Jun 2, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the timeZone parameter in the sub_44db3c function.
CVE-2023-32215 1Mozilla 3Firefox Firefox EsrThunderbird Jun 17, 2026 Jun 2, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Mozilla developers and community members Gabriele Svelto, Andrew Osmond, Emily McDonough, Sebastian Hengst, Andrew McCreight and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 112 and Firefox ESR...Show more Mozilla developers and community members Gabriele Svelto, Andrew Osmond, Emily McDonough, Sebastian Hengst, Andrew McCreight and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 112 and Firefox ESR 102.10. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 113, Firefox ESR < 102.11, and Thunderbird < 102.11.Show less
CVE-2023-29551 1Mozilla 3Firefox Firefox MobileFocus Aug 19, 2026 Jun 2, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Memory safety bugs present in Firefox 111. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability...Show more Memory safety bugs present in Firefox 111. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox for Android < 112, Firefox < 112, and Focus for Android < 112.Show less
CVE-2023-28177 1Mozilla 1Firefox Jun 17, 2026 Jun 2, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Memory safety bugs present in Firefox 110. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability...Show more Memory safety bugs present in Firefox 110. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 111.Show less
CVE-2023-28176 1Mozilla 3Firefox Firefox EsrThunderbird Jun 17, 2026 Jun 2, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Memory safety bugs present in Firefox 110 and Firefox ESR 102.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary cod...Show more Memory safety bugs present in Firefox 110 and Firefox ESR 102.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 111, Firefox ESR < 102.9, and Thunderbird < 102.9.Show less
CVE-2023-25746 1Mozilla 2Firefox Esr Thunderbird Jun 17, 2026 Jun 2, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Memory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerab...Show more Memory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird < 102.8 and Firefox ESR < 102.8.Show less
CVE-2023-25745 1Mozilla 1Firefox Jun 17, 2026 Jun 2, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Memory safety bugs present in Firefox 109. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability...Show more Memory safety bugs present in Firefox 109. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 110.Show less
CVE-2023-25744 1Mozilla 2Firefox Firefox Esr Jun 17, 2026 Jun 2, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Mmemory safety bugs present in Firefox 109 and Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary co...Show more Mmemory safety bugs present in Firefox 109 and Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 110 and Firefox ESR < 102.8.Show less
CVE-2023-25732 1Mozilla 3Firefox Firefox EsrThunderbird Jun 17, 2026 Jun 2, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 When encoding data from an <code>inputStream</code> in <code>xpcom</code> the size of the input being encoded was not correctly calculated potentially leading to an out of bounds memory write. This vulnerability affects...Show more When encoding data from an <code>inputStream</code> in <code>xpcom</code> the size of the input being encoded was not correctly calculated potentially leading to an out of bounds memory write. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8.Show less
CVE-2023-23606 1Mozilla 1Firefox Jun 17, 2026 Jun 2, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 108. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have...Show more Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 108. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 109.Show less
CVE-2023-23605 1Mozilla 3Firefox Firefox EsrThunderbird Jun 17, 2026 Jun 2, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 108 and Firefox ESR 102.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort som...Show more Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 108 and Firefox ESR 102.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 109, Firefox ESR < 102.7, and Thunderbird < 102.7.Show less
CVE-2023-1945 1Mozilla 2Firefox Esr Thunderbird Jun 17, 2026 Jun 2, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Unexpected data returned from the Safe Browsing API could have led to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird < 102.10 and Firefox ESR < 102.10.
CVE-2023-2687 1Silabs 1Gecko Software Development Kit Jun 17, 2026 Jun 2, 2023 N/A· v4 3.3 LOW· v3 N/A· v2 Buffer overflow in Platform CLI component in Silicon Labs Gecko SDK v4.2.1 and earlier allows user to overwrite limited structures on the heap.
CVE-2023-33476 1Readymedia Project 1Readymedia Jun 17, 2026 Jun 2, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 ReadyMedia (MiniDLNA) versions from 1.1.15 up to 1.3.2 is vulnerable to Buffer Overflow. The vulnerability is caused by incorrect validation logic when handling HTTP requests using chunked transport encoding. This result...Show more ReadyMedia (MiniDLNA) versions from 1.1.15 up to 1.3.2 is vulnerable to Buffer Overflow. The vulnerability is caused by incorrect validation logic when handling HTTP requests using chunked transport encoding. This results in other code later using attacker-controlled chunk values that exceed the length of the allocated buffer, resulting in out-of-bounds read/write.Show less
CVE-2023-32324 2Debian Openprinting 2Cups Debian Linux Jun 17, 2026 Jun 1, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 OpenPrinting CUPS is an open source printing system. In versions 2.4.2 and prior, a heap buffer overflow vulnerability would allow a remote attacker to launch a denial of service (DoS) attack. A buffer overflow vulnerabi...Show more OpenPrinting CUPS is an open source printing system. In versions 2.4.2 and prior, a heap buffer overflow vulnerability would allow a remote attacker to launch a denial of service (DoS) attack. A buffer overflow vulnerability in the function `format_log_line` could allow remote attackers to cause a DoS on the affected system. Exploitation of the vulnerability can be triggered when the configuration file `cupsd.conf` sets the value of `loglevel `to `DEBUG`. No known patches or workarounds exist at time of publication.Show less

Previous 1...299300301...743 Next