Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

CVEs (15,502)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-33834 1Insyde 2H2offt Iscflashx64.sys Jun 17, 2026 Sep 8, 2023 N/A· v4 7.1 HIGH· v3 N/A· v2 An issue was discovered in iscflashx64.sys 3.9.3.0 in Insyde H2OFFT 6.20.00. When handling IOCTL 0x22229a, the input used to allocate a buffer and copy memory is mishandled. This could cause memory corruption or a system...Show more An issue was discovered in iscflashx64.sys 3.9.3.0 in Insyde H2OFFT 6.20.00. When handling IOCTL 0x22229a, the input used to allocate a buffer and copy memory is mishandled. This could cause memory corruption or a system crash.Show less
CVE-2023-4685 1Deltaww 2Cncsoft B Dopsoft Jun 17, 2026 Sep 7, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Delta Electronics' CNCSoft-B version 1.0.0.4 and DOPSoft versions 4.0.0.82 and prior are vulnerable to stack-based buffer overflow, which could allow an attacker to execute arbitrary code.
CVE-2023-30800 1Mikrotik 1Routeros Jun 17, 2026 Sep 7, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 The web server used by MikroTik RouterOS version 6 is affected by a heap memory corruption issue. A remote and unauthenticated attacker can corrupt the server's heap memory by sending a crafted HTTP request. As a result,...Show more The web server used by MikroTik RouterOS version 6 is affected by a heap memory corruption issue. A remote and unauthenticated attacker can corrupt the server's heap memory by sending a crafted HTTP request. As a result, the web interface crashes and is immediately restarted. The issue was fixed in RouterOS 6.49.10 stable. RouterOS version 7 is not affected.Show less
CVE-2023-40942 1Tendacn 1Ac9 Firmware Jun 17, 2026 Sep 7, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Tenda AC9 V3.0BR_V15.03.06.42_multi_TD01 was discovered stack overflow via parameter 'firewall_value' at url /goform/SetFirewallCfg.
CVE-2022-30646 1Adobe 1Illustrator Jun 17, 2026 Sep 7, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation...Show more Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2022-30645 1Adobe 1Illustrator Jun 17, 2026 Sep 7, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation...Show more Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2022-30643 1Adobe 1Illustrator Jun 17, 2026 Sep 7, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation...Show more Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2022-30642 1Adobe 1Illustrator Jun 17, 2026 Sep 7, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation...Show more Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2022-30641 1Adobe 1Illustrator Jun 17, 2026 Sep 7, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation...Show more Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2022-30640 1Adobe 1Illustrator Jun 17, 2026 Sep 7, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation...Show more Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2022-30639 1Adobe 1Illustrator Jun 17, 2026 Sep 7, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation...Show more Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2022-30638 1Adobe 1Illustrator Jun 17, 2026 Sep 7, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation...Show more Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2022-30637 1Adobe 1Illustrator Jun 17, 2026 Sep 7, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation...Show more Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2021-43018 1Adobe 1Photoshop Jun 17, 2026 Sep 7, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Adobe Photoshop versions 23.0.2 and 22.5.4 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue r...Show more Adobe Photoshop versions 23.0.2 and 22.5.4 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious JPG file.Show less
CVE-2023-38485 1Arubanetworks 1Arubaos Jun 17, 2026 Sep 6, 2023 N/A· v4 6.4 MEDIUM· v3 N/A· v2 Vulnerabilities exist in the BIOS implementation of Aruba 9200 and 9000 Series Controllers and Gateways that could allow an attacker to execute arbitrary code early in the boot sequence. An attacker could exploit this vu...Show more Vulnerabilities exist in the BIOS implementation of Aruba 9200 and 9000 Series Controllers and Gateways that could allow an attacker to execute arbitrary code early in the boot sequence. An attacker could exploit this vulnerability to gain access to and change underlying sensitive information in the affected controller leading to complete system compromise.Show less
CVE-2023-20250 1Cisco 4Rv110w Firmware Rv130 FirmwareRv130w Firmware+1 more Jun 17, 2026 Sep 6, 2023 N/A· v4 7.2 HIGH· v3 N/A· v2 A vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code on an affected device. Th...Show more A vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code on an affected device. This vulnerability is due to improper validation of requests that are sent to the web-based management interface. An attacker could exploit this vulnerability by sending a crafted request to the web-based management interface. A successful exploit could allow the attacker to execute arbitrary code with root privileges on an affected device. To exploit this vulnerability, the attacker must have valid Administrator credentials on the affected device.Show less
CVE-2023-28581 1Qualcomm 25Fastconnect 6800 Firmware Fastconnect 6900 FirmwareFastconnect 7800 Firmware+22 more Jun 17, 2026 Sep 5, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Memory corruption in WLAN Firmware while parsing receieved GTK Keys in GTK KDE.
CVE-2023-28573 1Qualcomm 195315 5g Iot Firmware Aqt1000 FirmwareAr8035 Firmware+192 more Jun 17, 2026 Sep 5, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in WLAN HAL while parsing WMI command parameters.
CVE-2023-28567 1Qualcomm 285315 5g Iot Firmware Aqt1000 FirmwareAr8031 Firmware+282 more Jun 17, 2026 Sep 5, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in WLAN HAL while handling command through WMI interfaces.
CVE-2023-28565 1Qualcomm 2929205 Lte Firmware Apq8017 FirmwareApq8064au Firmware+289 more Jun 17, 2026 Sep 5, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in WLAN HAL while handling command streams through WMI interfaces.

Previous 1...302303304...776 Next