Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

CVEs (15,502)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-40894 1Tenda 1Ac8 Firmware Jun 17, 2026 Aug 24, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter list at /goform/SetStaticRouteCfg.
CVE-2023-40893 1Tenda 1Ac8 Firmware Jun 17, 2026 Aug 24, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter time at /goform/PowerSaveSet.
CVE-2023-40892 1Tenda 1Ac8 Firmware Jun 17, 2026 Aug 24, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter schedStartTime and schedEndTime at /goform/openSchedWifi.
CVE-2023-40891 1Tenda 1Ac8 Firmware Jun 17, 2026 Aug 24, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter firewallEn at /goform/SetFirewallCfg.
CVE-2023-41028 1Juplink 1Rx4 1500 Firmware Jun 17, 2026 Aug 23, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 A stack-based buffer overflow exists in Juplink RX4-1500, a WiFi router, in versions 1.0.2 through 1.0.5. An authenticated attacker can exploit this vulnerability to achieve code execution as root.
CVE-2023-4042 2Artifex Redhat 9Codeready Linux Builder Codeready Linux Builder For Arm64Codeready Linux Builder For Ibm Z Systems+6 more Nov 7, 2026 Aug 23, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 A flaw was found in ghostscript. The fix for CVE-2020-16305 in ghostscript was not included in RHSA-2021:1852-06 advisory as it was claimed to be. This issue only affects the ghostscript package as shipped with Red Hat E...Show more A flaw was found in ghostscript. The fix for CVE-2020-16305 in ghostscript was not included in RHSA-2021:1852-06 advisory as it was claimed to be. This issue only affects the ghostscript package as shipped with Red Hat Enterprise Linux 8.Show less
CVE-2023-4041 1Silabs 1Gecko Bootloader Jun 17, 2026 Aug 23, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Out-of-bounds Write, Download of Code Without Integrity Check vulnerability in Silicon Labs Gecko Bootloader on ARM (Firmware Update File Parser mod...Show more Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Out-of-bounds Write, Download of Code Without Integrity Check vulnerability in Silicon Labs Gecko Bootloader on ARM (Firmware Update File Parser modules) allows Code Injection, Authentication Bypass.This issue affects "Standalone" and "Application" versions of Gecko Bootloader.Show less
CVE-2023-3495 1Hitachi 1Eh View Jun 17, 2026 Aug 23, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 UNSUPPORTED WHEN ASSIGNED Out-of-bounds Write vulnerability in Hitachi EH-VIEW (KeypadDesigner) allows local attackers to potentially execute arbitray code on affected EH-VIEW installations. User interaction is req...Show more UNSUPPORTED WHEN ASSIGNED Out-of-bounds Write vulnerability in Hitachi EH-VIEW (KeypadDesigner) allows local attackers to potentially execute arbitray code on affected EH-VIEW installations. User interaction is required to exploit the vulnerabilities in that the user must open a malicious file. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Show less
CVE-2023-39985 1Hitachi 1Eh View Jun 17, 2026 Aug 23, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 UNSUPPORTED WHEN ASSIGNED Out-of-bounds Write vulnerability in Hitachi EH-VIEW (Designer) allows local attackers to potentially execute arbitray code on affected EH-VIEW installations. User interaction is required...Show more UNSUPPORTED WHEN ASSIGNED Out-of-bounds Write vulnerability in Hitachi EH-VIEW (Designer) allows local attackers to potentially execute arbitray code on affected EH-VIEW installations. User interaction is required to exploit the vulnerabilities in that the user must open a malicious file. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.Show less
CVE-2023-34853 1Supermicro 271H11dsi Nt Firmware H11dsi FirmwareH11dst B Firmware+268 more Jun 17, 2026 Aug 22, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Buffer Overflow vulnerability in Supermicro motherboard X12DPG-QR 1.4b allows local attackers to hijack control flow via manipulation of SmcSecurityEraseSetupVar variable.
CVE-2022-48570 1Cryptopp 1Crypto++ Jun 17, 2026 Aug 22, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Crypto++ through 8.4 contains a timing side channel in ECDSA signature generation. Function FixedSizeAllocatorWithCleanup could write to memory outside of the allocation if the allocated memory was not 16-byte aligned. N...Show more Crypto++ through 8.4 contains a timing side channel in ECDSA signature generation. Function FixedSizeAllocatorWithCleanup could write to memory outside of the allocation if the allocated memory was not 16-byte aligned. NOTE: this issue exists because the CVE-2019-14318 fix was intentionally removed for functionality reasons.Show less
CVE-2022-48522 1Perl 1Perl Oct 14, 2026 Aug 22, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 In Perl 5.34.0, function S_find_uninit_var in sv.c has a stack-based crash that can lead to remote code execution or local privilege escalation.
CVE-2022-48174 2Busybox Debian 2Busybox Debian Linux Jul 14, 2026 Aug 22, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can be executed from command to arbitrary code execution.
CVE-2022-47069 17 Zip 1P7zip Jun 17, 2026 Aug 22, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 p7zip 16.02 was discovered to contain a heap-buffer-overflow vulnerability via the function NArchive::NZip::CInArchive::FindCd(bool) at CPP/7zip/Archive/Zip/ZipIn.cpp. NOTE: the Supplier has found that this is not a buff...Show more p7zip 16.02 was discovered to contain a heap-buffer-overflow vulnerability via the function NArchive::NZip::CInArchive::FindCd(bool) at CPP/7zip/Archive/Zip/ZipIn.cpp. NOTE: the Supplier has found that this is not a buffer overflow; at most an out-of-bounds read can occur.Show less
CVE-2022-45703 1Gnu 1Binutils Jun 17, 2026 Aug 22, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Heap buffer overflow vulnerability in binutils readelf before 2.40 via function display_debug_section in file readelf.c.
CVE-2022-44840 1Gnu 1Binutils Jun 17, 2026 Aug 22, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Heap buffer overflow vulnerability in binutils readelf before 2.40 via function find_section_in_set in file readelf.c.
CVE-2022-43358 1Sass Lang 1Libsass Jun 17, 2026 Aug 22, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Stack overflow vulnerability in ast_selectors.cpp: in function Sass::ComplexSelector::has_placeholder in libsass:3.6.5-8-g210218, which can be exploited by attackers to cause a denial of service (DoS).
CVE-2022-43357 1Sass Lang 2Libsass Sassc Jun 17, 2026 Aug 22, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Stack overflow vulnerability in ast_selectors.cpp in function Sass::CompoundSelector::has_real_parent_ref in libsass:3.6.5-8-g210218, which can be exploited by attackers to causea denial of service (DoS). Also affects th...Show more Stack overflow vulnerability in ast_selectors.cpp in function Sass::CompoundSelector::has_real_parent_ref in libsass:3.6.5-8-g210218, which can be exploited by attackers to causea denial of service (DoS). Also affects the command line driver for libsass, sassc 3.6.2.Show less
CVE-2022-34038 1Etcd 1Etcd Jun 17, 2026 Aug 22, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Etcd v3.5.4 allows remote attackers to cause a denial of service via function PageWriter.write in pagewriter.go. NOTE: the vendor's position is that this is not a vulnerability.
CVE-2022-28072 1Radare 1Radare2 Jun 17, 2026 Aug 22, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 A heap buffer overflow in r_read_le32 function in radare25.4.2 and 5.4.0.

Previous 1...307308309...776 Next