Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

CVEs (14,853)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-29584 1Mp4v2 Project 1Mp4v2 Jun 17, 2026 Apr 14, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 mp4v2 v2.0.0 was discovered to contain a heap buffer overflow via the MP4GetVideoProfileLevel function at /src/mp4.cpp.
CVE-2023-29491 2Gnu Invisible Island 2Ncurses Ncurses Jul 27, 2026 Apr 14, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malformed data in a terminfo database file that is found in $HOME/.terminfo or reached...Show more ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malformed data in a terminfo database file that is found in $HOME/.terminfo or reached via the TERMINFO or TERM environment variable.Show less
CVE-2023-26416 1Adobe 1Substance 3d Designer Jun 17, 2026 Apr 13, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this is...Show more Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2023-26415 1Adobe 1Substance 3d Designer Jun 17, 2026 Apr 13, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue re...Show more Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2023-26413 1Adobe 1Substance 3d Designer Jun 17, 2026 Apr 13, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this is...Show more Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2023-26412 1Adobe 1Substance 3d Designer Jun 17, 2026 Apr 13, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this i...Show more Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2022-25740 1Qualcomm 12Mdm8207 Firmware Mdm9205 FirmwareMdm9206 Firmware+9 more Jun 17, 2026 Apr 13, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Memory corruption in modem due to buffer overwrite while building an IPv6 multicast address based on the MAC address of the iface
CVE-2022-25678 1Qualcomm 12Mdm8207 Firmware Mdm9205 FirmwareMdm9206 Firmware+9 more Jun 17, 2026 Apr 13, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Memory correction in modem due to buffer overwrite during coap connection
CVE-2023-26394 1Adobe 1Substance 3d Stager Jun 17, 2026 Apr 12, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue...Show more Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2023-26390 1Adobe 1Substance 3d Stager Jun 17, 2026 Apr 12, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issu...Show more Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2023-26383 1Adobe 1Substance 3d Stager Jun 17, 2026 Apr 12, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issu...Show more Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2023-21582 1Adobe 1Digital Editions Jun 17, 2026 Apr 12, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Adobe Digital Editions version 4.5.11.187303 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue...Show more Adobe Digital Editions version 4.5.11.187303 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2023-1906 2Fedoraproject Imagemagick 3Extra Packages For Enterprise Linux FedoraImagemagick Jun 17, 2026 Apr 12, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 A heap-based buffer overflow issue was discovered in ImageMagick's ImportMultiSpectralQuantum() function in MagickCore/quantum-import.c. An attacker could pass specially crafted file to convert, triggering an out-of-boun...Show more A heap-based buffer overflow issue was discovered in ImageMagick's ImportMultiSpectralQuantum() function in MagickCore/quantum-import.c. An attacker could pass specially crafted file to convert, triggering an out-of-bounds read error, allowing an application to crash, resulting in a denial of service.Show less
CVE-2023-26395 1Adobe 4Acrobat Acrobat DcAcrobat Reader+1 more Jun 17, 2026 Apr 12, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current use...Show more Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2023-26373 1Adobe 1Dimension Jun 17, 2026 Apr 12, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Adobe Dimension version 3.4.8 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user i...Show more Adobe Dimension version 3.4.8 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2023-26372 1Adobe 1Dimension Jun 17, 2026 Apr 12, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Adobe Dimension version 3.4.8 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user i...Show more Adobe Dimension version 3.4.8 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2023-28488 1Intel 1Connman Jun 17, 2026 Apr 12, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 client.c in gdhcp in ConnMan through 1.41 could be used by network-adjacent attackers (operating a crafted DHCP server) to cause a stack-based buffer overflow and denial of service, terminating the connman process.
CVE-2023-22613 1Insyde 1Insydeh2o Jun 17, 2026 Apr 11, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. It is possible to write to an attacker-controlled address. An attacker could invoke an SMI handler with a malformed pointer in RCX that...Show more An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. It is possible to write to an attacker-controlled address. An attacker could invoke an SMI handler with a malformed pointer in RCX that overlaps SMRAM, resulting in SMM memory corruption.Show less
CVE-2023-28252 1Microsoft 13Windows 10 1507 Windows 10 1607Windows 10 1809+10 more Jun 17, 2026 Apr 11, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2023-26555 1Ntp 1Ntp Jun 17, 2026 Apr 11, 2023 N/A· v4 6.4 MEDIUM· v3 N/A· v2 praecis_parse in ntpd/refclock_palisade.c in NTP 4.2.8p15 has an out-of-bounds write. Any attack method would be complex, e.g., with a manipulated GPS receiver.

Previous 1...312313314...743 Next