Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

CVEs (15,502)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-37212 1Mozilla 1Firefox Jun 17, 2026 Jul 5, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Memory safety bugs present in Firefox 114. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability...Show more Memory safety bugs present in Firefox 114. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 115.Show less
CVE-2023-37211 2Debian Mozilla 4Debian Linux FirefoxFirefox Esr+1 more Oct 24, 2026 Jul 5, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Memory safety bugs present in Firefox 114, Firefox ESR 102.12, and Thunderbird 102.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploite...Show more Memory safety bugs present in Firefox 114, Firefox ESR 102.12, and Thunderbird 102.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13.Show less
CVE-2023-24854 1Qualcomm 158215 Firmware Ar8035 FirmwareCsra6620 Firmware+155 more Jun 17, 2026 Jul 4, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory Corruption in WLAN HOST while parsing QMI WLAN Firmware response message.
CVE-2023-24851 1Qualcomm 186Ar8035 Firmware Csr8811 FirmwareCsra6620 Firmware+183 more Jun 17, 2026 Jul 4, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory Corruption in WLAN HOST while parsing QMI response message from firmware.
CVE-2023-22386 1Qualcomm 196215 Firmware Ar8035 FirmwareCsr8811 Firmware+193 more Jun 17, 2026 Jul 4, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory Corruption in WLAN HOST while processing WLAN FW request to allocate memory.
CVE-2023-21640 1Qualcomm 6Fastconnect 6900 Firmware Fastconnect 7800 FirmwareSnapdragon 8 Gen 1 Firmware+3 more Jun 17, 2026 Jul 4, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in Linux when the file upload API is called with parameters having large buffer.
CVE-2023-21639 1Qualcomm 22Aqt1000 Firmware Fastconnect 6200 FirmwareQca6420 Firmware+19 more Jun 17, 2026 Jul 4, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in Audio while processing sva_model_serializer using memory size passed by HIDL client.
CVE-2023-21637 1Qualcomm 54Aqt1000 Firmware Fastconnect 6200 FirmwareFastconnect 6800 Firmware+51 more Jun 17, 2026 Jul 4, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in Linux while calling system configuration APIs.
CVE-2023-21635 1Qualcomm 48Aqt1000 Firmware Csrb31024 FirmwareFastconnect 6200 Firmware+45 more Jun 17, 2026 Jul 4, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory Corruption in Data Network Stack & Connectivity when sim gets detected on telephony.
CVE-2023-21633 1Qualcomm 96Apq8064au Firmware Aqt1000 FirmwareFastconnect 6200 Firmware+93 more Jun 17, 2026 Jul 4, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory Corruption in Linux while processing QcRilRequestImsRegisterMultiIdentityMessage request.
CVE-2023-20775 2Google Openwrt 2Android Openwrt Jun 17, 2026 Jul 4, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...Show more In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07978760; Issue ID: ALPS07363410.Show less
CVE-2023-20771 1Google 1Android Jun 17, 2026 Jul 4, 2023 N/A· v4 6.4 MEDIUM· v3 N/A· v2 In display, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch...Show more In display, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07671046; Issue ID: ALPS07671046.Show less
CVE-2023-20767 1Google 1Android Jun 17, 2026 Jul 4, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In pqframework, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploita...Show more In pqframework, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07629585; Issue ID: ALPS07629584.Show less
CVE-2023-20766 1Google 1Android Jun 17, 2026 Jul 4, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Pa...Show more In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07573237; Issue ID: ALPS07573202.Show less
CVE-2023-20761 1Google 1Android Jun 17, 2026 Jul 4, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Pa...Show more In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628604; Issue ID: ALPS07628582.Show less
CVE-2023-20760 1Google 1Android Jun 17, 2026 Jul 4, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In apu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Pa...Show more In apu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07629578; Issue ID: ALPS07629578.Show less
CVE-2023-20759 1Google 1Android Jun 17, 2026 Jul 4, 2023 N/A· v4 4.4 MEDIUM· v3 N/A· v2 In cmdq, there is a possible memory corruption due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch ID:...Show more In cmdq, there is a possible memory corruption due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07636133; Issue ID: ALPS07634601.Show less
CVE-2023-20758 1Google 1Android Jun 17, 2026 Jul 4, 2023 N/A· v4 4.4 MEDIUM· v3 N/A· v2 In cmdq, there is a possible memory corruption due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch ID:...Show more In cmdq, there is a possible memory corruption due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07636133; Issue ID: ALPS07636130.Show less
CVE-2023-20757 1Google 1Android Jun 17, 2026 Jul 4, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In cmdq, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. P...Show more In cmdq, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07636133; Issue ID: ALPS07636133.Show less
CVE-2023-20754 1Google 1Android Jun 17, 2026 Jul 4, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In keyinstall, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...Show more In keyinstall, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07563028; Issue ID: ALPS07588343.Show less

Previous 1...324325326...776 Next