Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

CVEs (14,869)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-46581 1Trendnet 1Tew 755ap Firmware Jun 17, 2026 Dec 30, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the cameo.cameo.nslookup_target parameter in the tools_nslookup function.
CVE-2022-46580 1Trendnet 1Tew 755ap Firmware Jun 17, 2026 Dec 30, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the user_edit_page parameter in the wifi_captive_portal function.
CVE-2014-125026 1Cloudflare 1Golz4 Apr 11, 2025 Dec 27, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 LZ4 bindings use a deprecated C API that is vulnerable to memory corruption, which could lead to arbitrary code execution if called with untrusted user input.
CVE-2022-46570 1Dlink 1Dir 882 A1 Firmware Jun 17, 2026 Dec 23, 2022 N/A· v4 7.2 HIGH· v3 N/A· v2 D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a stack overflow via the Password parameter in the SetWan3Settings module.
CVE-2022-46569 1Dlink 1Dir 882 A1 Firmware Jun 17, 2026 Dec 23, 2022 N/A· v4 7.2 HIGH· v3 N/A· v2 D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a stack overflow via the Key parameter in the SetWLanRadioSecurity module.
CVE-2022-46568 1Dlink 1Dir 882 A1 Firmware Jun 17, 2026 Dec 23, 2022 N/A· v4 7.2 HIGH· v3 N/A· v2 D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a stack overflow via the AccountPassword parameter in the SetSysEmailSettings module.
CVE-2022-46566 1Dlink 1Dir 882 A1 Firmware Jun 17, 2026 Dec 23, 2022 N/A· v4 7.2 HIGH· v3 N/A· v2 D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a stack overflow via the Password parameter in the SetQuickVPNSettings module.
CVE-2022-46563 1Dlink 1Dir 882 A1 Firmware Jun 17, 2026 Dec 23, 2022 N/A· v4 7.2 HIGH· v3 N/A· v2 D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a stack overflow via the Password parameter in the SetDynamicDNSSettings module.
CVE-2022-46562 1Dlink 1Dir 882 A1 Firmware Jun 17, 2026 Dec 23, 2022 N/A· v4 7.2 HIGH· v3 N/A· v2 D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a stack overflow via the PSK parameter in the SetQuickVPNSettings module.
CVE-2022-46561 1Dlink 1Dir 882 A1 Firmware Jun 17, 2026 Dec 23, 2022 N/A· v4 7.2 HIGH· v3 N/A· v2 D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a stack overflow via the Password parameter in the SetWanSettings module.
CVE-2022-46560 1Dlink 1Dir 882 A1 Firmware Jun 17, 2026 Dec 23, 2022 N/A· v4 7.2 HIGH· v3 N/A· v2 D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a stack overflow via the Password parameter in the SetWan2Settings module.
CVE-2022-47942 1Linux 1Linux Kernel Jun 17, 2026 Dec 23, 2022 N/A· v4 8.8 HIGH· v3 N/A· v2 An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. There is a heap-based buffer overflow in set_ntacl_dacl, related to use of SMB2_QUERY_INFO_HE after a malformed SMB2_SET_INFO_HE comma...Show more An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. There is a heap-based buffer overflow in set_ntacl_dacl, related to use of SMB2_QUERY_INFO_HE after a malformed SMB2_SET_INFO_HE command.Show less
CVE-2022-43598 2Debian Openimageio 2Debian Linux Openimageio Jun 17, 2026 Dec 22, 2022 N/A· v4 8.1 HIGH· v3 N/A· v2 Multiple memory corruption vulnerabilities exist in the IFFOutput alignment padding functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to arbitrary code execution....Show more Multiple memory corruption vulnerabilities exist in the IFFOutput alignment padding functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to arbitrary code execution. An attacker can provide malicious input to trigger these vulnerabilities.This vulnerability arises when the `m_spec.format` is `TypeDesc::UINT16`.Show less
CVE-2022-41981 2Debian Openimageio 2Debian Linux Openimageio Jun 17, 2026 Dec 22, 2022 N/A· v4 8.1 HIGH· v3 N/A· v2 A stack-based buffer overflow vulnerability exists in the TGA file format parser of OpenImageIO v2.3.19.0. A specially-crafted targa file can lead to out of bounds read and write on the process stack, which can lead to a...Show more A stack-based buffer overflow vulnerability exists in the TGA file format parser of OpenImageIO v2.3.19.0. A specially-crafted targa file can lead to out of bounds read and write on the process stack, which can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.Show less
CVE-2022-41838 2Debian Openimageio 2Debian Linux Openimageio Jun 17, 2026 Dec 22, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A code execution vulnerability exists in the DDS scanline parsing functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially-crafted .dds can lead to a heap buffer overflow. An attacker can provide a maliciou...Show more A code execution vulnerability exists in the DDS scanline parsing functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially-crafted .dds can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.Show less
CVE-2022-41837 2Debian Openimageio 2Debian Linux Openimageio Jun 17, 2026 Dec 22, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 An out-of-bounds write vulnerability exists in the OpenImageIO::add_exif_item_to_spec functionality of OpenImageIO Project OpenImageIO v2.4.4.2. Specially-crafted exif metadata can lead to stack-based memory corruption....Show more An out-of-bounds write vulnerability exists in the OpenImageIO::add_exif_item_to_spec functionality of OpenImageIO Project OpenImageIO v2.4.4.2. Specially-crafted exif metadata can lead to stack-based memory corruption. An attacker can provide a malicious file to trigger this vulnerability.Show less
CVE-2022-41794 2Debian Openimageio 2Debian Linux Openimageio Jun 17, 2026 Dec 22, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A heap based buffer overflow vulnerability exists in the PSD thumbnail resource parsing code of OpenImageIO 2.3.19.0. A specially-crafted PSD file can lead to arbitrary code execution. An attacker can provide a malicious...Show more A heap based buffer overflow vulnerability exists in the PSD thumbnail resource parsing code of OpenImageIO 2.3.19.0. A specially-crafted PSD file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.Show less
CVE-2022-41639 2Debian Openimageio 2Debian Linux Openimageio Jun 17, 2026 Dec 22, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A heap based buffer overflow vulnerability exists in tile decoding code of TIFF image parser in OpenImageIO master-branch-9aeece7a and v2.3.19.0. A specially-crafted TIFF file can lead to an out of bounds memory corrupti...Show more A heap based buffer overflow vulnerability exists in tile decoding code of TIFF image parser in OpenImageIO master-branch-9aeece7a and v2.3.19.0. A specially-crafted TIFF file can lead to an out of bounds memory corruption, which can result in arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.Show less
CVE-2022-38143 1Openimageio 1Openimageio Jun 17, 2026 Dec 22, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A heap out-of-bounds write vulnerability exists in the way OpenImageIO v2.3.19.0 processes RLE encoded BMP images. A specially-crafted bmp file can write to arbitrary out of bounds memory, which can lead to arbitrary cod...Show more A heap out-of-bounds write vulnerability exists in the way OpenImageIO v2.3.19.0 processes RLE encoded BMP images. A specially-crafted bmp file can write to arbitrary out of bounds memory, which can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.Show less
CVE-2022-46885 1Mozilla 1Firefox Jun 17, 2026 Dec 22, 2022 N/A· v4 8.8 HIGH· v3 N/A· v2 Mozilla developers Timothy Nikkel, Ashley Hale, and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 105. Some of these bugs showed evidence of memory corruption and we presume that with enough eff...Show more Mozilla developers Timothy Nikkel, Ashley Hale, and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 105. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 106.Show less

Previous 1...344345346...744 Next