Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

CVEs (15,502)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-48354 1Huawei 2Emui Harmonyos Jun 17, 2026 Mar 27, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 The Bluetooth module has a heap out-of-bounds write vulnerability. Successful exploitation of this vulnerability can cause the Bluetooth process to crash.
CVE-2023-25874 1Adobe 1Substance 3d Stager Jun 17, 2026 Mar 27, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Adobe Substance 3D Stager versions 2.0.0 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this iss...Show more Adobe Substance 3D Stager versions 2.0.0 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2023-25872 1Adobe 1Substance 3d Stager Jun 17, 2026 Mar 27, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Adobe Substance 3D Stager versions 2.0.0 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this iss...Show more Adobe Substance 3D Stager versions 2.0.0 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2023-25870 1Adobe 1Substance 3d Stager Jun 17, 2026 Mar 27, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Adobe Substance 3D Stager versions 2.0.0 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue req...Show more Adobe Substance 3D Stager versions 2.0.0 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2023-25868 1Adobe 1Substance 3d Stager Jun 17, 2026 Mar 27, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Adobe Substance 3D Stager versions 2.0.0 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this iss...Show more Adobe Substance 3D Stager versions 2.0.0 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2023-25866 1Adobe 1Substance 3d Stager Jun 17, 2026 Mar 27, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Adobe Substance 3D Stager versions 2.0.0 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue req...Show more Adobe Substance 3D Stager versions 2.0.0 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2023-25864 1Adobe 1Substance 3d Stager Jun 17, 2026 Mar 27, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Adobe Substance 3D Stager versions 2.0.0 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this iss...Show more Adobe Substance 3D Stager versions 2.0.0 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2023-1078 1Linux 1Linux Kernel Jun 17, 2026 Mar 27, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 A flaw was found in the Linux Kernel in RDS (Reliable Datagram Sockets) protocol. The rds_rm_zerocopy_callback() uses list_entry() on the head of a list causing a type confusion. Local user can trigger this with rds_mess...Show more A flaw was found in the Linux Kernel in RDS (Reliable Datagram Sockets) protocol. The rds_rm_zerocopy_callback() uses list_entry() on the head of a list causing a type confusion. Local user can trigger this with rds_message_put(). Type confusion leads to `struct rds_msg_zcopy_info *info` actually points to something else that is potentially controlled by local user. It is known how to trigger this, which causes an out of bounds access, and a lock corruption.Show less
CVE-2023-1073 3Fedoraproject LinuxRedhat 3Enterprise Linux FedoraLinux Kernel Jun 17, 2026 Mar 27, 2023 N/A· v4 6.6 MEDIUM· v3 N/A· v2 A memory corruption flaw was found in the Linux kernel’s human interface device (HID) subsystem in how a user inserts a malicious USB device. This flaw allows a local user to crash or potentially escalate their privilege...Show more A memory corruption flaw was found in the Linux kernel’s human interface device (HID) subsystem in how a user inserts a malicious USB device. This flaw allows a local user to crash or potentially escalate their privileges on the system.Show less
CVE-2023-24094 1Mikrotik 1Routeros Jul 9, 2026 Mar 27, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 An issue in the bridge2 component of MikroTik RouterOS v6.40.5 allows attackers to cause a Denial of Service (DoS) via crafted packets.
CVE-2023-28885 1Gm 1Mylink Infotainment System Jun 17, 2026 Mar 27, 2023 N/A· v4 6.8 MEDIUM· v3 N/A· v2 The MyLink infotainment system (build 2021.3.26) in General Motors Chevrolet Equinox 2021 vehicles allows attackers to cause a denial of service (temporary failure of Media Player functionality) via a crafted MP3 file.
CVE-2023-1646 1Iobit 1Malware Fighter Jun 17, 2026 Mar 26, 2023 N/A· v4 7.8 HIGH· v3 4.3 MEDIUM· v2 A vulnerability was found in IObit Malware Fighter 9.4.0.776. It has been declared as critical. This vulnerability affects the function 0x8018E000/0x8018E004 in the library IMFCameraProtect.sys of the component IOCTL Han...Show more A vulnerability was found in IObit Malware Fighter 9.4.0.776. It has been declared as critical. This vulnerability affects the function 0x8018E000/0x8018E004 in the library IMFCameraProtect.sys of the component IOCTL Handler. The manipulation leads to stack-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. VDB-224026 is the identifier assigned to this vulnerability.Show less
CVE-2023-25671 1Google 1Tensorflow Jun 17, 2026 Mar 25, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 TensorFlow is an open source platform for machine learning. There is out-of-bounds access due to mismatched integer type sizes. A fix is included in TensorFlow version 2.12.0 and version 2.11.1.
CVE-2023-27042 1Tenda 1Ax3 Firmware Jun 17, 2026 Mar 24, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Tenda AX3 V16.03.12.11 is vulnerable to Buffer Overflow via /goform/SetFirewallCfg.
CVE-2023-21079 1Google 1Android Jun 17, 2026 Mar 24, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In rtt_unpack_xtlv_cbfn of dhd_rtt.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is n...Show more In rtt_unpack_xtlv_cbfn of dhd_rtt.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-254839721References: N/AShow less
CVE-2023-21078 1Google 1Android Jun 17, 2026 Mar 24, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In rtt_unpack_xtlv_cbfn of dhd_rtt.c, there is a possible out of bounds write due to a buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not ne...Show more In rtt_unpack_xtlv_cbfn of dhd_rtt.c, there is a possible out of bounds write due to a buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-254840211References: N/AShow less
CVE-2023-21077 1Google 1Android Jun 17, 2026 Mar 24, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In rtt_unpack_xtlv_cbfn of dhd_rtt.c, there is a possible out of bounds write due to a buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not ne...Show more In rtt_unpack_xtlv_cbfn of dhd_rtt.c, there is a possible out of bounds write due to a buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-257289560References: N/AShow less
CVE-2023-21076 1Google 1Android Jun 17, 2026 Mar 24, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In createTransmitFollowupRequest of nan.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interacti...Show more In createTransmitFollowupRequest of nan.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-261857623References: N/AShow less
CVE-2023-21075 1Google 1Android Jun 17, 2026 Mar 24, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In get_svc_hash of nan.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed...Show more In get_svc_hash of nan.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-261857862References: N/AShow less
CVE-2023-21073 1Google 1Android Jun 17, 2026 Mar 24, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In rtt_unpack_xtlv_cbfn of dhd_rtt.c, there is a possible out of bounds write due to a buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not ne...Show more In rtt_unpack_xtlv_cbfn of dhd_rtt.c, there is a possible out of bounds write due to a buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-257290396References: N/AShow less

Previous 1...352353354...776 Next