Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

CVEs (15,502)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-20630 1Google 1Android Jun 17, 2026 Mar 7, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In usb, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Pa...Show more In usb, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628505; Issue ID: ALPS07628505.Show less
CVE-2023-20626 1Google 1Android Jun 17, 2026 Mar 7, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In msdc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...Show more In msdc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07405223; Issue ID: ALPS07405223.Show less
CVE-2023-0330 2Debian Qemu 2Debian Linux Qemu Jun 17, 2026 Mar 6, 2023 N/A· v4 6.0 MEDIUM· v3 N/A· v2 A vulnerability in the lsi53c895a device affects the latest version of qemu. A DMA-MMIO reentrancy problem may lead to memory corruption bugs like stack overflow or use-after-free.
CVE-2023-27566 1Live2d 1Cubism Editor Jun 17, 2026 Mar 3, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Cubism Core in Live2D Cubism Editor 4.2.03 allows out-of-bounds write via a crafted Section Offset Table or Count Info Table in an MOC3 file.
CVE-2023-20079 1Cisco 21Ip Phone 6825 Firmware Ip Phone 6841 FirmwareIp Phone 6851 Firmware+18 more Jun 17, 2026 Mar 3, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Multiple vulnerabilities in the web-based management interface of certain Cisco IP Phones could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition. For more i...Show more Multiple vulnerabilities in the web-based management interface of certain Cisco IP Phones could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition. For more information about these vulnerabilities, see the Details section of this advisory.Show less
CVE-2023-20078 1Cisco 17Ip Phone 6825 Firmware Ip Phone 6841 FirmwareIp Phone 6851 Firmware+14 more Jun 17, 2026 Mar 3, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Multiple vulnerabilities in the web-based management interface of certain Cisco IP Phones could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition. For more i...Show more Multiple vulnerabilities in the web-based management interface of certain Cisco IP Phones could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition. For more information about these vulnerabilities, see the Details section of this advisory.Show less
CVE-2022-47665 1Struktur 1Libde265 Jun 17, 2026 Mar 3, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Libde265 1.0.9 has a heap buffer overflow vulnerability in de265_image::set_SliceAddrRS(int, int, int)
CVE-2023-0656 1Sonicwall 1Sonicos Jun 17, 2026 Mar 2, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 A Stack-based buffer overflow vulnerability in the SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS), which could cause an impacted firewall to crash.
CVE-2023-26470 1Xwiki 1Xwiki Jun 17, 2026 Mar 2, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible to make the farm unusable by adding an object to a page with a huge number (e.g. 67108863). Most of t...Show more XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible to make the farm unusable by adding an object to a page with a huge number (e.g. 67108863). Most of the time this will fill the memory allocated to XWiki and make it unusable every time this document is manipulated. This issue has been patched in XWiki 14.0-rc-1. Show less
CVE-2023-24127 1Heimgardtechnologies 1Eagle 1200ac Firmware Jul 9, 2026 Mar 1, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wepkey1 parameter at /goform/WifiBasicSet.
CVE-2023-24126 1Heimgardtechnologies 1Eagle 1200ac Firmware Jul 9, 2026 Mar 1, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wepkey4_5g parameter at /goform/WifiBasicSet.
CVE-2023-24125 1Heimgardtechnologies 1Eagle 1200ac Firmware Jul 9, 2026 Mar 1, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wepkey2_5g parameter at /goform/WifiBasicSet.
CVE-2023-24124 1Heimgardtechnologies 1Eagle 1200ac Firmware Jul 9, 2026 Mar 1, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wrlEn parameter at /goform/WifiBasicSet.
CVE-2023-24123 1Heimgardtechnologies 1Eagle 1200ac Firmware Jul 9, 2026 Mar 1, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wepauth parameter at /goform/WifiBasicSet.
CVE-2023-24122 1Heimgardtechnologies 1Eagle 1200ac Firmware Jul 9, 2026 Mar 1, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the ssid_5g parameter at /goform/WifiBasicSet.
CVE-2023-24121 1Heimgardtechnologies 1Eagle 1200ac Firmware Jul 9, 2026 Mar 1, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the security_5g parameter at /goform/WifiBasicSet.
CVE-2023-24120 1Heimgardtechnologies 1Eagle 1200ac Firmware Jul 9, 2026 Mar 1, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wrlEn_5g parameter at /goform/WifiBasicSet.
CVE-2023-24119 1Heimgardtechnologies 1Eagle 1200ac Firmware Jul 9, 2026 Mar 1, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the ssid parameter at /goform/WifiBasicSet.
CVE-2023-24118 1Heimgardtechnologies 1Eagle 1200ac Firmware Jul 9, 2026 Mar 1, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the security parameter at /goform/WifiBasicSet.
CVE-2023-24117 1Heimgardtechnologies 1Eagle 1200ac Firmware Jul 9, 2026 Mar 1, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wepauth_5g parameter at /goform/WifiBasicSet.

Previous 1...357358359...776 Next