Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

CVEs (14,870)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-42169 1Tenda 1Ac10 Firmware Jun 17, 2026 Oct 17, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/addWifiMacFilter.
CVE-2022-42168 1Tenda 1Ac10 Firmware Jun 17, 2026 Oct 17, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/fromSetIpMacBind.
CVE-2022-42167 1Tenda 1Ac10 Firmware Jun 17, 2026 Oct 17, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formSetFirewallCfg.
CVE-2022-42166 1Tenda 1Ac10 Firmware Jun 17, 2026 Oct 17, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formSetSpeedWan.
CVE-2022-42165 1Tenda 1Ac10 Firmware Jun 17, 2026 Oct 17, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formSetDeviceName.
CVE-2022-42164 1Tenda 1Ac10 Firmware Jun 17, 2026 Oct 17, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formSetClientState.
CVE-2022-42163 1Tenda 1Ac10 Firmware Jun 17, 2026 Oct 17, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/fromNatStaticSetting.
CVE-2017-20149 1Mikrotik 1Routeros May 14, 2025 Oct 15, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 The Mikrotik RouterOS web server allows memory corruption in releases before Stable 6.38.5 and Long-term 6.37.5, aka Chimay-Red. A remote and unauthenticated user can trigger the vulnerability by sending a crafted HTTP r...Show more The Mikrotik RouterOS web server allows memory corruption in releases before Stable 6.38.5 and Long-term 6.37.5, aka Chimay-Red. A remote and unauthenticated user can trigger the vulnerability by sending a crafted HTTP request. An attacker can use this vulnerability to execute arbitrary code on the affected system, as exploited in the wild in mid-2017 and later.Show less
CVE-2022-42339 1Adobe 4Acrobat Acrobat DcAcrobat Reader+1 more Jun 17, 2026 Oct 14, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 Adobe Acrobat Reader versions 22.002.20212 (and earlier) and 20.005.30381 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the curr...Show more Adobe Acrobat Reader versions 22.002.20212 (and earlier) and 20.005.30381 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2022-38450 1Adobe 4Acrobat Acrobat DcAcrobat Reader+1 more Jun 17, 2026 Oct 14, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 Adobe Acrobat Reader versions 22.002.20212 (and earlier) and 20.005.30381 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the curr...Show more Adobe Acrobat Reader versions 22.002.20212 (and earlier) and 20.005.30381 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2022-35712 1Adobe 1Coldfusion Jun 17, 2026 Oct 14, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Ex...Show more Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction, the vulnerability is triggered when a crafted network packet is sent to the server.Show less
CVE-2022-35711 1Adobe 1Coldfusion Jun 17, 2026 Oct 14, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Ex...Show more Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction, the vulnerability is triggered when a crafted network packet is sent to the server.Show less
CVE-2022-35710 1Adobe 1Coldfusion Jun 17, 2026 Oct 14, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. E...Show more Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction, the vulnerability is triggered when a crafted network packet is sent to the server.Show less
CVE-2022-35690 1Adobe 1Coldfusion Jun 17, 2026 Oct 14, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. E...Show more Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction, the vulnerability is triggered when a crafted network packet is sent to the server.Show less
CVE-2022-39128 1Google 1Android Jun 17, 2026 Oct 14, 2022 N/A· v4 5.5 MEDIUM· v3 N/A· v2 In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.
CVE-2022-39127 1Google 1Android Jun 17, 2026 Oct 14, 2022 N/A· v4 5.5 MEDIUM· v3 N/A· v2 In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.
CVE-2022-39126 1Google 1Android Jun 17, 2026 Oct 14, 2022 N/A· v4 5.5 MEDIUM· v3 N/A· v2 In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.
CVE-2022-39125 1Google 1Android Jun 17, 2026 Oct 14, 2022 N/A· v4 5.5 MEDIUM· v3 N/A· v2 In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.
CVE-2022-39124 1Google 1Android Jun 17, 2026 Oct 14, 2022 N/A· v4 5.5 MEDIUM· v3 N/A· v2 In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.
CVE-2022-39123 1Google 1Android Jun 17, 2026 Oct 14, 2022 N/A· v4 5.5 MEDIUM· v3 N/A· v2 In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.

Previous 1...367368369...744 Next