Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

CVEs (14,870)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-40866 1Tenda 1W20e Firmware Jun 17, 2026 Sep 23, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Tenda W20E router V15.11.0.6 (US_W20EV4.0br_V15.11.0.6(1068_1546_841)_CN_TDC) contains a stack overflow vulnerability in the function formSetDebugCfg with request /goform/setDebugCfg/
CVE-2022-40861 1Tenda 1Ac18 Firmware Jun 17, 2026 Sep 23, 2022 N/A· v4 7.2 HIGH· v3 N/A· v2 Tenda AC18 router V15.03.05.19 contains a stack overflow vulnerability in the formSetQosBand->FUN_0007db78 function with the request /goform/SetNetControlList/
CVE-2022-40855 1Tenda 1W20e Firmware Jun 17, 2026 Sep 23, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Tenda W20E router V15.11.0.6 contains a stack overflow in the function formSetPortMapping with post request 'goform/setPortMapping/'. This vulnerability allows attackers to cause a Denial of Service (DoS) or Remote Code...Show more Tenda W20E router V15.11.0.6 contains a stack overflow in the function formSetPortMapping with post request 'goform/setPortMapping/'. This vulnerability allows attackers to cause a Denial of Service (DoS) or Remote Code Execution (RCE) via the portMappingServer, portMappingProtocol, portMappingWan, porMappingtInternal, and portMappingExternal parameters.Show less
CVE-2022-40854 1Tenda 1Ac18 Firmware Jun 17, 2026 Sep 23, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Tenda AC18 router contained a stack overflow vulnerability in /goform/fast_setting_wifi_set
CVE-2022-40851 1Tenda 1Ac15 Firmware Jun 17, 2026 Sep 23, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Tenda AC15 V15.03.05.19 contained a stack overflow via the function fromAddressNat.
CVE-2022-40869 1Tendacn 2Ac15 Firmware Ac18 Firmware Jun 17, 2026 Sep 23, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Tenda AC15 and AC18 routers V15.03.05.19 contain stack overflow vulnerabilities in the function fromDhcpListClient with a combined parameter "list*" ("%s%d","list").
CVE-2022-40865 1Tendacn 2Ac15 Firmware Ac18 Firmware Jun 17, 2026 Sep 23, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Tenda AC15 and AC18 routers V15.03.05.19 contain heap overflow vulnerabilities in the function setSchedWifi with the request /goform/openSchedWifi/
CVE-2022-40864 1Tendacn 2Ac15 Firmware Ac18 Firmware Jun 17, 2026 Sep 23, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Tenda AC15 and AC18 routers V15.03.05.19 contain stack overflow vulnerabilities in the function setSmartPowerManagement with the request /goform/PowerSaveSet
CVE-2022-40862 1Tendacn 2Ac15 Firmware Ac18 Firmware Jun 17, 2026 Sep 23, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Tenda AC15 and AC18 router V15.03.05.19 contains stack overflow vulnerability in the function fromNatStaticSetting with the request /goform/NatStaticSetting
CVE-2022-40860 1Tendacn 1Ac15 Firmware Jun 17, 2026 Sep 23, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Tenda AC15 router V15.03.05.19 contains a stack overflow vulnerability in the function formSetQosBand->FUN_0007dd20 with request /goform/SetNetControlList
CVE-2022-40853 1Tendacn 1Ac15 Firmware Jun 17, 2026 Sep 23, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Tenda AC15 router V15.03.05.19 contains a stack overflow via the list parameter at /goform/fast_setting_wifi_set
CVE-2022-2347 1Denx 1U Boot Jun 17, 2026 Sep 23, 2022 N/A· v4 7.1 HIGH· v3 N/A· v2 There exists an unchecked length field in UBoot. The U-Boot DFU implementation does not bound the length field in USB DFU download setup packets, and it does not verify that the transfer direction corresponds to the spec...Show more There exists an unchecked length field in UBoot. The U-Boot DFU implementation does not bound the length field in USB DFU download setup packets, and it does not verify that the transfer direction corresponds to the specified command. Consequently, if a physical attacker crafts a USB DFU download setup packet with a `wLength` greater than 4096 bytes, they can write beyond the heap-allocated request buffer.Show less
CVE-2022-37235 1Netgear 1R7000 Firmware Jun 17, 2026 Sep 23, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Netgear Nighthawk AC1900 Smart WiFi Dual Band Gigabit Router R7000-V1.0.11.134_10.2.119 is vulnerable to Buffer Overflow via the wl binary in firmware. There is a stack overflow vulnerability caused by strncat
CVE-2022-37232 1Netgear 1Wnr2000v4 Firmware Jun 17, 2026 Sep 23, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Netgear N300 wireless router wnr2000v4-V1.0.0.70 is vulnerable to Buffer Overflow via uhttpd. There is a stack overflow vulnerability caused by strcpy.
CVE-2022-30426 1Acer 34Altos T110 F3 Firmware Ap130 F2 FirmwareAspire 1600x Firmware+31 more Jul 9, 2026 Sep 23, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 There is a stack buffer overflow vulnerability, which could lead to arbitrary code execution in UEFI DXE driver on some Acer products. An attack could exploit this vulnerability to escalate privilege from ring 3 to ring...Show more There is a stack buffer overflow vulnerability, which could lead to arbitrary code execution in UEFI DXE driver on some Acer products. An attack could exploit this vulnerability to escalate privilege from ring 3 to ring 0, and hijack control flow during UEFI DXE execution. This affects Altos T110 F3 firmware version <= P13 (latest) and AP130 F2 firmware version <= P04 (latest) and Aspire 1600X firmware version <= P11.A3L (latest) and Aspire 1602M firmware version <= P11.A3L (latest) and Aspire 7600U firmware version <= P11.A4 (latest) and Aspire MC605 firmware version <= P11.A4L (latest) and Aspire TC-105 firmware version <= P12.B0L (latest) and Aspire TC-120 firmware version <= P11-A4 (latest) and Aspire U5-620 firmware version <= P11.A1 (latest) and Aspire X1935 firmware version <= P11.A3L (latest) and Aspire X3475 firmware version <= P11.A3L (latest) and Aspire X3995 firmware version <= P11.A3L (latest) and Aspire XC100 firmware version <= P11.B3 (latest) and Aspire XC600 firmware version <= P11.A4 (latest) and Aspire Z3-615 firmware version <= P11.A2L (latest) and Veriton E430G firmware version <= P21.A1 (latest) and Veriton B630_49 firmware version <= AAP02SR (latest) and Veriton E430 firmware version <= P11.A4 (latest) and Veriton M2110G firmware version <= P21.A3 (latest) and Veriton M2120G fir.Show less
CVE-2022-31937 1Netgear 1Wnr2000v4 Firmware Jun 17, 2026 Sep 22, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Netgear N300 wireless router wnr2000v4-V1.0.0.70 was discovered to contain a stack overflow via strcpy in uhttpd.
CVE-2022-37234 1Netgear 1R7000 Firmware Jun 17, 2026 Sep 22, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 Netgear Nighthawk AC1900 Smart WiFi Dual Band Gigabit Router R7000-V1.0.11.134_10.2.119 is vulnerable to Buffer Overflow via the wl binary in firmware. There is a stack overflow vulnerability caused by strncpy.
CVE-2022-35039 1Otfcc Project 1Otfcc Jun 17, 2026 Sep 22, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6e20a0.
CVE-2022-35038 1Otfcc Project 1Otfcc Jun 17, 2026 Sep 22, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b064d.
CVE-2022-35037 1Otfcc Project 1Otfcc Jun 17, 2026 Sep 22, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6adb1e.

Previous 1...377378379...744 Next