Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

CVEs (14,870)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-38413 1Adobe 1Indesign Jun 17, 2026 Sep 16, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitatio...Show more Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2022-38405 1Adobe 1Incopy Jun 17, 2026 Sep 16, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 Adobe InCopy version 17.3 (and earlier) and 16.4.2 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation o...Show more Adobe InCopy version 17.3 (and earlier) and 16.4.2 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2022-38404 1Adobe 1Incopy Jun 17, 2026 Sep 16, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 Adobe InCopy version 17.3 (and earlier) and 16.4.2 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation o...Show more Adobe InCopy version 17.3 (and earlier) and 16.4.2 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2022-38401 1Adobe 1Incopy Jun 17, 2026 Sep 16, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 Adobe InCopy version 17.3 (and earlier) and 16.4.2 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation o...Show more Adobe InCopy version 17.3 (and earlier) and 16.4.2 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2022-35713 1Adobe 1Photoshop Jun 17, 2026 Sep 16, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 Adobe Photoshop versions 22.5.8 (and earlier) and 23.4.2 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation o...Show more Adobe Photoshop versions 22.5.8 (and earlier) and 23.4.2 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2022-28853 1Adobe 1Indesign Jun 17, 2026 Sep 16, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of t...Show more Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2022-28852 1Adobe 1Indesign Jun 17, 2026 Sep 16, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation o...Show more Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2020-36601 1Huawei 2Emui Magic Ui Jun 17, 2026 Sep 16, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 Out-of-bounds write vulnerability in the kernel modules. Successful exploitation of this vulnerability may cause a panic reboot.
CVE-2020-36600 1Huawei 2Emui Magic Ui Jun 17, 2026 Sep 16, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 Out-of-bounds write vulnerability in the power consumption module. Successful exploitation of this vulnerability may cause the system to restart.
CVE-2022-38411 1Adobe 1Animate Jun 17, 2026 Sep 16, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 Adobe Animate version 21.0.11 (and earlier) and 22.0.7 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitati...Show more Adobe Animate version 21.0.11 (and earlier) and 22.0.7 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2022-40152 2Fasterxml Xstream 2Woodstox Xstream Jun 17, 2026 Sep 16, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 Those using Woodstox to parse XML data may be vulnerable to Denial of Service attacks (DOS) if DTD support is enabled. If the parser is running on user supplied input, an attacker may supply content that causes the parse...Show more Those using Woodstox to parse XML data may be vulnerable to Denial of Service attacks (DOS) if DTD support is enabled. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may support a denial of service attack.Show less
CVE-2022-40151 1Xstream 1Xstream Jun 17, 2026 Sep 16, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 Those using Xstream to seralize XML data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverf...Show more Those using Xstream to seralize XML data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may support a denial of service attack.Show less
CVE-2022-40149 2Debian Jettison Project 2Debian Linux Jettison Jun 17, 2026 Sep 16, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 Those using Jettison to parse untrusted XML or JSON data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to cra...Show more Those using Jettison to parse untrusted XML or JSON data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may support a denial of service attack.Show less
CVE-2022-25654 1Qualcomm 21Apq8096au Firmware Mdm9650 FirmwareQca6174a Firmware+18 more Jun 17, 2026 Sep 16, 2022 N/A· v4 6.7 MEDIUM· v3 N/A· v2 Memory corruption in kernel due to improper input validation while processing ION commands in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables
CVE-2020-23560 1Irfanview 1Irfanview Jun 17, 2026 Sep 16, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x000000000001bcab.
CVE-2020-23559 1Irfanview 1Irfanview Jun 17, 2026 Sep 16, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x0000000000007d7f.
CVE-2020-23558 1Irfanview 1Irfanview Jun 17, 2026 Sep 16, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x0000000000007f4b.
CVE-2020-23557 1Irfanview 1Irfanview Jun 17, 2026 Sep 16, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x000000000000755d.
CVE-2020-23556 1Irfanview 1Irfanview Jun 17, 2026 Sep 16, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e28.
CVE-2020-23555 1Irfanview 1Irfanview Jun 17, 2026 Sep 16, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e6e.

Previous 1...381382383...744 Next