Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

CVEs (14,869)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-26439 1Mediatek 13Mt7603 Firmware Mt7610 FirmwareMt7612 Firmware+10 more Jun 17, 2026 Aug 1, 2022 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploita...Show more In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220420020; Issue ID: GN20220420020.Show less
CVE-2022-26438 1Mediatek 13Mt7603 Firmware Mt7610 FirmwareMt7612 Firmware+10 more Jun 17, 2026 Aug 1, 2022 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploita...Show more In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220420013; Issue ID: GN20220420013.Show less
CVE-2022-26435 2Google Yoctoproject 2Android Yocto Jun 17, 2026 Aug 1, 2022 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In mailbox, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch...Show more In mailbox, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07138435; Issue ID: ALPS07138435.Show less
CVE-2022-26434 2Google Yoctoproject 2Android Yocto Jun 17, 2026 Aug 1, 2022 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In mailbox, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...Show more In mailbox, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07138450; Issue ID: ALPS07138450.Show less
CVE-2022-26432 2Google Yoctoproject 2Android Yocto Jun 17, 2026 Aug 1, 2022 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In mailbox, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...Show more In mailbox, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07032542; Issue ID: ALPS07032542.Show less
CVE-2022-26431 2Google Yoctoproject 2Android Yocto Jun 17, 2026 Aug 1, 2022 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In mailbox, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...Show more In mailbox, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07032553; Issue ID: ALPS07032553.Show less
CVE-2022-26430 2Google Yoctoproject 2Android Yocto Jun 17, 2026 Aug 1, 2022 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In mailbox, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch...Show more In mailbox, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07032521; Issue ID: ALPS07032521.Show less
CVE-2022-26427 1Google 1Android Jun 17, 2026 Aug 1, 2022 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In camera isp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitat...Show more In camera isp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07085540; Issue ID: ALPS07085540.Show less
CVE-2022-26426 1Google 1Android Jun 17, 2026 Aug 1, 2022 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In camera isp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitat...Show more In camera isp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07085486; Issue ID: ALPS07085486.Show less
CVE-2022-21792 1Google 1Android Jun 17, 2026 Aug 1, 2022 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In camera isp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitat...Show more In camera isp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07085410; Issue ID: ALPS07085410.Show less
CVE-2022-34528 1Dlink 1Dsl 3782 Firmware Jun 17, 2026 Jul 29, 2022 N/A· v4 8.8 HIGH· v3 N/A· v2 D-Link DSL-3782 v1.03 and below was discovered to contain a stack overflow via the function getAttrValue.
CVE-2022-34526 4Debian FedoraprojectLibtiff+1 more 5Active Iq Unified Manager Debian LinuxFedora+2 more Jun 17, 2026 Jul 29, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 A stack overflow was discovered in the _TIFFVGetField function of Tiffsplit v4.4.0. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted TIFF file parsed by the "tiffsplit" or "tiffcrop" u...Show more A stack overflow was discovered in the _TIFFVGetField function of Tiffsplit v4.4.0. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted TIFF file parsed by the "tiffsplit" or "tiffcrop" utilities.Show less
CVE-2022-27865 1Autodesk 1Design Review Jun 17, 2026 Jul 29, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 A maliciously crafted TGA or PCX file may be used to write beyond the allocated buffer through DesignReview.exe application while parsing TGA and PCX files. This vulnerability may be exploited to execute arbitrary code.
CVE-2022-36752 1Png2webp Project 1Png2webp Jun 17, 2026 Jul 28, 2022 N/A· v4 5.5 MEDIUM· v3 N/A· v2 png2webp v1.0.4 was discovered to contain an out-of-bounds write via the function w2p. This vulnerability is exploitable via a crafted png file.
CVE-2022-31627 1Php 1Php Jun 17, 2026 Jul 28, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 In PHP versions 8.1.x below 8.1.8, when fileinfo functions, such as finfo_buffer, due to incorrect patch applied to the third party code from libmagic, incorrect function may be used to free allocated memory, which may l...Show more In PHP versions 8.1.x below 8.1.8, when fileinfo functions, such as finfo_buffer, due to incorrect patch applied to the third party code from libmagic, incorrect function may be used to free allocated memory, which may lead to heap corruption.Show less
CVE-2022-2294 6Apple FedoraprojectGoogle+3 more 12Chrome Extra Packages For Enterprise LinuxFedora+9 more Aug 4, 2026 Jul 28, 2022 N/A· v4 8.8 HIGH· v3 N/A· v2 Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2022-36998 1Veritas 4Flex Appliance Flex ScaleNetbackup+1 more Jun 17, 2026 Jul 28, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a Ne...Show more An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup Client could remotely trigger a stack-based buffer overflow on the NetBackup Primary server, resulting in a denial of service.Show less
CVE-2022-2415 1Google 1Chrome Jun 17, 2026 Jul 28, 2022 N/A· v4 8.8 HIGH· v3 N/A· v2 Heap buffer overflow in WebGL in Google Chrome prior to 103.0.5060.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2022-1876 1Google 1Chrome Jun 17, 2026 Jul 27, 2022 N/A· v4 8.8 HIGH· v3 N/A· v2 Heap buffer overflow in DevTools in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.
CVE-2022-1638 1Google 1Chrome Jun 17, 2026 Jul 26, 2022 N/A· v4 8.8 HIGH· v3 N/A· v2 Heap buffer overflow in V8 Internationalization in Google Chrome prior to 101.0.4951.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Previous 1...401402403...744 Next