Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

CVEs (14,869)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-34605 1H3c 1Magic R200 Firmware Jun 17, 2026 Jul 20, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the HOST parameter at /dotrace.asp.
CVE-2022-34604 1H3c 1Magic R200 Firmware Jun 17, 2026 Jul 20, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the INTF parameter at /dotrace.asp.
CVE-2022-34603 1H3c 1Magic R200 Firmware Jun 17, 2026 Jul 20, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the DelDNSHnList interface at /goform/aspForm.
CVE-2022-34602 1H3c 1Magic R200 Firmware Jun 17, 2026 Jul 20, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the ipqos_lanip_editlist interface at /goform/aspForm.
CVE-2022-34601 1H3c 1Magic R200 Firmware Jun 17, 2026 Jul 20, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the Delstlist interface at /goform/aspForm.
CVE-2022-34600 1H3c 1Magic R200 Firmware Jun 17, 2026 Jul 20, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the EditSTList interface at /goform/aspForm.
CVE-2022-34599 1H3c 1Magic R200 Firmware Jun 17, 2026 Jul 20, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the EdittriggerList interface at /goform/aspForm.
CVE-2022-33967 1Denx 1U Boot Jun 17, 2026 Jul 20, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 squashfs filesystem implementation of U-Boot versions from v2020.10-rc2 to v2022.07-rc5 contains a heap-based buffer overflow vulnerability due to a defect in the metadata reading process. Loading a specially crafted squ...Show more squashfs filesystem implementation of U-Boot versions from v2020.10-rc2 to v2022.07-rc5 contains a heap-based buffer overflow vulnerability due to a defect in the metadata reading process. Loading a specially crafted squashfs image may lead to a denial-of-service (DoS) condition or arbitrary code execution.Show less
CVE-2022-32961 1Hinet 1Hicos Natural Person Credential Component Client Jun 17, 2026 Jul 20, 2022 N/A· v4 6.8 MEDIUM· v3 N/A· v2 HICOS’ client-side citizen digital certificate component has a stack-based buffer overflow vulnerability when reading IC card due to insufficient parameter length validation for token information. An unauthenticated phys...Show more HICOS’ client-side citizen digital certificate component has a stack-based buffer overflow vulnerability when reading IC card due to insufficient parameter length validation for token information. An unauthenticated physical attacker can exploit this vulnerability to execute arbitrary code, manipulate system data or terminate service.Show less
CVE-2022-32960 1Hinet 1Hicos Natural Person Credential Component Client Jun 17, 2026 Jul 20, 2022 N/A· v4 6.8 MEDIUM· v3 N/A· v2 HiCOS’ client-side citizen digital certificate component has a stack-based buffer overflow vulnerability when reading IC card due to insufficient parameter length validation for card number. An unauthenticated physical a...Show more HiCOS’ client-side citizen digital certificate component has a stack-based buffer overflow vulnerability when reading IC card due to insufficient parameter length validation for card number. An unauthenticated physical attacker can exploit this vulnerability to execute arbitrary code, manipulate system data or terminate service.Show less
CVE-2022-32959 1Hinet 1Hicos Natural Person Credential Component Client Jun 17, 2026 Jul 20, 2022 N/A· v4 6.8 MEDIUM· v3 N/A· v2 HiCOS’ client-side citizen digital certificate component has a stack-based buffer overflow vulnerability when reading IC card due to insufficient parameter length validation for OS information. An unauthenticated physica...Show more HiCOS’ client-side citizen digital certificate component has a stack-based buffer overflow vulnerability when reading IC card due to insufficient parameter length validation for OS information. An unauthenticated physical attacker can exploit this vulnerability to execute arbitrary code, manipulate system data or terminate service.Show less
CVE-2022-31144 1Redis 1Redis Jun 17, 2026 Jul 19, 2022 N/A· v4 8.8 HIGH· v3 N/A· v2 Redis is an in-memory database that persists on disk. A specially crafted `XAUTOCLAIM` command on a stream key in a specific state may result with heap overflow, and potentially remote code execution. This problem affect...Show more Redis is an in-memory database that persists on disk. A specially crafted `XAUTOCLAIM` command on a stream key in a specific state may result with heap overflow, and potentially remote code execution. This problem affects versions on the 7.x branch prior to 7.0.4. The patch is released in version 7.0.4.Show less
CVE-2022-2122 3Debian GstreamerGstreamer Project 3Debian Linux GstreamerGstreamer Jun 17, 2026 Jul 19, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 DOS / potential heap overwrite in qtdemux using zlib decompression. Integer overflow in qtdemux element in qtdemux_inflate function which causes a segfault, or could cause a heap overwrite, depending on libc and OS. Depe...Show more DOS / potential heap overwrite in qtdemux using zlib decompression. Integer overflow in qtdemux element in qtdemux_inflate function which causes a segfault, or could cause a heap overwrite, depending on libc and OS. Depending on the libc used, and the underlying OS capabilities, it could be just a segfault or a heap overwrite.Show less
CVE-2022-1920 3Debian GstreamerGstreamer Project 3Debian Linux GstreamerGstreamer Jun 17, 2026 Jul 19, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 Integer overflow in matroskademux element in gst_matroska_demux_add_wvpk_header function which allows a heap overwrite while parsing matroska files. Potential for arbitrary code execution through heap overwrite.
CVE-2022-34035 1Htmldoc Project 1Htmldoc Jun 17, 2026 Jul 18, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 HTMLDoc v1.9.12 and below was discovered to contain a heap overflow via e_node htmldoc/htmldoc/html.cxx:588.
CVE-2022-34033 1Htmldoc Project 1Htmldoc Jun 17, 2026 Jul 18, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 HTMLDoc v1.9.15 was discovered to contain a heap overflow via (write_header) /htmldoc/htmldoc/html.cxx:273.
CVE-2022-23745 1Checkpoint 1Capsule Workspace Jun 17, 2026 Jul 18, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 A potential memory corruption issue was found in Capsule Workspace Android app (running on GrapheneOS). This could result in application crashing but could not be used to gather any sensitive information.
CVE-2021-44170 1Fortinet 2Fortios Fortiproxy Jun 17, 2026 Jul 18, 2022 N/A· v4 6.7 MEDIUM· v3 N/A· v2 A stack-based buffer overflow vulnerability [CWE-121] in the command line interpreter of FortiOS before 7.0.4 and FortiProxy before 2.0.8 may allow an authenticated attacker to execute unauthorized code or commands via s...Show more A stack-based buffer overflow vulnerability [CWE-121] in the command line interpreter of FortiOS before 7.0.4 and FortiProxy before 2.0.8 may allow an authenticated attacker to execute unauthorized code or commands via specially crafted command line arguments.Show less
CVE-2021-33656 3Debian LinuxOpenatom 3Debian Linux Linux KernelOpeneuler Jun 17, 2026 Jul 18, 2022 N/A· v4 6.8 MEDIUM· v3 N/A· v2 When setting font with malicous data by ioctl cmd PIO_FONT,kernel will write memory out of bounds.
CVE-2021-33655 2Debian Linux 2Debian Linux Linux Kernel Jun 17, 2026 Jul 18, 2022 N/A· v4 6.7 MEDIUM· v3 N/A· v2 When sending malicous data to kernel by ioctl cmd FBIOPUT_VSCREENINFO,kernel will write memory out of bounds.

Previous 1...403404405...744 Next