Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

CVEs (15,502)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-3398 1Omron 1Cx Programmer Jun 17, 2026 Oct 6, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 OMRON CX-Programmer 9.78 and prior is vulnerable to an Out-of-Bounds Write, which may allow an attacker to execute arbitrary code.
CVE-2022-3397 1Omron 1Cx Programmer Jun 17, 2026 Oct 6, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 OMRON CX-Programmer 9.78 and prior is vulnerable to an Out-of-Bounds Write, which may allow an attacker to execute arbitrary code.
CVE-2022-3396 1Omron 1Cx Programmer Jun 17, 2026 Oct 6, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 OMRON CX-Programmer 9.78 and prior is vulnerable to an Out-of-Bounds Write, which may allow an attacker to execute arbitrary code.
CVE-2021-40556 1Asus 1Rt Ax56u Firmware Jun 17, 2026 Oct 6, 2022 N/A· v4 8.8 HIGH· v3 N/A· v2 A stack overflow vulnerability exists in the httpd service in ASUS RT-AX56U Router Version 3.0.0.4.386.44266. This vulnerability is caused by the strcat function called by "caupload" input handle function allowing the us...Show more A stack overflow vulnerability exists in the httpd service in ASUS RT-AX56U Router Version 3.0.0.4.386.44266. This vulnerability is caused by the strcat function called by "caupload" input handle function allowing the user to enter 0xFFFF bytes into the stack. This vulnerability allows an attacker to execute commands remotely. The vulnerability requires authentication.Show less
CVE-2022-41301 1Autodesk 1Subassembly Composer Jun 17, 2026 Oct 3, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 A maliciously crafted PKT file when consumed through SubassemblyComposer.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilitie...Show more A maliciously crafted PKT file when consumed through SubassemblyComposer.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.Show less
CVE-2022-33890 1Autodesk 11Autocad Autocad Advance SteelAutocad Architecture+8 more Jun 17, 2026 Oct 3, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 A maliciously crafted PCT or DWF file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilitie...Show more A maliciously crafted PCT or DWF file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.Show less
CVE-2022-33889 1Autodesk 11Autocad Autocad Advance SteelAutocad Architecture+8 more Jun 17, 2026 Oct 3, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 A maliciously crafted GIF or JPEG files when parsed through Autodesk Design Review 2018, and AutoCAD 2023 and 2022 could be used to write beyond the allocated heap buffer. This vulnerability could lead to arbitrary code...Show more A maliciously crafted GIF or JPEG files when parsed through Autodesk Design Review 2018, and AutoCAD 2023 and 2022 could be used to write beyond the allocated heap buffer. This vulnerability could lead to arbitrary code execution.Show less
CVE-2022-33888 1Autodesk 10Autocad Autocad Advance SteelAutocad Architecture+7 more Jun 17, 2026 Oct 3, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 A malicious crafted Dwg2Spd file when processed through Autodesk DWG application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could...Show more A malicious crafted Dwg2Spd file when processed through Autodesk DWG application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.Show less
CVE-2022-33885 1Autodesk 10Autocad Autocad Advance SteelAutocad Architecture+7 more Jun 17, 2026 Oct 3, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 A maliciously crafted X_B, CATIA, and PDF file when parsed through Autodesk AutoCAD 2023 and 2022 can be used to write beyond the allocated buffer. This vulnerability can lead to arbitrary code execution.
CVE-2022-33883 1Autodesk 4Advanced Material Exchange Moldflow AdviserMoldflow Communicator+1 more Jun 17, 2026 Oct 3, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 A malicious crafted file consumed through Moldflow Synergy, Moldflow Adviser, Moldflow Communicator, and Advanced Material Exchange applications could lead to memory corruption vulnerability. This vulnerability in conjun...Show more A malicious crafted file consumed through Moldflow Synergy, Moldflow Adviser, Moldflow Communicator, and Advanced Material Exchange applications could lead to memory corruption vulnerability. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.Show less
CVE-2022-41430 1Axiosys 1Bento4 Jun 17, 2026 Oct 3, 2022 N/A· v4 8.8 HIGH· v3 N/A· v2 Bento4 v1.6.0-639 was discovered to contain a heap overflow via the AP4_BitReader::ReadBit function in mp4mux.
CVE-2022-41429 1Axiosys 1Bento4 Jun 17, 2026 Oct 3, 2022 N/A· v4 8.8 HIGH· v3 N/A· v2 Bento4 v1.6.0-639 was discovered to contain a heap overflow via the AP4_Atom::TypeFromString function in mp4tag.
CVE-2022-41428 1Axiosys 1Bento4 Jun 17, 2026 Oct 3, 2022 N/A· v4 8.8 HIGH· v3 N/A· v2 Bento4 v1.6.0-639 was discovered to contain a heap overflow via the AP4_BitReader::ReadBits function in mp4mux.
CVE-2022-41420 1Nasm 1Netwide Assembler Jun 17, 2026 Oct 3, 2022 N/A· v4 5.5 MEDIUM· v3 N/A· v2 nasm v2.16 was discovered to contain a stack overflow in the Ndisasm component
CVE-2022-42002 1Sonicjs 1Sonicjs Jun 17, 2026 Oct 1, 2022 N/A· v4 9.1 CRITICAL· v3 N/A· v2 SonicJS through 0.6.0 allows file overwrite. It has the following mutations that are used for updating files: fileCreate and fileUpdate. Both of these mutations can be called without any authentication to overwrite any f...Show more SonicJS through 0.6.0 allows file overwrite. It has the following mutations that are used for updating files: fileCreate and fileUpdate. Both of these mutations can be called without any authentication to overwrite any files on a SonicJS application, leading to Arbitrary File Write and Delete.Show less
CVE-2022-20769 1Cisco 1Wireless Lan Controller Software Jun 17, 2026 Sep 30, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 A vulnerability in the authentication functionality of Cisco Wireless LAN Controller (WLC) AireOS Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected dev...Show more A vulnerability in the authentication functionality of Cisco Wireless LAN Controller (WLC) AireOS Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient error validation. An attacker could exploit this vulnerability by sending crafted packets to an affected device. A successful exploit could allow the attacker to cause the wireless LAN controller to crash, resulting in a DoS condition. Note: This vulnerability affects only devices that have Federal Information Processing Standards (FIPS) mode enabled.Show less
CVE-2022-41844 1Xpdfreader 1Xpdf Jun 17, 2026 Sep 30, 2022 N/A· v4 5.5 MEDIUM· v3 N/A· v2 An issue was discovered in Xpdf 4.04. There is a crash in XRef::fetch(int, int, Object*, int) in xpdf/XRef.cc, a different vulnerability than CVE-2018-16369 and CVE-2019-16088.
CVE-2022-41842 1Xpdfreader 1Xpdf Jun 17, 2026 Sep 30, 2022 N/A· v4 5.5 MEDIUM· v3 N/A· v2 An issue was discovered in Xpdf 4.04. There is a crash in gfseek(_IO_FILE*, long, int) in goo/gfile.cc.
CVE-2022-40363 1Flipperzero 1Flipper Zero Firmware Jun 17, 2026 Sep 29, 2022 N/A· v4 5.5 MEDIUM· v3 N/A· v2 A buffer overflow in the component nfc_device_load_mifare_ul_data of Flipper Devices Inc., Flipper Zero before v0.65.2 allows attackers to cause a Denial of Service (DoS) via a crafted NFC file.
CVE-2016-2338 2Debian Ruby Lang 2Debian Linux Ruby Nov 21, 2024 Sep 29, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 An exploitable heap overflow vulnerability exists in the Psych::Emitter start_document function of Ruby. In Psych::Emitter start_document function heap buffer "head" allocation is made based on tags array length. Special...Show more An exploitable heap overflow vulnerability exists in the Psych::Emitter start_document function of Ruby. In Psych::Emitter start_document function heap buffer "head" allocation is made based on tags array length. Specially constructed object passed as element of tags array can increase this array size after mentioned allocation and cause heap overflow.Show less

Previous 1...405406407...776 Next