Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

CVEs (15,523)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-40246 1Intel 2Nuc M15 Laptop Kit Lapbc510 Firmware Nuc M15 Laptop Kit Lapbc710 Firmware Jun 17, 2026 Sep 20, 2022 N/A· v4 7.2 HIGH· v3 N/A· v2 A potential attacker can write one byte by arbitrary address at the time of the PEI phase (only during S3 resume boot mode) and influence the subsequent boot stages. This can lead to the mitigations bypassing, physical m...Show more A potential attacker can write one byte by arbitrary address at the time of the PEI phase (only during S3 resume boot mode) and influence the subsequent boot stages. This can lead to the mitigations bypassing, physical memory contents disclosure, discovery of any secrets from any Virtual Machines (VMs) and bypassing memory isolation and confidential computing boundaries. Additionally, an attacker can build a payload which can be injected into the SMRAM memory. This issue affects: Module name: SbPei SHA256: d827182e5f9b7a9ff0b9d3e232f7cfac43b5237e2681e11f005be627a49283a9 Module GUID: c1fbd624-27ea-40d1-aa48-94c3dc5c7e0dShow less
CVE-2022-26873 2Ami Intel 3Aptio V Nuc M15 Laptop Kit Lapbc510 FirmwareNuc M15 Laptop Kit Lapbc710 Firmware Jun 17, 2026 Sep 20, 2022 N/A· v4 8.2 HIGH· v3 N/A· v2 A potential attacker can execute an arbitrary code at the time of the PEI phase and influence the subsequent boot stages. This can lead to the mitigations bypassing, physical memory contents disclosure, discovery of any...Show more A potential attacker can execute an arbitrary code at the time of the PEI phase and influence the subsequent boot stages. This can lead to the mitigations bypassing, physical memory contents disclosure, discovery of any secrets from any Virtual Machines (VMs) and bypassing memory isolation and confidential computing boundaries. Additionally, an attacker can build a payload which can be injected into the SMRAM memory. This issue affects: Module name: PlatformInitAdvancedPreMem SHA256: 644044fdb8daea30a7820e0f5f88dbf5cd460af72fbf70418e9d2e47efed8d9b Module GUID: EEEE611D-F78F-4FB9-B868-55907F169280 This issue affects: AMI Aptio 5.x.Show less
CVE-2022-35070 1Otfcc Project 1Otfcc Jun 17, 2026 Sep 19, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x65fc97.
CVE-2022-35069 1Otfcc Project 1Otfcc Jun 17, 2026 Sep 19, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b544e.
CVE-2022-35068 1Otfcc Project 1Otfcc Jun 17, 2026 Sep 19, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6e420d.
CVE-2022-35067 1Otfcc Project 1Otfcc Jun 17, 2026 Sep 19, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6e41b0.
CVE-2022-35066 1Otfcc Project 1Otfcc Jun 17, 2026 Sep 19, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6e41b8.
CVE-2022-35065 1Otfcc Project 1Otfcc Jun 17, 2026 Sep 19, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x65f724.
CVE-2022-35064 1Otfcc Project 1Otfcc Jun 17, 2026 Sep 19, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x4adcdb in __asan_memset.
CVE-2022-35063 1Otfcc Project 1Otfcc Jun 17, 2026 Sep 19, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6e41a8.
CVE-2022-35062 1Otfcc Project 1Otfcc Jun 17, 2026 Sep 19, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6c0bc3.
CVE-2022-35061 1Otfcc Project 1Otfcc Jun 17, 2026 Sep 19, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6e412a.
CVE-2022-35060 1Otfcc Project 1Otfcc Jun 17, 2026 Sep 19, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6c0a32.
CVE-2022-3213 2Fedoraproject Imagemagick 3Extra Packages For Enterprise Linux FedoraImagemagick Jun 17, 2026 Sep 19, 2022 N/A· v4 5.5 MEDIUM· v3 N/A· v2 A heap buffer overflow issue was found in ImageMagick. When an application processes a malformed TIFF file, it could lead to undefined behavior or a crash causing a denial of service.
CVE-2022-35701 1Adobe 1Bridge Jun 17, 2026 Sep 19, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of th...Show more Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2022-35700 1Adobe 1Bridge Jun 17, 2026 Sep 19, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of th...Show more Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2022-35699 1Adobe 1Bridge Jun 17, 2026 Sep 19, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of th...Show more Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2022-40076 1Tenda 1Ac21 Firmware Jun 17, 2026 Sep 19, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 Tenda AC21 V16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: fromSetWifiGusetBasic.
CVE-2022-40075 1Tenda 1Ac21 Firmware Jun 17, 2026 Sep 19, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, form_fast_setting_wifi_set.
CVE-2022-40074 1Tenda 1Ac21 Firmware Jun 17, 2026 Sep 19, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, setSchedWifi.

Previous 1...412413414...777 Next