Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

CVEs (14,856)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-21759 1Google 1Android Jun 17, 2026 Jun 6, 2022 N/A· v4 6.7 MEDIUM· v3 4.6 MEDIUM· v2 In power service, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploi...Show more In power service, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06419106; Issue ID: ALPS06419077.Show less
CVE-2022-21754 1Google 1Android Jun 17, 2026 Jun 6, 2022 N/A· v4 6.7 MEDIUM· v3 4.6 MEDIUM· v2 In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploita...Show more In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06535953; Issue ID: ALPS06535953.Show less
CVE-2022-21753 1Google 1Android Jun 17, 2026 Jun 6, 2022 N/A· v4 6.7 MEDIUM· v3 4.6 MEDIUM· v2 In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploita...Show more In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06493873; Issue ID: ALPS06493899.Show less
CVE-2022-21752 1Google 1Android Jun 17, 2026 Jun 6, 2022 N/A· v4 6.7 MEDIUM· v3 4.6 MEDIUM· v2 In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploita...Show more In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06493873; Issue ID: ALPS06493873.Show less
CVE-2022-21751 1Google 1Android Jun 17, 2026 Jun 6, 2022 N/A· v4 6.7 MEDIUM· v3 4.6 MEDIUM· v2 In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploita...Show more In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06511132; Issue ID: ALPS06511132.Show less
CVE-2022-21750 1Google 1Android Jun 17, 2026 Jun 6, 2022 N/A· v4 6.7 MEDIUM· v3 4.6 MEDIUM· v2 In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploita...Show more In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06521283; Issue ID: ALPS06521283.Show less
CVE-2022-31783 2Fedoraproject Liblouis 2Fedora Liblouis Jun 17, 2026 Jun 2, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Liblouis 3.21.0 has an out-of-bounds write in compileRule in compileTranslationTable.c, as demonstrated by lou_trace.
CVE-2022-31782 1Freedesktop 1Freetype Demo Programs Jun 17, 2026 Jun 2, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 ftbench.c in FreeType Demo Programs through 2.12.1 has a heap-based buffer overflow.
CVE-2022-30521 1Dlink 1Dir 890l Firmware Jun 17, 2026 Jun 2, 2022 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 The LAN-side Web-Configuration Interface has Stack-based Buffer Overflow vulnerability in the D-Link Wi-Fi router firmware DIR-890L DIR890LA1_FW107b09.bin and previous versions. The function created at 0x17958 of /htdocs...Show more The LAN-side Web-Configuration Interface has Stack-based Buffer Overflow vulnerability in the D-Link Wi-Fi router firmware DIR-890L DIR890LA1_FW107b09.bin and previous versions. The function created at 0x17958 of /htdocs/cgibin will call sprintf without checking the length of strings in parameters given by HTTP header and can be controlled by users easily. The attackers can exploit the vulnerability to carry out arbitrary code by means of sending a specially constructed payload to port 49152.Show less
CVE-2022-29777 1Onlyoffice 2Core Document Server Jun 17, 2026 Jun 2, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Onlyoffice Document Server v6.0.0 and below and Core 6.1.0.26 and below were discovered to contain a heap overflow via the component DesktopEditor/fontengine/fontconverter/FontFileBase.h.
CVE-2022-29776 1Onlyoffice 2Core Document Server Jun 17, 2026 Jun 2, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Onlyoffice Document Server v6.0.0 and below and Core 6.1.0.26 and below were discovered to contain a stack overflow via the component DesktopEditor/common/File.cpp.
CVE-2022-28690 1Hornerautomation 1Cscape Jun 17, 2026 Jun 2, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 The affected product is vulnerable to an out-of-bounds write via uninitialized pointer, which may allow an attacker to execute arbitrary code.
CVE-2022-27184 1Hornerautomation 1Cscape Jun 17, 2026 Jun 2, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 The affected product is vulnerable to an out-of-bounds write, which may allow an attacker to execute arbitrary code.
CVE-2022-1943 1Linux 1Linux Kernel Jun 17, 2026 Jun 2, 2022 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 A flaw out of bounds memory write in the Linux kernel UDF file system functionality was found in the way user triggers some file operation which triggers udf_write_fi(). A local user could use this flaw to crash the syst...Show more A flaw out of bounds memory write in the Linux kernel UDF file system functionality was found in the way user triggers some file operation which triggers udf_write_fi(). A local user could use this flaw to crash the system or potentiallyShow less
CVE-2021-42204 1Swftools 1Swftools Jun 17, 2026 Jun 2, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 An issue was discovered in swftools through 20201222. A heap-buffer-overflow exists in the function swf_GetBits() located in rfxswf.c. It allows an attacker to cause code execution.
CVE-2021-42201 1Swftools 1Swftools Jun 17, 2026 Jun 2, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 An issue was discovered in swftools through 20201222. A heap-buffer-overflow exists in the function swf_GetD64() located in rfxswf.c. It allows an attacker to cause code execution.
CVE-2021-42199 1Swftools 1Swftools Jun 17, 2026 Jun 2, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 An issue was discovered in swftools through 20201222. A heap buffer overflow exists in the function swf_FontExtract_DefineTextCallback() located in swftext.c. It allows an attacker to cause code execution.
CVE-2021-42195 1Swftools 1Swftools Jun 17, 2026 Jun 2, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 An issue was discovered in swftools through 20201222. A heap-buffer-overflow exists in the function handleEditText() located in swfdump.c. It allows an attacker to cause code Execution.
CVE-2022-31003 2Debian Signalwire 2Debian Linux Sofia Sip Jun 17, 2026 May 31, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Sofia-SIP is an open-source Session Initiation Protocol (SIP) User-Agent library. Prior to version 1.13.8, when parsing each line of a sdp message, `rest = record + 2` will access the memory behind `\0` and cause an out-...Show more Sofia-SIP is an open-source Session Initiation Protocol (SIP) User-Agent library. Prior to version 1.13.8, when parsing each line of a sdp message, `rest = record + 2` will access the memory behind `\0` and cause an out-of-bounds write. An attacker can send a message with evil sdp to FreeSWITCH, causing a crash or more serious consequence, such as remote code execution. Version 1.13.8 contains a patch for this issue.Show less
CVE-2022-1942 4Apple DebianFedoraproject+1 more 4Debian Linux FedoraMacos+1 more Jun 17, 2026 May 31, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

Previous 1...414415416...743 Next