Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

CVEs (15,523)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-36465 1Totolink 1A3700r Firmware Jun 17, 2026 Aug 25, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the pppoeUser parameter.
CVE-2022-36464 1Totolink 1A3700r Firmware Jun 17, 2026 Aug 25, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the sPort parameter in the function setIpPortFilterRules.
CVE-2022-36463 1Totolink 1A3700r Firmware Jun 17, 2026 Aug 25, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the command parameter in the function setTracerouteCfg.
CVE-2022-36462 1Totolink 1A3700r Firmware Jun 17, 2026 Aug 25, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the lang parameter in the function setLanguageCfg.
CVE-2022-32894 1Apple 4Ipados Iphone OsMacos+1 more Jun 17, 2026 Aug 24, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6.1 and iPadOS 15.6.1, macOS Monterey 12.5.1. An application may be able to execute arbitrary code with kernel privi...Show more An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6.1 and iPadOS 15.6.1, macOS Monterey 12.5.1. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited.Show less
CVE-2022-32893 5Apple DebianFedoraproject+2 more 8Debian Linux FedoraIpados+5 more Jun 17, 2026 Aug 24, 2022 N/A· v4 8.8 HIGH· v3 N/A· v2 An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6.1 and iPadOS 15.6.1, macOS Monterey 12.5.1, Safari 15.6.1. Processing maliciously crafted web content may lead to...Show more An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6.1 and iPadOS 15.6.1, macOS Monterey 12.5.1, Safari 15.6.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.Show less
CVE-2022-32837 1Apple 5Ipados Iphone OsMac Os X+2 more Jun 17, 2026 Aug 24, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.5, tvOS 15.6, iOS 15.6 and iPadOS 15.6. An app may be able to cause unexpected system termination or write kernel memory.
CVE-2022-32813 1Apple 6Ipados Iphone OsMac Os X+3 more Jun 17, 2026 Aug 24, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.5, macOS Big Sur 11.6.8, Security Update 2022-005 Catalina, iOS 15.6 and iPadOS 15.6, tvOS 15.6, watchOS 8.7. An app with ro...Show more The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.5, macOS Big Sur 11.6.8, Security Update 2022-005 Catalina, iOS 15.6 and iPadOS 15.6, tvOS 15.6, watchOS 8.7. An app with root privileges may be able to execute arbitrary code with kernel privileges.Show less
CVE-2022-32812 1Apple 2Mac Os X Macos Jun 17, 2026 Aug 24, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.5, macOS Big Sur 11.6.8, Security Update 2022-005 Catalina. An app may be able to execute arbitrary code with kernel privile...Show more The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.5, macOS Big Sur 11.6.8, Security Update 2022-005 Catalina. An app may be able to execute arbitrary code with kernel privileges.Show less
CVE-2022-32810 1Apple 4Ipados Iphone OsMacos+1 more Jun 17, 2026 Aug 24, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.5, watchOS 8.7, iOS 15.6 and iPadOS 15.6. An app may be able to execute arbitrary code with kernel privileges.
CVE-2022-32793 2Apple Fedoraproject 6Fedora IpadosIphone Os+3 more Jun 17, 2026 Aug 24, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 Multiple out-of-bounds write issues were addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.5, watchOS 8.7, tvOS 15.6, iOS 15.6 and iPadOS 15.6. An app may be able to disclose kernel memory...Show more Multiple out-of-bounds write issues were addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.5, watchOS 8.7, tvOS 15.6, iOS 15.6 and iPadOS 15.6. An app may be able to disclose kernel memory.Show less
CVE-2021-4214 3Debian LibpngNetapp 3Debian Linux LibpngOntap Select Deploy Administration Utility Jun 17, 2026 Aug 24, 2022 N/A· v4 5.5 MEDIUM· v3 N/A· v2 A heap overflow flaw was found in libpngs' pngimage.c program. This flaw allows an attacker with local network access to pass a specially crafted PNG file to the pngimage utility, causing an application to crash, leading...Show more A heap overflow flaw was found in libpngs' pngimage.c program. This flaw allows an attacker with local network access to pass a specially crafted PNG file to the pngimage utility, causing an application to crash, leading to a denial of service.Show less
CVE-2021-4040 2Apache Redhat 3Activemq Artemis Amq BrokerArtemis Jun 17, 2026 Aug 24, 2022 N/A· v4 5.3 MEDIUM· v3 N/A· v2 A flaw was found in AMQ Broker. This issue can cause a partial interruption to the availability of AMQ Broker via an Out of memory (OOM) condition. This flaw allows an attacker to partially disrupt availability to the br...Show more A flaw was found in AMQ Broker. This issue can cause a partial interruption to the availability of AMQ Broker via an Out of memory (OOM) condition. This flaw allows an attacker to partially disrupt availability to the broker through a sustained attack of maliciously crafted messages. The highest threat from this vulnerability is system availability.Show less
CVE-2022-25903 1Opcua Project 1Opcua Jun 17, 2026 Aug 24, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 The package opcua from 0.0.0 are vulnerable to Denial of Service (DoS) via the ExtensionObjects and Variants objects, when it allows unlimited nesting levels, which could result in a stack overflow even if the message si...Show more The package opcua from 0.0.0 are vulnerable to Denial of Service (DoS) via the ExtensionObjects and Variants objects, when it allows unlimited nesting levels, which could result in a stack overflow even if the message size is less than the maximum allowed.Show less
CVE-2021-3839 3Dpdk FedoraprojectRedhat 4Data Plane Development Kit Enterprise LinuxEnterprise Linux Fast Datapath+1 more Jun 17, 2026 Aug 23, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 A flaw was found in the vhost library in DPDK. Function vhost_user_set_inflight_fd() does not validate `msg->payload.inflight.num_queues`, possibly causing out-of-bounds memory read/write. Any software using DPDK vhost l...Show more A flaw was found in the vhost library in DPDK. Function vhost_user_set_inflight_fd() does not validate `msg->payload.inflight.num_queues`, possibly causing out-of-bounds memory read/write. Any software using DPDK vhost library may crash as a result of this vulnerability.Show less
CVE-2021-20298 2Debian Openexr 2Debian Linux Openexr Jun 17, 2026 Aug 23, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 A flaw was found in OpenEXR's B44Compressor. This flaw allows an attacker who can submit a crafted file to be processed by OpenEXR, to exhaust all memory accessible to the application. The highest threat from this vulner...Show more A flaw was found in OpenEXR's B44Compressor. This flaw allows an attacker who can submit a crafted file to be processed by OpenEXR, to exhaust all memory accessible to the application. The highest threat from this vulnerability is to system availability.Show less
CVE-2022-26061 1Hdfgroup 1Hdf5 Jun 17, 2026 Aug 22, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 A heap-based buffer overflow vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger thi...Show more A heap-based buffer overflow vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.Show less
CVE-2022-25972 1Hdfgroup 1Hdf5 Jun 17, 2026 Aug 22, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 An out-of-bounds write vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vuln...Show more An out-of-bounds write vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.Show less
CVE-2022-36233 1Tendacn 1Ac9 Firmware Jul 9, 2026 Aug 19, 2022 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Tenda AC9 V15.03.2.13 is vulnerable to Buffer Overflow via httpd, form_fast_setting_wifi_set. httpd.
CVE-2022-37175 1Tenda 1Ac15 Firmware Jun 17, 2026 Aug 19, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Tenda ac15 firmware V15.03.05.18 httpd server has stack buffer overflow in /goform/formWifiBasicSet.

Previous 1...427428429...777 Next