Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

CVEs (14,849)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-32976 1Moxa 4Nport Iaw5150a 12i/o Firmware Nport Iaw5150a 6i/o FirmwareNport Iaw5250a 12i/o Firmware+1 more Jun 17, 2026 Apr 1, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Five buffer overflows in the built-in web server in Moxa NPort IAW5000A-I/O series firmware version 2.2 or earlier may allow a remote attacker to initiate a denial-of-service attack and execute arbitrary code.
CVE-2021-26623 1Bandisoft 1Bandizip Jun 17, 2026 Apr 1, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 A remote code execution vulnerability due to incomplete check for 'xheader_decode_path_record' function's parameter length value in the ark library. Remote attackers can induce exploit malicious code using this function.
CVE-2021-35103 1Qualcomm 149Ar8035 Firmware Ar9380 FirmwareCsr8811 Firmware+146 more Jun 17, 2026 Apr 1, 2022 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 Possible out of bound write due to improper validation of number of timer values received from firmware while syncing timers in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Sna...Show more Possible out of bound write due to improper validation of number of timer values received from firmware while syncing timers in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingShow less
CVE-2021-30333 1Qualcomm 129Apq8009w Firmware Apq8017 FirmwareApq8053 Firmware+126 more Jun 17, 2026 Apr 1, 2022 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 Improper validation of buffer size input to the EFS file can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobil...Show more Improper validation of buffer size input to the EFS file can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesShow less
CVE-2021-1942 1Qualcomm 111Aqt1000 Firmware Ar8031 FirmwareAr8035 Firmware+108 more Jun 17, 2026 Apr 1, 2022 N/A· v4 8.8 HIGH· v3 7.2 HIGH· v2 Improper handling of permissions of a shared memory region can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mob...Show more Improper handling of permissions of a shared memory region can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingShow less
CVE-2021-43722 1Dlink 1Dir 645 Firmware Jun 17, 2026 Mar 31, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 D-Link DIR-645 1.03 A1 is vulnerable to Buffer Overflow. The hnap_main function in the cgibin handler uses sprintf to format the soapaction header onto the stack and has no limit on the size.
CVE-2019-12266 1Wyze 3Cam Pan V2 Firmware Cam V2 FirmwareCam V3 Firmware Jun 17, 2026 Mar 30, 2022 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 Stack-based Buffer Overflow vulnerability in Wyze Cam Pan v2, Cam v2, Cam v3 allows an attacker to run arbitrary code on the affected device. This issue affects: Wyze Cam Pan v2 versions prior to 4.49.1.47. Wyze Cam v2 v...Show more Stack-based Buffer Overflow vulnerability in Wyze Cam Pan v2, Cam v2, Cam v3 allows an attacker to run arbitrary code on the affected device. This issue affects: Wyze Cam Pan v2 versions prior to 4.49.1.47. Wyze Cam v2 versions prior to 4.9.8.1002. Wyze Cam v3 versions prior to 4.36.8.32.Show less
CVE-2022-1160 2Fedoraproject Vim 2Fedora Vim Jun 17, 2026 Mar 30, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 heap buffer overflow in get_one_sourceline in GitHub repository vim/vim prior to 8.2.4647.
CVE-2021-39786 1Google 1Android Jun 17, 2026 Mar 30, 2022 N/A· v4 6.7 MEDIUM· v3 4.6 MEDIUM· v2 In NFC, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Pro...Show more In NFC, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-192551247Show less
CVE-2021-39741 1Google 1Android Jun 17, 2026 Mar 30, 2022 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 In Keymaster, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitati...Show more In Keymaster, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-173567719Show less
CVE-2021-44081 1Open5gs 1Open5gs Jun 17, 2026 Mar 29, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 A buffer overflow vulnerability exists in the AMF of open5gs 2.1.4. When the length of MSIN in Supi exceeds 24 characters, it leads to AMF denial of service.
CVE-2022-23901 1Re2c 1Re2c Jun 17, 2026 Mar 29, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 A stack overflow re2c 2.2 exists due to infinite recursion issues in src/dfa/dead_rules.cc.
CVE-2022-26278 1Tenda 1Ac9 Firmware Jun 17, 2026 Mar 28, 2022 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 Tenda AC9 v15.03.2.21_cn was discovered to contain a stack overflow via the time parameter in the PowerSaveSet function.
CVE-2022-22274 1Sonicwall 2Sonicos Sonicosv Jun 17, 2026 Mar 25, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 A Stack-based buffer overflow vulnerability in the SonicOS via HTTP request allows a remote unauthenticated attacker to cause Denial of Service (DoS) or potentially results in code execution in the firewall.
CVE-2022-0995 3Fedoraproject LinuxNetapp 13Fedora H300e FirmwareH300s Firmware+10 more Aug 27, 2026 Mar 25, 2022 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite parts of the kernel state, potentially allowing a local user to gain privileged a...Show more An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite parts of the kernel state, potentially allowing a local user to gain privileged access or cause a denial of service on the system.Show less
CVE-2022-0500 3Fedoraproject LinuxNetapp 10Fedora H300e FirmwareH300s Firmware+7 more Jun 17, 2026 Mar 25, 2022 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 A flaw was found in unrestricted eBPF usage by the BPF_BTF_LOAD, leading to a possible out-of-bounds memory write in the Linux kernel’s BPF subsystem due to the way a user loads BTF. This flaw allows a local user to cras...Show more A flaw was found in unrestricted eBPF usage by the BPF_BTF_LOAD, leading to a possible out-of-bounds memory write in the Linux kernel’s BPF subsystem due to the way a user loads BTF. This flaw allows a local user to crash or escalate their privileges on the system.Show less
CVE-2022-0435 5Fedoraproject LinuxNetapp+2 more 30Codeready Linux Builder Codeready Linux Builder EusCodeready Linux Builder Eus For Power Little Endian+27 more Jun 17, 2026 Mar 25, 2022 N/A· v4 8.8 HIGH· v3 9.0 HIGH· v2 A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain member nodes is higher than the 64 allowed. This flaw a...Show more A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain member nodes is higher than the 64 allowed. This flaw allows a remote user to crash the system or possibly escalate their privileges if they have access to the TIPC network.Show less
CVE-2021-3567 1Gnome 1Caribou Jun 17, 2026 Mar 25, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 A flaw was found in Caribou due to a regression of CVE-2020-25712 fix. An attacker could use this flaw to bypass screen-locking applications that leverage Caribou as an input mechanism. The highest threat from this vulne...Show more A flaw was found in Caribou due to a regression of CVE-2020-25712 fix. An attacker could use this flaw to bypass screen-locking applications that leverage Caribou as an input mechanism. The highest threat from this vulnerability is to system availability.Show less
CVE-2018-25032 11Apple AzulDebian+8 more 27Active Iq Unified Manager Debian LinuxE Series Santricity Os Controller+24 more Jul 14, 2026 Mar 25, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.
CVE-2022-21820 1Nvidia 1Data Center Gpu Manager Jun 17, 2026 Mar 24, 2022 N/A· v4 6.3 MEDIUM· v3 6.5 MEDIUM· v2 NVIDIA DCGM contains a vulnerability in nvhostengine, where a network user can cause detection of error conditions without action, which may lead to limited code execution, some denial of service, escalation of privilege...Show more NVIDIA DCGM contains a vulnerability in nvhostengine, where a network user can cause detection of error conditions without action, which may lead to limited code execution, some denial of service, escalation of privileges, and limited impacts to both data confidentiality and integrity.Show less

Previous 1...428429430...743 Next