Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

CVEs (15,523)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-30176 1Microsoft 1Azure Real Time Operating System Guix Studio Jun 17, 2026 Aug 9, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 Azure RTOS GUIX Studio Remote Code Execution Vulnerability
CVE-2022-37452 2Debian Exim 2Debian Linux Exim Jun 17, 2026 Aug 7, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Exim before 4.95 has a heap-based buffer overflow for the alias list in host_name_lookup in host.c when sender_host_name is set.
CVE-2022-29465 1Accusoft 1Imagegear Jun 17, 2026 Aug 5, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 An out-of-bounds write vulnerability exists in the PSD Header processing memory allocation functionality of Accusoft ImageGear 20.0. A specially-crafted malformed file can lead to memory corruption. An attacker can provi...Show more An out-of-bounds write vulnerability exists in the PSD Header processing memory allocation functionality of Accusoft ImageGear 20.0. A specially-crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability.Show less
CVE-2022-28665 1Freshtomato 1Freshtomato Jun 17, 2026 Aug 5, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A memory corruption vulnerability exists in the httpd unescape functionality of FreshTomato 2022.1. A specially-crafted HTTP request can lead to memory corruption. An attacker can send a network request to trigger this v...Show more A memory corruption vulnerability exists in the httpd unescape functionality of FreshTomato 2022.1. A specially-crafted HTTP request can lead to memory corruption. An attacker can send a network request to trigger this vulnerability.The `freshtomato-arm` has a vulnerable URL-decoding feature that can lead to memory corruption.Show less
CVE-2022-28664 1Freshtomato 1Freshtomato Jun 17, 2026 Aug 5, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A memory corruption vulnerability exists in the httpd unescape functionality of FreshTomato 2022.1. A specially-crafted HTTP request can lead to memory corruption. An attacker can send a network request to trigger this v...Show more A memory corruption vulnerability exists in the httpd unescape functionality of FreshTomato 2022.1. A specially-crafted HTTP request can lead to memory corruption. An attacker can send a network request to trigger this vulnerability.The `freshtomato-mips` has a vulnerable URL-decoding feature that can lead to memory corruption.Show less
CVE-2022-27631 1Dd Wrt 1Dd Wrt Jun 17, 2026 Aug 5, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A memory corruption vulnerability exists in the httpd unescape functionality of DD-WRT Revision 32270 - Revision 48599. A specially-crafted HTTP request can lead to memory corruption. An attacker can send a network reque...Show more A memory corruption vulnerability exists in the httpd unescape functionality of DD-WRT Revision 32270 - Revision 48599. A specially-crafted HTTP request can lead to memory corruption. An attacker can send a network request to trigger this vulnerability.Show less
CVE-2022-26376 2Asus Asuswrt Merlin 19Asuswrt Et12 FirmwareGt Ax11000 Firmware+16 more Jun 17, 2026 Aug 5, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A memory corruption vulnerability exists in the httpd unescape functionality of Asuswrt prior to 3.0.0.4.386_48706 and Asuswrt-Merlin New Gen prior to 386.7.. A specially-crafted HTTP request can lead to memory corruptio...Show more A memory corruption vulnerability exists in the httpd unescape functionality of Asuswrt prior to 3.0.0.4.386_48706 and Asuswrt-Merlin New Gen prior to 386.7.. A specially-crafted HTTP request can lead to memory corruption. An attacker can send a network request to trigger this vulnerability.Show less
CVE-2022-26009 1Tcl 1Linkhub Mesh Wifi Ac1200 Jun 17, 2026 Aug 5, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A stack-based buffer overflow vulnerability exists in the confsrv ucloud_set_node_location functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted network packet can lead to stack-based buffer overf...Show more A stack-based buffer overflow vulnerability exists in the confsrv ucloud_set_node_location functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted network packet can lead to stack-based buffer overflow. An attacker can send a malicious packet to trigger this vulnerability.Show less
CVE-2022-25996 1Tcl 1Linkhub Mesh Wifi Ac1200 Jun 17, 2026 Aug 5, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A stack-based buffer overflow vulnerability exists in the confsrv addTimeGroup functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted network packet can lead to a buffer overflow. An attacker can s...Show more A stack-based buffer overflow vulnerability exists in the confsrv addTimeGroup functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted network packet can lead to a buffer overflow. An attacker can send a malicious packet to trigger this vulnerability.Show less
CVE-2022-23919 1Tcl 1Linkhub Mesh Wifi Ac1200 Jun 17, 2026 Aug 5, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A stack-based buffer overflow vulnerability exists in the confsrv set_mf_rule functionality of TCL LinkHub Mesh Wifi MS1G_00_01.00_14. A specially-crafted network packet can lead to stack-based buffer overflow. An attack...Show more A stack-based buffer overflow vulnerability exists in the confsrv set_mf_rule functionality of TCL LinkHub Mesh Wifi MS1G_00_01.00_14. A specially-crafted network packet can lead to stack-based buffer overflow. An attacker can send a malicious packet to trigger this vulnerability.This vulnerability leverages the name field within the protobuf message to cause a buffer overflow.Show less
CVE-2022-23918 1Tcl 1Linkhub Mesh Wifi Ac1200 Jun 17, 2026 Aug 5, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A stack-based buffer overflow vulnerability exists in the confsrv set_mf_rule functionality of TCL LinkHub Mesh Wifi MS1G_00_01.00_14. A specially-crafted network packet can lead to stack-based buffer overflow. An attack...Show more A stack-based buffer overflow vulnerability exists in the confsrv set_mf_rule functionality of TCL LinkHub Mesh Wifi MS1G_00_01.00_14. A specially-crafted network packet can lead to stack-based buffer overflow. An attacker can send a malicious packet to trigger this vulnerability.This vulnerability leverages the ethAddr field within the protobuf message to cause a buffer overflow.Show less
CVE-2022-23399 1Tcl 1Linkhub Mesh Wifi Ac1200 Jun 17, 2026 Aug 5, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A stack-based buffer overflow vulnerability exists in the confsrv set_port_fwd_rule functionality of TCL LinkHub Mesh Wifi MS1G_00_01.00_14. A specially-crafted network packet can lead to stack-based buffer overflow. An...Show more A stack-based buffer overflow vulnerability exists in the confsrv set_port_fwd_rule functionality of TCL LinkHub Mesh Wifi MS1G_00_01.00_14. A specially-crafted network packet can lead to stack-based buffer overflow. An attacker can send a malicious packet to trigger this vulnerability.Show less
CVE-2022-23103 1Tcl 1Linkhub Mesh Wifi Ac1200 Jun 17, 2026 Aug 5, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A stack-based buffer overflow vulnerability exists in the confsrv confctl_set_app_language functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted network packet can lead to stack-based buffer overf...Show more A stack-based buffer overflow vulnerability exists in the confsrv confctl_set_app_language functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted network packet can lead to stack-based buffer overflow. An attacker can send a malicious packet to trigger this vulnerability.Show less
CVE-2022-21201 1Tcl 1Linkhub Mesh Wifi Ac1200 Jun 17, 2026 Aug 5, 2022 N/A· v4 8.8 HIGH· v3 N/A· v2 A stack-based buffer overflow vulnerability exists in the confers ucloud_add_node_new functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted network packet can lead to stack-based buffer overflow....Show more A stack-based buffer overflow vulnerability exists in the confers ucloud_add_node_new functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted network packet can lead to stack-based buffer overflow. An attacker can send a malicious packet to trigger this vulnerability.Show less
CVE-2022-37398 1Asustor 1Adm Jun 17, 2026 Aug 5, 2022 N/A· v4 8.8 HIGH· v3 N/A· v2 A stack-based buffer overflow vulnerability was found inside ADM when using WebDAV due to the lack of data size validation. An attacker can exploit this vulnerability to run arbitrary code. Affected ADM versions include:...Show more A stack-based buffer overflow vulnerability was found inside ADM when using WebDAV due to the lack of data size validation. An attacker can exploit this vulnerability to run arbitrary code. Affected ADM versions include: 3.5.9.RUE3 and below, 4.0.5.RVI1 and below as well as 4.1.0.RJD1 and below.Show less
CVE-2022-33730 1Google 1Android Jun 17, 2026 Aug 5, 2022 N/A· v4 6.8 MEDIUM· v3 N/A· v2 Heap-based buffer overflow vulnerability in Samsung Dex for PC prior to SMR Aug-2022 Release 1 allows arbitrary code execution by physical attackers.
CVE-2022-37434 6Apple DebianFedoraproject+3 more 18Active Iq Unified Manager Debian LinuxFedora+15 more Oct 14, 2026 Aug 5, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applicati...Show more zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).Show less
CVE-2022-37415 1Uniwill 1Sparkio.sys Jun 17, 2026 Aug 5, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 The Uniwill SparkIO.sys driver 1.0 is vulnerable to a stack-based buffer overflow via IOCTL 0x40002008.
CVE-2022-35506 1Triplecross Project 1Triplecross Jun 17, 2026 Aug 3, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 TripleCross v0.1.0 was discovered to contain a stack overflow which occurs because there is no limit to the length of program parameters.
CVE-2022-34992 1Luadec Project 1Luadec Jun 17, 2026 Aug 3, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 Luadec v0.9.9 was discovered to contain a heap-buffer overflow via the function UnsetPending.

Previous 1...432433434...777 Next