Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

CVEs (14,849)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-23943 4Apache DebianFedoraproject+1 more 5Debian Linux FedoraHttp Server+2 more Jun 17, 2026 Mar 14, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Out-of-bounds Write vulnerability in mod_sed of Apache HTTP Server allows an attacker to overwrite heap memory with possibly attacker provided data. This issue affects Apache HTTP Server 2.4 version 2.4.52 and prior vers...Show more Out-of-bounds Write vulnerability in mod_sed of Apache HTTP Server allows an attacker to overwrite heap memory with possibly attacker provided data. This issue affects Apache HTTP Server 2.4 version 2.4.52 and prior versions.Show less
CVE-2022-26967 1Gpac 1Gpac Jun 17, 2026 Mar 12, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 GPAC 2.0 allows a heap-based buffer overflow in gf_base64_encode. It can be triggered via MP4Box.
CVE-2022-24097 1Adobe 1After Effects Jun 17, 2026 Mar 11, 2022 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 Adobe After Effects versions 22.2 (and earlier) and 18.4.4 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation...Show more Adobe After Effects versions 22.2 (and earlier) and 18.4.4 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2022-24096 1Adobe 1After Effects Jun 17, 2026 Mar 11, 2022 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 Adobe After Effects versions 22.2 (and earlier) and 18.4.4 (and earlier) are affected by an Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Explo...Show more Adobe After Effects versions 22.2 (and earlier) and 18.4.4 (and earlier) are affected by an Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2022-24095 1Adobe 1After Effects Jun 17, 2026 Mar 11, 2022 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 Adobe After Effects versions 22.2 (and earlier) and 18.4.4 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Explo...Show more Adobe After Effects versions 22.2 (and earlier) and 18.4.4 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2022-24094 1Adobe 1After Effects Jun 17, 2026 Mar 11, 2022 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 Adobe After Effects versions 22.2 (and earlier) and 18.4.4 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Explo...Show more Adobe After Effects versions 22.2 (and earlier) and 18.4.4 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2020-36518 4Debian FasterxmlNetapp+1 more 36Active Iq Unified Manager Big Data Spatial And GraphCloud Insights Acquisition Unit+33 more Jun 17, 2026 Mar 11, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects.
CVE-2022-25566 1Tenda 1Ax1806 Firmware Jun 17, 2026 Mar 10, 2022 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function saveParentControlInfo. This vulnerability allows attackers to cause a Denial of Service (DoS) via the time parameter.
CVE-2022-25561 1Tenda 1Ax12 Firmware Jun 17, 2026 Mar 10, 2022 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 Tenda AX12 v22.03.01.21 was discovered to contain a stack overflow in the function sub_42DE00. This vulnerability allows attackers to cause a Denial of Service (DoS) via the list parameter.
CVE-2022-25560 1Tenda 1Ax12 Firmware Jun 17, 2026 Mar 10, 2022 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 Tenda AX12 v22.03.01.21 was discovered to contain a stack overflow in the function sub_4327CC. This vulnerability allows attackers to cause a Denial of Service (DoS) via the list parameter.
CVE-2022-25558 1Tenda 1Ax1806 Firmware Jun 17, 2026 Mar 10, 2022 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function formSetProvince. This vulnerability allows attackers to cause a Denial of Service (DoS) via the ProvinceCode parameter.
CVE-2022-25557 1Tenda 1Ax1806 Firmware Jun 17, 2026 Mar 10, 2022 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 Tenda AX1806 v1.0.0.1 was discovered to contain a heap overflow in the function saveParentControlInfo. This vulnerability allows attackers to cause a Denial of Service (DoS) via the urls parameter.
CVE-2022-25556 1Tenda 1Ax12 Firmware Jun 17, 2026 Mar 10, 2022 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 Tenda AX12 v22.03.01.21 was discovered to contain a stack overflow in the function sub_42E328. This vulnerability allows attackers to cause a Denial of Service (DoS) via the list parameter.
CVE-2022-25555 1Tenda 1Ax1806 Firmware Jun 17, 2026 Mar 10, 2022 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function fromSetSysTime. This vulnerability allows attackers to cause a Denial of Service (DoS) via the ntpServer parameter.
CVE-2022-25554 1Tenda 1Ax1806 Firmware Jun 17, 2026 Mar 10, 2022 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function saveParentControlInfo. This vulnerability allows attackers to cause a Denial of Service (DoS) via the deviceId parameter.
CVE-2022-25553 1Tenda 1Ax1806 Firmware Jun 17, 2026 Mar 10, 2022 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function formSetSysToolDDNS. This vulnerability allows attackers to cause a Denial of Service (DoS) via the ddnsPwd parameter.
CVE-2022-25552 1Tenda 1Ax1806 Firmware Jun 17, 2026 Mar 10, 2022 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function form_fast_setting_wifi_set. This vulnerability allows attackers to cause a Denial of Service (DoS) via the ssid parameter.
CVE-2022-25551 1Tenda 1Ax1806 Firmware Jun 17, 2026 Mar 10, 2022 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function formSetSysToolDDNS. This vulnerability allows attackers to cause a Denial of Service (DoS) via the ddnsDomain parameter.
CVE-2022-25550 1Tenda 1Ax1806 Firmware Jun 17, 2026 Mar 10, 2022 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function saveParentControlInfo. This vulnerability allows attackers to cause a Denial of Service (DoS) via the deviceName parameter.
CVE-2022-25549 1Tenda 1Ax1806 Firmware Jun 17, 2026 Mar 10, 2022 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function formSetSysToolDDNS. This vulnerability allows attackers to cause a Denial of Service (DoS) via the ddnsEn parameter.

Previous 1...433434435...743 Next