Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

CVEs (14,849)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-25548 1Tenda 1Ax1806 Firmware Jun 17, 2026 Mar 10, 2022 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function fromSetSysTime. This vulnerability allows attackers to cause a Denial of Service (DoS) via the serverName parameter.
CVE-2022-25547 1Tenda 1Ax1806 Firmware Jun 17, 2026 Mar 10, 2022 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function fromSetSysTime. This vulnerability allows attackers to cause a Denial of Service (DoS) via the time parameter.
CVE-2022-25546 1Tenda 1Ax1806 Firmware Jun 17, 2026 Mar 10, 2022 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function formSetSysToolDDNS. This vulnerability allows attackers to cause a Denial of Service (DoS) via the ddnsUser parameter.
CVE-2022-25234 1Omron 1Cx Programmer Jun 17, 2026 Mar 10, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Out-of-bounds write vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows an attacker to cause information disclosure and/or arbitrary code execution by having a user to open a...Show more Out-of-bounds write vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows an attacker to cause information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file. This vulnerability is different from CVE-2022-21124.Show less
CVE-2022-24995 1Tenda 1Ax3 Firmware Jun 17, 2026 Mar 10, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromSetSysTime. This vulnerability allows attackers to cause a Denial of Service (DoS) via the time parameter.
CVE-2022-21124 1Omron 1Cx Programmer Jun 17, 2026 Mar 10, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Out-of-bounds write vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows an attacker to cause information disclosure and/or arbitrary code execution by having a user to open a...Show more Out-of-bounds write vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows an attacker to cause information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file. This vulnerability is different from CVE-2022-25234.Show less
CVE-2022-20059 1Google 1Android Jun 17, 2026 Mar 10, 2022 N/A· v4 6.6 MEDIUM· v3 4.4 MEDIUM· v2 In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execu...Show more In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS06160806; Issue ID: ALPS06160781.Show less
CVE-2022-20058 1Google 1Android Jun 17, 2026 Mar 10, 2022 N/A· v4 6.6 MEDIUM· v3 4.4 MEDIUM· v2 In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execu...Show more In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS06160806; Issue ID: ALPS06160485.Show less
CVE-2022-20056 1Google 1Android Jun 17, 2026 Mar 10, 2022 N/A· v4 6.6 MEDIUM· v3 4.4 MEDIUM· v2 In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execu...Show more In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS06160806; Issue ID: ALPS06160820.Show less
CVE-2022-20055 1Google 1Android Jun 17, 2026 Mar 10, 2022 N/A· v4 6.8 MEDIUM· v3 7.2 HIGH· v2 In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execu...Show more In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS06160806; Issue ID: ALPS06160830.Show less
CVE-2022-20048 1Google 1Android Jun 17, 2026 Mar 10, 2022 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 In video decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...Show more In video decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05917502; Issue ID: ALPS05917502.Show less
CVE-2022-20047 1Google 1Android Jun 17, 2026 Mar 10, 2022 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 In video decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...Show more In video decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05917489; Issue ID: ALPS05917489.Show less
CVE-2022-0904 1Mattermost 1Mattermost Server Jun 17, 2026 Mar 10, 2022 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 A stack overflow bug in the document extractor in Mattermost Server in versions up to and including 6.3.2 allows an attacker to crash the server via submitting a maliciously crafted Apple Pages document.
CVE-2022-0903 1Mattermost 1Mattermost Server Jun 17, 2026 Mar 10, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 A call stack overflow bug in the SAML login feature in Mattermost server in versions up to and including 6.3.2 allows an attacker to crash the server via submitting a maliciously crafted POST body.
CVE-2022-0891 4Debian FedoraprojectLibtiff+1 more 4Active Iq Unified Manager Debian LinuxFedora+1 more Jun 17, 2026 Mar 10, 2022 N/A· v4 7.1 HIGH· v3 5.8 MEDIUM· v2 A heap buffer overflow in ExtractImageSection function in tiffcrop.c in libtiff library Version 4.3.0 allows attacker to trigger unsafe or out of bounds memory access via crafted TIFF image file which could result into a...Show more A heap buffer overflow in ExtractImageSection function in tiffcrop.c in libtiff library Version 4.3.0 allows attacker to trigger unsafe or out of bounds memory access via crafted TIFF image file which could result into application crash, potential information disclosure or any other context-dependent impactShow less
CVE-2021-46408 1Tenda 1Ax12 Firmware Jun 17, 2026 Mar 10, 2022 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 Tenda AX12 v22.03.01.21 was discovered to contain a stack buffer overflow in the function sub_422CE4. This vulnerability allows attackers to cause a Denial of Service (DoS) via the strcpy parameter.
CVE-2021-40064 1Huawei 3Emui HarmonyosMagic Ui Jun 17, 2026 Mar 10, 2022 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 There is a heap-based buffer overflow vulnerability in system components. Successful exploitation of this vulnerability may affect system stability.
CVE-2021-40060 1Huawei 2Emui Magic Ui Jun 17, 2026 Mar 10, 2022 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 There is a heap-based buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerability may affect availability.
CVE-2021-40058 1Huawei 2Emui Magic Ui Jun 17, 2026 Mar 10, 2022 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 There is a heap-based buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerability may affect availability.
CVE-2021-40057 1Huawei 2Emui Magic Ui Jun 17, 2026 Mar 10, 2022 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 There is a heap-based and stack-based buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerability may affect availability.

Previous 1...434435436...743 Next