Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

CVEs (15,523)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-21768 1Google 1Android Jun 17, 2026 Jul 6, 2022 N/A· v4 8.8 HIGH· v3 8.3 HIGH· v2 In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exp...Show more In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06784351; Issue ID: ALPS06784351.Show less
CVE-2022-21767 1Google 1Android Jun 17, 2026 Jul 6, 2022 N/A· v4 8.8 HIGH· v3 8.3 HIGH· v2 In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exp...Show more In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06784430; Issue ID: ALPS06784430.Show less
CVE-2022-21766 1Google 1Android Jun 17, 2026 Jul 6, 2022 N/A· v4 6.7 MEDIUM· v3 4.6 MEDIUM· v2 In CCCI, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. P...Show more In CCCI, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06641673; Issue ID: ALPS06641653.Show less
CVE-2022-21765 1Google 1Android Jun 17, 2026 Jul 6, 2022 N/A· v4 6.7 MEDIUM· v3 4.6 MEDIUM· v2 In CCCI, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. P...Show more In CCCI, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06641673; Issue ID: ALPS06641673.Show less
CVE-2022-21744 1Mediatek 7Lr11 Lr12Lr12a+4 more Jun 17, 2026 Jul 6, 2022 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 In Modem 2G RR, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution when decoding GPRS Packet Neighbour Cell Data (PNCD) improper neighbouring cell size with no...Show more In Modem 2G RR, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution when decoding GPRS Packet Neighbour Cell Data (PNCD) improper neighbouring cell size with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00810064; Issue ID: ALPS06641626.Show less
CVE-2022-20083 1Mediatek 7Lr11 Lr12Lr12a+4 more Jun 17, 2026 Jul 6, 2022 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 In Modem 2G/3G CC, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution when decoding combined FACILITY with no additional execution privileges needed. User inte...Show more In Modem 2G/3G CC, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution when decoding combined FACILITY with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00803883; Issue ID: MOLY00803883.Show less
CVE-2022-32386 1Tendacn 1Ac23 Ac2100 Firmware Jul 9, 2026 Jul 6, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Tenda AC23 v16.03.07.44 was discovered to contain a buffer overflow via fromAdvSetMacMtuWan.
CVE-2022-32385 1Tendacn 1Ac23 Ac2100 Firmware Jul 9, 2026 Jul 6, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Tenda AC23 v16.03.07.44 is vulnerable to Stack Overflow that will allow for the execution of arbitrary code (remote).
CVE-2022-32383 1Tendacn 1Ac23 Ac2100 Firmware Jun 17, 2026 Jul 6, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Tenda AC23 v16.03.07.44 was discovered to contain a stack overflow via the AdvSetMacMtuWan function.
CVE-2022-2304 3Debian FedoraprojectVim 3Debian Linux FedoraVim Oct 8, 2026 Jul 5, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.
CVE-2022-31602 1Nvidia 1Dgx A100 Firmware Jun 17, 2026 Jul 4, 2022 N/A· v4 6.7 MEDIUM· v3 4.4 MEDIUM· v2 NVIDIA DGX A100 contains a vulnerability in SBIOS in the IpSecDxe, where a user with elevated privileges and a preconditioned heap can exploit an out-of-bounds write vulnerability, which may lead to code execution, denia...Show more NVIDIA DGX A100 contains a vulnerability in SBIOS in the IpSecDxe, where a user with elevated privileges and a preconditioned heap can exploit an out-of-bounds write vulnerability, which may lead to code execution, denial of service, data integrity impact, and information disclosure.Show less
CVE-2022-31601 1Nvidia 1Dgx A100 Firmware Jun 17, 2026 Jul 4, 2022 N/A· v4 6.7 MEDIUM· v3 4.6 MEDIUM· v2 NVIDIA DGX A100 contains a vulnerability in SBIOS in the SmbiosPei, which may allow a highly privileged local attacker to cause an out-of-bounds write, which may lead to code execution, denial of service, compromised int...Show more NVIDIA DGX A100 contains a vulnerability in SBIOS in the SmbiosPei, which may allow a highly privileged local attacker to cause an out-of-bounds write, which may lead to code execution, denial of service, compromised integrity, and information disclosure.Show less
CVE-2022-2288 2Fedoraproject Vim 2Fedora Vim Jun 17, 2026 Jul 3, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.
CVE-2022-34913 1Md2roff Project 1Md2roff Jun 17, 2026 Jul 2, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 md2roff 1.7 has a stack-based buffer overflow via a Markdown file containing a large number of consecutive characters to be processed. NOTE: the vendor's position is that the product is not intended for untrusted input
CVE-2022-28200 1Nvidia 1Dgx A100 Firmware Jun 17, 2026 Jul 2, 2022 N/A· v4 8.2 HIGH· v3 4.6 MEDIUM· v2 NVIDIA DGX A100 contains a vulnerability in SBIOS in the BiosCfgTool, where a local user with elevated privileges can read and write beyond intended bounds in SMRAM, which may lead to code execution, escalation of privil...Show more NVIDIA DGX A100 contains a vulnerability in SBIOS in the BiosCfgTool, where a local user with elevated privileges can read and write beyond intended bounds in SMRAM, which may lead to code execution, escalation of privileges, denial of service, and information disclosure. The scope of impact can extend to other components.Show less
CVE-2022-32324 1Pdfalto Project 1Pdfalto Jun 17, 2026 Jul 1, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 PDFAlto v0.4 was discovered to contain a heap buffer overflow via the component /pdfalto/src/pdfalto.cc.
CVE-2022-32384 1Tendacn 1Ac23 Ac2100 Firmware Jul 9, 2026 Jul 1, 2022 N/A· v4 8.8 HIGH· v3 5.8 MEDIUM· v2 Tenda AC23 v16.03.07.44 was discovered to contain a stack overflow via the security_5g parameter in the function formWifiBasicSet.
CVE-2022-32053 1Totolink 1T6 Firmware Jun 17, 2026 Jul 1, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the cloneMac parameter in the function FUN_0041621c.
CVE-2022-32052 1Totolink 1T6 Firmware Jun 17, 2026 Jul 1, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the desc parameter in the function FUN_004137a4.
CVE-2022-32051 1Totolink 1T6 Firmware Jun 17, 2026 Jul 1, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the desc, week, sTime, eTime parameters in the function FUN_004133c4.

Previous 1...439440441...777 Next