← Back
CWE-787

15,527 CVEs • Abstraction: Base • Likelihood of Exploit: High

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

JSON object

Loading...

CVEs (15,527)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-30917
1H3c
1Magic R100 Firmware
Jun 17, 2026
Jun 8, 2022
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the AddWlanMacList parameter at /goform/aspForm.
CVE-2022-30916
1H3c
1Magic R100 Firmware
Jun 17, 2026
Jun 8, 2022
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the Asp_SetTelnetDebug parameter at /goform/aspForm.
CVE-2022-30915
1H3c
1Magic R100 Firmware
Jun 17, 2026
Jun 8, 2022
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the UpdateSnat parameter at /goform/aspForm.
CVE-2022-30914
1H3c
1Magic R100 Firmware
Jun 17, 2026
Jun 8, 2022
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the UpdateMacClone parameter at /goform/aspForm.
CVE-2022-30913
1H3c
1Magic R100 Firmware
Jun 17, 2026
Jun 8, 2022
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the ipqos_set_bandwidth parameter at /goform/aspForm.
CVE-2022-30912
1H3c
1Magic R100 Firmware
Jun 17, 2026
Jun 8, 2022
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the UpdateWanParams parameter at /goform/aspForm.
CVE-2022-30910
1H3c
1Magic R100 Firmware
Jun 17, 2026
Jun 8, 2022
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the GO parameter at /goform/aspForm.
CVE-2022-30909
1H3c
1Magic R100 Firmware
Jun 17, 2026
Jun 8, 2022
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the CMD parameter at /goform/aspForm.
CVE-2022-30790
1Denx
1U Boot
Jun 17, 2026
Jun 8, 2022
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
Das U-Boot 2022.01 has a Buffer Overflow, a different issue than CVE-2022-30552.
CVE-2019-25063
1Sricam
1Deviceviewer
Jun 17, 2026
Jun 8, 2022
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
A vulnerability was found in Sricam IP CCTV Camera. It has been classified as critical. Affected is an unknown function of the component Device Viewer. The manipulation leads to memory corruption. Local access is require...Show more
A vulnerability was found in Sricam IP CCTV Camera. It has been classified as critical. Affected is an unknown function of the component Device Viewer. The manipulation leads to memory corruption. Local access is required to approach this attack.Show less
CVE-2019-25062
1Sricam
1Deviceviewer
Jun 17, 2026
Jun 8, 2022
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
A vulnerability was found in Sricam IP CCTV Camera and classified as critical. This issue affects some unknown processing of the component Device Viewer. The manipulation leads to memory corruption. An attack has to be a...Show more
A vulnerability was found in Sricam IP CCTV Camera and classified as critical. This issue affects some unknown processing of the component Device Viewer. The manipulation leads to memory corruption. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.Show less
CVE-2022-21759
1Google
1Android
Jun 17, 2026
Jun 6, 2022
N/A· v4
6.7 MEDIUM· v3
4.6 MEDIUM· v2
In power service, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploi...Show more
In power service, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06419106; Issue ID: ALPS06419077.Show less
CVE-2022-21754
1Google
1Android
Jun 17, 2026
Jun 6, 2022
N/A· v4
6.7 MEDIUM· v3
4.6 MEDIUM· v2
In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploita...Show more
In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06535953; Issue ID: ALPS06535953.Show less
CVE-2022-21753
1Google
1Android
Jun 17, 2026
Jun 6, 2022
N/A· v4
6.7 MEDIUM· v3
4.6 MEDIUM· v2
In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploita...Show more
In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06493873; Issue ID: ALPS06493899.Show less
CVE-2022-21752
1Google
1Android
Jun 17, 2026
Jun 6, 2022
N/A· v4
6.7 MEDIUM· v3
4.6 MEDIUM· v2
In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploita...Show more
In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06493873; Issue ID: ALPS06493873.Show less
CVE-2022-21751
1Google
1Android
Jun 17, 2026
Jun 6, 2022
N/A· v4
6.7 MEDIUM· v3
4.6 MEDIUM· v2
In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploita...Show more
In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06511132; Issue ID: ALPS06511132.Show less
CVE-2022-21750
1Google
1Android
Jun 17, 2026
Jun 6, 2022
N/A· v4
6.7 MEDIUM· v3
4.6 MEDIUM· v2
In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploita...Show more
In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06521283; Issue ID: ALPS06521283.Show less
CVE-2022-31783
2Fedoraproject
Liblouis
2Fedora
Liblouis
Jun 17, 2026
Jun 2, 2022
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
Liblouis 3.21.0 has an out-of-bounds write in compileRule in compileTranslationTable.c, as demonstrated by lou_trace.
CVE-2022-31782
1Freedesktop
1Freetype Demo Programs
Jun 17, 2026
Jun 2, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
ftbench.c in FreeType Demo Programs through 2.12.1 has a heap-based buffer overflow.
CVE-2022-30521
1Dlink
1Dir 890l Firmware
Jun 17, 2026
Jun 2, 2022
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
The LAN-side Web-Configuration Interface has Stack-based Buffer Overflow vulnerability in the D-Link Wi-Fi router firmware DIR-890L DIR890LA1_FW107b09.bin and previous versions. The function created at 0x17958 of /htdocs...Show more
The LAN-side Web-Configuration Interface has Stack-based Buffer Overflow vulnerability in the D-Link Wi-Fi router firmware DIR-890L DIR890LA1_FW107b09.bin and previous versions. The function created at 0x17958 of /htdocs/cgibin will call sprintf without checking the length of strings in parameters given by HTTP header and can be controlled by users easily. The attackers can exploit the vulnerability to carry out arbitrary code by means of sending a specially constructed payload to port 49152.Show less