Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

CVEs (15,527)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-42530 2Adobe Debian 2Debian Linux Xmp Toolkit Software Development Kit Jun 17, 2026 May 2, 2022 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 XMP Toolkit SDK version 2021.07 (and earlier) is affected by a stack-based buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user in...Show more XMP Toolkit SDK version 2021.07 (and earlier) is affected by a stack-based buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file.Show less
CVE-2021-42529 2Adobe Debian 2Debian Linux Xmp Toolkit Software Development Kit Jun 17, 2026 May 2, 2022 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 XMP Toolkit SDK version 2021.07 (and earlier) is affected by a stack-based buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user in...Show more XMP Toolkit SDK version 2021.07 (and earlier) is affected by a stack-based buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file.Show less
CVE-2021-46790 3Debian FedoraprojectTuxera 3Debian Linux FedoraNtfs 3g Jun 17, 2026 May 2, 2022 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 ntfsck in NTFS-3G through 2021.8.22 has a heap-based buffer overflow involving buffer+512*3-2. NOTE: the upstream position is that ntfsck is deprecated; however, it is shipped by some Linux distributions.
CVE-2022-1403 1Deltaww 1Asda Soft Jun 17, 2026 Apr 29, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 ASDA-Soft: Version 5.4.1.0 and prior does not properly sanitize input while processing a specific project file, allowing a possible out-of-bounds write condition.
CVE-2022-1015 2Fedoraproject Linux 2Fedora Linux Kernel Oct 14, 2026 Apr 29, 2022 N/A· v4 6.6 MEDIUM· v3 4.6 MEDIUM· v2 A flaw was found in the Linux kernel in linux/net/netfilter/nf_tables_api.c of the netfilter subsystem. This flaw allows a local user to cause an out-of-bounds write issue.
CVE-2022-28196 1Nvidia 1Jetson Linux Jun 17, 2026 Apr 27, 2022 N/A· v4 4.6 MEDIUM· v3 3.6 LOW· v2 NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot blob_decompress function, where insufficient validation of untrusted data may allow a local attacker with elevated privileges to cause a memory buf...Show more NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot blob_decompress function, where insufficient validation of untrusted data may allow a local attacker with elevated privileges to cause a memory buffer overflow, which may lead to code execution, limited loss of Integrity, and limited denial of service. The scope of impact can extend to other components.Show less
CVE-2022-28193 1Nvidia 1Jetson Linux Jun 17, 2026 Apr 27, 2022 N/A· v4 5.6 MEDIUM· v3 4.6 MEDIUM· v2 NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot module tegrabl_cbo.c, where insufficient validation of untrusted data may allow a local attacker with elevated privileges to cause a memory buffer...Show more NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot module tegrabl_cbo.c, where insufficient validation of untrusted data may allow a local attacker with elevated privileges to cause a memory buffer overflow, which may lead to code execution, loss of integrity, limited denial of service, and some impact to confidentiality.Show less
CVE-2022-22323 1Ibm 1Security Verify Password Synchronization Jun 17, 2026 Apr 27, 2022 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 IBM Security Identity Manager (IBM Security Verify Password Synchronization Plug-in for Windows AD 10.x) is vulnerable to a denial of service, caused by a heap-based buffer overflow in the Password Synch Plug-in. An auth...Show more IBM Security Identity Manager (IBM Security Verify Password Synchronization Plug-in for Windows AD 10.x) is vulnerable to a denial of service, caused by a heap-based buffer overflow in the Password Synch Plug-in. An authenticated attacker could exploit this vulnerability to cause a denial of service. IBM X-Force ID: 218379.Show less
CVE-2022-22312 1Ibm 1Security Verify Password Synchronization Jun 17, 2026 Apr 27, 2022 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 IBM Security Identity Manager (IBM Security Verify Password Synchronization Plug-in for Windows AD 10.x) is vulnerable to a denial of service, caused by a heap-based buffer overflow in the Password Synch Plug-in. An auth...Show more IBM Security Identity Manager (IBM Security Verify Password Synchronization Plug-in for Windows AD 10.x) is vulnerable to a denial of service, caused by a heap-based buffer overflow in the Password Synch Plug-in. An authenticated attacker could exploit this vulnerability to cause a denial of service. IBM X-Force ID: 217369.Show less
CVE-2021-34587 2Bender Ibm 5 Ibm Rational Lifecycle Integration Adapter For Windchill Cc612 FirmwareCc613 Firmware+2 more Jun 17, 2026 Apr 27, 2022 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 In Bender/ebee Charge Controllers in multiple versions a long URL could lead to webserver crash. The URL is used as input of an sprintf to a stack variable.
CVE-2022-27239 5Debian FedoraprojectHp+2 more 19Caas Platform Cifs UtilsDebian Linux+16 more Jun 17, 2026 Apr 27, 2022 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges.
CVE-2022-28085 1Htmldoc Project 1Htmldoc Jun 17, 2026 Apr 27, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 A flaw was found in htmldoc commit 31f7804. A heap buffer overflow in the function pdf_write_names in ps-pdf.cxx may lead to arbitrary code execution and Denial of Service (DoS).
CVE-2022-28506 2Fedoraproject Giflib Project 2Fedora Giflib Jun 17, 2026 Apr 25, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 There is a heap-buffer-overflow in GIFLIB 5.2.1 function DumpScreen2RGB() in gif2rgb.c:298:45.
CVE-2022-27135 1Xpdfreader 1Xpdf Jun 17, 2026 Apr 25, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 xpdf 4.03 has heap buffer overflow in the function readXRefTable located in XRef.cc. An attacker can exploit this bug to cause a Denial of Service (Segmentation fault) or other unspecified effects by sending a crafted PD...Show more xpdf 4.03 has heap buffer overflow in the function readXRefTable located in XRef.cc. An attacker can exploit this bug to cause a Denial of Service (Segmentation fault) or other unspecified effects by sending a crafted PDF file to the pdftoppm binary.Show less
CVE-2022-29077 1Ripple 1Rippled Jun 17, 2026 Apr 25, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 A heap-based buffer overflow exists in rippled before 1.8.5. The vulnerability allows attackers to cause a crash or execute commands remotely on a rippled node, which may lead to XRPL mainnet DoS or compromise. This expo...Show more A heap-based buffer overflow exists in rippled before 1.8.5. The vulnerability allows attackers to cause a crash or execute commands remotely on a rippled node, which may lead to XRPL mainnet DoS or compromise. This exposes all digital assets on the XRPL to a security threat.Show less
CVE-2021-3721 1Lenovo 1Pcmanager Jun 17, 2026 Apr 22, 2022 N/A· v4 5.5 MEDIUM· v3 4.9 MEDIUM· v2 A denial of service vulnerability was reported in Lenovo PCManager prior to version 4.0.20.10282 that could allow an attacker with local access to trigger a blue screen error.
CVE-2022-1437 1Radare 1Radare2 Jun 17, 2026 Apr 22, 2022 N/A· v4 7.1 HIGH· v3 5.8 MEDIUM· v2 Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end of the intented buffer. Typically, this can allow attackers to read sensitive informati...Show more Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end of the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash.Show less
CVE-2022-27404 2Fedoraproject Freetype 2Fedora Freetype Jun 17, 2026 Apr 22, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the function sfnt_init_face.
CVE-2022-29536 3Debian FedoraprojectGnome 3Debian Linux EpiphanyFedora Jun 17, 2026 Apr 20, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 In GNOME Epiphany before 41.4 and 42.x before 42.2, an HTML document can trigger a client buffer overflow (in ephy_string_shorten in the UI process) via a long page title. The issue occurs because the number of bytes for...Show more In GNOME Epiphany before 41.4 and 42.x before 42.2, an HTML document can trigger a client buffer overflow (in ephy_string_shorten in the UI process) via a long page title. The issue occurs because the number of bytes for a UTF-8 ellipsis character is not properly considered.Show less
CVE-2022-27527 1Autodesk 1Navisworks Jun 17, 2026 Apr 19, 2022 N/A· v4 7.8 HIGH· v3 4.4 MEDIUM· v2 A Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL files. It was fixed in PDFTron earlier than 9.0.7 version in Autodesk Navisworks 2022, and 2020.

Previous 1...456457458...777 Next