Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

CVEs (15,586)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-27571 1Google 1Android Jun 17, 2026 Apr 11, 2022 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 Heap-based buffer overflow vulnerability in sheifd_get_info_image function in libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote attacker.
CVE-2022-27570 1Google 1Android Jun 17, 2026 Apr 11, 2022 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 Heap-based buffer overflow vulnerability in parser_single_iref function in libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote attacker.
CVE-2022-27569 1Google 1Android Jun 17, 2026 Apr 11, 2022 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 Heap-based buffer overflow vulnerability in parser_infe function in libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote attacker.
CVE-2022-27568 1Google 1Android Jun 17, 2026 Apr 11, 2022 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 Heap-based buffer overflow vulnerability in parser_iloc function in libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote attacker.
CVE-2022-26098 1Google 1Android Jun 17, 2026 Apr 11, 2022 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 Heap-based buffer overflow vulnerability in sheifd_create function of libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote attackers.
CVE-2022-26092 1Google 1Android Jun 17, 2026 Apr 11, 2022 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 Improper boundary check in Quram Agif library prior to SMR Apr-2022 Release 1 allows arbitrary code execution.
CVE-2022-25792 1Autodesk 11Advance Steel AutocadAutocad Architecture+8 more Jun 17, 2026 Apr 11, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 A maliciously crafted DXF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 and Autodesk Navisworks 2022 can be used to write beyond the allocated buffer through Buffer overflow vulnerability. This vulnerability can be exp...Show more A maliciously crafted DXF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 and Autodesk Navisworks 2022 can be used to write beyond the allocated buffer through Buffer overflow vulnerability. This vulnerability can be exploited to execute arbitrary code.Show less
CVE-2022-25791 1Autodesk 11Advance Steel AutocadAutocad Architecture+8 more Jun 17, 2026 Apr 11, 2022 N/A· v4 7.8 HIGH· v3 4.4 MEDIUM· v2 A Memory Corruption vulnerability for DWF and DWFX files in Autodesk AutoCAD 2022, 2021, 2020, 2019 and Autodesk Navisworks 2022 may lead to code execution through maliciously crafted DLL files.
CVE-2022-25790 1Autodesk 11Advance Steel AutocadAutocad Architecture+8 more Jun 17, 2026 Apr 11, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 A maliciously crafted DWF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 and Autodesk Navisworks 2022 can be used to write beyond the allocated boundaries when parsing the DWF files. Exploitation of this vulnerability m...Show more A maliciously crafted DWF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 and Autodesk Navisworks 2022 can be used to write beyond the allocated boundaries when parsing the DWF files. Exploitation of this vulnerability may lead to code execution.Show less
CVE-2022-20074 1Google 1Android Jun 17, 2026 Apr 11, 2022 N/A· v4 6.6 MEDIUM· v3 4.4 MEDIUM· v2 In preloader (partition), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional...Show more In preloader (partition), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS06183301; Issue ID: ALPS06183301.Show less
CVE-2022-20070 1Google 1Android Jun 17, 2026 Apr 11, 2022 N/A· v4 6.7 MEDIUM· v3 4.6 MEDIUM· v2 In ssmr, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is no needed for exploitation. Pa...Show more In ssmr, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is no needed for exploitation. Patch ID: ALPS06362920; Issue ID: ALPS06362920.Show less
CVE-2022-20067 1Google 1Android Jun 17, 2026 Apr 11, 2022 N/A· v4 6.7 MEDIUM· v3 4.6 MEDIUM· v2 In mdp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is no needed for exploitation. Pat...Show more In mdp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is no needed for exploitation. Patch ID: ALPS05836585; Issue ID: ALPS05836585.Show less
CVE-2022-20063 1Google 1Android Jun 17, 2026 Apr 11, 2022 N/A· v4 6.5 MEDIUM· v3 6.9 MEDIUM· v2 In atf (spm), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation....Show more In atf (spm), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS06171715; Issue ID: ALPS06171715.Show less
CVE-2022-27295 1Dlink 1Dir 619 Firmware Jun 17, 2026 Apr 10, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formAdvanceSetup. This vulnerability allows attackers to cause a Denial of Service (DoS) via the webpage parameter.
CVE-2022-27294 1Dlink 1Dir 619 Firmware Jun 17, 2026 Apr 10, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formWlanWizardSetup. This vulnerability allows attackers to cause a Denial of Service (DoS) via the webpage parameter.
CVE-2022-27293 1Dlink 1Dir 619 Firmware Jun 17, 2026 Apr 10, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formWlanSetup. This vulnerability allows attackers to cause a Denial of Service (DoS) via the webpage parameter.
CVE-2022-27292 1Dlink 1Dir 619 Firmware Jun 17, 2026 Apr 10, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formLanguageChange. This vulnerability allows attackers to cause a Denial of Service (DoS) via the nextPage parameter.
CVE-2022-27291 1Dlink 1Dir 619 Firmware Jun 17, 2026 Apr 10, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formdumpeasysetup. This vulnerability allows attackers to cause a Denial of Service (DoS) via the config.save_network_enabled parameter.
CVE-2022-27290 1Dlink 1Dir 619 Firmware Jun 17, 2026 Apr 10, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formSetWanDhcpplus. This vulnerability allows attackers to cause a Denial of Service (DoS) via the curTime parameter.
CVE-2022-27289 1Dlink 1Dir 619 Firmware Jun 17, 2026 Apr 10, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formSetWanL2TP. This vulnerability allows attackers to cause a Denial of Service (DoS) via the curTime parameter.

Previous 1...462463464...780 Next