Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

CVEs (14,825)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2020-22678 1Gpac 1Gpac Jun 17, 2026 Oct 12, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 An issue was discovered in gpac 0.8.0. The gf_media_nalu_remove_emulation_bytes function in av_parsers.c has a heap-based buffer overflow which can lead to a denial of service (DOS) via a crafted input.
CVE-2020-22677 1Gpac 1Gpac Jun 17, 2026 Oct 12, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 An issue was discovered in gpac 0.8.0. The dump_data_hex function in box_dump.c has a heap-based buffer overflow which can lead to a denial of service (DOS) via a crafted input.
CVE-2020-22675 1Gpac 1Gpac Jun 17, 2026 Oct 12, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 An issue was discovered in gpac 0.8.0. The GetGhostNum function in stbl_read.c has a heap-based buffer overflow which can lead to a denial of service (DOS) via a crafted input.
CVE-2021-21940 1Anker 1Eufy Homebase 2 Firmware Jun 17, 2026 Oct 12, 2021 N/A· v4 10.0 CRITICAL· v3 7.5 HIGH· v2 A heap-based buffer overflow vulnerability exists in the pushMuxer processRtspInfo functionality of Anker Eufy Homebase 2 2.1.6.9h. A specially-crafted network packet can lead to a heap buffer overflow. An attacker can s...Show more A heap-based buffer overflow vulnerability exists in the pushMuxer processRtspInfo functionality of Anker Eufy Homebase 2 2.1.6.9h. A specially-crafted network packet can lead to a heap buffer overflow. An attacker can send a malicious packet to trigger this vulnerability.Show less
CVE-2021-37199 1Siemens 2Sinumerik 808d Firmware Sinumerik 828d Firmware Jun 17, 2026 Oct 12, 2021 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 A vulnerability has been identified in SINUMERIK 808D (All versions), SINUMERIK 828D (All versions < V4.95). Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allo...Show more A vulnerability has been identified in SINUMERIK 808D (All versions), SINUMERIK 828D (All versions < V4.95). Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial-of-service in the device.Show less
CVE-2021-30632 2Fedoraproject Google 2Chrome Fedora Jun 17, 2026 Oct 8, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Out of bounds write in V8 in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2021-30628 2Fedoraproject Google 2Chrome Fedora Jun 17, 2026 Oct 8, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Stack buffer overflow in ANGLE in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit stack corruption via a crafted HTML page.
CVE-2021-30626 2Fedoraproject Google 2Chrome Fedora Jun 17, 2026 Oct 8, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Out of bounds memory access in ANGLE in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2021-25495 1Samsung 1Notes Jun 17, 2026 Oct 6, 2021 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 A possible heap buffer overflow vulnerability in libSPenBase library of Samsung Notes prior to Samsung Note version 4.3.02.61 allows arbitrary code execution.
CVE-2021-25492 1Samsung 1Notes Jun 17, 2026 Oct 6, 2021 N/A· v4 7.1 HIGH· v3 3.6 LOW· v2 Lack of boundary checking of a buffer in libSPenBase library of Samsung Notes prior to Samsung Note version 4.3.02.61 allows OOB read.
CVE-2021-25479 1Google 1Android Jun 17, 2026 Oct 6, 2021 N/A· v4 7.2 HIGH· v3 6.5 MEDIUM· v2 A possible heap-based buffer overflow vulnerability in Exynos CP Chipset prior to SMR Oct-2021 Release 1 allows arbitrary memory write and code execution.
CVE-2021-25478 1Google 1Android Jun 17, 2026 Oct 6, 2021 N/A· v4 7.2 HIGH· v3 6.5 MEDIUM· v2 A possible stack-based buffer overflow vulnerability in Exynos CP Chipset prior to SMR Oct-2021 Release 1 allows arbitrary memory write and code execution.
CVE-2021-25475 1Google 1Android Jun 17, 2026 Oct 6, 2021 N/A· v4 6.7 MEDIUM· v3 7.2 HIGH· v2 A possible heap-based buffer overflow vulnerability in DSP kernel driver prior to SMR Oct-2021 Release 1 allows arbitrary memory write and code execution.
CVE-2021-25469 1Google 1Android Jun 17, 2026 Oct 6, 2021 N/A· v4 6.7 MEDIUM· v3 4.6 MEDIUM· v2 A possible stack-based buffer overflow vulnerability in Widevine trustlet prior to SMR Oct-2021 Release 1 allows arbitrary code execution.
CVE-2021-0690 1Google 1Android Jun 17, 2026 Oct 6, 2021 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 In ih264d_mark_err_slice_skip of ih264d_parse_pslice.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges need...Show more In ih264d_mark_err_slice_skip of ih264d_parse_pslice.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-182152757Show less
CVE-2021-31986 1Axis 4Axis Os Axis Os 2016Axis Os 2018+1 more Jun 17, 2026 Oct 5, 2021 N/A· v4 6.8 MEDIUM· v3 4.0 MEDIUM· v2 User controlled parameters related to SMTP notifications are not correctly validated. This can lead to a buffer overflow resulting in crashes and data leakage.
CVE-2021-3625 1Zephyrproject 1Zephyr Jun 17, 2026 Oct 5, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Buffer overflow in Zephyr USB DFU DNLOAD. Zephyr versions >= v2.5.0 contain Heap-based Buffer Overflow (CWE-122). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-c3gr-hgvr-...Show more Buffer overflow in Zephyr USB DFU DNLOAD. Zephyr versions >= v2.5.0 contain Heap-based Buffer Overflow (CWE-122). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-c3gr-hgvr-f363Show less
CVE-2021-42008 3Debian LinuxNetapp 11Debian Linux H300e FirmwareH300s Firmware+8 more Jun 17, 2026 Oct 5, 2021 N/A· v4 7.8 HIGH· v3 6.9 MEDIUM· v2 The decode_data function in drivers/net/hamradio/6pack.c in the Linux kernel before 5.13.13 has a slab out-of-bounds write. Input from a process that has the CAP_NET_ADMIN capability can lead to root access.
CVE-2021-32626 5Debian FedoraprojectNetapp+2 more 6Communications Operations Monitor Debian LinuxFedora+3 more Jun 17, 2026 Oct 4, 2021 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 Redis is an open source, in-memory database that persists on disk. In affected versions specially crafted Lua scripts executing in Redis can cause the heap-based Lua stack to be overflowed, due to incomplete checks for t...Show more Redis is an open source, in-memory database that persists on disk. In affected versions specially crafted Lua scripts executing in Redis can cause the heap-based Lua stack to be overflowed, due to incomplete checks for this condition. This can result with heap corruption and potentially remote code execution. This problem exists in all versions of Redis with Lua scripting support, starting from 2.6. The problem is fixed in versions 6.2.6, 6.0.16 and 5.0.14. For users unable to update an additional workaround to mitigate the problem without patching the redis-server executable is to prevent users from executing Lua scripts. This can be done using ACL to restrict EVAL and EVALSHA commands.Show less
CVE-2021-21704 2Netapp Php 2Clustered Data Ontap Php Jun 17, 2026 Oct 4, 2021 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 In PHP versions 7.3.x below 7.3.29, 7.4.x below 7.4.21 and 8.0.x below 8.0.8, when using Firebird PDO driver extension, a malicious database server could cause crashes in various database functions, such as getAttribute(...Show more In PHP versions 7.3.x below 7.3.29, 7.4.x below 7.4.21 and 8.0.x below 8.0.8, when using Firebird PDO driver extension, a malicious database server could cause crashes in various database functions, such as getAttribute(), execute(), fetch() and others by returning invalid response data that is not parsed correctly by the driver. This can result in crashes, denial of service or potentially memory corruption.Show less

Previous 1...469470471...742 Next