Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

CVEs (14,825)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-38110 1Corel 1Wordperfect 2020 Jun 17, 2026 Oct 1, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Word97Import200.dll in Corel WordPerfect 2020 20.0.0.200 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary...Show more Word97Import200.dll in Corel WordPerfect 2020 20.0.0.200 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious DOC file.Show less
CVE-2021-38101 1Corel 1Photopaint 2020 Jun 17, 2026 Oct 1, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 CDRRip.dll in Corel PhotoPaint Standard 2020 22.0.0.474 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary...Show more CDRRip.dll in Corel PhotoPaint Standard 2020 22.0.0.474 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious CPT file. This is different from CVE-2021-38099.Show less
CVE-2021-38100 1Corel 1Photopaint 2020 Jun 17, 2026 Oct 1, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Corel PhotoPaint Standard 2020 22.0.0.474 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution...Show more Corel PhotoPaint Standard 2020 22.0.0.474 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious CPT file.Show less
CVE-2021-38098 1Corel 1Pdf Fusion Jun 17, 2026 Oct 1, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Corel PDF Fusion 2.6.2.0 is affected by a Heap Corruption vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the...Show more Corel PDF Fusion 2.6.2.0 is affected by a Heap Corruption vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious PDF file.Show less
CVE-2021-38103 1Corel 1Presentations 2020 Jun 17, 2026 Oct 1, 2021 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 IBJPG2.FLT in Corel Presentations 2020 20.0.0.200 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code e...Show more IBJPG2.FLT in Corel Presentations 2020 20.0.0.200 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious PPT file.Show less
CVE-2021-38099 1Corel 1Photopaint 2020 Jun 17, 2026 Oct 1, 2021 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 CDRRip.dll in Corel PhotoPaint Standard 2020 22.0.0.474 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary...Show more CDRRip.dll in Corel PhotoPaint Standard 2020 22.0.0.474 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious CPT file. This is different from CVE-2021-38101.Show less
CVE-2021-38096 1Corel 1Pdf Fusion Jun 17, 2026 Oct 1, 2021 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 Coreip.dll in Corel PDF Fusion 2.6.2.0 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in...Show more Coreip.dll in Corel PDF Fusion 2.6.2.0 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious PDF file.Show less
CVE-2021-38097 1Corel 1Pdf Fusion Jun 17, 2026 Oct 1, 2021 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 Corel PDF Fusion 2.6.2.0 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context o...Show more Corel PDF Fusion 2.6.2.0 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious PDF file.Show less
CVE-2021-41459 1Gpac 1Mp4box Jun 17, 2026 Oct 1, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 There is a stack buffer overflow in MP4Box v1.0.1 at src/filters/dmx_nhml.c:1008 in the nhmldmx_send_sample() function szXmlFrom parameter which leads to a denial of service vulnerability.
CVE-2021-41457 1Gpac 1Mp4box Jun 17, 2026 Oct 1, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 There is a stack buffer overflow in MP4Box 1.1.0 at src/filters/dmx_nhml.c in nhmldmx_init_parsing which leads to a denial of service vulnerability.
CVE-2021-41456 1Gpac 1Mp4box Jun 17, 2026 Oct 1, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 There is a stack buffer overflow in MP4Box v1.0.1 at src/filters/dmx_nhml.c:1004 in the nhmldmx_send_sample() function szXmlTo parameter which leads to a denial of service vulnerability.
CVE-2020-20746 1Tendacn 1Ac9 Firmware Jun 17, 2026 Sep 30, 2021 N/A· v4 7.2 HIGH· v3 6.5 MEDIUM· v2 A stack-based buffer overflow in the httpd server on Tenda AC9 V15.03.06.60_EN allows remote attackers to execute arbitrary code or cause a denial of service (DoS) via a crafted POST request to /goform/SetStaticRouteCfg.
CVE-2020-20663 1Libiec Iccp Mod Project 1Libiec Iccp Mod Jun 17, 2026 Sep 30, 2021 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 libiec_iccp_mod v1.5 contains a heap-buffer-overflow in the component mms_client_connection.c.
CVE-2020-20662 1Libiec Iccp Mod Project 1Libiec Iccp Mod Jun 17, 2026 Sep 30, 2021 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 libiec_iccp_mod v1.5 contains a heap-buffer-overflow in the component mms_client_example1.c.
CVE-2021-39846 1Adobe 4Acrobat Acrobat DcAcrobat Reader+1 more Jun 17, 2026 Sep 29, 2021 N/A· v4 6.1 MEDIUM· v3 5.8 MEDIUM· v2 Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a stack overflow vulnerability due to insecure handling of a crafted PDF file, potent...Show more Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a stack overflow vulnerability due to insecure handling of a crafted PDF file, potentially resulting in memory corruption in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted PDF file in Acrobat Reader.Show less
CVE-2021-39845 1Adobe 4Acrobat Acrobat DcAcrobat Reader+1 more Jun 17, 2026 Sep 29, 2021 N/A· v4 6.1 MEDIUM· v3 5.8 MEDIUM· v2 Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a stack overflow vulnerability due to insecure handling of a crafted PDF file, potent...Show more Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a stack overflow vulnerability due to insecure handling of a crafted PDF file, potentially resulting in memory corruption in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted PDF file in Acrobat Reader.Show less
CVE-2021-39843 1Adobe 4Acrobat Acrobat DcAcrobat Reader+1 more Jun 17, 2026 Sep 29, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in...Show more Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2021-39831 1Adobe 1Framemaker Jun 17, 2026 Sep 29, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Adobe Framemaker versions 2019 Update 8 (and earlier) and 2020 Release Update 2 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the curre...Show more Adobe Framemaker versions 2019 Update 8 (and earlier) and 2020 Release Update 2 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious PDF file.Show less
CVE-2021-39829 1Adobe 1Framemaker Jun 17, 2026 Sep 29, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Adobe Framemaker versions 2019 Update 8 (and earlier) and 2020 Release Update 2 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the curre...Show more Adobe Framemaker versions 2019 Update 8 (and earlier) and 2020 Release Update 2 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious PDF file.Show less
CVE-2021-29367 1Irfanview 1Irfanview Jun 17, 2026 Sep 28, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 A buffer overflow vulnerability in WPG+0x1dda of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted WPG file.

Previous 1...470471472...742 Next