Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

CVEs (14,824)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2020-21050 2Libsixel Project Saitoha 2Libsixel Libsixel Jun 17, 2026 Sep 14, 2021 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 Libsixel prior to v1.8.3 contains a stack buffer overflow in the function gif_process_raster at fromgif.c.
CVE-2021-25665 1Siemens 1Simcenter Star Ccm+ Jun 17, 2026 Sep 14, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 A vulnerability has been identified in Simcenter STAR-CCM+ Viewer (All versions < V2021.2.1). The starview+.exe application lacks proper validation of user-supplied data when parsing scene files. This could result in an...Show more A vulnerability has been identified in Simcenter STAR-CCM+ Viewer (All versions < V2021.2.1). The starview+.exe application lacks proper validation of user-supplied data when parsing scene files. This could result in an out of bounds write past the end of an allocated structure. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-13700)Show less
CVE-2021-33362 1Gpac 1Gpac Jun 17, 2026 Sep 13, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Stack buffer overflow in the hevc_parse_vps_extension function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted file.
CVE-2021-33545 1Geutebrueck 16G Cam Ebc 2110 Firmware G Cam Ebc 2111 FirmwareG Cam Ebc 2112 Firmware+13 more Jun 17, 2026 Sep 13, 2021 N/A· v4 7.2 HIGH· v3 6.5 MEDIUM· v2 Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the counter parameter which may allow an attacker to remotely execute arbitrary code.
CVE-2021-32137 1Gpac 1Gpac Jun 17, 2026 Sep 13, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Heap buffer overflow in the URL_GetProtocolType function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted file.
CVE-2021-32136 1Gpac 1Gpac Jun 17, 2026 Sep 13, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Heap buffer overflow in the print_udta function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted file.
CVE-2021-34346 1Qnap 1Nvr Storage Expansion Firmware Jun 17, 2026 Sep 10, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 A stack buffer overflow vulnerability has been reported to affect QNAP device running NVR Storage Expansion. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnera...Show more A stack buffer overflow vulnerability has been reported to affect QNAP device running NVR Storage Expansion. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of NVR Storage Expansion: NVR Storage Expansion 1.0.6 ( 2021/08/03 ) and laterShow less
CVE-2021-34345 1Qnap 14Ej1600 Firmware Tl D1600s FirmwareTl D400s Firmware+11 more Jun 17, 2026 Sep 10, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 A stack buffer overflow vulnerability has been reported to affect QNAP device running NVR Storage Expansion. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnera...Show more A stack buffer overflow vulnerability has been reported to affect QNAP device running NVR Storage Expansion. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of NVR Storage Expansion: NVR Storage Expansion 1.0.6 ( 2021/08/03 ) and laterShow less
CVE-2021-34344 1Qnap 1Qusbcam2 Jun 17, 2026 Sep 10, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 A stack buffer overflow vulnerability has been reported to affect QNAP device running QUSBCam2. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the...Show more A stack buffer overflow vulnerability has been reported to affect QNAP device running QUSBCam2. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of QUSBCam2: QTS 4.5.4: QUSBCam2 1.1.4 ( 2021/07/30 ) and later QTS 5.0: QUSBCam2 2.0.1 ( 2021/08/03 ) and later QTS 4.3.6: QUSBCam2 1.1.4 ( 2021/07/30 ) and later QTS 4.3.3: QUSBCam2 1.1.4 ( 2021/08/06 ) and later QuTS hero 4.5.3: QUSBCam2 1.1.4 ( 2021/07/30 ) and laterShow less
CVE-2021-34343 1Qnap 3Qts Quts HeroQutscloud Jun 17, 2026 Sep 10, 2021 N/A· v4 7.2 HIGH· v3 6.5 MEDIUM· v2 A stack buffer overflow vulnerability has been reported to affect QNAP device running QTS, QuTScloud, QuTS hero. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vul...Show more A stack buffer overflow vulnerability has been reported to affect QNAP device running QTS, QuTScloud, QuTS hero. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of QTS, QuTScloud, QuTS hero: QTS 4.5.4.1715 build 20210630 and later QTS 5.0.0.1716 build 20210701 and later QuTScloud c4.5.6.1755 and later QuTS hero h4.5.4.1771 build 20210825 and laterShow less
CVE-2021-28816 1Qnap 3Qts Quts HeroQutscloud Jun 17, 2026 Sep 10, 2021 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 A stack buffer overflow vulnerability has been reported to affect QNAP device running QTS, QuTScloud, QuTS hero. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vul...Show more A stack buffer overflow vulnerability has been reported to affect QNAP device running QTS, QuTScloud, QuTS hero. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of QTS, QuTScloud, QuTS hero: QTS 4.5.4.1715 build 20210630 and later QTS 5.0.0.1716 build 20210701 and later QTS 4.3.3.1693 build 20210624 and later QTS 4.3.6.1750 build 20210730 and later QuTScloud c4.5.6.1755 and later QuTS hero h4.5.4.1771 build 20210825 and laterShow less
CVE-2021-25461 1Google 1Android Jun 17, 2026 Sep 9, 2021 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 An improper length check in APAService prior to SMR Sep-2021 Release 1 results in stack based Buffer Overflow.
CVE-2021-32487 1Mediatek 1Modem Jun 17, 2026 Sep 9, 2021 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 In modem 2G RRM, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...Show more In modem 2G RRM, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00500736; Issue ID: ALPS04938456.Show less
CVE-2021-32486 1Mediatek 1Modem Jun 17, 2026 Sep 9, 2021 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 In modem 2G RRM, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...Show more In modem 2G RRM, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00500621; Issue ID: ALPS04964928.Show less
CVE-2021-32485 1Mediatek 1Modem Jun 17, 2026 Sep 9, 2021 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 In modem 2G RRM, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...Show more In modem 2G RRM, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00500621; Issue ID: ALPS04964926.Show less
CVE-2021-32484 1Mediatek 1Modem Jun 17, 2026 Sep 9, 2021 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 In modem 2G RRM, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...Show more In modem 2G RRM, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00500621; Issue ID: ALPS04964917.Show less
CVE-2020-19144 3Debian NetappSimplesystems 3Debian Linux LibtiffOntap Select Deploy Administration Utility Jun 17, 2026 Sep 9, 2021 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 Buffer Overflow in LibTiff v4.0.10 allows attackers to cause a denial of service via the 'in _TIFFmemcpy' funtion in the component 'tif_unix.c'.
CVE-2020-19143 2Debian Simplesystems 2Debian Linux Libtiff Jun 17, 2026 Sep 9, 2021 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 Buffer Overflow in LibTiff v4.0.10 allows attackers to cause a denial of service via the "TIFFVGetField" funtion in the component 'libtiff/tif_dir.c'.
CVE-2021-3761 2Cloudflare Debian 2Debian Linux Octorpki Jun 17, 2026 Sep 9, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Any CA issuer in the RPKI can trick OctoRPKI prior to 1.3.0 into emitting an invalid VRP "MaxLength" value, causing RTR sessions to terminate. An attacker can use this to disable RPKI Origin Validation in a victim networ...Show more Any CA issuer in the RPKI can trick OctoRPKI prior to 1.3.0 into emitting an invalid VRP "MaxLength" value, causing RTR sessions to terminate. An attacker can use this to disable RPKI Origin Validation in a victim network (for example AS 13335 - Cloudflare) prior to launching a BGP hijack which during normal operations would be rejected as "RPKI invalid". Additionally, in certain deployments RTR session flapping in and of itself also could cause BGP routing churn, causing availability issues.Show less
CVE-2021-26603 1Bandisoft 1Ark Library Jun 17, 2026 Sep 9, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 A heap overflow issue was found in ARK library of bandisoft Co., Ltd when the Ark_DigPathA function parsed a file path. This vulnerability is due to missing support for string length check.

Previous 1...475476477...742 Next