Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

CVEs (15,586)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-36347 1Dell 2Integrated Dell Remote Access Controller 8 Firmware Integrated Dell Remote Access Controller 9 Firmware Jun 17, 2026 Jan 25, 2022 N/A· v4 7.2 HIGH· v3 9.0 HIGH· v2 iDRAC9 versions prior to 5.00.20.00 and iDRAC8 versions prior to 2.82.82.82 contain a stack-based buffer overflow vulnerability. An authenticated remote attacker with high privileges could potentially exploit this vulner...Show more iDRAC9 versions prior to 5.00.20.00 and iDRAC8 versions prior to 2.82.82.82 contain a stack-based buffer overflow vulnerability. An authenticated remote attacker with high privileges could potentially exploit this vulnerability to control process execution and gain access to the iDRAC operating system.Show less
CVE-2021-46483 1Jsish 1Jsish Jun 17, 2026 Jan 25, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Jsish v3.5.0 was discovered to contain a heap buffer overflow via BooleanConstructor at src/jsiBool.c.
CVE-2021-46482 1Jsish 1Jsish Jun 17, 2026 Jan 25, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Jsish v3.5.0 was discovered to contain a heap buffer overflow via NumberConstructor at src/jsiNumber.c.
CVE-2021-46480 1Jsish 1Jsish Jun 17, 2026 Jan 25, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Jsish v3.5.0 was discovered to contain a heap buffer overflow via jsiValueObjDelete in src/jsiEval.c. This vulnerability can lead to a Denial of Service (DoS).
CVE-2021-46478 1Jsish 1Jsish Jun 17, 2026 Jan 25, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Jsish v3.5.0 was discovered to contain a heap buffer overflow via jsiClearStack in src/jsiEval.c. This vulnerability can lead to a Denial of Service (DoS).
CVE-2021-46477 1Jsish 1Jsish Jun 17, 2026 Jan 25, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Jsish v3.5.0 was discovered to contain a heap buffer overflow via RegExp_constructor in src/jsiRegexp.c. This vulnerability can lead to a Denial of Service (DoS).
CVE-2021-46475 1Jsish 1Jsish Jun 17, 2026 Jan 25, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Jsish v3.5.0 was discovered to contain a heap buffer overflow via jsi_ArraySliceCmd in src/jsiArray.c. This vulnerability can lead to a Denial of Service (DoS).
CVE-2021-46474 1Jsish 1Jsish Jun 17, 2026 Jan 25, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Jsish v3.5.0 was discovered to contain a heap buffer overflow via jsiEvalCodeSub in src/jsiEval.c. This vulnerability can lead to a Denial of Service (DoS).
CVE-2022-23850 1Epub2txt Project 1Epub2txt Jun 17, 2026 Jan 23, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 xhtml_translate_entity in xhtml.c in epub2txt (aka epub2txt2) through 2.02 allows a stack-based buffer overflow via a crafted EPUB document.
CVE-2021-46238 1Gpac 1Gpac Jun 17, 2026 Jan 21, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 GPAC v1.1.0 was discovered to contain a stack overflow via the function gf_node_get_name () at scenegraph/base_scenegraph.c. This vulnerability can lead to a program crash, causing a Denial of Service (DoS).
CVE-2022-0318 3Apple DebianVim 3Debian Linux MacosVim Jun 17, 2026 Jan 21, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Heap-based Buffer Overflow in vim/vim prior to 8.2.
CVE-2022-21933 1Asus 13Pa90 Firmware Pb50 FirmwarePb60 Firmware+10 more Jun 17, 2026 Jan 21, 2022 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 ASUS VivoMini/Mini PC device has an improper input validation vulnerability. A local attacker with system privilege can use system management interrupt (SMI) to modify memory, resulting in arbitrary code execution for co...Show more ASUS VivoMini/Mini PC device has an improper input validation vulnerability. A local attacker with system privilege can use system management interrupt (SMI) to modify memory, resulting in arbitrary code execution for controlling the system or disrupting service.Show less
CVE-2022-22895 1Jerryscript 1Jerryscript Jun 17, 2026 Jan 21, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Jerryscript 3.0.0 was discovered to contain a heap-buffer-overflow via ecma_utf8_string_to_number_by_radix in /jerry-core/ecma/base/ecma-helpers-conversion.c.
CVE-2022-22894 1Jerryscript 1Jerryscript Jun 17, 2026 Jan 21, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Jerryscript 3.0.0 was discovered to contain a stack overflow via ecma_lcache_lookup in /jerry-core/ecma/base/ecma-lcache.c.
CVE-2022-22893 1Jerryscript 1Jerryscript Jun 17, 2026 Jan 21, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Jerryscript 3.0.0 was discovered to contain a stack overflow via vm_loop.lto_priv.304 in /jerry-core/vm/vm.c.
CVE-2022-22888 1Jerryscript 1Jerryscript Jun 17, 2026 Jan 20, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Jerryscript 3.0.0 was discovered to contain a stack overflow via ecma_op_object_find_own in /ecma/operations/ecma-objects.c.
CVE-2021-46334 1Moddable 1Moddable Sdk Jun 17, 2026 Jan 20, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Moddable SDK v11.5.0 was discovered to contain a stack buffer overflow via the component __interceptor_strcat.
CVE-2021-46332 1Moddable 1Moddable Sdk Jun 17, 2026 Jan 20, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Moddable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via xs/sources/xsDataView.c in fxUint8Getter.
CVE-2021-46328 1Moddable 1Moddable Sdk Jun 17, 2026 Jan 20, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Moddable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via the component __libc_start_main.
CVE-2021-46326 1Moddable 1Moddable Sdk Jun 17, 2026 Jan 20, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Moddable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via the component __asan_memcpy.

Previous 1...484485486...780 Next