Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

CVEs (14,824)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-38593 2Fedoraproject Qt 2Fedora Qt Jun 17, 2026 Aug 12, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Qt 5.x before 5.15.6 and 6.x through 6.1.2 has an out-of-bounds write in QOutlineMapper::convertPath (called from QRasterPaintEngine::fill and QPaintEngineEx::stroke).
CVE-2021-38592 1Wasm3 Project 1Wasm3 Jun 17, 2026 Aug 12, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Wasm3 0.5.0 has a heap-based buffer overflow in op_Const64 (called from EvaluateExpression and m3_LoadModule).
CVE-2021-38568 1Foxitsoftware 2Foxit Reader Phantompdf Jun 17, 2026 Aug 11, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows memory corruption during conversion of a PDF document to a different document format.
CVE-2021-1106 1Nvidia 2Jetson Linux Shield Experience Jun 17, 2026 Aug 11, 2021 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 NVIDIA Linux kernel distributions contain a vulnerability in nvmap, where writes may be allowed to read-only buffers, which may result in escalation of privileges, complete denial of service, unconstrained information di...Show more NVIDIA Linux kernel distributions contain a vulnerability in nvmap, where writes may be allowed to read-only buffers, which may result in escalation of privileges, complete denial of service, unconstrained information disclosure, and serious data tampering of all processes on the system.Show less
CVE-2021-33793 1Foxitsoftware 2Foxit Reader Phantompdf Jun 17, 2026 Aug 11, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 have an out-of-bounds write because the Cross-Reference table is mishandled during Office document conversion.
CVE-2021-32947 1Fatek 1Fvdesigner Jun 17, 2026 Aug 11, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 FATEK Automation FvDesigner, Versions 1.5.88 and prior is vulnerable to a stack-based buffer overflow, which may allow an attacker to execute arbitrary code.
CVE-2021-32939 1Fatek 1Fvdesigner Jun 17, 2026 Aug 11, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 FATEK Automation FvDesigner, Versions 1.5.88 and prior is vulnerable to an out-of-bounds write while processing project files, allowing an attacker to craft a project file that may permit arbitrary code execution.
CVE-2021-38525 1Netgear 26D3600 Firmware D6000 FirmwareD6200 Firmware+23 more Jun 17, 2026 Aug 11, 2021 N/A· v4 7.2 HIGH· v3 6.5 MEDIUM· v2 Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.76, D6200 before 1.1.00.36, D7000 before 1.0.1.70, EX6200v2 before 1....Show more Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.76, D6200 before 1.1.00.36, D7000 before 1.0.1.70, EX6200v2 before 1.0.1.78, EX7000 before 1.0.1.78, EX8000 before 1.0.1.186, JR6150 before 1.0.1.18, PR2000 before 1.0.0.28, R6020 before 1.0.0.42, R6050 before 1.0.1.18, R6080 before 1.0.0.42, R6120 before 1.0.0.46, R6220 before 1.1.0.80, R6260 before 1.1.0.64, R6300v2 before 1.0.4.34, R6700 before 1.0.2.6, R6700v2 before 1.2.0.36, R6800 before 1.2.0.36, R6900 before 1.0.2.4, R6900P before 1.3.1.64, R6900v2 before 1.2.0.36, R7000 before 1.0.9.42, R7000P before 1.3.1.64, R7800 before 1.0.2.60, R8900 before 1.0.4.12, R9000 before 1.0.4.12, and XR500 before 2.3.2.40.Show less
CVE-2021-38524 1Netgear 13Mk62 Firmware Mr60 FirmwareMs60 Firmware+10 more Jun 17, 2026 Aug 11, 2021 N/A· v4 4.9 MEDIUM· v3 4.0 MEDIUM· v2 Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects MK62 before 1.0.6.110, MR60 before 1.0.6.110, MS60 before 1.0.6.110, RAX15 before 1.0.2.82, RAX20 before 1.0.2....Show more Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects MK62 before 1.0.6.110, MR60 before 1.0.6.110, MS60 before 1.0.6.110, RAX15 before 1.0.2.82, RAX20 before 1.0.2.82, RAX200 before 1.0.3.106, RAX45 before 1.0.2.32, RAX50 before 1.0.2.32, RAX75 before 1.0.3.106, RAX80 before 1.0.3.106, RBK752 before 3.2.16.6, RBR750 before 3.2.16.6, and RBS750 before 3.2.16.6.Show less
CVE-2021-38523 1Netgear 1R6400 Firmware Jun 17, 2026 Aug 11, 2021 N/A· v4 7.2 HIGH· v3 6.5 MEDIUM· v2 NETGEAR R6400 devices before 1.0.1.70 are affected by a stack-based buffer overflow by an authenticated user.
CVE-2021-38522 1Netgear 1R6400 Firmware Jun 17, 2026 Aug 11, 2021 N/A· v4 7.2 HIGH· v3 6.5 MEDIUM· v2 NETGEAR R6400 devices before 1.0.1.52 are affected by a stack-based buffer overflow by an authenticated user.
CVE-2021-38517 1Netgear 4R6400 Firmware Rax75 FirmwareRax80 Firmware+1 more Jun 17, 2026 Aug 11, 2021 N/A· v4 7.2 HIGH· v3 6.5 MEDIUM· v2 Certain NETGEAR devices are affected by out-of-bounds reads and writes. This affects R6400 before 1.0.1.70, RAX75 before 1.0.4.120, RAX80 before 1.0.4.120, and XR300 before 1.0.3.50.
CVE-2020-21680 1Fig2dev Project 1Fig2dev Jun 17, 2026 Aug 10, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 A stack-based buffer overflow in the put_arrow() component in genpict2e.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into pict2e format.
CVE-2020-21677 2Libsixel Project Saitoha 2Libsixel Libsixel Jun 17, 2026 Aug 10, 2021 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 A heap-based buffer overflow in the sixel_encoder_output_without_macro function in encoder.c of Libsixel 1.8.4 allows attackers to cause a denial of service (DOS) via converting a crafted PNG file into Sixel format.
CVE-2020-21676 2Debian Fig2dev Project 2Debian Linux Fig2dev Jun 17, 2026 Aug 10, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 A stack-based buffer overflow in the genpstrx_text() component in genpstricks.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into pstricks format.
CVE-2020-21675 2Debian Fig2dev Project 2Debian Linux Fig2dev Jun 17, 2026 Aug 10, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 A stack-based buffer overflow in the genptk_text component in genptk.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into ptk format.
CVE-2021-32943 1Advantech 1Webaccess/scada Jun 17, 2026 Aug 10, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 The affected product is vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute arbitrary code on the WebAccess/SCADA (WebAccess/SCADA versions prior to 8.4.5, WebAccess/SCADA version...Show more The affected product is vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute arbitrary code on the WebAccess/SCADA (WebAccess/SCADA versions prior to 8.4.5, WebAccess/SCADA versions prior to 9.0.1).Show less
CVE-2021-20349 1Ibm 1Tivoli Workload Scheduler Jun 17, 2026 Aug 9, 2021 N/A· v4 5.3 MEDIUM· v3 4.6 MEDIUM· v2 IBM Tivoli Workload Scheduler 9.4 and 9.5 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A local attacker could overflow a buffer and gain lower level privileges. IBM X-Force ID: 1945...Show more IBM Tivoli Workload Scheduler 9.4 and 9.5 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A local attacker could overflow a buffer and gain lower level privileges. IBM X-Force ID: 194599.Show less
CVE-2021-38166 3Debian FedoraprojectLinux 3Debian Linux FedoraLinux Kernel Aug 5, 2026 Aug 7, 2021 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 In kernel/bpf/hashtab.c in the Linux kernel through 5.13.8, there is an integer overflow and out-of-bounds write when many elements are placed in a single bucket. NOTE: exploitation might be impractical without the CAP_S...Show more In kernel/bpf/hashtab.c in the Linux kernel through 5.13.8, there is an integer overflow and out-of-bounds write when many elements are placed in a single bucket. NOTE: exploitation might be impractical without the CAP_SYS_ADMIN capability.Show less
CVE-2021-35325 1Totolink 1A720r Firmware Jun 17, 2026 Aug 5, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 A stack overflow in the checkLoginUser function of TOTOLINK A720R A720R_Firmware v4.1.5cu.470_B20200911 allows attackers to cause a denial of service (DOS).

Previous 1...485486487...742 Next