Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

CVEs (15,586)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-36414 1Gpac 1Gpac Jun 17, 2026 Jan 10, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 A heab-based buffer overflow vulnerability exists in MP4Box in GPAC 1.0.1 via media.c, which allows attackers to cause a denial of service or execute arbitrary code via a crafted file.
CVE-2021-36412 1Gpac 1Gpac Jun 17, 2026 Jan 10, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 A heap-based buffer overflow vulnerability exists in MP4Box in GPAC 1.0.1 via the gp_rtp_builder_do_mpeg12_video function, which allows attackers to possibly have unspecified other impact via a crafted file in the MP4Box...Show more A heap-based buffer overflow vulnerability exists in MP4Box in GPAC 1.0.1 via the gp_rtp_builder_do_mpeg12_video function, which allows attackers to possibly have unspecified other impact via a crafted file in the MP4Box command,Show less
CVE-2021-36410 2Debian Struktur 2Debian Linux Libde265 Jun 17, 2026 Jan 10, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 A stack-buffer-overflow exists in libde265 v1.0.8 via fallback-motion.cc in function put_epel_hv_fallback when running program dec265.
CVE-2022-0158 3Apple FedoraprojectVim 3Fedora MacosVim Jun 17, 2026 Jan 10, 2022 N/A· v4 3.3 LOW· v3 4.3 MEDIUM· v2 vim is vulnerable to Heap-based Buffer Overflow
CVE-2021-43579 2Debian Htmldoc Project 2Debian Linux Htmldoc Jun 17, 2026 Jan 10, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 A stack-based buffer overflow in image_load_bmp() in HTMLDOC <= 1.9.13 results in remote code execution if the victim converts an HTML document linking to a crafted BMP file.
CVE-2021-40028 1Huawei 1Harmonyos Jun 17, 2026 Jan 10, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The eID module has an out-of-bounds memory write vulnerability,Successful exploitation of this vulnerability may affect data integrity.
CVE-2021-40026 1Huawei 3Emui HarmonyosMagic Ui Jun 17, 2026 Jan 10, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 There is a Heap-based buffer overflow vulnerability in the AOD module in smartphones. Successful exploitation of this vulnerability may affect service integrity.
CVE-2021-40021 1Huawei 1Harmonyos Jun 17, 2026 Jan 10, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The eID module has an out-of-bounds memory write vulnerability,Successful exploitation of this vulnerability may affect data confidentiality.
CVE-2021-40014 1Huawei 1Harmonyos Jun 17, 2026 Jan 10, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The bone voice ID trusted application (TA) has a heap overflow vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.
CVE-2021-40010 1Huawei 3Emui HarmonyosMagic Ui Jun 17, 2026 Jan 10, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 The bone voice ID TA has a heap overflow vulnerability.Successful exploitation of this vulnerability may result in malicious code execution.
CVE-2021-40009 1Huawei 3Emui HarmonyosMagic Ui Jun 17, 2026 Jan 10, 2022 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 There is an Out-of-bounds write vulnerability in the AOD module in smartphones. Successful exploitation of this vulnerability may affect service integrity.
CVE-2021-40002 1Huawei 1Harmonyos Jun 17, 2026 Jan 10, 2022 N/A· v4 8.8 HIGH· v3 5.8 MEDIUM· v2 The Bluetooth module has an out-of-bounds write vulnerability. Successful exploitation of this vulnerability may result in malicious command execution at the remote end.
CVE-2021-40000 1Huawei 1Harmonyos Jun 17, 2026 Jan 10, 2022 N/A· v4 8.8 HIGH· v3 5.8 MEDIUM· v2 The Bluetooth module has an out-of-bounds write vulnerability. Successful exploitation of this vulnerability may result in malicious command execution at the remote end.
CVE-2021-39996 1Huawei 3Emui HarmonyosMagic Ui Jun 17, 2026 Jan 10, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 There is a Heap-based buffer overflow vulnerability with the NFC module in smartphones. Successful exploitation of this vulnerability may cause memory overflow.
CVE-2021-32998 1Fanuc 9R 30ia Firmware R 30ia Mate FirmwareR 30ib Compact Firmware+6 more Jun 17, 2026 Jan 10, 2022 N/A· v4 7.4 HIGH· v3 8.8 HIGH· v2 The FANUC R-30iA and R-30iB series controllers are vulnerable to an out-of-bounds write, which may allow an attacker to remotely execute arbitrary code. INIT START/restore from backup required.
CVE-2021-20048 1Sonicwall 1Sonicos Nov 9, 2026 Jan 10, 2022 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 A Stack-based buffer overflow in the SonicOS SessionID HTTP response header allows a remote authenticated attacker to cause Denial of Service (DoS) and potentially results in code execution in the firewall. This vulnerab...Show more A Stack-based buffer overflow in the SonicOS SessionID HTTP response header allows a remote authenticated attacker to cause Denial of Service (DoS) and potentially results in code execution in the firewall. This vulnerability affected SonicOS Gen 5, Gen 6 and Gen 7 firmware versions.Show less
CVE-2021-20046 1Sonicwall 1Sonicos Nov 9, 2026 Jan 10, 2022 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 A Stack-based buffer overflow in the SonicOS HTTP Content-Length response header allows a remote authenticated attacker to cause Denial of Service (DoS) and potentially results in code execution in the firewall. This vul...Show more A Stack-based buffer overflow in the SonicOS HTTP Content-Length response header allows a remote authenticated attacker to cause Denial of Service (DoS) and potentially results in code execution in the firewall. This vulnerability affected SonicOS Gen 5, Gen 6 and Gen 7 firmware versions.Show less
CVE-2022-22707 2Debian Lighttpd 2Debian Linux Lighttpd Jun 17, 2026 Jan 6, 2022 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 In lighttpd 1.4.46 through 1.4.63, the mod_extforward_Forwarded function of the mod_extforward plugin has a stack-based buffer overflow (4 bytes representing -1), as demonstrated by remote denial of service (daemon crash...Show more In lighttpd 1.4.46 through 1.4.63, the mod_extforward_Forwarded function of the mod_extforward plugin has a stack-based buffer overflow (4 bytes representing -1), as demonstrated by remote denial of service (daemon crash) in a non-default configuration. The non-default configuration requires handling of the Forwarded header in a somewhat unusual manner. Also, a 32-bit system is much more likely to be affected than a 64-bit system.Show less
CVE-2021-45971 1Insyde 1Insydeh2o Aug 11, 2026 Jan 6, 2022 N/A· v4 8.2 HIGH· v3 7.2 HIGH· v2 An issue was discovered in SdHostDriver in Insyde InsydeH2O with kernel 5.1 before 05.16.25, 5.2 before 05.26.25, 5.3 before 05.35.25, 5.4 before 05.43.25, and 5.5 before 05.51.25. A vulnerability exists in the SMM (Syst...Show more An issue was discovered in SdHostDriver in Insyde InsydeH2O with kernel 5.1 before 05.16.25, 5.2 before 05.26.25, 5.3 before 05.35.25, 5.4 before 05.43.25, and 5.5 before 05.51.25. A vulnerability exists in the SMM (System Management Mode) branch that registers a SWSMI handler that does not sufficiently check or validate the allocated buffer pointer (CommBufferData).Show less
CVE-2021-45970 1Insyde 1Insydeh2o Aug 11, 2026 Jan 5, 2022 N/A· v4 8.2 HIGH· v3 7.2 HIGH· v2 An issue was discovered in IdeBusDxe in Insyde InsydeH2O with kernel 5.1 before 05.16.25, 5.2 before 05.26.25, 5.3 before 05.35.25, 5.4 before 05.43.25, and 5.5 before 05.51.25. A vulnerability exists in the SMM (System...Show more An issue was discovered in IdeBusDxe in Insyde InsydeH2O with kernel 5.1 before 05.16.25, 5.2 before 05.26.25, 5.3 before 05.35.25, 5.4 before 05.43.25, and 5.5 before 05.51.25. A vulnerability exists in the SMM (System Management Mode) branch that registers a SWSMI handler that does not sufficiently check or validate the allocated buffer pointer (the status code saved at the CommBuffer+4 location).Show less

Previous 1...489490491...780 Next