Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

CVEs (15,588)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-45971 1Insyde 1Insydeh2o Aug 11, 2026 Jan 6, 2022 N/A· v4 8.2 HIGH· v3 7.2 HIGH· v2 An issue was discovered in SdHostDriver in Insyde InsydeH2O with kernel 5.1 before 05.16.25, 5.2 before 05.26.25, 5.3 before 05.35.25, 5.4 before 05.43.25, and 5.5 before 05.51.25. A vulnerability exists in the SMM (Syst...Show more An issue was discovered in SdHostDriver in Insyde InsydeH2O with kernel 5.1 before 05.16.25, 5.2 before 05.26.25, 5.3 before 05.35.25, 5.4 before 05.43.25, and 5.5 before 05.51.25. A vulnerability exists in the SMM (System Management Mode) branch that registers a SWSMI handler that does not sufficiently check or validate the allocated buffer pointer (CommBufferData).Show less
CVE-2021-45970 1Insyde 1Insydeh2o Aug 11, 2026 Jan 5, 2022 N/A· v4 8.2 HIGH· v3 7.2 HIGH· v2 An issue was discovered in IdeBusDxe in Insyde InsydeH2O with kernel 5.1 before 05.16.25, 5.2 before 05.26.25, 5.3 before 05.35.25, 5.4 before 05.43.25, and 5.5 before 05.51.25. A vulnerability exists in the SMM (System...Show more An issue was discovered in IdeBusDxe in Insyde InsydeH2O with kernel 5.1 before 05.16.25, 5.2 before 05.26.25, 5.3 before 05.35.25, 5.4 before 05.43.25, and 5.5 before 05.51.25. A vulnerability exists in the SMM (System Management Mode) branch that registers a SWSMI handler that does not sufficiently check or validate the allocated buffer pointer (the status code saved at the CommBuffer+4 location).Show less
CVE-2021-45969 1Insyde 1Insydeh2o Aug 11, 2026 Jan 5, 2022 N/A· v4 8.2 HIGH· v3 7.2 HIGH· v2 An issue was discovered in AhciBusDxe in Insyde InsydeH2O with kernel 5.1 before 05.16.25, 5.2 before 05.26.25, 5.3 before 05.35.25, 5.4 before 05.43.25, and 5.5 before 05.51.25. A vulnerability exists in the SMM (System...Show more An issue was discovered in AhciBusDxe in Insyde InsydeH2O with kernel 5.1 before 05.16.25, 5.2 before 05.26.25, 5.3 before 05.35.25, 5.4 before 05.43.25, and 5.5 before 05.51.25. A vulnerability exists in the SMM (System Management Mode) branch that registers a SWSMI handler that does not sufficiently check or validate the allocated buffer pointer (the CommBuffer+8 location).Show less
CVE-2021-45833 1Hdfgroup 1Hdf5 Jun 17, 2026 Jan 5, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 A Stack-based Buffer Overflow Vulnerability exists in HDF5 1.13.1-1 via the H5D__create_chunk_file_map_hyper function in /hdf5/src/H5Dchunk.c, which causes a Denial of Service (context-dependent).
CVE-2021-45830 1Hdfgroup 1Hdf5 Jun 17, 2026 Jan 5, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 A heap-based buffer overflow vulnerability exists in HDF5 1.13.1-1 via H5F_addr_decode_len in /hdf5/src/H5Fint.c, which could cause a Denial of Service.
CVE-2021-22045 1Vmware 4Cloud Foundation EsxiFusion+1 more Jun 17, 2026 Jan 4, 2022 N/A· v4 7.8 HIGH· v3 6.9 MEDIUM· v2 VMware ESXi (7.0, 6.7 before ESXi670-202111101-SG and 6.5 before ESXi650-202110101-SG), VMware Workstation (16.2.0) and VMware Fusion (12.2.0) contains a heap-overflow vulnerability in CD-ROM device emulation. A maliciou...Show more VMware ESXi (7.0, 6.7 before ESXi670-202111101-SG and 6.5 before ESXi650-202110101-SG), VMware Workstation (16.2.0) and VMware Fusion (12.2.0) contains a heap-overflow vulnerability in CD-ROM device emulation. A malicious actor with access to a virtual machine with CD-ROM device emulation may be able to exploit this vulnerability in conjunction with other issues to execute code on the hypervisor from a virtual machine.Show less
CVE-2021-24042 1Whatsapp 1Whatsapp Jun 17, 2026 Jan 4, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 The calling logic for WhatsApp for Android prior to v2.21.23, WhatsApp Business for Android prior to v2.21.23, WhatsApp for iOS prior to v2.21.230, WhatsApp Business for iOS prior to v2.21.230, WhatsApp for KaiOS prior t...Show more The calling logic for WhatsApp for Android prior to v2.21.23, WhatsApp Business for Android prior to v2.21.23, WhatsApp for iOS prior to v2.21.230, WhatsApp Business for iOS prior to v2.21.230, WhatsApp for KaiOS prior to v2.2143, WhatsApp Desktop prior to v2.2146 could have allowed an out-of-bounds write if a user makes a 1:1 call to a malicious actor.Show less
CVE-2022-20014 1Google 1Android Jun 17, 2026 Jan 4, 2022 N/A· v4 6.7 MEDIUM· v3 4.6 MEDIUM· v2 In vow driver, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploita...Show more In vow driver, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05857308; Issue ID: ALPS05857308.Show less
CVE-2021-39990 1Huawei 1Harmonyos Jun 17, 2026 Jan 3, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 The screen lock module has a Stack-based Buffer Overflow vulnerability.Successful exploitation of this vulnerability may affect user experience.
CVE-2021-35093 1Qualcomm 2Csr8510 A10 Firmware Csr8811 A12 Firmware Jun 17, 2026 Jan 3, 2022 N/A· v4 6.5 MEDIUM· v3 3.3 LOW· v2 Possible memory corruption in BT controller when it receives an oversized LMP packet over 2-DH1 link and leads to denial of service in BlueCore
CVE-2021-45943 4Debian FedoraprojectOracle+1 more 4Debian Linux FedoraGdal+1 more Jun 17, 2026 Jan 1, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 GDAL 3.3.0 through 3.4.0 has a heap-based buffer overflow in PCIDSK::CPCIDSKFile::ReadFromFile (called from PCIDSK::CPCIDSKSegment::ReadFromFile and PCIDSK::CPCIDSKBinarySegment::CPCIDSKBinarySegment).
CVE-2021-45942 3Debian FedoraprojectOpenexr 3Debian Linux FedoraOpenexr Jun 17, 2026 Jan 1, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 OpenEXR 3.1.x before 3.1.4 has a heap-based buffer overflow in Imf_3_1::LineCompositeTask::execute (called from IlmThread_3_1::NullThreadPoolProvider::addTask and IlmThread_3_1::ThreadPool::addGlobalTask). NOTE: db217f2...Show more OpenEXR 3.1.x before 3.1.4 has a heap-based buffer overflow in Imf_3_1::LineCompositeTask::execute (called from IlmThread_3_1::NullThreadPoolProvider::addTask and IlmThread_3_1::ThreadPool::addGlobalTask). NOTE: db217f2 may be inapplicable.Show less
CVE-2021-45941 1Libbpf Project 1Libbpf Jun 17, 2026 Jan 1, 2022 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 libbpf 0.6.0 and 0.6.1 has a heap-based buffer overflow (8 bytes) in __bpf_object__open (called from bpf_object__open_mem and bpf-object-fuzzer.c).
CVE-2021-45940 1Libbpf Project 1Libbpf Jun 17, 2026 Jan 1, 2022 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 libbpf 0.6.0 and 0.6.1 has a heap-based buffer overflow (4 bytes) in __bpf_object__open (called from bpf_object__open_mem and bpf-object-fuzzer.c).
CVE-2021-45939 1Wolfssl 1Wolfmqtt Jun 17, 2026 Jan 1, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClient_DecodePacket (called from MqttClient_WaitType and MqttClient_Subscribe).
CVE-2021-45938 1Wolfssl 1Wolfmqtt Jun 17, 2026 Jan 1, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClient_DecodePacket (called from MqttClient_WaitType and MqttClient_Unsubscribe).
CVE-2021-45937 1Wolfssl 1Wolfmqtt Jun 17, 2026 Jan 1, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClient_DecodePacket (called from MqttClient_WaitType and MqttClient_Connect).
CVE-2021-45936 1Wolfssl 1Wolfmqtt Jun 17, 2026 Jan 1, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttDecode_Disconnect (called from MqttClient_DecodePacket and MqttClient_WaitType).
CVE-2021-45935 1Grok Project 1Grok Jun 17, 2026 Jan 1, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Grok 9.5.0 has a heap-based buffer overflow in openhtj2k::T1OpenHTJ2K::decompress (called from std::__1::__packaged_task_func<std::__1::__bind<grk::T1DecompressScheduler::deco and std::__1::packaged_task<int).
CVE-2021-45934 1Wolfssl 1Wolfmqtt Jun 17, 2026 Jan 1, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClient_DecodePacket (called from MqttClient_HandlePacket and MqttClient_WaitType).

Previous 1...490491492...780 Next