CWE-787

High likelihood

Out-of-bounds Write

Parent: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

The product writes data past the end, or before the beginning, of the intended buffer.

14,225 vulnerabilities with CWE-787
CVE-2023-2905 HIGH
Cesanta Mongoose 7.10 - Heap-based Buffer Overflow in MQTT CMD_PUBLISH Message Parsing
CVSS 8.8
CVE-2023-40042 CRITICAL
TOTOLINK T10_v2 5.9c.5061_B20200511 - Stack-based Buffer Overflow in setStaticDhcpConfig via MQTT Comment Parameter
CVSS 9.8
CVE-2023-40041 CRITICAL
TOTOLINK T10_v2 5.9c.5061_B20200511 - Stack-based Buffer Overflow in setWiFiWpsConfig via MQTT PIN Parameter
CVSS 9.8
CVE-2023-3894 MEDIUM
jackson-dataformats-text < 2.15.0 - Denial of Service via TOML Parser Stack Overflow
CVSS 5.8
CVE-2023-36532 MEDIUM
Zoom Rooms < 5.14.5 - Unauthenticated Denial of Service via Buffer Overflow
CVSS 5.9
CVE-2023-20555 HIGH
AMD Ryzen Firmware < comboam4_pi_v1_1.0.0.a & < comboam4_v2_pi_1.2.0.a - Out-of-bounds Write
CVSS 7.8
CVE-2023-39419 HIGH
Solid Edge SE2023 < V223.0 Update 7 - Out-of-bounds Write via DFT File Parsing
CVSS 7.8
CVE-2023-39181 HIGH
Solid Edge SE2023 <V223.0 Update 7 - Code Injection
CVSS 7.8
CVE-2023-38683 HIGH
JT2Go, Teamcenter Visualization <V14.2.0.5 - RCE
CVSS 7.8
CVE-2023-38681 HIGH
Tecnomatix Plant Simulation <V2201.0008-V2302.0002 - RCE
CVSS 7.8
CVE-2023-38680 HIGH
Tecnomatix Plant Simulation <V2201.0008-V2302.0002 - RCE
CVSS 7.8
CVE-2023-38679 HIGH
Tecnomatix Plant Simulation <V2201.0008-V2302.0002 - RCE
CVSS 7.8
CVE-2023-38528 HIGH
Siemens Parasolid < 34.1.258 - Out-of-Bounds Write
CVSS 7.8
CVE-2023-28561 CRITICAL
Qualcomm QCN7606 Firmware - Memory Corruption in QESL
CVSS 9.8
CVE-2023-28537 HIGH
Qualcomm Modem and SoC Firmware - Memory Corruption in COmxApeDec Audio Module
CVSS 8.4
CVE-2023-22666 HIGH
Qualcomm APQ8009 Firmware - Memory Corruption in Audio via Modified AMRWBPLUS Clips
CVSS 8.4
CVE-2023-21650 MEDIUM
GPS HLOS Driver - Memory Corruption
CVSS 6.7
CVE-2023-21649 MEDIUM
Qualcomm WLAN Firmware - Memory Corruption in doDriverCmd
CVSS 6.7
CVE-2023-21648 MEDIUM
Qualcomm RIL Firmware - Memory Corruption
CVSS 6.7
CVE-2023-21643 CRITICAL
Qualcomm Automotive Firmware - Memory Corruption
CVSS 9.1
CVE-2023-38940 CRITICAL
Tenda F1203/FH1203 V2.0.1.6 and FH1205 V2.0.0.7 - Stack Overflow via SSID Parameter
CVSS 9.8
CVE-2023-38939 CRITICAL
Tenda F1202/FH1202 <1.2.0.9 - Buffer Overflow
CVSS 9.8
CVE-2023-38938 CRITICAL
Tenda F1202 PA202 PW201A FH1202 - Stack Overflow via L7Im Page Parameter
CVSS 9.8
CVE-2023-38937 CRITICAL
Tenda AC10 AC1206 AC8 AC6 AC7 AC5 AC9 - Stack Overflow via formSetVirtualSer List Parameter
CVSS 9.8
CVE-2023-38936 CRITICAL
Tenda AC10 AC1206 AC6 AC7 AC5 FH1203 AC9 FH1205 - Stack Overflow via formSetSpeedWan speed_dir Parameter
CVSS 9.8
Details
Vulnerabilities 14,225
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits