Vulnerabilities (CVE)

Filtered by CWE-787
Total 14155 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-46688 1 Linux 1 Linux Kernel 2026-06-17 N/A 5.5 MEDIUM
In the Linux kernel, the following vulnerability has been resolved: erofs: fix out-of-bound access when z_erofs_gbuf_growsize() partially fails If z_erofs_gbuf_growsize() partially fails on a global buffer due to memory allocation failure or fault injection (as reported by syzbot [1]), new pages need to be freed by comparing to the existing pages to avoid memory leaks. However, the old gbuf->pages[] array may not be large enough, which can lead to null-ptr-deref or out-of-bound access. Fix this by checking against gbuf->nrpages in advance. [1] https://lore.kernel.org/r/000000000000f7b96e062018c6e3@google.com
CVE-2024-46652 1 Tenda 2 Ac8, Ac8 Firmware 2026-06-17 N/A 9.8 CRITICAL
Tenda AC8v4 V16.03.34.06 has a stack overflow vulnerability in the fromAdvSetMacMtuWan function.
CVE-2024-46488 1 Asg017 1 Sqlite-vec 2026-06-17 N/A 5.5 MEDIUM
sqlite-vec v0.1.1 was discovered to contain a heap buffer overflow via the npy_token_next function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted file.
CVE-2024-46276 1 Randygaul 1 Cute Png 2026-06-17 N/A 7.8 HIGH
cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_chunk() function at cute_png.h.
CVE-2024-46274 1 Randygaul 1 Cute Png 2026-06-17 N/A 7.8 HIGH
cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_stored() function at cute_png.h.
CVE-2024-46267 1 Randygaul 1 Cute Png 2026-06-17 N/A 7.8 HIGH
cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_block() function at cute_png.h.
CVE-2024-46264 1 Randygaul 1 Cute Png 2026-06-17 N/A 7.8 HIGH
cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_find() function at cute_png.h.
CVE-2024-46263 1 Randygaul 1 Cute Png 2026-06-17 N/A 7.8 HIGH
cute_png v1.05 was discovered to contain a stack overflow via the cp_dynamic() function at cute_png.h.
CVE-2024-46261 1 Randygaul 1 Cute Png 2026-06-17 N/A 7.8 HIGH
cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_make32() function at cute_png.h.
CVE-2024-46259 1 Randygaul 1 Cute Png 2026-06-17 N/A 7.8 HIGH
cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_unfilter() function at cute_png.h.
CVE-2024-46258 1 Randygaul 1 Cute Png 2026-06-17 N/A 7.8 HIGH
cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_load_png_mem() function at cute_png.h.
CVE-2024-46049 1 Tenda 2 O6, O6 Firmware 2026-06-17 N/A 9.8 CRITICAL
Tenda O6 V3.0 firmware V1.0.0.7(2054) contains a stack overflow vulnerability in the formexeCommand function.
CVE-2024-46047 1 Tenda 2 Fh451, Fh451 Firmware 2026-06-17 N/A 7.5 HIGH
Tenda FH451 v1.0.0.9 has a stack overflow vulnerability in the fromDhcpListClient function.
CVE-2024-46046 1 Tenda 2 Fh451, Fh451 Firmware 2026-06-17 N/A 9.8 CRITICAL
Tenda FH451 v1.0.0.9 has a stack overflow vulnerability located in the RouteStatic function.
CVE-2024-46045 1 Tenda 2 Ch22, Ch22 Firmware 2026-06-17 N/A 9.8 CRITICAL
Tenda CH22 V1.0.0.6(468) has a stack overflow vulnerability located in the frmL7PlotForm function.
CVE-2024-46044 1 Tenda 2 Ch22, Ch22 Firmware 2026-06-17 N/A 9.8 CRITICAL
CH22 V1.0.0.6(468) has a stack overflow vulnerability located in the fromqossetting function.
CVE-2024-45769 2026-06-17 N/A 5.5 MEDIUM
A vulnerability was found in Performance Co-Pilot (PCP).  This flaw allows an attacker to send specially crafted data to the system, which could cause the program to misbehave or crash.
CVE-2024-45695 1 Dlink 2 Dir-x4860, Dir-x4860 Firmware 2026-06-17 N/A 9.8 CRITICAL
The web service of certain models of D-Link wireless routers contains a Stack-based Buffer Overflow vulnerability, which allows unauthenticated remote attackers to exploit this vulnerability to execute arbitrary code on the device.
CVE-2024-45581 1 Qualcomm 60 Mdm9628, Mdm9628 Firmware, Qam8295p and 57 more 2026-06-17 N/A 6.6 MEDIUM
Memory corruption while sound model registration for voice activation with audio kernel driver.
CVE-2024-45579 1 Qualcomm 20 Fastconnect 6900, Fastconnect 6900 Firmware, Fastconnect 7800 and 17 more 2026-06-17 N/A 7.8 HIGH
Memory corruption may occur when invoking IOCTL calls from userspace to the camera kernel driver to dump request information, due to a missing memory requirement check.