Vulnerabilities (CVE)

Filtered by CWE-787
Total 12282 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-53104 1 Linux 1 Linux Kernel 2025-02-06 N/A 7.8 HIGH
In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format This can lead to out of bounds writes since frames of this type were not taken into account when calculating the size of the frames buffer in uvc_parse_streaming.
CVE-2022-26513 1 Intel 2 Xmm 7560, Xmm 7560 Firmware 2025-02-05 N/A 8.0 HIGH
Out-of-bounds write in some Intel(R) XMM(TM) 7560 Modem software before version M2_7560_R_01.2146.00 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.
CVE-2021-23165 1 Htmldoc Project 1 Htmldoc 2025-02-05 10.0 HIGH 9.8 CRITICAL
A flaw was found in htmldoc before v1.9.12. Heap buffer overflow in pspdf_prepare_outpages(), in ps-pdf.cxx may lead to execute arbitrary code and denial of service.
CVE-2022-28085 1 Htmldoc Project 1 Htmldoc 2025-02-05 6.8 MEDIUM 7.8 HIGH
A flaw was found in htmldoc commit 31f7804. A heap buffer overflow in the function pdf_write_names in ps-pdf.cxx may lead to arbitrary code execution and Denial of Service (DoS).
CVE-2023-29916 1 H3c 1 Magic R200 Firmware 2025-02-05 N/A 4.9 MEDIUM
H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the UpdateWanParams interface at /goform/aspForm.
CVE-2023-29915 1 H3c 1 Magic R200 Firmware 2025-02-05 N/A 4.9 MEDIUM
H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via CMD parameter at /goform/aspForm.
CVE-2023-21085 1 Google 1 Android 2025-02-05 N/A 8.8 HIGH
In nci_snd_set_routing_cmd of nci_hmsgs.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-264879662
CVE-2023-20967 1 Google 1 Android 2025-02-05 N/A 7.8 HIGH
In avdt_scb_hdl_pkt_no_frag of avdt_scb_act.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-225879503
CVE-2023-20941 1 Google 1 Android 2025-02-05 N/A 6.6 MEDIUM
In acc_ctrlrequest_composite of f_accessory.c, there is a possible out of bounds write due to a missing bounds check. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-264029575References: Upstream kernel
CVE-2025-24326 2025-02-05 N/A 7.5 HIGH
When BIG-IP Advanced WAF/ASM Behavioral DoS (BADoS) TLS Signatures feature is configured, undisclosed traffic can case an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2023-29912 1 H3c 1 Magic R200 Firmware 2025-02-05 N/A 4.9 MEDIUM
H3C Magic R200 R200V100R004 was discovered to contain a stack overflow via the DelvsList interface at /goform/aspForm.
CVE-2023-29911 1 H3c 1 Magic R200 Firmware 2025-02-05 N/A 4.9 MEDIUM
H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the AddMacList interface at /goform/aspForm.
CVE-2023-29910 1 H3c 1 Magic R200 Firmware 2025-02-05 N/A 4.9 MEDIUM
H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the UpdateMacClone interface at /goform/aspForm.
CVE-2023-21100 1 Google 1 Android 2025-02-05 N/A 7.8 HIGH
In inflate of inflate.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12L Android-13Android ID: A-242544249
CVE-2024-54543 1 Apple 7 Ipados, Iphone Os, Macos and 4 more 2025-02-05 N/A 8.8 HIGH
The issue was addressed with improved memory handling. This issue is fixed in visionOS 2.2, tvOS 18.2, Safari 18.2, watchOS 11.2, iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2. Processing maliciously crafted web content may lead to memory corruption.
CVE-2023-30410 1 Jerryscript 1 Jerryscript 2025-02-05 N/A 5.5 MEDIUM
Jerryscript commit 1a2c047 was discovered to contain a stack overflow via the component ecma_op_function_construct at /operations/ecma-function-object.c.
CVE-2023-30378 1 Tenda 2 Ac15, Ac15 Firmware 2025-02-05 N/A 9.8 CRITICAL
In Tenda AC15 V15.03.05.19, the function "sub_8EE8" contains a stack-based buffer overflow vulnerability.
CVE-2023-30376 1 Tenda 2 Ac15, Ac15 Firmware 2025-02-05 N/A 9.8 CRITICAL
In Tenda AC15 V15.03.05.19, the function "henan_pppoe_user" contains a stack-based buffer overflow vulnerability.
CVE-2023-30375 1 Tenda 2 Ac15, Ac15 Firmware 2025-02-05 N/A 9.8 CRITICAL
In Tenda AC15 V15.03.05.19, the function "getIfIp" contains a stack-based buffer overflow vulnerability.
CVE-2023-29917 1 H3c 1 Magic R200 Firmware 2025-02-05 N/A 4.9 MEDIUM
H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via go parameter at /goform/aspForm.