Vulnerabilities > Out-of-bounds Write

DATE CVE VULNERABILITY TITLE RISK
2022-11-30 CVE-2022-45332 Out-of-bounds Write vulnerability in GNU Libredwg 0.12.4.4643
LibreDWG v0.12.4.4643 was discovered to contain a heap buffer overflow via the function decode_preR13_section_hdr at decode_r11.c.
local
low complexity
gnu CWE-787
7.8
2022-11-30 CVE-2022-45337 Out-of-bounds Write vulnerability in Tenda TX9 PRO Firmware 22.03.02.10
Tenda TX9 Pro v22.03.02.10 was discovered to contain a stack overflow via the list parameter at /goform/SetIpMacBind.
network
low complexity
tenda CWE-787
7.5
2022-11-30 CVE-2022-4176 Out-of-bounds Write vulnerability in Google Chrome
Out of bounds write in Lacros Graphics in Google Chrome on Chrome OS and Lacros prior to 108.0.5359.71 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via UI interactions.
network
low complexity
google CWE-787
8.8
2022-11-29 CVE-2022-45202 Out-of-bounds Write vulnerability in Gpac 2.1Devrev428Gcb8Ae46C8Master
GPAC v2.1-DEV-rev428-gcb8ae46c8-master was discovered to contain a stack overflow via the function dimC_box_read at isomedia/box_code_3gpp.c.
local
low complexity
gpac CWE-787
7.8
2022-11-25 CVE-2022-4141 Out-of-bounds Write vulnerability in VIM
Heap based buffer overflow in vim/vim 9.0.0946 and below by allowing an attacker to CTRL-W gf in the expression used in the RHS of the substitute command.
local
low complexity
vim CWE-787
7.8
2022-11-25 CVE-2022-4135 Out-of-bounds Write vulnerability in multiple products
Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
network
low complexity
google microsoft CWE-787
critical
9.6
2022-11-23 CVE-2022-44253 Out-of-bounds Write vulnerability in Totolink Lr350 Firmware 9.3.5U.6369B20220309
TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via parameter ip in the setDiagnosisCfg function.
network
low complexity
totolink CWE-787
8.8
2022-11-23 CVE-2022-44254 Out-of-bounds Write vulnerability in Totolink Lr350 Firmware 9.3.5U.6369B20220309
TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via parameter text in the setSmsCfg function.
network
low complexity
totolink CWE-787
8.8
2022-11-23 CVE-2022-44255 Out-of-bounds Write vulnerability in Totolink Lr350 Firmware 9.3.5U.6369B20220309
TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a pre-authentication buffer overflow in the main function via long post data.
network
low complexity
totolink CWE-787
critical
9.8
2022-11-23 CVE-2022-44256 Out-of-bounds Write vulnerability in Totolink Nr1800X Firmware 9.3.5U.6369B20220309
TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via parameter lang in the setLanguageCfg function.
network
low complexity
totolink CWE-787
8.8