Vulnerabilities > Out-of-bounds Write

DATE CVE VULNERABILITY TITLE RISK
2024-09-18 CVE-2024-34026 Out-of-bounds Write vulnerability in Openplcproject Openplc V3 Firmware 20240404
A stack-based buffer overflow vulnerability exists in the OpenPLC Runtime EtherNet/IP parser functionality of OpenPLC _v3 b4702061dc14d1024856f71b4543298d77007b88.
network
low complexity
openplcproject CWE-787
critical
9.8
2024-09-18 CVE-2024-46766 Out-of-bounds Write vulnerability in Linux Kernel
In the Linux kernel, the following vulnerability has been resolved: ice: move netif_queue_set_napi to rtnl-protected sections Currently, netif_queue_set_napi() is called from ice_vsi_rebuild() that is not rtnl-locked when called from the reset.
local
low complexity
linux CWE-787
7.8
2024-09-18 CVE-2024-46774 Out-of-bounds Write vulnerability in Linux Kernel
In the Linux kernel, the following vulnerability has been resolved: powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas() Smatch warns: arch/powerpc/kernel/rtas.c:1932 __do_sys_rtas() warn: potential spectre issue 'args.args' [r] (local cap) The 'nargs' and 'nret' locals come directly from a user-supplied buffer and are used as indexes into a small stack-based array and as inputs to copy_to_user() after they are subject to bounds checks. Use array_index_nospec() after the bounds checks to clamp these values for speculative execution.
local
low complexity
linux CWE-787
7.1
2024-09-18 CVE-2024-46725 Out-of-bounds Write vulnerability in Linux Kernel
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix out-of-bounds write warning Check the ring type value to fix the out-of-bounds write warning
local
low complexity
linux CWE-787
7.8
2024-09-18 CVE-2022-39068 Out-of-bounds Write vulnerability in ZTE Mf296R Firmware Mf296Rnordic1B06
There is a buffer overflow vulnerability in ZTE MF296R.
network
low complexity
zte CWE-787
6.5
2024-09-17 CVE-2024-8905 Out-of-bounds Write vulnerability in Google Chrome
Inappropriate implementation in V8 in Google Chrome prior to 129.0.6668.58 allowed a remote attacker to potentially exploit stack corruption via a crafted HTML page.
network
low complexity
google CWE-787
8.8
2024-09-17 CVE-2024-8946 Out-of-bounds Write vulnerability in Micropython 1.23.0
A vulnerability was found in MicroPython 1.23.0.
network
low complexity
micropython CWE-787
7.5
2024-09-17 CVE-2024-8948 Out-of-bounds Write vulnerability in Micropython 1.23.0
A vulnerability was found in MicroPython 1.23.0.
network
low complexity
micropython CWE-787
7.5
2024-09-17 CVE-2024-38812 Out-of-bounds Write vulnerability in VMWare Vcenter Server 7.0/8.0
The vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger this vulnerability by sending a specially crafted network packet potentially leading to remote code execution.
network
low complexity
vmware CWE-787
critical
9.8
2024-09-17 CVE-2024-40841 Out-of-bounds Write vulnerability in Apple Macos
An out-of-bounds write issue was addressed with improved bounds checking.
local
low complexity
apple CWE-787
5.5