Vulnerabilities > Out-of-bounds Write
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2018-04-29 | CVE-2018-10534 | Out-of-bounds Write vulnerability in multiple products The _bfd_XX_bfd_copy_private_bfd_data_common function in peXXigen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, processes a negative Data Directory size with an unbounded loop that increases the value of (external_IMAGE_DEBUG_DIRECTORY) *edd so that the address exceeds its own memory region, resulting in an out-of-bounds memory write, as demonstrated by objcopy copying private info with _bfd_pex64_bfd_copy_private_bfd_data_common in pex64igen.c. | 5.5 |
| 2018-04-29 | CVE-2018-10528 | Out-of-bounds Write vulnerability in multiple products An issue was discovered in LibRaw 0.18.9. | 8.8 |
| 2018-04-27 | CVE-2018-10471 | Out-of-bounds Write vulnerability in multiple products An issue was discovered in Xen through 4.10.x allowing x86 PV guest OS users to cause a denial of service (out-of-bounds zero write and hypervisor crash) via unexpected INT 80 processing, because of an incorrect fix for CVE-2017-5754. | 6.5 |
| 2018-04-26 | CVE-2018-3851 | Out-of-bounds Write vulnerability in Hyland Perceptive Document Filters 11.4.0.2647 In Hyland Perceptive Document Filters 11.4.0.2647 - x86/x64 Windows/Linux, an exploitable stack-based buffer overflow exists in the DOC-to-HTML conversion functionality of the Hyland Perceptive Document Filters version 11.4.0.2647. | 8.8 |
| 2018-04-26 | CVE-2018-8072 | Out-of-bounds Write vulnerability in Edimax products An issue was discovered on EDIMAX IC-3140W through 3.06, IC-5150W through 3.09, and IC-6220DC through 3.06 devices. | 8.8 |
| 2018-04-26 | CVE-2018-10392 | Out-of-bounds Write vulnerability in multiple products mapping0_forward in mapping0.c in Xiph.Org libvorbis 1.3.6 does not validate the number of channels, which allows remote attackers to cause a denial of service (heap-based buffer overflow or over-read) or possibly have unspecified other impact via a crafted file. | 8.8 |
| 2018-04-25 | CVE-2018-8837 | Out-of-bounds Write vulnerability in Advantech Webaccess HMI Designer 2.1.7.32 Processing specially crafted .pm3 files in Advantech WebAccess HMI Designer 2.1.7.32 and prior may cause the system to write outside the intended buffer area and may allow remote code execution. | 7.8 |
| 2018-04-25 | CVE-2018-8833 | Out-of-bounds Write vulnerability in Advantech Webaccess HMI Designer 2.1.7.32 Heap-based buffer overflow vulnerabilities in Advantech WebAccess HMI Designer 2.1.7.32 and prior caused by processing specially crafted .pm3 files may allow remote code execution. | 7.8 |
| 2018-04-24 | CVE-2017-2924 | Out-of-bounds Write vulnerability in multiple products An exploitable heap-based buffer overflow vulnerability exists in the read_legacy_biff function of FreeXL 1.0.3. | 8.8 |
| 2018-04-24 | CVE-2017-2923 | Out-of-bounds Write vulnerability in multiple products An exploitable heap based buffer overflow vulnerability exists in the 'read_biff_next_record function' of FreeXL 1.0.3. | 8.8 |