CVE Database

CVE-2023-24993 High · 7.8 CWE-787 Feb 14, 2023

A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006)....

A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19815)

CVE-2023-24989 High · 7.8 CWE-787 Feb 14, 2023

A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006)....

A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19811)

CVE-2023-24987 High · 7.8 CWE-787 Feb 14, 2023

A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006)....

A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19809)

CVE-2023-24983 High · 7.8 CWE-787 Feb 14, 2023

A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006)....

A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19805)

CVE-2023-24984 High · 7.8 CWE-787 Feb 14, 2023

A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006)....

A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19806)

CVE-2023-24982 High · 7.8 CWE-787 Feb 14, 2023

A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006)....

A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19804)

CVE-2023-24981 High · 7.8 CWE-787 Feb 14, 2023

A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006)....

A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19791)

CVE-2023-24980 High · 7.8 CWE-787 Feb 14, 2023

A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006)....

A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19790)

CVE-2023-24979 High · 7.8 CWE-787 Feb 14, 2023

A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006)....

A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19789)

CVE-2023-24560 High · 7.8 CWE-787 Feb 14, 2023

A vulnerability has been identified in Solid Edge SE2022 (All versions < V2210Update12), Solid...

A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted PAR file. This could allow an attacker to to execute code in the context of the current process.

CVE-2022-47977 High · 7.8 CWE-787 Feb 14, 2023

A vulnerability has been identified in JT Open (All versions < V11.2.3.0), JT Utilities (All...

A vulnerability has been identified in JT Open (All versions < V11.2.3.0), JT Utilities (All versions < V13.2.3.0). The affected application contains a memory corruption vulnerability while parsing specially crafted JT files. This could allow an attacker to execute code in the context of the current process.

CVE-2023-25139 Critical · 9.8 CWE-787 Feb 3, 2023

sprintf in the GNU C Library (glibc) 2.37 has a buffer overflow (out-of-bounds write) in some...

sprintf in the GNU C Library (glibc) 2.37 has a buffer overflow (out-of-bounds write) in some situations with a correct buffer size. This is unrelated to CWE-676. It may write beyond the bounds of the destination buffer when attempting to write a padded, thousands-separated string representation of a number, if the buffer is allocated the exact size required to represent that number as a string. For example, 1,234,567 (with padding to 13) overflows by two bytes.

CVE-2023-0341 High · 7.8 CWE-787 Jan 31, 2023

Stack Buffer Overflow in editorconfig-core-c

A stack buffer overflow exists in the ec_glob function of editorconfig-core-c before v0.12.6 which allowed an attacker to arbitrarily write to the stack and possibly allows remote code execution. editorconfig-core-c v0.12.6 resolved this vulnerability by bound checking all write operations over the p_pcre buffer.

CVE-2022-3715 High · 7.8 CWE-787 Jan 5, 2023

A flaw was found in the bash package, where a heap-buffer overflow can occur in valid...

A flaw was found in the bash package, where a heap-buffer overflow can occur in valid parameter_transform. This issue may lead to memory problems.

CVE-2022-42475 Critical · 9.8 KEV Urgent · 89 Public exploit Ransomware CWE-787 Jan 2, 2023

Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability

A heap-based buffer overflow vulnerability [CWE-122] in FortiOS SSL-VPN 7.2.0 through 7.2.2, 7.0.0 through 7.0.8, 6.4.0 through 6.4.10, 6.2.0 through 6.2.11, 6.0.15 and earlier and FortiProxy SSL-VPN 7.2.0 through 7.2.1, 7.0.7 and earlier may allow a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests.

CVE-2022-47518 High · 7.8 CWE-787 Dec 18, 2022

An issue was discovered in the Linux kernel before 6.0.11. Missing validation of the number of...

An issue was discovered in the Linux kernel before 6.0.11. Missing validation of the number of channels in drivers/net/wireless/microchip/wilc1000/cfg80211.c in the WILC1000 wireless driver can trigger a heap-based buffer overflow when copying the list of operating channels from Wi-Fi management frames.

CVE-2022-37903 High · 8.8 CWE-787 Dec 12, 2022

Out-of-bounds Write in Arubanetworks Sd-wan

A vulnerability exists that allows an authenticated attacker to overwrite an arbitrary file with attacker-controlled content via the web interface. Successful exploitation of this vulnerability could lead to full compromise the underlying host operating system.

CVE-2022-35260 Medium · 6.5 CWE-787 Dec 5, 2022

curl can be told to parse a `.netrc` file for credentials. If that file endsin a line with 4095...

curl can be told to parse a `.netrc` file for credentials. If that file endsin a line with 4095 consecutive non-white space letters and no newline, curlwould first read past the end of the stack-based buffer, and if the readworks, write a zero byte beyond its boundary.This will in most cases cause a segfault or similar, but circumstances might also cause different outcomes.If a malicious user can provide a custom netrc file to an application or otherwise affect its contents, this flaw could be used as denial-of-service.

CVE-2022-37325 High · 7.5 CWE-787 Dec 5, 2022

In Sangoma Asterisk through 16.28.0, 17.x and 18.x through 18.14.0, and 19.x through 19.6.0, an...

In Sangoma Asterisk through 16.28.0, 17.x and 18.x through 18.14.0, and 19.x through 19.6.0, an incoming Setup message to addons/ooh323c/src/ooq931.c with a malformed Calling or Called Party IE can cause a crash.

CVE-2022-4135 Critical · 9.6 KEV High · 60 CWE-787 Nov 24, 2022

Google Chromium GPU Heap Buffer Overflow Vulnerability

Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2022-41128 High · 8.8 KEV High · 59 CWE-787 Nov 9, 2022

Microsoft Windows Scripting Languages Remote Code Execution Vulnerability

Windows Scripting Languages Remote Code Execution Vulnerability

CVE-2022-41125 High · 7.8 KEV High · 54 CWE-787 Nov 9, 2022

Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

CVE-2022-41073 High · 7.8 KEV High · 64 Ransomware CWE-787 Nov 9, 2022

Microsoft Windows Print Spooler Privilege Escalation Vulnerability

Windows Print Spooler Elevation of Privilege Vulnerability

CVE-2022-42827 High · 7.8 KEV High · 51 CWE-787 Nov 1, 2022

Apple iOS and iPadOS Out-of-Bounds Write Vulnerability

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, iOS 16.1 and iPadOS 16. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited..

CVE-2022-43750 Medium · 6.7 CWE-787 Oct 26, 2022

drivers/usb/mon/mon_bin.c in usbmon in the Linux kernel before 5.19.15 and 6.x before 6.0.1...

drivers/usb/mon/mon_bin.c in usbmon in the Linux kernel before 5.19.15 and 6.x before 6.0.1 allows a user-space client to corrupt the monitor's internal memory.