Memory Buffer Bounds Error — CVEs by weakness type

Gt.m HIGH 7.5

CVE-2021-44499

An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attacker can cause a call to $Extrac…

Fix: after 7.0-000

Fix from $1,950 2022-04-15

Gt.m HIGH 7.5

CVE-2021-44503

An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attacker can cause a call to va_arg …

Fix: after 7.0-000

Fix from $1,950 2022-04-15

Gt.m CRITICAL 9.8

CVE-2021-44496

An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attacker can control the size variab…

Fix: after 7.0-000

Fix from $2,300 2022-04-15

Imagegear HIGH 7.8

CVE-2021-40398

An out-of-bounds write vulnerability exists in the parse_raster_data functionality of Accusoft ImageGear 19.10. A specially-crafted malformed file ca…

No fix yet

Fix from $1,950 2022-04-14

Gerbv HIGH 7.5

CVE-2021-40400

An out-of-bounds read vulnerability exists in the RS-274X aperture macro outline primitive functionality of Gerbv 2.7.0 and dev (commit b5f1eacd) and…

No fix yet

Fix from $1,950 2022-04-14

Ghostpcl HIGH 7.8

CVE-2022-1350

A vulnerability classified as problematic was found in GhostPCL 9.55.0. This vulnerability affects the function chunk_free_object of the file gsmchun…

Mitigation only

Fix from $1,950 2022-04-14

Vyper CRITICAL 9.8

CVE-2022-24788

Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. Versions of vyper prior to 0.3.2 suffer from a potential buffer overrun…

Fix: 0.3.2+

Fix from $2,300 2022-04-13

Android HIGH 7.8

CVE-2021-39798

In Bitmap_createFromParcel of Bitmap.cpp, there is a possible arbitrary code execution due to a missing bounds check. This could lead to local escala…

Mitigation only

Fix from $1,950 2022-04-12

Simatic S7 400h V6 Firmware HIGH 7.5

CVE-2021-40368

A vulnerability has been identified in SIMATIC S7-400 CPU 412-1 DP V7 (All versions), SIMATIC S7-400 CPU 412-2 DP V7 (All versions), SIMATIC S7-40…

Fix: 6.0.10 / 10.1+

Fix from $1,950 2022-04-12

Control For Beaglebone Sl HIGH 7.1

CVE-2022-22514

An authenticated, remote attacker can gain access to a dereferenced pointer contained in a request. The accesses can subsequently lead to local overw…

Fix: 4.5.0.0+

Fix from $1,950 2022-04-07

Opc Ua C\+\+ Software Development Kit HIGH 7.5

CVE-2021-32994

Softing OPC UA C++ SDK (Software Development Kit) versions from 5.59 to 5.64 exported library functions don't properly validate received extension ob…

Fix: 5.65.0+

Fix from $1,950 2022-04-04

Cx Position HIGH 7.8

CVE-2022-25959

Omron CX-Position (versions 2.5.3 and prior) is vulnerable to memory corruption while processing a specific project file, which may allow an attacker…

Fix: after 2.5.3

Fix from $1,950 2022-04-01

Linux Kernel HIGH 7.8

CVE-2022-0500

A flaw was found in unrestricted eBPF usage by the BPF_BTF_LOAD, leading to a possible out-of-bounds memory write in the Linux kernel’s BPF subsystem…

Fix: 5.15.37 / 5.16.11+

Fix from $1,950 2022-03-25

Debian Linux MEDIUM 6.5

CVE-2021-3582

A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. The issue occurs while handling a "PVRDMA_CMD_CREATE_MR" command due…

Fix: 2.17.2+

Fix from $1,600 2022-03-25

Linux Kernel HIGH 8.0

CVE-2021-4157

An out of memory bounds write flaw (1 or 2 bytes of memory) in the Linux kernel NFS subsystem was found in the way users use mirroring (replication o…

Fix: 4.4.269 / 4.9.269+

Fix from $1,950 2022-03-25

Bridge HIGH 7.8

CVE-2021-42724

Adobe Bridge version 11.1.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious file, potentially …

Fix: after 11.1.1