Out-of-bounds Write — CVEs by weakness type

A15 Firmware HIGH 7.2

CVE-2024-0532

A vulnerability was found in Tenda A15 15.13.07.13. It has been declared as critical. This vulnerability affects the function set_repeat5 of the file…

No fix yet

Fix from $1,950 2024-01-15

Dgx A100 Firmware CRITICAL 9.8

CVE-2023-31030

NVIDIA DGX A100 BMC contains a vulnerability in the host KVM daemon, where an unauthenticated attacker may cause a stack overflow by sending a specia…

Fix: 00.22.05+

Fix from $2,300 2024-01-12

Dgx A100 Firmware HIGH 7.8

CVE-2023-31031

NVIDIA DGX Station A100 and DGX Station A800 SBIOS contains a vulnerability where a user may cause a heap-based buffer overflow by local access. A su…

Fix: 1.25+

Fix from $1,950 2024-01-12

Dgx A100 Firmware CRITICAL 9.8

CVE-2023-31024

NVIDIA DGX A100 BMC contains a vulnerability in the host KVM daemon, where an unauthenticated attacker may cause stack memory corruption by sending a…

Fix: 00.22.05+

Fix from $2,300 2024-01-12

Dgx A100 Firmware CRITICAL 9.8

CVE-2023-31029

NVIDIA DGX A100 baseboard management controller (BMC) contains a vulnerability in the host KVM daemon, where an unauthenticated attacker may cause a …

Fix: 00.22.05+

Fix from $2,300 2024-01-12

Junos MEDIUM 5.3

CVE-2024-21596

A Heap-based Buffer Overflow vulnerability in the Routing Protocol Daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthent…

Mitigation only

Fix from $1,600 2024-01-12

Junos CRITICAL 9.8

CVE-2024-21591EPSS 18%

An Out-of-bounds Write vulnerability in J-Web of Juniper Networks Junos OS on SRX Series and EX Series allows an unauthenticated, network-based attac…

Fix: 20.4+

Fix from $2,300 2024-01-12

Junos MEDIUM 5.5

CVE-2024-21594

A Heap-based Buffer Overflow vulnerability in the Network Services Daemon (NSD) of Juniper Networks Junos OS allows authenticated, low privileged, lo…

Fix: 20.4+

Fix from $1,600 2024-01-12

Exiftags HIGH 7.8

CVE-2023-50671

In exiftags 1.01, nikon_prop1 in nikon.c has a heap-based buffer overflow (write of size 28) because snprintf can write to an unexpected address.

No fix yet

Fix from $1,950 2024-01-11

Hex Workshop MEDIUM 5.5

CVE-2024-0429

A denial service vulnerability has been found on Hex Workshop affecting version 6.7, an attacker could send a command line file arguments and contro…

Fix: after 6.7.3

Fix from $1,600 2024-01-11

Swftools MEDIUM 5.5

CVE-2023-37644

SWFTools 0.9.2 772e55a allows attackers to trigger a large memory-allocation attempt via a crafted document, as demonstrated by pdf2swf. This occurs …

No fix yet

Fix from $1,600 2024-01-11

Ipados HIGH 7.5

CVE-2023-42869

Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Ventura 13.4, iOS 16.5 and iPadOS 16.5.…

Fix: 13.4 / 16.5+

Fix from $1,950 2024-01-10

Ipados HIGH 7.8

CVE-2023-42871

The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14, iOS 17 and iPadOS 17. An app may be able to execute ar…

Fix: 14.0 / 17.0+

Fix from $1,950 2024-01-10

Ipados HIGH 7.1

CVE-2023-38610

A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sonoma 14, iOS 17 and iPadOS 17. An app may be …

Fix: 14.0 / 17.0+

Fix from $1,950 2024-01-10

macOS HIGH 7.8

CVE-2022-46721

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13. An app may be able to execute arbitrary code with ker…

Fix: 13.0+

Fix from $1,950 2024-01-10

Ipados HIGH 7.8

CVE-2023-32366

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.7.5, macOS Ventura 13.3, iOS 16.4 …

Fix: 11.7.5 / 12.6.4+

Fix from $1,950 2024-01-10

Ironport Email Security Appliance CRITICAL 9.8

CVE-2023-31488

Hyland Perceptive Filters releases before 2023-12-08 (e.g., 11.4.0.2647), as used in Cisco IronPort Email Security Appliance Software, Cisco Secure E…

Mitigation only