Out-of-bounds Write — CVEs by weakness type

Sigma Lite Firmware CRITICAL 9.8

CVE-2023-33218

The Parameter Zone Read and Parameter Zone Write command handlers allow performing a Stack buffer overflow. This could potentially lead to a Remote …

Fix: 1.2.7 / 2.12.2+

Fix from $2,300 2023-12-15

Sigma Lite Firmware CRITICAL 9.8

CVE-2023-33219

The handler of the retrofit validation command doesn't properly check the boundaries when performing certain validation operations. This allows a st…

Fix: 1.2.7 / 2.12.2+

Fix from $2,300 2023-12-15

Sigma Lite Firmware CRITICAL 9.8

CVE-2023-33220

During the retrofit validation process, the firmware doesn't properly check the boundaries while copying some attributes to check. This allows a sta…

Fix: 1.2.7 / 2.12.2+

Fix from $2,300 2023-12-15

Sigma Lite Firmware CRITICAL 9.8

CVE-2023-33221

When reading DesFire keys, the function that reads the card isn't properly checking the boundaries when copying internally the data received. This a…

Fix: 1.2.7 / 2.12.2+

Fix from $2,300 2023-12-15

Jq MEDIUM 5.5

CVE-2023-50268

jq is a command-line JSON processor. Version 1.7 is vulnerable to stack-based buffer overflow in builds using decNumber. Version 1.7.1 contains a pat…

Patch available

Fix from $1,600 2023-12-13

Jq MEDIUM 5.5

CVE-2023-50246

jq is a command-line JSON processor. Version 1.7 is vulnerable to heap-based buffer overflow. Version 1.7.1 contains a patch for this issue.

Patch available

Fix from $1,600 2023-12-13

Substance 3d Designer HIGH 7.8

CVE-2023-48639

Adobe Substance 3D Designer versions 13.0.0 (and earlier) and 13.1.0 (and earlier) are affected by an out-of-bounds write vulnerability that could re…

Fix: after 13.0.0

Fix from $1,950 2023-12-13

Substance 3d Sampler HIGH 7.8

CVE-2023-48628

Adobe Substance 3D Sampler versions 4.2.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execut…

Fix: after 4.2.1

Fix from $1,950 2023-12-13

Substance 3d Sampler HIGH 7.8

CVE-2023-48629

Adobe Substance 3D Sampler versions 4.2.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execut…

Fix: after 4.2.1

Fix from $1,950 2023-12-13

Substance 3d Sampler HIGH 7.8

CVE-2023-48630

Adobe Substance 3D Sampler versions 4.2.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execut…

Fix: after 4.2.1

Fix from $1,950 2023-12-13

After Effects HIGH 7.8

CVE-2023-48632

Adobe After Effects versions 24.0.3 (and earlier) and 23.6.0 (and earlier) are affected by an out-of-bounds write vulnerability that could result in …

Fix: after 24.0.3

Fix from $1,950 2023-12-13

Substance 3d Sampler HIGH 7.8

CVE-2023-48625

Adobe Substance 3D Sampler versions 4.2.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execut…

Fix: after 4.2.1

Fix from $1,950 2023-12-13

Substance 3d Sampler HIGH 7.8

CVE-2023-48626

Adobe Substance 3D Sampler versions 4.2.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execut…

Fix: after 4.2.1

Fix from $1,950 2023-12-13

Substance 3d Sampler HIGH 7.8

CVE-2023-48627

Adobe Substance 3D Sampler versions 4.2.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execut…

Fix: after 4.2.1

Fix from $1,950 2023-12-13

Illustrator HIGH 7.8

CVE-2023-47063

Adobe Illustrator versions 28.0 (and earlier) and 27.9 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitr…

Fix: after 27.9

Fix from $1,950 2023-12-13

Espeak Ng MEDIUM 5.3

CVE-2023-49991

Espeak-ng 1.52-dev was discovered to contain a Stack Buffer Underflow via the function CountVowelPosition at synthdata.c.

No fix yet

Fix from $1,600 2023-12-12

Espeak Ng MEDIUM 5.3

CVE-2023-49992

Espeak-ng 1.52-dev was discovered to contain a Stack Buffer Overflow via the function RemoveEnding at dictionary.c.

No fix yet

Fix from $1,600 2023-12-12

Opcenter Quality HIGH 7.5

CVE-2023-46284

A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIC PCS neo…

Fix: 4.1 / 15+