Out-of-bounds Write — CVEs by weakness type

Fedora HIGH 7.8

CVE-2022-0572EPSS 27%

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

Fix: 8.2.4359 / 13.0+

Fix from $1,950 2022-02-14

Chrome HIGH 8.8

CVE-2022-0306EPSS 85%

Heap buffer overflow in PDFium in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially exploit heap corruption via a crafted …

Fix: 97.0.4692.99+

Fix from $1,950 2022-02-12

Chrome HIGH 8.8

CVE-2022-0310

Heap buffer overflow in Task Manager in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially exploit heap corruption via spec…

Fix: 97.0.4692.99+

Fix from $1,950 2022-02-12

Chrome HIGH 8.8

CVE-2022-0311

Heap buffer overflow in Task Manager in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who convinced a user to engage in specific user…

Fix: 97.0.4692.99+

Fix from $1,950 2022-02-12

Chrome HIGH 8.8

CVE-2022-0100

Heap buffer overflow in Media streams API in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially exploit heap corruption via…

Fix: 97.0.4692.71+

Fix from $1,950 2022-02-12

Chrome HIGH 8.8

CVE-2022-0101

Heap buffer overflow in Bookmarks in Google Chrome prior to 97.0.4692.71 allowed a remote attacker who convinced a user to perform specific user gest…

Fix: 97.0.4692.71+

Fix from $1,950 2022-02-12

Chrome HIGH 8.8

CVE-2022-0104

Heap buffer overflow in ANGLE in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially exploit heap corruption via a crafted H…

Fix: 97.0.4692.71+

Fix from $1,950 2022-02-12

Chrome HIGH 7.4

CVE-2021-4098

Insufficient data validation in Mojo in Google Chrome prior to 96.0.4664.110 allowed a remote attacker who had compromised the renderer process to po…

Fix: 96.0.4664.110+

Fix from $1,950 2022-02-11

Chrome HIGH 8.8

CVE-2021-4100

Object lifecycle issue in ANGLE in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to potentially exploit heap corruption via a crafte…

Fix: 96.0.4664.110+

Fix from $1,950 2022-02-11

Chrome HIGH 8.8

CVE-2021-4101

Heap buffer overflow in Swiftshader in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to potentially exploit heap corruption via a cr…

Fix: 96.0.4664.110+

Fix from $1,950 2022-02-11

Android HIGH 7.8

CVE-2022-23428

An improper boundary check in eden_runtime hal service prior to SMR Feb-2022 Release 1 allows arbitrary memory write and code execution.

Mitigation only

Fix from $1,950 2022-02-11

Android MEDIUM 6.7

CVE-2022-23432

An improper input validation in SMC_SRPMB_WSM handler of RPMB ldfw prior to SMR Feb-2022 Release 1 allows arbitrary memory write and code execution.

Mitigation only

Fix from $1,600 2022-02-11

Android MEDIUM 6.5

CVE-2021-39665

In checkSpsUpdated of AAVCAssembler.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information …

Patch available

Fix from $1,600 2022-02-11

Android CRITICAL 9.8

CVE-2021-39675EPSS 6%

In GKI_getbuf of gki_buffer.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote escalation of privil…

Mitigation only

Fix from $2,300 2022-02-11

Modicon M340 Bmxp342020 Firmware HIGH 7.5

CVE-2021-22788

A CWE-787: Out-of-bounds Write vulnerability exists that could cause denial of service when an attacker sends a specially crafted HTTP request to the…

Fix: 3.40+

Fix from $1,950 2022-02-11

Aqt1000 Firmware HIGH 7.8

CVE-2021-30322

Possible out of bounds write due to improper validation of number of GPIOs configured in an internal parameters array in Snapdragon Auto, Snapdragon …

Mitigation only

Fix from $1,950 2022-02-11

Pdf Reader CRITICAL 9.8

CVE-2022-24954EPSS 12%

Foxit PDF Reader before 11.2.1 and Foxit PDF Editor before 11.2.1 have a Stack-Based Buffer Overflow related to XFA, for the 'subform colSpan="-2"' a…

Fix: after 11.2.0.53415

Fix from $2,300 2022-02-11

Rv340 Firmware CRITICAL 9.8

CVE-2022-20700 KEVEPSS 6%