Out-of-bounds Write — CVEs by weakness type

Apq8009w Firmware HIGH 7.1

CVE-2020-11203

Stack overflow may occur if GSM/WCDMA broadcast config size received from user is larger than variable length array in Snapdragon Auto, Snapdragon Co…

Mitigation only

Fix from $1,950 2021-02-22

Png Img HIGH 8.8

CVE-2020-28248

An integer overflow in the PngImg::InitStorage_() function of png-img before 3.1.0 leads to an under-allocation of heap memory and subsequently an ex…

Fix: 3.1.0+

Fix from $1,950 2021-02-20

Asterisk MEDIUM 6.5

CVE-2021-26713

A stack-based buffer overflow in res_rtp_asterisk.c in Sangoma Asterisk before 16.16.1, 17.x before 17.9.2, and 18.x before 18.2.1 and Certified Aste…

Fix: 16.16.1 / 17.9.2+

Fix from $1,600 2021-02-19

C Controller Module Setting And Monitoring Tool CRITICAL 9.8

CVE-2021-20587

Heap-based buffer overflow vulnerability in Mitsubishi Electric FA Engineering Software (CPU Module Logging Configuration Tool versions 1.112R and pr…

Fix: after 3.44w

Fix from $2,300 2021-02-19

V Server HIGH 7.8

CVE-2020-25171

The affected Fuji Electric V-Server Lite versions prior to 3.3.24.0 are vulnerable to an out-of-bounds write, which may allow an attacker to remotely…

Fix: 3.3.24.0+

Fix from $1,950 2021-02-19

Aida64 HIGH 7.8

CVE-2020-19513

Buffer overflow in FinalWire Ltd AIDA64 Engineer 6.00.5100 allows attackers to execute arbitrary code by creating a crafted input that will overwrite…

No fix yet

Fix from $1,950 2021-02-19

Wpg HIGH 7.5

CVE-2021-27224EPSS 38%

The WPG plugin before 3.1.0.0 for IrfanView 4.57 has a user-mode write access violation starting at WPG+0x0000000000012ec6, which might allow remote …

Fix: 3.1.0.0+

Fix from $1,950 2021-02-17

Graphics Drivers MEDIUM 5.5

CVE-2020-12386

Out-of-bounds write in some Intel(R) Graphics Drivers before version 15.36.39.5143 may allow an authenticated user to potentially enable denial of se…

Fix: 15.36.39.5143+

Fix from $1,600 2021-02-17

Graphics Drivers HIGH 7.8

CVE-2020-24462

Out of bounds write in the Intel(R) Graphics Driver before version 15.33.53.5161, 15.36.40.5162, 15.40.47.5166, 15.45.33.5164 and 27.20.100.8336 may …

Fix: 15.33.53.5161 / 15.36.40.5162+

Fix from $1,950 2021-02-17

Graphics Drivers HIGH 7.8

CVE-2020-12369

Out of bound write in some Intel(R) Graphics Drivers before version 26.20.100.8336 may allow a privileged user to potentially enable escalation of pr…

Fix: 26.20.100.8336+

Fix from $1,950 2021-02-17

Bmc Firmware MEDIUM 6.7

CVE-2020-12375

Heap overflow in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.47 may allow an authenticated …

Fix: 2.47+

Fix from $1,600 2021-02-17

Surveillance Station CRITICAL 9.8

CVE-2020-2501

A stack-based buffer overflow vulnerability has been reported to affect QNAP NAS devices running Surveillance Station. If exploited, this vulnerabili…

Fix: 5.1.5.3.3 / 5.1.5.4.3+

Fix from $2,300 2021-02-17

Profinet Io Device Firmware HIGH 7.5

CVE-2021-20986

A Denial of Service vulnerability was found in Hilscher PROFINET IO Device V3 in versions prior to V3.14.0.7. This may lead to unexpected loss of cyc…

Fix: 3.14.0.7+

Fix from $1,950 2021-02-16

Ethernet\/ip Adapter Firmware HIGH 8.6

CVE-2021-20987

A denial of service and memory corruption vulnerability was found in Hilscher EtherNet/IP Core V2 prior to V2.13.0.21that may lead to code injection …

Fix: 2.13.0.21+

Fix from $1,950 2021-02-16

Digital Sentry Server HIGH 8.8

CVE-2021-27232

The RTSPLive555.dll ActiveX control in Pelco Digital Sentry Server 7.18.72.11464 has a SetCameraConnectionParameter stack-based buffer overflow. This…

No fix yet

Fix from $1,950 2021-02-16

Activepresenter CRITICAL 9.8

CVE-2021-3375

ActivePresenter 6.1.6 is affected by a memory corruption vulnerability that may result in a denial of service (DoS) or arbitrary code execution.

No fix yet

Fix from $2,300 2021-02-15

Big Ip Access Policy Manager HIGH 7.5

CVE-2021-22973

On BIG-IP version 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1, 13.1.x before 13.1.3.5, and all 12.1.x versions, JSON parser …

Fix: 13.1.3.5 / 14.1.3.1+

Fix from $1,950 2021-02-12

Foxit Reader HIGH 7.8

CVE-2020-27860

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.0.1.35811. User interaction is requ…

Fix: after 10.1.0.37527

Fix from $1,950 2021-02-12

Animate HIGH 7.8

CVE-2021-21052

Adobe Animate version 21.0.2 (and earlier) is affected by an Out-of-bounds Write vulnerability. An unauthenticated attacker could leverage this vulne…

Fix: after 21.0.2