Out-of-bounds Write — CVEs by weakness type

Connext Professional HIGH 8.6

CVE-2024-52063

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Core Libraries, Routing Service) al…

Fix: 5.3.1.45 / 6.0.1.40+

Fix from $1,950 2024-12-13

Connext Professional HIGH 7.1

CVE-2024-52064

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Var…

Fix: 5.3.1.45 / 6.0.1.40+

Fix from $1,950 2024-12-13

Safari CRITICAL 9.8

CVE-2024-54534

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.6, macOS Sequoia 15.…

Fix: 2.2 / 11.2+

Fix from $2,300 2024-12-12

Safari HIGH 7.5

CVE-2024-54508

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.6, macOS Sequoia 15.…

Fix: 2.2 / 11.2+

Fix from $1,950 2024-12-12

Ipados HIGH 7.1

CVE-2024-44245

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia 15.2, macOS Sono…

Fix: 2.2 / 14.7.2+

Fix from $1,950 2024-12-12

Ipados CRITICAL 9.8

CVE-2024-44242

The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1. An attacker may be able to …

Fix: 18.1+

Fix from $2,300 2024-12-12

Unclassified CRITICAL 9.0

CVE-2024-55884

In the Mullvad VPN client 2024.6 (Desktop), 2024.8 (iOS), and 2024.8-beta1 (Android), the exception-handling alternate stack can be exhausted, leadin…

Patch available

Fix from $2,300 2024-12-12

Gstreamer CRITICAL 9.8

CVE-2024-47607

GStreamer is a library for constructing graphs of media-handling components. stack-buffer overflow has been detected in the gst_opus_dec_parse_heade…

Fix: 1.24.10+

Fix from $2,300 2024-12-12

Gstreamer CRITICAL 9.8

CVE-2024-47613

GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been identified in `gst_gdk…

Fix: 1.24.10+

Fix from $2,300 2024-12-12

Gstreamer CRITICAL 9.8

CVE-2024-47615

GStreamer is a library for constructing graphs of media-handling components. An OOB-Write has been detected in the function gst_parse_vorbis_setup_pa…

Fix: 1.24.10+

Fix from $2,300 2024-12-12

Gstreamer CRITICAL 9.8

CVE-2024-47538

GStreamer is a library for constructing graphs of media-handling components. A stack-buffer overflow has been detected in the `vorbis_handle_identifi…

Fix: 1.24.10+

Fix from $2,300 2024-12-12

Gstreamer CRITICAL 9.8

CVE-2024-47539

GStreamer is a library for constructing graphs of media-handling components. An out-of-bounds write vulnerability was identified in the convert_to_s3…

Fix: 1.24.10+

Fix from $2,300 2024-12-12

Gstreamer HIGH 7.5

CVE-2024-47541

GStreamer is a library for constructing graphs of media-handling components. An OOB-write vulnerability has been identified in the gst_ssa_parse_remo…

Fix: 1.24.10+

Fix from $1,950 2024-12-12

Gstreamer CRITICAL 9.8

CVE-2024-47537

GStreamer is a library for constructing graphs of media-handling components. The program attempts to reallocate the memory pointed to by stream->samp…

Fix: 1.24.10+

Fix from $2,300 2024-12-12

Connect Secure HIGH 7.5

CVE-2024-37377

A heap-based buffer overflow in IPsec of Ivanti Connect Secure before version 22.7R2.3 allows a remote unauthenticated attacker to cause a denial of …

Fix: 22.7+

Fix from $1,950 2024-12-12

Framemaker HIGH 7.8

CVE-2024-53959

Adobe Framemaker versions 2020.7, 2022.5 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code …

Fix: 2020.7 / 2022.5+