Browse CVEs

CRITICAL 9.8 CVE-2022-0982 The telnet_input_char function in opt/src/accel-pppd/cli/telnet.c suffers from a memory corruption vulnerability, whereby user input cmdline_len is c… Accel Ppp after 1.12.0 Fix from $2,3002022-03-16 HIGH 8.1 CVE-2021-41987EPSS 16% In the SCEP Server of RouterOS in certain Mikrotik products, an attacker can trigger a heap-based buffer overflow that leads to remote code execution… Routeros No fix yet Fix from $1,9502022-03-16 MEDIUM 6.7 CVE-2021-39729 In the TitanM chip, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with Syst… Android Mitigation only Fix from $1,6002022-03-16 MEDIUM 6.7 CVE-2021-39731 In ProtocolStkProactiveCommandAdapter::Init of protocolstkadapter.cpp, there is a possible out of bounds write due to an incorrect bounds check. This… Android Mitigation only Fix from $1,6002022-03-16 HIGH 7.8 CVE-2021-39732 In copy_io_entries of lwis_ioctl.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privil… Android Mitigation only Fix from $1,9502022-03-16 MEDIUM 6.7 CVE-2021-39733 In amcs_cdev_unlocked_ioctl of audiometrics.c, there is a possible out of bounds write due to improper input validation. This could lead to local esc… Android Mitigation only Fix from $1,6002022-03-16 MEDIUM 6.7 CVE-2021-39736 In prepare_io_entry and prepare_response of lwis_ioctl.c and lwis_periodic_io.c, there is a possible out of bounds write due to an integer overflow. … Android Mitigation only Fix from $1,6002022-03-16 HIGH 7.8 CVE-2021-39793 KEV In kbase_jd_user_buf_pin_pages of mali_kbase_mem.c, there is a possible out of bounds write due to a logic error in the code. This could lead to loca… Android Mitigation only Fix from $1,9502022-03-16 CRITICAL 9.8 CVE-2021-39708 In gatt_process_notification of gatt_cl.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escal… Android Mitigation only Fix from $2,3002022-03-16 MEDIUM 6.7 CVE-2021-39718 In ProtocolStkProactiveCommandAdapter::Init of protocolstkadapter.cpp, there is a possible out of bounds write due to an incorrect bounds check. This… Android Mitigation only Fix from $1,6002022-03-16 MEDIUM 6.7 CVE-2021-39719 In lwis_top_register_io of lwis_device_top.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation… Android Mitigation only Fix from $1,6002022-03-16 MEDIUM 6.7 CVE-2021-39721 In TBD of TBD, there is a possible out of bounds write due to memory corruption. This could lead to local escalation of privilege with System executi… Android Mitigation only Fix from $1,6002022-03-16 CRITICAL 9.8 CVE-2021-23165 A flaw was found in htmldoc before v1.9.12. Heap buffer overflow in pspdf_prepare_outpages(), in ps-pdf.cxx may lead to execute arbitrary code and de… Htmldoc 1.9.12+ Fix from $2,3002022-03-16 MEDIUM 6.5 CVE-2021-39667 In ih264d_parse_decode_slice of ih264d_parse_slice.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remot… Android Patch available Fix from $1,6002022-03-16 HIGH 7.8 CVE-2021-39685 In various setup methods of the USB gadget subsystem, there is a possible out of bounds write due to an incorrect flag check. This could lead to loca… Android Patch available Fix from $1,9502022-03-16 HIGH 8.8 CVE-2021-43304 Heap buffer overflow in Clickhouse's LZ4 compression codec when parsing a malicious query. There is no verification that the copy operations in the L… Debian Linux 21.10.2.15+ Fix from $1,9502022-03-14 HIGH 8.8 CVE-2021-43305 Heap buffer overflow in Clickhouse's LZ4 compression codec when parsing a malicious query. There is no verification that the copy operations in the L… Debian Linux 21.10.2.15+ Fix from $1,9502022-03-14 HIGH 7.8 CVE-2022-0943 Heap-based Buffer Overflow occurs in vim in GitHub repository vim/vim prior to 8.2.4563. Fedora 8.2.4563 / 13.0+ Fix from $1,9502022-03-14 HIGH 7.8 CVE-2022-24578 GPAC 1.0.1 is affected by a heap-based buffer overflow in SFS_AddString () at bifs/script_dec.c. Gpac No fix yet Fix from $1,9502022-03-14 HIGH 7.8 CVE-2022-24575 GPAC 1.0.1 is affected by a stack-based buffer overflow through MP4Box. Gpac No fix yet Fix from $1,9502022-03-14 CRITICAL 9.8 CVE-2022-23943EPSS 50% Out-of-bounds Write vulnerability in mod_sed of Apache HTTP Server allows an attacker to overwrite heap memory with possibly attacker provided data. … HTTP Server 2.4.53+ Fix from $2,3002022-03-14 HIGH 7.8 CVE-2022-26967 GPAC 2.0 allows a heap-based buffer overflow in gf_base64_encode. It can be triggered via MP4Box. Gpac Patch available Fix from $1,9502022-03-12 HIGH 7.8 CVE-2022-24096 Adobe After Effects versions 22.2 (and earlier) and 18.4.4 (and earlier) are affected by an Heap-based Buffer Overflow vulnerability that could resul… After Effects 18.4.5 / 22.2.1+ Fix from $1,9502022-03-11 HIGH 7.8 CVE-2022-24097 Adobe After Effects versions 22.2 (and earlier) and 18.4.4 (and earlier) are affected by an out-of-bounds write vulnerability that could result in ar… After Effects 18.4.5 / 22.2.1+ Fix from $1,9502022-03-11 HIGH 7.8 CVE-2022-24095 Adobe After Effects versions 22.2 (and earlier) and 18.4.4 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability that could resul… After Effects 18.4.5 / 22.2.1+ Fix from $1,9502022-03-11 HIGH 7.8 CVE-2022-24094 Adobe After Effects versions 22.2 (and earlier) and 18.4.4 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability that could resul… After Effects 18.4.5 / 22.2.1+ Fix from $1,9502022-03-11 HIGH 7.5 CVE-2020-36518 jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects. Debian Linux 2.12.6.1 / 2.13.2.1+ Fix from $1,9502022-03-11 HIGH 7.5 CVE-2022-25566 Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function saveParentControlInfo. This vulnerability allows attackers to cause … Ax1806 Firmware No fix yet Fix from $1,9502022-03-10 HIGH 7.5 CVE-2022-25560 Tenda AX12 v22.03.01.21 was discovered to contain a stack overflow in the function sub_4327CC. This vulnerability allows attackers to cause a Denial … Ax12 Firmware No fix yet Fix from $1,9502022-03-10 HIGH 7.5 CVE-2022-25561 Tenda AX12 v22.03.01.21 was discovered to contain a stack overflow in the function sub_42DE00. This vulnerability allows attackers to cause a Denial … Ax12 Firmware No fix yet Fix from $1,9502022-03-10