CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Security Vulnerabilities Related To CWE-787

CVSS Scores Greater Than: 0   1   2   3   4   5   6   7   8   9  
Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
1 CVE-2019-17262 787 2019-10-08 2019-10-10
4.6
 None Local Low Not required Partial Partial Partial
XnView Classic 2.49.1 allows a User Mode Write AV starting at Xwsq+0x0000000000001fc0.
2 CVE-2019-17261 787 2019-10-08 2019-10-10
4.6
 None Local Low Not required Partial Partial Partial
XnView Classic 2.49.1 allows a User Mode Write AV starting at Xwsq+0x0000000000001e51.
3 CVE-2019-17259 787 2019-10-08 2019-10-10
4.6
 None Local Low Not required Partial Partial Partial
KMPlayer 4.2.2.31 allows a User Mode Write AV starting at utils!src_new+0x000000000014d6ee.
4 CVE-2019-17258 787 2019-10-08 2019-10-10
6.8
 None Remote Medium Not required Partial Partial Partial
IrfanView 4.53 allows Data from a Faulting Address to control a subsequent Write Address starting at JPEG_LS+0x000000000000839c.
5 CVE-2019-17256 787 2019-10-08 2019-10-10
6.8
 None Remote Medium Not required Partial Partial Partial
IrfanView 4.53 allows a User Mode Write AV starting at DPX!ReadDPX_W+0x0000000000001203.
6 CVE-2019-17255 787 2019-10-08 2019-10-10
6.8
 None Remote Medium Not required Partial Partial Partial
IrfanView 4.53 allows a User Mode Write AV starting at EXR!ReadEXR+0x0000000000010836.
7 CVE-2019-17254 787 2019-10-08 2019-10-10
6.8
 None Remote Medium Not required Partial Partial Partial
IrfanView 4.53 allows Data from a Faulting Address to control a subsequent Write Address starting at FORMATS!Read_BadPNG+0x0000000000000101.
8 CVE-2019-17253 787 2019-10-08 2019-10-10
6.8
 None Remote Medium Not required Partial Partial Partial
IrfanView 4.53 allows a User Mode Write AV starting at JPEG_LS+0x000000000000a6b8.
9 CVE-2019-17252 787 2019-10-08 2019-10-10
6.8
 None Remote Medium Not required Partial Partial Partial
IrfanView 4.53 allows a User Mode Write AV starting at FORMATS!Read_BadPNG+0x0000000000000115.
10 CVE-2019-17251 787 2019-10-08 2019-10-10
6.8
 None Remote Medium Not required Partial Partial Partial
IrfanView 4.53 allows a User Mode Write AV starting at FORMATS!GetPlugInInfo+0x0000000000007d43.
11 CVE-2019-17250 787 2019-10-08 2019-10-10
6.8
 None Remote Medium Not required Partial Partial Partial
IrfanView 4.53 allows a User Mode Write AV starting at WSQ!ReadWSQ+0x00000000000042f5.
12 CVE-2019-17249 787 2019-10-08 2019-10-10
6.8
 None Remote Medium Not required Partial Partial Partial
IrfanView 4.53 allows a User Mode Write AV starting at WSQ!ReadWSQ+0x000000000000d57b.
13 CVE-2019-17248 787 2019-10-08 2019-10-10
6.8
 None Remote Medium Not required Partial Partial Partial
IrfanView 4.53 allows a User Mode Write AV starting at WSQ!ReadWSQ+0x00000000000025b6.
14 CVE-2019-17246 787 2019-10-08 2019-10-10
6.8
 None Remote Medium Not required Partial Partial Partial
IrfanView 4.53 allows a User Mode Write AV starting at WSQ!ReadWSQ+0x000000000000258c.
15 CVE-2019-17245 787 2019-10-08 2019-10-10
4.6
 None Local Low Not required Partial Partial Partial
IrfanView 4.53 allows a User Mode Write AV starting at WSQ!ReadWSQ+0x0000000000004359.
16 CVE-2019-17242 787 2019-10-08 2019-10-10
4.6
 None Local Low Not required Partial Partial Partial
IrfanView 4.53 allows a User Mode Write AV starting at WSQ!ReadWSQ+0x000000000000966f.
17 CVE-2019-17241 787 2019-10-08 2019-10-10
4.6
 None Local Low Not required Partial Partial Partial
IrfanView 4.53 allows a User Mode Write AV starting at WSQ!ReadWSQ+0x000000000000d563.
18 CVE-2019-16927 787 2019-09-27 2019-10-01
4.3
 None Remote Medium Not required None None Partial
Xpdf 4.01.01 has an out-of-bounds write in the vertProfile part of the TextPage::findGaps function in TextOutputDev.cc, a different vulnerability than CVE-2019-9877.
19 CVE-2019-16093 787 2019-09-07 2019-09-09
7.5
 None Remote Low Not required Partial Partial Partial
Symonics libmysofa 0.7 has an invalid write in readOHDRHeaderMessageDataLayout in hdf/dataobject.c.
20 CVE-2019-15148 787 2019-08-18 2019-08-22
4.3
 None Remote Medium Not required None None Partial
GoPro GPMF-parser 1.2.2 has an out-of-bounds write in OpenMP4Source in demo/GPMF_mp4reader.c.
21 CVE-2019-14934 787 2019-08-11 2019-09-06
6.8
 None Remote Medium Not required Partial Partial Partial
An issue was discovered in PDFResurrect before 0.18. pdf_load_pages_kids in pdf.c doesn't validate a certain size value, which leads to a malloc failure and out-of-bounds write.
22 CVE-2019-14821 787 DoS 2019-09-19 2019-09-23
7.2
 None Local Low Not required Complete Complete Complete
An out-of-bounds access issue was found in the Linux kernel, all versions through 5.3, in the way Linux kernel's KVM hypervisor implements the Coalesced MMIO write operation. It operates on an MMIO ring buffer 'struct kvm_coalesced_mmio' object, wherein write indices 'ring->first' and 'ring->last' value could be supplied by a host user-space process. An unprivileged host user or process with access to '/dev/kvm' device could use this flaw to crash the host kernel, resulting in a denial of service or potentially escalating privileges on the system.
23 CVE-2019-14697 787 2019-08-06 2019-08-14
7.5
 None Remote Low Not required Partial Partial Partial
musl libc through 1.1.23 has an x87 floating-point stack adjustment imbalance, related to the math/i386/ directory. In some cases, use of this library could introduce out-of-bounds writes that are not present in an application's source code.
24 CVE-2019-14495 787 2019-08-01 2019-10-09
7.5
 None Remote Low Not required Partial Partial Partial
webadmin.c in 3proxy before 0.8.13 has an out-of-bounds write in the admin interface.
25 CVE-2019-14247 787 2019-07-24 2019-07-26
4.3
 None Remote Medium Not required None None Partial
The scan() function in mad.c in mpg321 0.3.2 allows remote attackers to trigger an out-of-bounds write via a zero bitrate in an MP3 file.
26 CVE-2019-13631 787 2019-07-17 2019-07-25
4.6
 None Local Low Not required Partial Partial Partial
In parse_hid_report_descriptor in drivers/input/tablet/gtco.c in the Linux kernel through 5.2.1, a malicious USB device can send an HID report that triggers an out-of-bounds write during generation of debugging messages.
27 CVE-2019-13544 787 Exec Code 2019-09-11 2019-10-09
6.8
 None Remote Medium Not required Partial Partial Partial
Delta Electronics TPEditor, Versions 1.94 and prior. Multiple out-of-bounds write vulnerabilities may be exploited by processing specially crafted project files, which may allow remote code execution.
28 CVE-2019-13323 787 Exec Code 2019-10-03 2019-10-09
6.8
 None Remote Medium Not required Partial Partial Partial
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.909. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of TIF files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-8783.
29 CVE-2019-13106 787 Exec Code Overflow 2019-08-06 2019-10-01
8.3
 None Remote Medium Not required Partial Partial Complete
Das U-Boot versions 2016.09 through 2019.07-rc4 can memset() too much data while reading a crafted ext4 filesystem, which results in a stack buffer overflow and likely code execution.
30 CVE-2019-13085 787 2019-06-30 2019-07-03
6.8
 None Remote Medium Not required Partial Partial Partial
XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x000000000030ecfa.
31 CVE-2019-13084 787 2019-06-30 2019-07-03
6.8
 None Remote Medium Not required Partial Partial Partial
XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x000000000026b739.
32 CVE-2019-13083 787 2019-06-30 2019-07-03
6.8
 None Remote Medium Not required Partial Partial Partial
XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000384e2a.
33 CVE-2019-12900 787 2019-06-19 2019-06-24
7.5
 None Remote Low Not required Partial Partial Partial
BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.
34 CVE-2019-12835 787 2019-06-15 2019-06-17
7.5
 None Remote Low Not required Partial Partial Partial
formats/xml.cpp in Leanify 0.4.3 allows for a controlled out-of-bounds write in xml_memory_writer::write via characters that require escaping.
35 CVE-2019-12810 787 Exec Code Mem. Corr. 2019-08-30 2019-10-09
6.8
 None Remote Medium Not required Partial Partial Partial
A memory corruption vulnerability exists in the .PSD parsing functionality of ALSee v5.3 ~ v8.39. A specially crafted .PSD file can cause an out of bounds write vulnerability resulting in code execution. By persuading a victim to open a specially-crafted .PSD file, an attacker could execute arbitrary code.
36 CVE-2019-12495 787 2019-05-31 2019-06-03
4.3
 None Remote Medium Not required None None Partial
An issue was discovered in Tiny C Compiler (aka TinyCC or TCC) 0.9.27. Compiling a crafted source file leads to a one-byte out-of-bounds write in the gsym_addr function in x86_64-gen.c. This occurs because tccasm.c mishandles section switches.
37 CVE-2019-12298 787 2019-05-23 2019-05-23
4.3
 None Remote Medium Not required None None Partial
Leanify 0.4.3 allows remote attackers to trigger an out-of-bounds write (1024 bytes) via a modified input file.
38 CVE-2019-11927 787 Overflow 2019-09-27 2019-10-09
6.8
 None Remote Medium Not required Partial Partial Partial
An integer overflow in WhatsApp media parsing libraries allows a remote attacker to perform an out-of-bounds write on the heap via specially-crafted EXIF tags in WEBP images. This issue affects WhatsApp for Android before version 2.19.143 and WhatsApp for iOS before version 2.19.100.
39 CVE-2019-11921 787 2019-07-25 2019-08-02
7.5
 None Remote Low Not required Partial Partial Partial
An out of bounds write is possible via a specially crafted packet in certain configurations of Proxygen due to improper handling of Base64 when parsing malformed binary content in Structured HTTP Headers. This issue affects versions of proxygen prior to v2019.07.22.00.
40 CVE-2019-11772 787 2019-07-17 2019-09-02
7.5
 None Remote Low Not required Partial Partial Partial
In Eclipse OpenJ9 prior to 0.15, the String.getBytes(int, int, byte[], int) method does not verify that the provided byte array is non-null nor that the provided index is in bounds when compiled by the JIT. This allows arbitrary writes to any 32-bit address or beyond the end of a byte array within Java code run under a SecurityManager.
41 CVE-2019-11500 787 Exec Code 2019-08-29 2019-09-06
7.5
 None Remote Low Not required Partial Partial Partial
In Dovecot before 2.2.36.4 and 2.3.x before 2.3.7.2 (and Pigeonhole before 0.5.7.2), protocol processing can fail for quoted strings. This occurs because '\0' characters are mishandled, and can lead to out-of-bounds writes and remote code execution.
42 CVE-2019-11037 787 2019-05-03 2019-05-16
7.5
 None Remote Low Not required Partial Partial Partial
In PHP imagick extension in versions between 3.3.0 and 3.4.4, writing to an array of values in ImagickKernel::fromMatrix() function did not check that the address will be within the allocated array. This could lead to out of bounds write to memory if the function is called with the data controlled by untrusted party.
43 CVE-2019-10987 787 Exec Code 2019-06-28 2019-07-02
6.8
 None Remote Medium Not required Partial Partial Partial
In WebAccess/SCADA Versions 8.3.5 and prior, multiple out-of-bounds write vulnerabilities are caused by a lack of proper validation of the length of user-supplied data. Exploitation of these vulnerabilities may allow remote code execution.
44 CVE-2019-10961 787 Exec Code 2019-08-02 2019-10-09
6.8
 None Remote Medium Not required Partial Partial Partial
In Advantech WebAccess HMI Designer Version 2.1.9.23 and prior, processing specially crafted MCR files lacking proper validation of user supplied data may cause the system to write outside the intended buffer area, allowing remote code execution.
45 CVE-2019-10878 787 Exec Code 2019-04-05 2019-05-07
7.5
 None Remote Low Not required Partial Partial Partial
In Teeworlds 0.7.2, there is a failed bounds check in CDataFileReader::GetData() and CDataFileReader::ReplaceData() and related functions in engine/shared/datafile.cpp that can lead to an arbitrary free and out-of-bounds pointer write, possibly resulting in remote code execution.
46 CVE-2019-9460 787 2019-09-27 2019-10-02
4.6
 None Local Low Not required Partial Partial Partial
In mediaserver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-62535446
47 CVE-2019-9456 787 2019-09-06 2019-09-24
4.6
 None Local Low Not required Partial Partial Partial
In the Android kernel in Pixel C USB monitor driver there is a possible OOB write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
48 CVE-2019-9454 787 Mem. Corr. 2019-09-06 2019-09-09
4.6
 None Local Low Not required Partial Partial Partial
In the Android kernel in i2c driver there is a possible out of bounds write due to memory corruption. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
49 CVE-2019-9451 787 2019-09-06 2019-09-10
4.6
 None Local Low Not required Partial Partial Partial
In the Android kernel in the touchscreen driver there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
50 CVE-2019-9448 787 2019-09-06 2019-09-09
4.6
 None Local Low Not required Partial Partial Partial
In the Android kernel in the FingerTipS touchscreen driver there is a possible out of bounds write due to a missing bounds check. This could lead to a local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
Total number of vulnerabilities : 737   Page : 1 (This Page)2 3 4 5 6 7 8 9 10 11 12 13 14 15
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.