Vulnerabilities (CVE)

Filtered by CWE-787
Total 10481 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-42751 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2023-12-07 N/A 4.4 MEDIUM
In gnss service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
CVE-2023-32853 2 Google, Mediatek 28 Android, Mt6580, Mt6739 and 25 more 2023-12-07 N/A 6.7 MEDIUM
In rpmb, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07648764; Issue ID: ALPS07648764.
CVE-2023-32854 2 Google, Mediatek 20 Android, Mt6835, Mt6879 and 17 more 2023-12-07 N/A 6.7 MEDIUM
In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08240132; Issue ID: ALPS08240132.
CVE-2023-42682 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2023-12-07 N/A 4.4 MEDIUM
In gsp driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
CVE-2023-42679 2 Google, Unisoc 12 Android, S8000, Sc9863a and 9 more 2023-12-07 N/A 4.4 MEDIUM
In gpu driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
CVE-2023-42727 2 Google, Unisoc 12 Android, S8000, Sc9863a and 9 more 2023-12-07 N/A 4.4 MEDIUM
In gpu driver, there is a possible out of bounds write due to a incorrect bounds check. This could lead to local denial of service with System execution privileges needed
CVE-2023-42729 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2023-12-07 N/A 4.4 MEDIUM
In ril service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
CVE-2022-48462 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2023-12-06 N/A 5.5 MEDIUM
In wifi service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed
CVE-2022-48463 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2023-12-06 N/A 5.5 MEDIUM
In wifi service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed
CVE-2022-48464 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2023-12-06 N/A 5.5 MEDIUM
In wifi service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed
CVE-2023-48963 1 Tenda 2 I6, I6 Firmware 2023-12-05 N/A 7.5 HIGH
Tenda i6 V1.0.0.8(3856) is vulnerable to Buffer Overflow via /goform/wifiSSIDget.
CVE-2023-48964 1 Tenda 2 I6, I6 Firmware 2023-12-05 N/A 7.5 HIGH
Tenda i6 V1.0.0.8(3856) is vulnerable to Buffer Overflow via /goform/WifiMacFilterSet.
CVE-2023-49701 1 Asrmicro 4 Asr1803, Asr1803 Firmware, Asr1806 and 1 more 2023-12-05 N/A 9.8 CRITICAL
Memory Corruption in SIM management while USIMPhase2init
CVE-2023-48945 1 Openlinksw 1 Virtuoso 2023-12-05 N/A 7.5 HIGH
A stack overflow in openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.
CVE-2023-49699 1 Asrmicro 4 Asr1803, Asr1803 Firmware, Asr1806 and 1 more 2023-12-05 N/A 7.8 HIGH
Memory Corruption in IMS while calling VoLTE Streamingmedia Interface
CVE-2023-47051 3 Adobe, Apple, Microsoft 3 Audition, Macos, Windows 2023-12-04 N/A 5.5 MEDIUM
Adobe Audition version 24.0 (and earlier) and 23.6.1 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2023-47046 3 Adobe, Apple, Microsoft 3 Audition, Macos, Windows 2023-12-04 N/A 5.5 MEDIUM
Adobe Audition version 24.0 (and earlier) and 23.6.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2021-39537 2 Apple, Gnu 3 Mac Os X, Macos, Ncurses 2023-12-03 6.8 MEDIUM 8.8 HIGH
An issue was discovered in ncurses through v6.2-1. _nc_captoinfo in captoinfo.c has a heap-based buffer overflow.
CVE-2023-48106 1 Zlib-ng 1 Minizip-ng 2023-12-02 N/A 8.8 HIGH
Buffer Overflow vulnerability in zlib-ng minizip-ng v.4.0.2 allows an attacker to execute arbitrary code via a crafted file to the mz_path_resolve function in the mz_os.c file.
CVE-2023-49042 1 Tenda 2 Ax1803, Ax1803 Firmware 2023-12-01 N/A 9.8 CRITICAL
Heap Overflow vulnerability in Tenda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the schedStartTime parameter or the schedEndTime parameter in the function setSchedWifi.