ByteOS Network

There is an arbitrary memory write vulnerability in Huawei smart phone when processing file parsing. Due to insufficient validation of the input files, successful exploit could cause certain service abnormal. Affected product versions include:HUAWEI P30 versions 10.0.0.186(C10E7R5P1), 10.0.0.186(C461E4R3P1), 10.0.0.188(C00E85R2P11), 10.0.0.188(C01E88R2P11),10.0.0.188(C605E19R1P3), 10.0.0.190(C185E4R7P1), 10.0.0.190(C431E22R2P5), 10.0.0.190(C432E22R2P5),10.0.0.190(C605E19R1P3), 10.0.0.190(C636E4R3P4), 10.0.0.192(C635E3R2P4).

Vendor-n/a Huawei Technologies Co., Ltd.

Product-p30_firmware p30 HUAWEI P30

CWE ID-CWE-787

Out-of-bounds Write

CVE-2022-3626

Matching Score-4

Assigner-GitLab Inc.

View Details

Matching Score-4

Assigner-GitLab Inc.

CVSS Score-5.5||MEDIUM

EPSS-0.03% / 6.25%

7 Day CHG~0.00%

Published-21 Oct, 2022 | 00:00

Updated-07 May, 2025 | 16:15

LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemset in libtiff/tif_unix.c:340 when called from processCropSelections, tools/tiffcrop.c:7619, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 236b7191.

Vendor-LibTIFF NetApp, Inc.Debian GNU/Linux

Product-libtiff debian_linux active_iq_unified_manager libtiff

CWE ID-CWE-787

Out-of-bounds Write

CVE-2022-35260

Matching Score-4

Assigner-HackerOne

View Details

Matching Score-4

Assigner-HackerOne

CVSS Score-6.5||MEDIUM

EPSS-0.24% / 47.55%

7 Day CHG~0.00%

Published-05 Dec, 2022 | 00:00

Updated-19 Nov, 2024 | 20:09

curl can be told to parse a `.netrc` file for credentials. If that file endsin a line with 4095 consecutive non-white space letters and no newline, curlwould first read past the end of the stack-based buffer, and if the readworks, write a zero byte beyond its boundary.This will in most cases cause a segfault or similar, but circumstances might also cause different outcomes.If a malicious user can provide a custom netrc file to an application or otherwise affect its contents, this flaw could be used as denial-of-service.

Vendor-n/a NetApp, Inc.Splunk LLC (Cisco Systems, Inc.)Apple Inc.CURL

Product-clustered_data_ontap universal_forwarder h500s h410s_firmware h700s_firmware h300s_firmware h500s_firmware h410s macos curl h700s h300s https://github.com/curl/curl

CWE ID-CWE-125

Out-of-bounds Read

CWE ID-CWE-787

Out-of-bounds Write

CVE-2018-18584

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-6.5||MEDIUM

EPSS-2.60% / 85.05%

7 Day CHG~0.00%

Published-23 Oct, 2018 | 00:00

Updated-05 Aug, 2024 | 11:15

In mspack/cab.h in libmspack before 0.8alpha and cabextract before 1.8, the CAB block input buffer is one byte too small for the maximal Quantum block, leading to an out-of-bounds write.

Vendor-libmspack_project cabextract_project starwindsoftware n/a Red Hat, Inc.SUSE Debian GNU/Linux Canonical Ltd.

Product-ubuntu_linux linux_enterprise_server libmspack debian_linux starwind_virtual_san enterprise_linux cabextract n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-13766

Matching Score-4

Assigner-Chrome

View Details

Matching Score-4

Assigner-Chrome

CVSS Score-6.5||MEDIUM

EPSS-0.46% / 63.02%

7 Day CHG~0.00%

Published-03 Jan, 2020 | 22:35

Updated-05 Aug, 2024 | 00:05

Use-after-free in accessibility in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Vendor-Google LLC

Product-chrome Chrome

CWE ID-CWE-416

Use After Free

CWE ID-CWE-787

Out-of-bounds Write

CVE-2024-0741

Matching Score-4

Assigner-Mozilla Corporation

View Details

Matching Score-4

Assigner-Mozilla Corporation

CVSS Score-6.5||MEDIUM

EPSS-42.54% / 97.37%

7 Day CHG-0.59%

Published-23 Jan, 2024 | 13:48

Updated-30 May, 2025 | 15:15

An out of bounds write in ANGLE could have allowed an attacker to corrupt memory leading to a potentially exploitable crash. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunderbird < 115.7.

Vendor-Mozilla Corporation Debian GNU/Linux

Product-firefox firefox_esr debian_linux thunderbird Thunderbird Firefox Firefox ESR

CWE ID-CWE-787

Out-of-bounds Write

CVE-2022-34503

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-6.5||MEDIUM

EPSS-0.43% / 61.95%

7 Day CHG~0.00%

Published-22 Jul, 2022 | 14:17

Updated-03 Aug, 2024 | 09:15

QPDF v8.4.2 was discovered to contain a heap buffer overflow via the function QPDF::processXRefStream. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted PDF file.

Vendor-qpdf_project n/a

Product-qpdf n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2018-18064

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-6.5||MEDIUM

EPSS-0.51% / 65.29%

7 Day CHG~0.00%

Published-08 Oct, 2018 | 18:00

Updated-05 Aug, 2024 | 11:01

cairo through 1.15.14 has an out-of-bounds stack-memory write during processing of a crafted document by WebKitGTK+ because of the interaction between cairo-rectangular-scan-converter.c (the generate and render_rows functions) and cairo-image-compositor.c (the _cairo_image_spans_and_zero function).

Vendor-cairographics n/a

Product-cairo n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2022-34526

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-6.5||MEDIUM

EPSS-0.16% / 37.37%

7 Day CHG~0.00%

Published-29 Jul, 2022 | 00:00

Updated-03 Aug, 2024 | 09:15

A stack overflow was discovered in the _TIFFVGetField function of Tiffsplit v4.4.0. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted TIFF file parsed by the "tiffsplit" or "tiffcrop" utilities.

Vendor-n/a NetApp, Inc.LibTIFF Fedora Project Debian GNU/Linux

Product-debian_linux ontap_select_deploy_administration_utility libtiff fedora active_iq_unified_manager n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2018-13383

Matching Score-4

Assigner-Fortinet, Inc.

View Details

Matching Score-4

Assigner-Fortinet, Inc.

CVSS Score-4.3||MEDIUM

EPSS-1.12% / 77.31%

7 Day CHG~0.00%

Published-29 May, 2019 | 17:20

Updated-30 Jul, 2025 | 01:46

Known KEV||Action Due Date - 2022-07-10||Apply updates per vendor instructions.

A heap buffer overflow in Fortinet FortiOS 6.0.0 through 6.0.4, 5.6.0 through 5.6.10, 5.4.0 through 5.4.12, 5.2.14 and earlier and FortiProxy 2.0.0, 1.2.8 and earlier in the SSL VPN web portal may cause the SSL VPN web service termination for logged in users due to a failure to properly handle javascript href data when proxying webpages.

Vendor-Fortinet, Inc.

Product-fortiproxy fortios Fortinet FortiOS and FortiProxy FortiOS and FortiProxy

CWE ID-CWE-787

Out-of-bounds Write

CVE-2022-31901

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-6.5||MEDIUM

EPSS-0.27% / 50.25%

7 Day CHG~0.00%

Published-19 Jan, 2023 | 00:00

Updated-04 Apr, 2025 | 15:15

Buffer overflow in function Notepad_plus::addHotSpot in Notepad++ v8.4.3 and earlier allows attackers to crash the application via two crafted files.

Vendor-notepad-plus-plus n/a

Product-notepad\+\+n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2020-20662

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-6.5||MEDIUM

EPSS-0.24% / 46.80%

7 Day CHG~0.00%

Published-30 Sep, 2021 | 16:40

Updated-04 Aug, 2024 | 14:22

libiec_iccp_mod v1.5 contains a heap-buffer-overflow in the component mms_client_example1.c.

Vendor-libiec_iccp_mod_project n/a

Product-libiec_iccp_mod n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2020-9253

Matching Score-4

Assigner-Huawei Technologies

View Details

Matching Score-4

Assigner-Huawei Technologies

CVSS Score-6.3||MEDIUM

EPSS-0.04% / 12.17%

7 Day CHG~0.00%

Published-27 Dec, 2024 | 09:55

Updated-13 Jan, 2025 | 19:38

There is a stack overflow vulnerability in some Huawei smart phone. An attacker can craft specific packet to exploit this vulnerability. Due to insufficient verification, this could be exploited to tamper with the information to affect the availability. (Vulnerability ID: HWPSIRT-2019-11030) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9253.

Vendor-Huawei Technologies Co., Ltd.

Product-lion-al00c lion-al00c_firmware Lion-AL00C

CWE ID-CWE-121

Stack-based Buffer Overflow

CWE ID-CWE-787

Out-of-bounds Write

CVE-2022-2598

Matching Score-4

Assigner-Protect AI (formerly huntr.dev)

View Details

Matching Score-4

Assigner-Protect AI (formerly huntr.dev)

CVSS Score-6.5||MEDIUM

EPSS-0.08% / 23.81%

7 Day CHG~0.00%

Published-01 Aug, 2022 | 00:00

Updated-03 Aug, 2024 | 00:46

Out-of-bounds Write to API in vim/vim

Out-of-bounds Write to API in GitHub repository vim/vim prior to 9.0.0100.

Vendor-Vim Debian GNU/Linux

Product-debian_linux vim vim/vim

CWE ID-CWE-787

Out-of-bounds Write

CVE-2022-35448

Credits

Vendors

Products

Metrics (CVSS)

Weaknesses

Attack Patterns

Solution/Workaround

References

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

Stakeholder-Specific Vulnerability Categorization (SSVC)

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History

Similar CVEs