Filtered by CWE-787
Total 12209 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-34616 1 Pbjson Project 1 Pbjson 2025-01-03 7.5 High
An issue was discovered pbjson thru 0.4.0 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies.
CVE-2023-34615 1 Pwall 1 Jsonutil 2025-01-03 7.5 High
An issue was discovered JSONUtil thru 5.0 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies.
CVE-2023-34824 1 Fdkaac Project 1 Fdkaac 2025-01-03 5.5 Medium
fdkaac before 1.0.5 was discovered to contain a heap buffer overflow in caf_info function in caf_reader.c.
CVE-2023-33124 1 Siemens 2 Jt2go, Teamcenter Visualization 2025-01-03 7.8 High
A vulnerability has been identified in JT2Go (All versions < V14.2.0.3), Teamcenter Visualization V13.2 (All versions < V13.2.0.13), Teamcenter Visualization V13.3 (All versions < V13.3.0.10), Teamcenter Visualization V14.0 (All versions < V14.0.0.6), Teamcenter Visualization V14.1 (All versions < V14.1.0.8), Teamcenter Visualization V14.2 (All versions < V14.2.0.3). The affected applications contain a memory corruption vulnerability while parsing specially crafted CGM files. This could allow an attacker to execute code in the context of the current process.
CVE-2023-35110 1 Jjson Project 1 Jjson 2025-01-02 7.5 High
An issue was discovered jjson thru 0.1.7 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies.
CVE-2023-2569 1 Schneider-electric 1 Ecostruxure Foxboro Dcs Control Core Services 2025-01-02 7.8 High
A CWE-787: Out-of-Bounds Write vulnerability exists that could cause local denial-of-service, elevation of privilege, and potentially kernel execution when a malicious actor with local user access crafts a script/program using an IOCTL call in the Foxboro.sys driver.
CVE-2022-22049 1 Microsoft 10 Windows 10, Windows 11, Windows 7 and 7 more 2025-01-02 7.8 High
Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
CVE-2022-22026 1 Microsoft 10 Windows 10, Windows 11, Windows 7 and 7 more 2025-01-02 8.8 High
Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
CVE-2024-3758 1 Openatom 1 Openharmony 2025-01-02 6.5 Medium
in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in TCB through heap buffer overflow.
CVE-2022-24457 1 Microsoft 1 Heif Image Extension 2025-01-02 7.8 High
HEIF Image Extensions Remote Code Execution Vulnerability
CVE-2022-24456 1 Microsoft 1 Hevc Video Extensions 2025-01-02 7.8 High
HEVC Video Extensions Remote Code Execution Vulnerability
CVE-2022-24453 1 Microsoft 1 Hevc Video Extensions 2025-01-02 7.8 High
HEVC Video Extensions Remote Code Execution Vulnerability
CVE-2022-22007 1 Microsoft 1 Hevc Video Extensions 2025-01-02 7.8 High
HEVC Video Extensions Remote Code Execution Vulnerability
CVE-2022-22006 1 Microsoft 1 Hevc Video Extensions 2025-01-02 7.8 High
HEVC Video Extensions Remote Code Execution Vulnerability
CVE-2022-21926 1 Microsoft 1 Hevc Video Extensions 2025-01-02 7.8 High
HEVC Video Extensions Remote Code Execution Vulnerability
CVE-2022-21917 1 Microsoft 1 Hevc Video Extensions 2025-01-02 7.8 High
HEVC Video Extensions Remote Code Execution Vulnerability
CVE-2024-10487 1 Google 1 Chrome 2025-01-02 8.8 High
Out of bounds write in Dawn in Google Chrome prior to 130.0.6723.92 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Critical)
CVE-2024-7970 1 Google 1 Chrome 2025-01-02 8.8 High
Out of bounds write in V8 in Google Chrome prior to 128.0.6613.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2024-8905 1 Google 1 Chrome 2025-01-02 8.8 High
Inappropriate implementation in V8 in Google Chrome prior to 129.0.6668.58 allowed a remote attacker to potentially exploit stack corruption via a crafted HTML page. (Chromium security severity: Medium)
CVE-2024-7018 1 Google 1 Chrome 2025-01-02 8.8 High
Heap buffer overflow in PDF in Google Chrome prior to 124.0.6367.78 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: Medium)