CWE-123.

Out-of-bounds Write in TeamViewer Full Client for Linux and macOS Allows Remote Code Execution

• TeamViewer Full Client
• CWE-123

Write-what-where Condition in Primary Bootloader

• Qualcomm, Inc. Snapdragon
• CWE-123

BioStar BIOS Update Utility IOCTL BSMEM64_W10.sys sub_110BC write-what-where

• BioStar BIOS Update Utility
• Memory corruption
• CWE-123

BioStar Temperature Monitor Utility IOCTL BS_HWMIO64_W10.sys sub_1105C write-what-where

• BioStar Temperature Monitor Utility
• Memory corruption
• CWE-123

BioStar VALKYRIE AURORA IOCTL BS_RVSIO64.sys sub_1105C write-what-where

• BioStar VALKYRIE AURORA
• Memory corruption
• CWE-123

BioStar VIVID LED DJ IOCTL BS_LED64.sys sub_1105C write-what-where

• BioStar VIVID LED DJ
• Memory corruption
• CWE-123

OpenSlide: Arbitrary memory write with crafted Ventana BIF file

• openslide
• CWE-123
• CWE-823

An untrusted Pointer Dereference can be exploited to escalate privileges by an unprivileged user on Windows

• wibu-systems-ag wibukey
• CWE-123

In trusted_mem, there is a possible escalation of privilege due to improper input validation.

• MediaTek, Inc. MediaTek chipset
• CWE-123

NVIDIA TensorRT-LLM: NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a…

• NVIDIA TensorRT-LLM
• CWE-123

Arbitrary file overwrite via the KTLS receive path

• FreeBSD
• CWE-123

Remotion: arbitrary file write vulnerability

• CWE-123

<4.0.410 · fixed in 4.0.410

net: gro: don't merge zcopy skbs

• Linux kernel
• Memory corruption
• CWE-123

net: skbuff: preserve shared-frag marker during coalescing

• Linux kernel
• CWE-123
• CWE-456

rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present

• Linux kernel
• Memory corruption
• CWE-123

xfrm: esp: avoid in-place decrypt on shared skb frags

• Linux kernel
• CWE-123

Local privilege escalation due to improper input validation.

• Acronis DeviceLock DLP
• Acronis Cyber Protect Cloud Agent
• CWE-123

Semtech LR11xx Memory Write Access Control Bypass

• Semtech LR1110
• Semtech LR1120
• CWE-123

A write-what-where condition in p2r3 Bareiron commit 8e4d40 allows unauthenticated attackers to write arbitrary values to memory, enabling arbitrary code execution via a crafted packet.

• CWE-123

iccDEV memcpy-param-overlap in CIccTagMultiProcessElement::Apply()

• InternationalColorConsortium iccDEV
• Memory corruption
• CWE-123

Write what were condition within AMD CPUs may allow an admin-privileged attacker to modify the configuration of the CPU pipeline potentially resulting in the corruption of the stack pointer inside an…

• AMD EPYC™ 9004 Series Processors
• AMD EPYC™ 9005 Series Processors
• CWE-123

vLLM introduced enhanced protection for CVE-2025-62164

• Insecure deserialization
• Memory corruption

>=0.10.2, <0.13.0 · fixed in 0.13.0

vLLM deserialization vulnerability leading to DoS and potential RCE

• Insecure deserialization
• Memory corruption

>=0.10.2, <0.11.1 · fixed in 0.11.1

KubeVirt Vulnerable to Arbitrary Host File Read and Write

• Information disclosure
• Broken access control

<1.6.1 || >=1.7.0-alpha.0, <1.7.0-rc.0 · fixed in 1.6.1, 1.7.0-rc.0

Libtiff: libtiff write-what-where

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• CWE-123

Bluetooth: bt_conn_tx_processor unsafe handling

• Zephyr
• CWE-123

Legacy Serial Redirection SMRAM Vulnerabilities

• AMI AptioV
• Information disclosure
• CWE-123

ImageMagick has a Format String Bug in InterpretImageFilename leads to arbitrary code execution

• Memory corruption
• CWE-123

<14.8.1 · fixed in 14.8.1

VMware ESXi contains an arbitrary write vulnerability.

• VMware ESXi
• VMware Cloud Foundation
• CWE-123

In V5 DA, there is a possible out of bounds write due to a missing bounds check.

• MediaTek, Inc. MT6739, MT6761, MT6765, MT6768, MT6771, MT6779, MT6781, MT6785, MT6833, MT6853, MT6873, MT6877, MT6885, MT6893, MT8167, MT8167S, MT8175, MT8185, MT8195, MT8321, MT8362A, MT8365, MT8385, MT8395, MT8666, MT8667, MT8673, MT8675, MT8678, MT8765, MT8766, MT8768, MT8771, MT8775, MT8781, MT8786, MT8788, MT8789, MT8791T, MT8795T, MT8797, MT8798, MT8893
• CWE-123

Substance3D - Painter | Write-what-where Condition (CWE-123)

• Adobe Substance3D - Painter
• CWE-123

In mms, there is a possible out of bounds write due to an incorrect bounds check.

• MediaTek, Inc. MT6739, MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6855, MT6873, MT6877, MT6883, MT6885, MT6889, MT6893, MT8676
• CWE-123

In mms, there is a possible out of bounds write due to an incorrect bounds check.

• MediaTek, Inc. MT6739, MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6855, MT6873, MT6877, MT6883, MT6885, MT6889, MT6893, MT8676, MT8792
• CWE-123

Substance3D - Stager | Write-what-where Condition (CWE-123)

• Adobe Substance3D - Stager
• CWE-123

The T-Head XuanTie C910 CPU in the TH1520 SoC and the T-Head XuanTie C920 CPU in the SOPHON SG2042 have instructions that allow unprivileged attackers to write to arbitrary physical memory locations,…

• Memory corruption
• CWE-123

llama.cpp allows write-what-where in rpc_server::set_tensor

• ggerganov llama.cpp
• CWE-123

Micro-Star International Z-series motherboards (Z590, Z490, and Z790) and B-series motherboards (B760, B560, B660, and B460) with firmware 7D25v14, 7D25v17 to 7D25v19, and 7D25v1A to 7D25v1H was disc…

• CWE-123

Buffer Overflow Arbitrary Write

• Renesas rcar_gen3_v2.5
• Memory corruption
• CWE-123

Mozilla Firefox: Return registers were overwritten which could have allowed an attacker to execute…

• Mozilla Firefox
• Mozilla Firefox ESR
• CWE-123

Adobe Substance 3D Paint ICO Parsing Access Violation Write Vulnerability

• Adobe Substance3D - Painter
• CWE-123

A vulnerability has been identified in syngo fastView (All versions).

• Siemens syngo fastView
• CWE-123

OpenImageIO: A heap out-of-bounds write vulnerability exists in the way OpenImageIO v2.3.19.0…

• OpenImageIO
• CWE-123

An issue was discovered in the Arm Mali GPU Kernel Driver.

• CWE-123

Vulnerabilities in ArubaOS running on 7xxx series controllers exist that allows an attacker to execute arbitrary code during the boot sequence.

• Hewlett Packard Enterprise Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central
• CWE-123

Fuji Electric D300win Write-what-where condition

• Fuji Electric D300win
• CWE-123

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5.

• CWE-123

The arbitrary write vulnerability in S3Resume2Pei leads to arbitrary code execution during PEI phase.

• AMI Aptio
• CWE-123

Arbitrary write vulnerability in SbPei module leads to arbitrary code execution during PEI phase.

• AMI Aptio
• CWE-123

Eclipse CycloneDDS Write-what-where Condition

• Eclipse CycloneDDS
• CWE-123

Emerson WirelessHART Gateway

• Emerson WirelessHART Gateway
• CWE-123

AUVESY Versiondog

• AUVESY Versiondog
• CWE-123

XMP Toolkit SDK Write-What-Where Condition Could Lead To Local Application Denial Of Service

• Adobe XMP Toolkit
• CWE-123

Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Local Privilege Escalation Vulnerability

• Cisco Small Business RV Series Router Firmware
• CWE-123

Cisco IOS XE Software Local Privilege Escalation Vulnerability

• Cisco IOS XE Software
• CWE-123

EcoStruxure™ Control Expert (all versions) and Unity Pro…: A CWE-123: Write-what-where Condition vulnerability exists in EcoStruxure™ Control Expert…

• EcoStruxure™ Control Expert (all versions) and Unity Pro (former name of EcoStruxure™ Control Expert) (all versions)
• CWE-123

Delta Electronics TPEditor Versions 1.97 and prior.

• Delta Electronics TPEditor
• CWE-123

PAN-OS: Panorama External control of file vulnerability leads to privilege escalation

• Palo Alto Networks PAN-OS
• CWE-123

Honeywell Experion PKS: An arbitrary memory write vulnerability exists in the dual_onsrv.exe module in Honeywell…

• Honeywell Experion PKS
• CWE-123

Cisco IOS Software for Cisco 800 Series Industrial Integrated Services Routers Arbitrary Memory Write Vulnerabilities

• Cisco IOS Software
• CWE-123

Cisco IOS Software for Cisco 800 Series Industrial Integrated Services Routers Arbitrary Memory Write Vulnerabilities

• Cisco IOS Software
• CWE-123