CWE-123: Write-what-where Condition
Any condition where the attacker has the ability to write an arbitrary value to an arbitrary location, often as the result of a buffer overflow.
A kind of CWE-787 Out-of-bounds Write.
From the CWE List. © The MITRE Corporation.
Newest
- teamviewer full client Out-of-bounds Write in TeamViewer Full Client for Linux and macOS Allows Remote Code Execution 8.8 High
- qualcomm mdm9207 firmware, mdm9645 firmware, mdm9655 firmware +6 more +8 more Write-what-where Condition in Primary Bootloader 6.9 Medium
- biostar bios update utility BioStar BIOS Update Utility IOCTL BSMEM64_W10.sys sub_110BC write-what-where 9.3 Critical
- biostar temperature monitor utility BioStar Temperature Monitor Utility IOCTL BS_HWMIO64_W10.sys sub_1105C write-what-where 9.3 Critical
- biostar valkyrie aurora BioStar VALKYRIE AURORA IOCTL BS_RVSIO64.sys sub_1105C write-what-where 9.3 Critical
- biostar vivid led dj BioStar VIVID LED DJ IOCTL BS_LED64.sys sub_1105C write-what-where 9.3 Critical
- wibu-systems-ag wibukey An untrusted Pointer Dereference can be exploited to escalate privileges by an unprivileged user on Windows 8.8 High
- openslide OpenSlide: Arbitrary memory write with crafted Ventana BIF file 7.7 High
- mediatek, inc. mediatek chipset In trusted_mem, there is a possible escalation of privilege due to improper input validation.... 5.8 Medium
- nvidia tensorrt-llm NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a write-what-where... 7.4 High
- freebsd Arbitrary file overwrite via the KTLS receive path 7.8 High
- remotion Remotion: arbitrary file write vulnerability 9.1 Critical
- linux, linux kernel, red hat enterprise linux 10 +18 more +20 more net: gro: don't merge zcopy skbs 7.8 High
- linux kernel, linux, red hat nvidia for rhel 10 +38 more +40 more net: skbuff: preserve shared-frag marker during coalescing 7.8 High
- linux, linux kernel, red hat enterprise linux 10 +5 more +7 more rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present 7.8 High
- linux, linux kernel, red hat nvidia for rhel 10 +30 more +32 more xfrm: esp: avoid in-place decrypt on shared skb frags 8.8 High
- acronis cyber protect cloud agent, devicelock dlp +1 more Local privilege escalation due to improper input validation. The following products are affected:... 7.8 High
- semtech lr1110, lr1120, lr1121 +2 more Semtech LR11xx Memory Write Access Control Bypass 5.4 Medium
- p2r3 bareiron A write-what-where condition in p2r3 Bareiron commit 8e4d40 allows unauthenticated attackers to... 9.8 Critical
- color iccdev iccDEV memcpy-param-overlap in CIccTagMultiProcessElement::Apply() 7.8 High
- amd epyc™ 8004 series processors, epyc™ 9004 series processors, epyc™ 9005 series processors +2 more +4 more Write what were condition within AMD CPUs may allow an admin-privileged attacker to modify the... 4.6 Medium
- vllm, red hat ai inference server, enterprise linux ai (rhel ai) 3 +1 more +3 more vLLM - Denial of Service via Unvalidated Multimodal Embeddings 8.7 High
- vllm VLLM deserialization vulnerability leading to DoS and potential RCE 8.8 High
- kubevirt KubeVirt Vulnerable to Arbitrary Host File Read and Write 8.5 High
- red hat ai inference server 3.2, discovery 2, enterprise linux 10 +16 more +18 more Libtiff: libtiff write-what-where 8.8 High
- zephyrproject zephyr Bluetooth: bt_conn_tx_processor unsafe handling 7.6 High
- ami aptiov, aptio v +1 more Legacy Serial Redirection SMRAM Vulnerabilities 8.2 High
- imagemagick ImageMagick Format String Bug in InterpretImageFilename leads to arbitrary code execution 7.5 High
- vmware esxi, cloud foundation, telco cloud infrastructure +1 more +3 more VMware ESXi contains an arbitrary write vulnerability. A malicious actor with privileges within... 8.2 High
- google android, mediatek, inc. mt6739, mt6761, mt6765, mt6768, mt6771, mt6779, mt6781, mt6785, mt6833, mt6853, mt6873, mt6877, mt6885, mt6893, mt8167, mt8167s, mt8175, mt8185, mt8195, mt8321, mt8362a, mt8365, mt8385, mt8395, mt8666, mt8667, mt8673, mt8675, mt8678, mt8765, mt8766, mt8768, mt8771, mt8775, mt8781, mt8786, mt8788, mt8789, mt8791t, mt8795t, mt8797, mt8798, mt8893 +1 more In V5 DA, there is a possible out of bounds write due to a missing bounds check. This could lead... 6.6 Medium
- adobe substance3d - painter, substance 3d painter +1 more Substance3D - Painter | Write-what-where Condition (CWE-123) 5.5 Medium
- google android, mediatek mt6739, mt6761 +18 more +20 more In mms, there is a possible out of bounds write due to an incorrect bounds check. This could lead... 6.7 Medium
- google android, mediatek mt6739, mt6761 +19 more +21 more In mms, there is a possible out of bounds write due to an incorrect bounds check. This could lead... 6.7 Medium
- adobe substance3d - stager, substance 3d stager +1 more Substance3D - Stager | Write-what-where Condition (CWE-123) 7.8 High
- alibaba t-head xuantie c910, t-head xuantie c920 +1 more The T-Head XuanTie C910 CPU in the TH1520 SoC and the T-Head XuanTie C920 CPU in the SOPHON... 8.4 High
- ggerganov llama.cpp llama.cpp allows write-what-where in rpc_server::set_tensor 10.0 Critical
- msi intel 300, intel 400, intel 500 +4 more +6 more Micro-Star International Z-series motherboards (Z590, Z490, and Z790) and B-series motherboards ... 8.2 High
- renesas arm-trusted-firmware, rcar gen3 firmware, rcar gen3 v2.5 +2 more Buffer Overflow Arbitrary Write 7.5 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 more Return registers were overwritten which could have allowed an attacker to execute arbitrary code.... 8.1 High
- adobe substance3d - painter, substance 3d painter +1 more Adobe Substance 3D Paint ICO Parsing Access Violation Write Vulnerability 7.8 High
- siemens syngo fastview A vulnerability has been identified in syngo fastView (All versions). The affected application... 7.8 High
- academysoftwarefoundation openimageio A heap out-of-bounds write vulnerability exists in the way OpenImageIO v2.3.19.0 processes RLE... 9.8 Critical
- arm valhall gpu kernel driver An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make... 8.8 High
- arubanetworks arubaos, sd-wan, hewlett packard enterprise aruba mobility conductor (formerly mobility master); aruba mobility controllers; wlan gateways and sd-wan gateways managed by aruba central +2 more Vulnerabilities in ArubaOS running on 7xxx series controllers exist that allows an attacker to... 6.6 Medium
- fuji electric d300win Fuji Electric D300win Write-what-where condition 6.1 Medium
- insyde insydeh2o An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. An SMM callout... 8.2 High
- ami aptio, aptio v, intel server board m10jnp2sb firmware +2 more The arbitrary write vulnerability in S3Resume2Pei leads to arbitrary code execution during PEI phase. 8.2 High
- ami aptio, intel nuc m15 laptop kit lapbc510 firmware, nuc m15 laptop kit lapbc710 firmware +2 more Arbitrary write vulnerability in SbPei module leads to arbitrary code execution during PEI phase. 7.2 High
- eclipse cyclonedds Eclipse CycloneDDS Write-what-where Condition 6.6 Medium
- emerson wirelesshart gateway, wireless 1410 gateway firmware, wireless 1410d gateway firmware +1 more +3 more Emerson WirelessHART Gateway 8.0 High
- Show olderLoading…