CWE-787: Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.
Also known as Memory Corruption.
A kind of CWE-119 Buffer Overflow.
From the CWE List. © The MITRE Corporation.
Newest
- imgproxy imgproxy before 4.0.17 Out-of-Bounds Write in ICO Loader 8.7 High
- randombit botan Botan: scrypt V-buffer heap overflow on 32-bit from constructor-accepted parameters 4.1 Medium
- teunis van beelen edfbrowser EDFbrowser before 2.16 Out-of-Bounds Write via check_edf_file() Annotation Signals 6.8 Medium
- wazuh Wazuh 1.0.0 before 4.14.9 Out-of-Bounds Write in wazuh-execd via ar.conf 6.9 Medium
- airoha technology corp. en7529, an7552, an7581, an7583 (wi-fi npu firmware) Out-of-bounds Write in Wi-Fi NPU 6.3 Medium
- the document foundation libreoffice Heap buffer overflow in dBASE index import 5.4 Medium
- signalwire freeswitch FreeSWITCH mod_spandsp: out-of-bounds write parsing UDPTL error-recovery data 8.2 High
- signalwire freeswitch FreeSWITCH: Pre-authentication out-of-bounds writes in mod_xml_rpc WebSocket frame parsing 5.3 Medium
- signalwire freeswitch FreeSWITCH: Pre-authentication heap out-of-bounds write in mod_xml_rpc WebSocket frame length handling 9.1 Critical
- signalwire freeswitch FreeSWITCH: Pre-authentication stack buffer overflow in mod_xml_rpc HTTP directory authentication 7.5 High
- signalwire freeswitch FreeSWITCH: Pre-authentication out-of-bounds write in MSRP message body parsing 7.5 High
- signalwire freeswitch FreeSWITCH mod_sofia: stack buffer overflow from an over-long SIP Contact display-name 6.5 Medium
- signalwire freeswitch FreeSWITCH: Off-by-one heap write in core XML serialization of four-byte UTF-8 sequences 5.9 Medium
- signalwire freeswitch FreeSWITCH mod_sofia: stack buffer overflow from an over-long SIP To-header user 6.5 Medium
- thalesgroup safenet authentication client sis token engine Stack-based buffer overflow in SafeNet Authentication Client SIS token engine 7.0 High
- bytecodealliance wasm-micro-runtime WAMR fast interpreter loader heap buffer overflow via constant deduplication mismatch 8.8 High
- esa asn1scc ASN1SCC: Stack buffer overflow and out-of-bounds read in XER tokenizer NT() 8.1 High
- esa asn1scc ASN1SCC: Out-of-bounds write in BitStream_DecodeConstraintWholeNumber (uPER/ACN) 8.1 High
- leejet stable-diffusion.cpp stable-diffusion.cpp: Heap out-of-bounds write in the imatrix loader (`load_imatrix`) via a duplicate tensor name 7.8 High
- samsung exynos 1280, exynos 1330, exynos 1380 +6 more +8 more In the baseband, memory corruption during NAS packet processing can cause a denial of service. No score
- samsung exynos 1280, exynos 1380, exynos 2200 +2 more In the Samsung Exynos NPU driver, improper validation of user input in the ioctl handler can lead... No score
- samsung semiconductor exynos modem 5300, exynos modem 5400 +1 more Insufficient length validation in the GNSS firmware loader may lead to corruption of kernel memory. No score
- samsung exynos 1480, exynos 2400 +1 more In the Samsung Exynos ENN NeuralNetworks HAL, improper input validation during request processing... No score
- samsung exynos 1480, exynos 2400, samsung semiconductor exynos 1580 +3 more +5 more Out-of-bounds memory access in a device driver due to improper resource state tracking. No score
- veracrypt VeraCrypt: Heap overflow and out-of-bounds read in Serializable deserialization (elevated Core service input path) 8.8 High
- h2o h2o: buffer overflow when using the %{error}x log directive 8.1 High
- cesnet ipfixcol2 CESNET ipfixcol2 2.7.1 before 2.9.0 Heap Buffer Overflow via TCP LZ4 Decoder 8.7 High
- espressif esp-idf ESF-IDF: Unvalidated Stack Pointer at the ESP-TEE Privilege-Switch Boundary 9.3 Critical
- apache openoffice Apache OpenOffice: Out-of-bounds write when importing encrypted PDF files 7.3 High
- apache openoffice Apache OpenOffice: Out of bounds memory access during WMF import 7.3 High
- apache openoffice Apache OpenOffice: Out-of-bounds write when importing encrypted PDF files 7.3 High
- apache openoffice Apache OpenOffice: PDF File Parsing Heap based Buffer-Overflow-Remote Code Execution Vulnerability 7.3 High
- apache openoffice Apache OpenOffice: Heap out-of-bounds write in WW8 PLCF reader 7.3 High
- zephyrproject zephyr Inverted memory-permission check in the RTIO syscall verifier allows a user-mode thread to read and write arbitrary kernel memory 7.8 High
- zephyrproject zephyr Bluetooth LE Controller accepts received PDUs whose length field exceeds the configured maximum receive length, causing out-of-bounds read and write 8.3 High
- zephyrproject zephyr I2S configure syscall handler passes an unvalidated user-supplied kernel object pointer to drivers 7.8 High
- zephyrproject zephyr Unvalidated user pointers in RTIO syscall verifiers allow a user-mode thread to write kernel memory 8.8 High
- linksys e5600 Linksys E5600 Header upload_fw.cgi init_multipart out-of-bounds write 8.7 High
- linksys e5600 Linksys E5600 JSON Request mesh_login.cgi strcpy out-of-bounds write 6.9 Medium
- asus router firmware Out-of-bounds write in certain ASUS Router firmware allow an unauthenticated nearby attacker to... 7.2 High
- freerdp FreeRDP before 3.32.2 Heap Buffer Overflow via Early User Authorization Read 7.2 High
- freerdp FreeRDP before 3.32.2 Heap Out-of-Bounds Write in Planar Codec 7.1 High
- freerdp FreeRDP before 3.32.2 Proxy Out-of-Bounds Write via Bitmap Cache v2 Capability 9.3 Critical
- git-for-windows git Git for Windows: git-credential-wincred Erase Path Heap Overflow 4.4 Medium
- git-for-windows git Git for Windows: git-credential-wincred OAuth Store Heap Overflow 4.4 Medium
- libwebsockets libwebsockets MQTT Protocol PUBACK Packet Handling Out-Of-Bounds Write Remote Code Execution Vulnerability 8.1 High
- google chrome Out of bounds write in WebGL in Google Chrome on on Android prior to 156.0.8078.47 allowed a... 9.6 Critical
- google chrome Out of bounds write in ANGLE in Google Chrome on on Windows prior to 157.0.8103.38 allowed a... 9.6 Critical
- mongodb atlas sql MongoDB Atlas SQL ODBC Driver uses ignored SQLBindCol BufferLength as fixed-width row-array stride, causing out-of-bounds writes 2.1 Low
- mongodb atlas sql odbc driver MongoDB Atlas SQL ODBC Driver writes 48-byte Extended JSON into fixed 16-byte SQL_C_GUID target, causing a 32-byte out-of-bounds write 6.0 Medium
- Show olderLoading…