CWE-787: Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.
Also known as Memory Corruption.
A kind of CWE-119 Buffer Overflow.
From the CWE List. © The MITRE Corporation.
Newest
- linux, linux kernel +1 moreHID: core: Mitigate potential OOB by removing bogus memset()8.8 High
- linux, linux kernel +1 moreHID: multitouch: Check to ensure report responses match the request7.8 High
- linux, linux kernel, red hat enterprise linux 10 +19 more +21 moreipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()9.8 Critical
- linux, linux kernel, red hat nvidia for rhel 10 +26 more +28 moreip6_tunnel: clear skb2->cb[] in ip4ip6_err()9.8 Critical
- linux, linux kernel +1 moreBluetooth: MGMT: validate LTK enc_size on load7.8 High
- linux, linux kernel +1 morewifi: wilc1000: fix u8 overflow in SSID scan buffer size calculation7.8 High
- linux, linux kernel +1 moreBluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync7.8 High
- linux, linux kernel +1 morecomedi: me_daq: Fix potential overrun of firmware buffer7.8 High
- linux, linux kernel +1 morecomedi: me4000: Fix potential overrun of firmware buffer7.8 High
- linux, linux kernel +1 morenvmem: zynqmp_nvmem: Fix buffer size in DMA and memcpy7.8 High
- linux, linux kernel +1 moreusb: gadget: f_uac1_legacy: validate control request size7.8 High
- linux, linux kernel +1 morefs/ntfs3: validate rec->used in journal-replay file record check7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreksmbd: require minimum ACE size in smb_check_perm_dacl()8.3 High
- linux, linux kernel +1 moreksmbd: validate response sizes in ipc_validate_msg()7.1 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreksmbd: fix out-of-bounds write in smb2_get_ea() EA alignment9.8 Critical
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morecrypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed7.1 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morecrypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed7.1 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morecrypto: ccp: Don't attempt to copy ID to userspace if PSP command failed7.1 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morerxrpc: Fix missing validation of ticket length in non-XDR key preparsing7.8 High
- academysoftwarefoundation openimageioAcademySoftwareFoundation OpenImageIO DDS Image ddsinput.cpp out-of-bounds write4.8 Medium
- hashcatA heap-based buffer overflow in hex_to_binary in the PKZIP hash parser in hashcat v7.1.2 allows...9.8 Critical
- hashcatA heap-based buffer overflow in the Kerberos hash parser in hashcat v7.1.2 allows an attacker to...9.8 Critical
- hashcatA stack-based buffer overflow in mangle_to_hex_lower() and mangle_to_hex_upper() in src/rp_cpu.c...9.8 Critical
- frrouting, red hat enterprise linux 10, enterprise linux 8 +1 more +3 moreAn off-by-one out-of-bounds write vulnerability in the bgp_flowspec_op_decode() function (bgpd...7.5 High
- wireshark, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreHeap-based Buffer Overflow in Wireshark7.8 High
- wireshark, red hat enterprise linux 10, enterprise linux 10.0 extended update support +4 more +6 moreHeap-based Buffer Overflow in Wireshark7.8 High
- linux, linux kernel +1 moreBuffer overflow in drivers/xen/sys-hypervisor.c7.8 High
- amazon freertos-plus-tcpOut-of-Bounds Write via Unsanitized Prefix Length in Router Advertisement Processing in FreeRTOS-Plus-TCP6.1 Medium
- acronis cyber protect cloud agent, devicelock dlp +1 moreLocal privilege escalation due to improper input validation. The following products are affected:...7.8 High
- eximIn Exim before 4.99.2, when JSON lookup is enabled, an out-of-bounds heap write can occur when a...6.5 Medium
- google chromeOut of bounds read and write in Angle in Google Chrome prior to 147.0.7727.138 allowed a remote...8.8 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +16 more +18 moreMemory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.17.3 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +16 more +18 moreMemory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.17.3 High
- gnu glibc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 morePotential buffer overflow in ns_sprintrrf TSIG handling path7.3 High
- linux, linux kernel +1 morefirmware: thead: Fix buffer overflow and use standard endian macros7.8 High
- andybalholm brotli, 7-zip p7zip, anthropic bun +100 more +102 moreOut-of-Bounds Write in Google Brotli Decoder9.2 Critical
- linux, linux kernel +1 morenet/sched: sch_netem: fix out-of-bounds access in packet corruption7.8 High
- linux, linux kernel +1 morerxrpc: Fix buffer overread in rxgk_do_verify_authenticator()8.2 High
- linux, linux kernel, red hat enterprise linux 10 +6 more +8 moreusbip: validate number_of_packets in usbip_pack_ret_submit()9.8 Critical
- linux, linux kernel +1 morecan: gw: fix OOB heap access in cgw_csum_crc8_rel()8.8 High
- trustedfirmware op-tee, op-tee optee os +1 moreOP-TEE: PKCS#11 TA out-of-bounds read and memory disclosure8.7 High
- gnupg libgcryptLibgcrypt before 1.12.2 mishandles Dilithium signing. Writes to a static array lack a bounds...4.0 Medium
- gnupg libgcrypt, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 moreLibgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via...6.7 Medium
- uuidjs uuidDuplicate Advisory: uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided3.2 Low
- uuidjs uuiduuid: Missing buffer bounds check in `v3`/`v5`/`v6` when `buf` is provided8.1 High
- dell powerprotect data domain, data domain operating system, powerprotect dp series appliance +2 moreDell PowerProtect Data Domain with Domain Operating System (DD OS) of Feature Release versions 7...8.1 High
- helios textpadTextpad 8.1.2 Denial of Service via Run Command6.9 Medium
- lizardsystems lanspyLanSpy 2.0.1.159 Local Buffer Overflow via Scan Field8.6 High
- ezbsystems ultraisoUltraISO 9.7.1.3519 Buffer Overflow via Output FileName6.9 Medium
- angryip angry ip scannerAngry IP Scanner 3.5.3 Denial of Service via Preferences Buffer Overflow6.9 Medium
- Show moreLoading…