CWE-787: Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.
Also known as Memory Corruption.
A kind of CWE-119 Buffer Overflow.
From the CWE List. © The MITRE Corporation.
Newest
- No product listedOut-of-bounds write for the Intel(R) Data Center Graphics Driver for VMware ESXi software before...8.3 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreIncorrect boundary conditions in the JavaScript Engine: JIT component6.5 Medium
- zephyrproject zephyrnet: Stack Overflow with Ping (to own IP Address) via Shell6.1 Medium
- cacalabs libcacalibcaca: Heap OOB write in canvas import functions caused by int overflow7.8 High
- apple ipados, macos, tvos +4 more +6 moreA memory corruption issue was addressed with improved input validation. This issue is fixed in...6.5 Medium
- apple ipados, macos, ios and ipados +1 more +3 moreAn out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in...5.4 Medium
- apple ipados, macos, tvos +4 more +6 moreAn out-of-bounds write issue was addressed with improved input validation. This issue is fixed in...6.5 Medium
- apple ipados, macos, ios and ipados +1 more +3 moreAn out-of-bounds write issue was addressed with improved input validation. This issue is fixed in...7.3 High
- apple ipados, macos, tvos +4 more +6 moreAn out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in...6.2 Medium
- apple ipados, macos, tvos +4 more +6 moreAn out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in...6.5 Medium
- jqlang jqjq: Signed-int overflow in `stack_reallocate` (jq VM stack)6.4 Medium
- tenda ac6, ac10u firmware +1 moreTenda AC6 httpd WifiExtraSet fromSetWirelessRepeat os command injection5.1 Medium
- linux, linux kernel, red hat enterprise linux 10 +5 more +7 morerxrpc: Also unshare DATA/RESPONSE packets when paged frags are present7.8 High
- linux, linux kernel +1 moresmb: client: fix in-place encryption corruption in SMB2_write()8.1 High
- linux, linux kernel +1 morecrypto: caam - fix overflow on long hmac keys7.8 High
- go toolchain cmd/go, golang go +1 moreInvoking "go tool pack" does not sanitize output paths in cmd/go5.9 Medium
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreMemory safety bugs fixed in Thunderbird ESR 140.10.2 and Thunderbird 150.0.28.1 High
- libreofficeHeap Buffer Overflow in AgileEngine5.4 Medium
- zte zx297520v3 bootrom, zx297520v3 firmware +1 moreUSB-based arbitrary memory write vulnerability in ZTE ZX297520V3 soc BootROM5.1 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +2 more +4 morePAN-OS: Unauthenticated user initiated Buffer Overflow Vulnerability in User-ID™ Authentication Portal9.3 Critical
- google chromeOut of bounds write in Media in Google Chrome on Mac, iOS prior to 148.0.7778.96 allowed a remote...8.8 High
- google chromeOut of bounds write in WebRTC in Google Chrome prior to 148.0.7778.96 allowed a remote attacker...8.8 High
- google chromeOut of bounds read and write in GFX in Google Chrome prior to 148.0.7778.96 allowed a remote...5.4 Medium
- google chromeOut of bounds write in Skia in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who...8.3 High
- google chromeOut of bounds memory access in V8 in Google Chrome prior to 148.0.7778.96 allowed a remote...8.8 High
- google chromeOut of bounds read and write in V8 in Google Chrome prior to 148.0.7778.96 allowed a remote...8.8 High
- mongodb c driverMongoDB C Driver Cyrus SASL Canonicalization Buffer Overflow8.6 High
- linux, linux kernel +1 moreALSA: usb-audio: Add sanity check for OOB writes at silencing7.8 High
- linux, linux kernel +1 morealpha: fix user-space corruption during memory compaction7.8 High
- linux, linux kernel +1 moreusb: chipidea: udc: fix DMA and SG cleanup in _ep_nuke()7.8 High
- linux, linux kernel +1 morevhost: move vdpa group bound check to vhost_vdpa7.8 High
- linux, linux kernel +1 morenet: do not pass flow_id to set_rps_cpu()9.8 Critical
- linux, linux kernel +1 moredrm/amdkfd: Fix out-of-bounds write in kfd_event_page_set()7.8 High
- linux, linux kernel +1 moredpaa2-switch: validate num_ifs to prevent out-of-bounds write7.8 High
- linux, linux kernel +1 moreipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data()9.8 Critical
- linux, linux kernel +1 moreerofs: fix interlaced plain identification for encoded extents7.1 High
- linux, linux kernel +1 morexfs: fix freemap adjustments when adding xattrs to leaf blocks8.8 High
- linux, linux kernel +1 moreperf/arm-cmn: Reject unsupported hardware configurations7.8 High
- linux, linux kernel, red hat enterprise linux 10 +11 more +13 moredlm: validate length in dlm_search_rsb_tree9.8 Critical
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morexsk: tighten UMEM headroom validation to account for tailroom and min frame7.8 High
- linux, linux kernel +1 morecrypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl7.8 High
- linux, linux kernel +1 moreocfs2: fix out-of-bounds write in ocfs2_write_end_inline7.8 High
- No product listedThe rtl8192cd Wi-Fi kernel driver in the Realtek rtl819x Jungle SDK (all known versions through...7.7 High
- apache http server, red hat jboss core services for rhel 8, jboss core services on rhel 7 +15 more +17 moreApache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header()9.8 Critical
- python pillowPillow: OOB Write with Invalid PSD Tile Extents (Integer Overflow)8.6 High
- qualcomm cologne firmware, fastconnect 6900 firmware, fastconnect 7800 firmware +22 more +24 moreExposed dangerous function in windows host5.5 Medium
- qualcomm 215 mobile firmware, 5g fixed wireless access firmware, ar8031 firmware +186 more +188 moreBuffer Copy Without Checking Size of Input in Automotive Audio6.5 Medium
- geovision gv-vms firmware, geovision inc. gv-vms v20.0.2 +1 moreGeoVision GV-VMS V20 WebCam Server Login stack overflow vulnerability9.0 Critical
- geovision gv-vms firmware, geovision inc. gv-vms v20.0.2 +1 moreGeoVision GV-VMS V20 WebCam Server Login stack overflow vulnerability9.0 Critical
- geovision inc. gv-vms v20.0.2GeoVision GV-VMS V20 WebCam Server stack overflow vulnerability10.0 Critical
- Show moreLoading…