CWE-787: Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.
Also known as Memory Corruption.
A kind of CWE-119 Buffer Overflow.
From the CWE List. © The MITRE Corporation.
Newest
- google chromeHeap buffer overflow in WebNN in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote...8.8 High
- google chromeOut of bounds read in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a local attacker...5.7 Medium
- google chromeOut of bounds read in Layout in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to...6.5 Medium
- ruby jsonRuby JSON: JSON generator heap buffer overflow when streaming to an IO3.7 Low
- mozilla firefoxMemory safety bugs fixed in Firefox 152.0.49.8 Critical
- apple ipados, macos, safari +5 more +7 moreAn out-of-bounds write issue was addressed with improved input validation. This issue is fixed in...6.5 Medium
- apple ipados, macos, safari +5 more +7 moreThe issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS...6.5 Medium
- apple ipados, macos, safari +4 more +6 moreAn out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in...6.5 Medium
- apple ipados, macos, safari +5 more +7 moreAn out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in...6.5 Medium
- apple ipados, macos, tvos +4 more +6 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 26.5.2 and...6.5 Medium
- liftoff-sr cipsterliftoff-sr CIPster EtherNet IP Message append out-of-bounds write6.9 Medium
- tp-link systems inc. tl-wr841n v14, tp-link tl-wr841n firmware +1 moreAuthenticated Stack-Based Buffer Overflow in TP-Link TL-WR841N Web Interface6.8 Medium
- zephyrproject zephyrOut-of-bounds write in Microchip SERCOM-G1 (PIC32CM-JH) async UART RX with 1-byte buffer4.2 Medium
- ffmpeg, red hat ai inference server, enterprise linux ai (rhel ai) 3 +6 more +8 moreFFmpeg - Out-of-Bounds Write in RASC Decoder decode_dlta()8.8 High
- zephyrproject zephyrOut-of-bounds heap write in Zephyr `recvmsg()` ancillary-data path (`insert_pktinfo` undersizes the control-buffer capacity check)8.7 High
- strukturag libde265libde265: Pixel accessor signed integer overflow causes heap OOB read/write7.4 High
- freebsdMultiple vulnerabilities in the sound(4) mmap path7.8 High
- golang tiff, golang.org/x/image golang.org/x/image/tiff +1 morePanic decoding image with out-of-bounds strip offset in x/image/tiff in golang.org/x/image7.5 High
- geovision inc. gv-lpclpc2011/2211GV-LPC2011/LPC2211 - unauthorized out-of-bounds writing vulnerability (onvif.cgi)7.5 High
- wolfsslOut-of-bounds write in SetSuitesHashSigAlgo on oversized signature algorithms list2.0 Low
- wolfsslDTLS 1.3 ACK serialization heap buffer overflow via integer truncation8.8 High
- wolfsslPKCS#7 decode ignores caller output buffer size, writing past buffer bounds1.0 Low
- wolfsslRenesas TSIP TLS 1.3 transcript buffer out-of-bounds write in tsip_StoreMessage8.3 High
- rtklibRTKLIB 2.4.3 - Out-of-bounds Write in decode_type1033 via Crafted RTCM3 Message9.3 Critical
- vimVim: Out-of-bounds Write in Spell File Word Count5.7 Medium
- drolsky list::someutils::xsList::SomeUtils::XS versions before 0.59 for Perl have a heap buffer overflow in the pairwise function7.5 High
- vimVim: Stack out-of-bounds write in `spell_soundfold_sofo()` via an over-length `soundfold()` argument4.0 Medium
- silabs emberznetDoor Lock ClearWeekdaySchedule invalid table index and write in EmberZNet v9.0.27.1 High
- silabs emberznetIAS Zone enroll invalid table index and write in EmberZNet 9.0.27.1 High
- linux kernel, linux +1 morenetfilter: bridge: make ebt_snat ARP rewrite writable8.8 High
- linux, linux kernel +1 moresctp: validate cached peer INIT chunk length in COOKIE_ECHO processing9.8 Critical
- linux, linux kernel +1 morenet/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list8.7 High
- linux, linux kernel +1 moreBluetooth: hci_sync: reject oversized Broadcast Announcement prepend7.8 High
- linux, linux kernel +1 moreaccel/ivpu: Add bounds checks for firmware log indices7.1 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 moreaccel/ivpu: Add buffer overflow check in MS get_info_ioctl7.1 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 moreaccel/ivpu: Fix signed integer truncation in IPC receive7.8 High
- linux, linux kernel, red hat enterprise linux 10 +14 more +16 moreUSB: serial: io_ti: fix heap overflow in get_manuf_info()6.8 Medium
- linux, linux kernel +1 moreUSB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr()7.8 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 moreUSB: serial: kl5kusb105: fix bulk-out buffer overflow7.8 High
- linux, linux kernel +1 moreRDMA/core: Validate cpu_id against nr_cpu_ids in DMAH alloc7.1 High
- linux, linux kernel +1 moreaccel/ethosu: fix OOB write in ethosu_gem_cmdstream_copy_and_validate()7.8 High
- linux, linux kernel, red hat enterprise linux 10 +5 more +7 morethunderbolt: Clamp XDomain response data copy to allocation size7.8 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 moredrm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX117.8 High
- linux, linux kernel +1 moredrm/amd/display: Clamp HDMI HDCP2 rx_id_list read to buffer size7.8 High
- linux, linux kernel +1 moredrm/amd/display: Clamp VBIOS HDMI retimer register count to array size7.8 High
- google chromeOut of bounds read and write in Blink>InterestGroups in Google Chrome prior to 149.0.7827.197...8.8 High
- linux, linux kernel, red hat enterprise linux 10 +13 more +15 moredm log: fix out-of-bounds write due to region_count overflow7.8 High
- linux, linux kernel +1 moreocfs2/dlm: validate qr_numregions in dlm_match_regions()9.1 Critical
- linux, linux kernel +1 moreocfs2: fix listxattr handling when the buffer is full7.1 High
- linux, linux kernel, red hat codeready linux builder eus (v.9.6) +40 more +42 morecrypto: ccp - copy IV using skcipher ivsize7.8 High
- Show moreLoading…