CWE-787: Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.
Also known as Memory Corruption.
A kind of CWE-119 Buffer Overflow.
From the CWE List. © The MITRE Corporation.
Newest
- snowflake libsnowflakeclient, odbc driver, php pdo driver +2 moreMultiple Security Vulnerabilities in Snowflake libsnowflakeclient8.8 High
- google chromeOut of bounds write in Codecs in Google Chrome prior to 150.0.7871.186 allowed a remote attacker...8.8 High
- ffmpegFFmpeg 3.0 - 8.1.2 vf_swaprect Out-of-Bounds Write via NV12 Frame Processing8.5 High
- ffmpegFFmpeg 3.4 - 8.1.2 vf_floodfill Out-of-Bounds Write via filter_frame()7.3 High
- ffmpegFFmpeg 8.1.2 Out-of-Bounds Write via TY Demuxer and Shorten Decoder7.3 High
- ffmpegFFmpeg 2.7 - 8.1.2 Out-of-Bounds Write in TDSC Video Decoder8.5 High
- ffmpegFFmpeg 4.4 - 8.1.2 Out-of-Bounds Memory Access in ADX Audio Decoder8.7 High
- nlnet labs unboundPacket of death for DNSCrypt over TCP7.5 High
- google chromeOut of bounds read and write in ANGLE in Google Chrome on Android prior to 150.0.7871.182 allowed...9.6 Critical
- google chromeOut of bounds write in ANGLE in Google Chrome prior to 150.0.7871.182 allowed a remote attacker...8.3 High
- zephyrproject zephyrNULL-pointer / out-of-bounds write in Zephyr MCTP I2C+GPIO target binding driven by an unauthenticated I2C controller8.1 High
- egor data::disjointset::sharedData::DisjointSet::Shared versions before 0.02 for Perl allow out-of-bounds reads and writes via an unvalidated parent index in dsu_find9.8 Critical
- egor data::spatialhash::sharedData::SpatialHash::Shared versions before 0.02 for Perl allow out-of-bounds reads and writes via unvalidated bucket, link and free-list indices in sph_walk_cell and sph_alloc_slot7.8 High
- mozilla firefox, thunderbird +1 moreSandbox escape due to invalid pointer in the Disability Access APIs component10.0 Critical
- apache foryApache Fory: Heap type confusion and out-of-bounds read/write in C++ compatible-mode field-skip paths9.8 Critical
- linux, linux kernel +1 morei2c: stub: Reject I2C block transfers with invalid length7.8 High
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +2 more +4 moreKronosnet: kronosnet: memory corruption and out-of-bounds access via malformed network packet defragmentation6.5 Medium
- linux, linux kernel +1 morewifi: wilc1000: fix dma_buffer leak on bus acquire failure7.8 High
- linux, linux kernel +1 moredrm/amd/display: Validate GPIO pin LUT table size before iterating7.8 High
- linux, linux kernel +1 morehwmon: (pmbus/adm1266) bounce blackbox records through a protocol-sized buffer7.8 High
- linux, linux kernel +1 morehwmon: (pmbus/adm1266) cap PDIO scan in get_multiple at ADM1266_PDIO_NR7.8 High
- linux, linux kernel +1 morefirmware: arm_ffa: Validate framework notification message layout8.4 High
- linux, linux kernel +1 morefs/statmount: fix slab out-of-bounds write in statmount_mnt_idmap7.8 High
- linux, linux kernel +1 morenetfs: Fix streaming write being overwritten7.8 High
- linux, linux kernel +1 moreASoC: codecs: fs210x: fix possible buffer overflow7.8 High
- linux, linux kernel +1 morerxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg7.8 High
- linux, linux kernel +1 morexfrm: Check for underflow in xfrm_state_mtu7.8 High
- linux, linux kernel +1 moreethtool: cmis: require exact CDB reply length7.8 High
- linux, linux kernel +1 moreethtool: cmis: validate start_cmd_payload_size from module7.8 High
- linux, linux kernel +1 moreethtool: coalesce: cap profile updates at NET_DIM_PARAMS_NUM_PROFILES7.8 High
- linux, linux kernel +1 moreipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress()9.8 Critical
- linux, linux kernel +1 moreiio: imu: st_lsm6dsx: fix stack leak in tagged FIFO buffer7.8 High
- linux, linux kernel +1 moreUSB: serial: safe_serial: fix memory corruption with small endpoint7.8 High
- linux, linux kernel +1 moreUSB: serial: cypress_m8: fix memory corruption with small endpoint7.8 High
- linux, linux kernel +1 moreUSB: serial: omninet: fix memory corruption with small endpoint7.8 High
- linux, linux kernel +1 moreocteontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify8.8 High
- linux, linux kernel +1 moreHID: wacom: Fix OOB write in wacom_hid_set_device_mode()8.8 High
- linux, linux kernel +1 moreUSB: serial: digi_acceleport: fix memory corruption with small endpoints7.8 High
- linux, linux kernel +1 moreUSB: serial: mxuport: fix memory corruption with small endpoint7.8 High
- linux, linux kernel +1 moreUSB: serial: mct_u232: fix memory corruption with small endpoint7.8 High
- linux, linux kernel +1 morescsi: target: iscsi: Validate CHAP_R length before base64 decode9.8 Critical
- linux, linux kernel +1 moregcov: use atomic counter updates to fix concurrent access crashes9.8 Critical
- linux, linux kernel +1 moreKEYS: fix overflow in keyctl_pkey_params_get_2()7.8 High
- linux, linux kernel +1 morebpf: use kvfree() for replaced sysctl write buffer7.8 High
- linux, linux kernel +1 moreKVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level8.8 High
- linux, linux kernel +1 moreKVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path7.8 High
- openidc mod auth openidcmod_auth_openidc has out-of-bounds read and write in state cookie parsing7.5 High
- linux, linux kernel +1 moremedia: rzv2h-ivc: Fix concurrent buffer list access7.8 High
- davenardella snap7davenardella snap7 s7_peer.cpp NegotiatePDULength out-of-bounds write5.3 Medium
- google chromeOut of bounds read and write in V8 in Google Chrome prior to 150.0.7871.128 allowed a remote...8.8 High
- Show moreLoading…