CWE-787: Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.
Also known as Memory Corruption.
A kind of CWE-119 Buffer Overflow.
From the CWE List. © The MITRE Corporation.
Newest
- apple ipados, macos, tvos +4 more +6 moreAn out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in...5.5 Medium
- apple macos, ios and ipados +1 moreAn out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in...9.8 Critical
- apple ipados, macos, tvos +3 more +5 moreAn out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in...9.8 Critical
- apple ipados, macos, tvos +4 more +6 moreAn out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in...8.8 High
- apple ipados, macos, tvos +4 more +6 moreAn out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in...5.5 Medium
- apple macosAn out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS...5.5 Medium
- apple ipados, macos, tvos +4 more +6 moreAn out-of-bounds write issue was addressed by removing the vulnerable code. This issue is fixed...7.8 High
- apple ipados, macos, tvos +4 more +6 moreAn out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in...5.5 Medium
- apple ipados, macos, tvos +4 more +6 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS...9.8 Critical
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morevirtio-net: fix len check in receive_big()8.4 High
- linux, linux kernel +1 morebpf, sockmap: reject overflowing copy + len in bpf_msg_push_data()8.4 High
- zephyrproject zephyrOut-of-bounds write in Zephyr `log_filter_set` syscall verifier reachable from userspace6.6 Medium
- klauspost compressInteger Overflow or Wraparound and Out-of-bounds Write in compress7.5 High
- erlang otpMegaco flex scanner buffer overflow via oversized property parm name8.3 High
- erlang erts, otp, erlang\/otp +2 moreHeap pointer corruption via signed/unsigned mismatch in LARGE_TUPLE_EXT decoding in erts external term format decoder5.1 Medium
- hdfgroup hdf5HDF5 SOHM List Index Heap Buffer Overflow5.5 Medium
- linuxfs/ntfs3: validate lcns_follow in log_replay conversion7.8 High
- linux, linux kernel +1 morefs/ntfs3: bound NTFS_DE view.data_off in UpdateRecordData{Root,Allocation}7.8 High
- linuxnet: nexthop: Increase weight to u167.8 High
- linux, linux kernel +1 morewifi: mac80211: fix MLE defragmentation8.3 High
- linux, linux kernel +1 moreiio: accel: bmc150: clamp the device-reported FIFO frame count5.5 Medium
- linux, linux kernel +1 morestaging: vme_user: bound slave read/write to the kern_buf size7.8 High
- linux, linux kernel +1 morestaging: rtl8723bs: fix heap buffer overflow in rtw_cfg80211_set_wpa_ie()7.8 High
- linux, linux kernel +1 morestaging: rtl8723bs: fix OOB write in HT_caps_handler()8.1 High
- linux, linux kernel +1 morefs/ntfs3: validate Dirty Page Table capacity in log_replay copy_lcns7.8 High
- linux, linux kernel +1 morentfs: avoid calling post_write_mst_fixup() for invalid index_block7.8 High
- linux, linux kernel +1 morecoresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer()7.8 High
- linux, linux kernel +1 moresmb: client: Fix next buffer leak in receive_encrypted_standard()7.8 High
- linux, linux kernel +1 moreHID: hid-goodix-spi: validate report size to prevent stack buffer overflow7.8 High
- linux, linux kernel +1 moreHID: wacom: fix slab-out-of-bounds write in wacom_wac_queue_insert8.8 High
- linux, linux kernel +1 moreHID: multitouch: fix out-of-bounds bit access on mt_io_flags8.8 High
- linux, linux kernel +1 morebpf: Reject fragmented frames in devmap9.8 Critical
- linux, linux kernel +1 moreUSB: serial: digi_acceleport: fix write buffer corruption7.8 High
- linux, linux kernel +1 moreudf: validate VAT header length against the VAT inode size7.1 High
- linux, linux kernel +1 moreudf: validate sparing table length as an entry count, not a byte count7.8 High
- linux, linux kernel +1 morecrypto: qat - validate RSA CRT component lengths7.8 High
- linux, linux kernel +1 moreexfat: bound uniname advance in exfat_find_dir_entry()7.8 High
- linux, linux kernel +1 moreiommufd: Use sizeof(*hdr) instead of sizeof(hdr) in veventq read7.8 High
- linux, linux kernel +1 moreInput: synaptics-rmi4 - bound the F3A keymap to the GPIO count7.8 High
- linux, linux kernel +1 moreInput: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count7.8 High
- linux, linux kernel +1 moreInput: goodix - clamp the device-reported contact count7.8 High
- linux, linux kernel +1 moreInput: mms114 - reject an oversized device packet size7.8 High
- linux, linux kernel +1 moreRDMA/siw: bound Read Response placement to the RREAD length9.8 Critical
- ffmpegFFmpeg 7.0 - 8.1.2 Heap Out-of-Bounds Write via vf_quirc Filter7.7 High
- libeventLibevent: Heap out-of-bounds write in bufferevent_socket_set_conn_address_ reachable via AF_UNIX accept8.4 High
- libeventLibevent: Off-by-one stack buffer overflow in dnsname_to_labels via crafted DNS server response7.0 High
- linux, linux kernel +1 morenetfs: Fix overrun check in netfs_extract_user_iter()7.8 High
- apache nimbleApache NimBLE: Incorrect data validation in BASS add/modify source operation8.8 High
- fluidsynthFluidSynth: Heap Buffer Overflow in MIDI Player7.8 High
- imagemagickImageMagick: Heap Buffer Over-Write in fx operation5.0 Medium
- Show moreLoading…