CWE-787: Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.
Also known as Memory Corruption.
A kind of CWE-119 Buffer Overflow.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft windows server 2019, windows server 2019 (server core installation), windows server 2022 +9 more +11 moreWindows DNS Server Remote Code Execution Vulnerability8.8 High
- No product listedOut-of-bounds write in the firmware for the Intel(R) Slim Bootloader may allow a denial of...1.8 Low
- intel proset\/wireless wifiOut-of-bounds write for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2:...6.9 Medium
- intel proset\/wireless wifiOut-of-bounds write for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2:...7.1 High
- zoom communications clientsZoom Clients - Buffer Over-write8.3 High
- vimVim: Heap Buffer Overflow when Loading a Spell File8.5 High
- netgear rax20, rax20 firmware, rax35v2 +35 more +37 moreStack-based buffer overflow vulnerability in some NETGEAR Nighthawk routers1.9 Low
- tesseract-ocr tesseractTesseract: Heap out-of-bounds write in LSTM Convolve layer via crafted .traineddata6.8 Medium
- siemens solid edge se2025, solid edge se2026 +1 moreA vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid...7.3 High
- siemens solid edge se2025, solid edge se2026 +1 moreA vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid...7.3 High
- zephyrproject zephyrOut-of-bounds write in USB CDC NCM control handler when host wLength is smaller than the response5.2 Medium
- sap se netweaver and abap platformMemory Corruption vulnerability in Application Server ABAP for SAP NetWeaver and ABAP Platform9.8 Critical
- zephyrproject zephyrOut-of-bounds write in DTLS peer Connection ID getsockopt (`TLS_DTLS_PEER_CID_VALUE`) in Zephyr net sockets/TLS8.4 High
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: gimp: multiple vulnerabilities in file format plugins via crafted image file7.3 High
- op-tee optee osOP-TEE OS 4.10.0 Buffer Underwrite via RSA NOPAD Encrypt/Decrypt Operations8.4 High
- linuxsctp: fix auth_hmacs array size in struct sctp_cookie8.1 High
- linuxsctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid7.3 High
- linuxdrm/xe/guc: Fix buffer overflow in steered register list allocation7.8 High
- linuxdrm/xe/pt: Reset current_op in xe_pt_update_ops_init()7.8 High
- linuxdrm/i915/hdcp: check streams[] bounds before overflow7.8 High
- linuxice: reject out-of-range ptype in ice_parser_profile_init8.8 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 7 extended lifecycle support +11 more +13 moreGstreamer: gstreamer1-plugins-bad-free: gstreamer: heap out-of-bounds write in adpcmdec ima/dvi adpcm decoder7.6 High
perlAzure Linux,perl-Attribute-HandlersRed Hat,perl-AutoLoaderRed Hat +98 more +100 morePerl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matching via an undersized superlinear cache in S_regmatch5.7 Medium- tobit laboratories ag teamdavidTeamDavid: Buffer Overflow in JSON-parsing9.5 Critical
- tobit laboratories ag teamdavidTeamDavid: Buffer Overflow in multiple form data parameters9.5 Critical
- tobit laboratories ag teamdavidTeamDavid: Buffer Overflow in file names of file upload functionalities9.5 Critical
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: heap buffer overflow in `file-seattle-filmworks` load — `fread` writes attacker-controlled length into undersized allocation7.8 High
- medixant radiant dicomMedixant RadiAnt DICOM Out-of-bounds write5.3 Medium
- ffmpegFFmpeg 4.4 < 9.0 Heap Out-of-Bounds Write in CFHD Decoder via AVI Demuxing8.5 High
- ffmpegFFmpeg 0.5 < 9.0 DVB Subtitle Parser Heap Buffer Overflow via WTV File8.5 High
- google chromeOut of bounds write in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker...8.3 High
- google chromeOut of bounds write in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to...8.8 High
- google chromeOut of bounds write in GPU in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote...8.3 High
- google chromeOut of bounds write in ANGLE in Google Chrome on Android prior to 151.0.7922.109 allowed a remote...9.6 Critical
- contiki-ngContiki-NG MQTT Client Out-of-Bounds Write in PUBLISH Topic Parser via Persistent State Between TCP Segments9.2 Critical
- autodesk revit, autocad, autocad lt +1 more +3 morePDF File Parsing Vulnerabilities in Certain Autodesk Desktop Products7.8 High
- ggml llama.cppllama.cpp b4882–b9058 Buffer Overflow in KV Cache State Restore9.2 Critical
- cwalter-at freemodbusFreeModbus LINUXTCP Port Off-by-One Global Buffer Overflow in xMBPortTCPPool()9.1 Critical
- libxfont2, suse container suse/kiosk/tigervnc-x11vnc:1.14-63.8, container suse/kiosk/xorg:21.1-83.7 +77 more +79 morefs_read_glyphs() heap OOB read/write via encoding array index mismatch in libXfont29.2 Critical
- debevv nanomodbusnanoMODBUS Client-Side Out-of-Bounds Write via object_length in recv_read_device_identification_res()8.6 High
- debevv nanomodbusnanoMODBUS Server-Side Out-of-Bounds Write in handle_read_file_record()9.8 Critical
- nvidia dynamoNVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause an out-of-bounds...8.2 High
- rpm-software-management popt, red hat enterprise linux 10, enterprise linux 6 +7 more +9 morePopt-devel: popt-static: off-by-one in poptstuffargs2.5 Low
- academysoftwarefoundation openimageioOpenImageIO: TIFF 1-bit CMYK bit conversion heap out-of-bounds write7.6 High
- academysoftwarefoundation openimageioOpenImageIO: Cineon invalid bit depth heap out-of-bounds write8.3 High
- academysoftwarefoundation openimageioOpenImageIO OpenEXR plugin partial edge tile heap out-of-bounds write7.8 High
- academysoftwarefoundation openimageioOpenImageIO: IFF ZBUFFER tile read writes past caller tile buffer7.8 High
- zephyrproject zephyrHeap out-of-bounds write in Zephyr hawkBit OTA client when terminating server response body8.2 High
- mediatek mt6890 firmware, mt6988 firmware, mt6990 firmware +1 more +3 moreIn wifi, there is a possible out of bounds write due to a missing bounds check. This could lead...4.4 Medium
- mediatek mt2735 firmware, mt2737 firmware, mt6890 firmware +3 more +5 moreIn med, there is a possible out of bounds write due to an incorrect bounds check. This could lead...5.5 Medium
- Show moreLoading…