CWE-787: Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.
Also known as Memory Corruption.
A kind of CWE-119 Buffer Overflow.
From the CWE List. © The MITRE Corporation.
Newest
- red hat hardened imagesBusybox: busybox: passwd/group parser writes heap pointers out of bounds due to stale tokenize() endpoint6.7 Medium
- red hat hardened imagesBusybox: busybox: romfs volume id parsing performs unbounded memcpy into fixed-size label buffer, causing heap overflow7.3 High
- foxit pdf editor, pdf reader +1 moreFoxit PDF Editor/Reader DeviceN Colorspace Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- foxit pdf editor, pdf reader +1 moreFoxit PDF Editor/Reader — Heap Buffer Overflow in WebP Image Decoding via Bitmap Stride Confusion7.8 High
- foxit pdf editor, pdf reader +1 moreFoxit PDF Editor/Reader Out-of-bounds Write Vulnerability While Rendering7.8 High
- foxit pdf editor, pdf reader +1 moreFoxit PDF Editor/Reader PRC Stream Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- foxit pdf editor, pdf reader +1 moreFoxit PDF Editor/Reader JPEG2000 Parsing Memory Corruption Remote Code Execution Vulnerability7.8 High
- foxit pdf editor, pdf reader +1 moreFoxit PDF Editor/Reader U3D File Parsing Integer Overflow Remote Code Execution Vulnerability7.8 High
- ibm financial transaction manager, financial transaction manager (ftm) for redhat openshift +1 moreIBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities8.5 High
- ibm financial transaction manager, financial transaction manager (ftm) for redhat openshift +1 moreIBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities8.8 High
- lwip tcp/ip stack mqttOut-of-bounds write in lwIP TCP/IP Stack MQTT Client Application9.3 Critical
- adobe substance3d - modeler, substance 3d modeler +1 moreSubstance3D - Modeler | Out-of-bounds Write (CWE-787)7.8 High
- adobe substance3d - modeler, substance 3d modeler +1 moreSubstance3D - Modeler | Out-of-bounds Write (CWE-787)7.8 High
- adobe substance3d - modeler, substance 3d modeler +1 moreSubstance3D - Modeler | Out-of-bounds Write (CWE-787)7.8 High
- adobe bridgeBridge | Out-of-bounds Write (CWE-787)7.8 High
- adobe bridgeBridge | Out-of-bounds Write (CWE-787)7.8 High
- @clerk express, ubiquiti inc cloud gateways, dream machines +5 more +7 moreA malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability...7.5 High
- @clerk express, ubiquiti inc cloud gateways, dream machines +5 more +7 moreA malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability...7.5 High
- @clerk express, ubiquiti inc cloud gateways, dream machines +5 more +7 moreA malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability...7.5 High
- rti connext professionalOff-by-one Error, Out-of-bounds Write vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Buffers.6.9 Medium
- netdataNetdata: Streaming protocol dimension slot has no upper-bound guard, allowing integer overflow and out-of-bounds write6.5 Medium
- radare radare2radare2: Integer overflow causes heap out-of-bounds write in radare2 PYC parser5.5 Medium
- the document foundation libreofficeStack buffer overflow in CFF to Type 1 font conversion5.4 Medium
- the document foundation libreofficeStack buffer overflow in CFF font hint handling5.4 Medium
- the document foundation libreofficeHeap buffer overflow in PDF import stream handling5.4 Medium
- the document foundation libreofficeHeap buffer overflow in PDF import encryption handling5.4 Medium
- the document foundation libreofficeHeap buffer overflow in WMF text record import5.4 Medium
- golang.org/x/text golang.org/x/text/secure/precisPanic parsing crafted input in x/text/secure/precis in golang.org/x/text7.5 High
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +2 more +4 moreLibslirp: libslirp: heap buffer overflow in dhcpv6/tftp response builders on small interface mtu7.4 High
- zephyrproject zephyrMissing user-pointer validation in tgpio_pin_read_ts_ec syscall handler allows arbitrary supervisor-memory write from userspace7.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreUsbredir: usbredir: unbounded iso_packet_desc[] index in usbredirhost_iso_packet() leads to heap out-of-bounds write4.1 Medium
- zephyrproject zephyrOut-of-bounds write in the Intel SEDI IPM driver from an unvalidated inbound doorbell length6.0 Medium
- fluent fluent-bitFluent Bit: Remote stack buffer overflow in Fluent Bit `out_forward` Secure-Forward `PONG` handler9.2 Critical
- No product listedAn out-of-bounds read in the node_token_count/relation_token_count component of FalkorDB (Redis...7.5 High
- eximExim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, has an out-of...7.0 High
- the vinyl cache project vinyl cache, varnish-software varnish cache +1 moreIn Vinyl Cache before 9.0,2, workspace buffer overflow vulnerability was found in the .upper()...2.3 Low
- osmocom osmo-ggsnOut of bounds write in PDP ctx GSN-Address decode6.5 Medium
- teluu pjsip, pjsip pjproject +1 morePJSIP: Heap buffer overflow in the AVI parser6.9 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +2 more +4 moreCockpit: cockpit: unauthorized modification of login records via integer overflow3.6 Low
- ibm mqIBM MQ queue manager is vulnerable to unauthenticated remote code execution8.1 High
- academysoftwarefoundation openimageioOpenImageIO: Stack buffer overflow in OpenImageIO Cineon reader via unchecked numberOfElements6.1 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 moreQemu-kvm: vapic writable rom alias can escape the option-rom window and expose locked smram8.2 High
- moxa tn-4500b seriesAn out-of-bounds write vulnerability exists in some of the Ethernet switches because of improper...8.8 High
- xerial snappy-javasnappy-java through 1.1.10.8 Buffer Overflow in Snappy.compress8.7 High
- xerial snappy-javasnappy-java through 1.1.10.8 Buffer Overflow via typed uncompress methods6.9 Medium
libimager-perlDebianImager::File::PNG versions from 1.003 before 1.004 for Perl write past the end of the row buffer reading a PNG with a tRNS transparency chunk in read_direct89.1 Critical- mongodb c driverHeap overflow via oversized decrypted TLS record sequence in Windows Secure Channel stream9.2 Critical
- happyseafox sailSAIL: XBM X10 decoder writes 2 bytes per literal into a 1-byte-per-literal buffer (heap out-of-bounds write)7.8 High
- happyseafox sailSAIL: Heap out-of-bounds write in SAIL PSD decoder (Bitmap mode ignores depth)9.8 Critical
- happyseafox sailSAIL: Heap out-of-bounds write in SAIL TGA decoder (indexed-RLE bpp/stride mismatch)9.8 Critical
- Show moreLoading…