CWE-787: Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.
Also known as Memory Corruption.
A kind of CWE-119 Buffer Overflow.
From the CWE List. © The MITRE Corporation.
Newest
- pcre pcre2PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API...7.6 High
- pexip infinityPexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation...9.8 Critical
- pexip infinityPexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation in...7.7 High
- watchguard fireware osFireware OS Pre-Authentication Stack Buffer Overflow in fingerd Allows Remote Code Execution8.7 High
- denx software engineering u-bootU-Boot before 2026.10-rc5 Out-of-Bounds Write via DHCPv67.1 High
- denx software engineering u-bootU-Boot before 2026.10-rc3 Out-of-Bounds Write via Android Bootmeth Partition Read4.3 Medium
- denx software engineering u-bootU-Boot < 2027.01-rc1 Out-of-Bounds Write in BMP RLE8 Decoder6.0 Medium
- denx software engineering u-bootU-Boot before 2026.10-rc3 Out-of-Bounds Write in IP Fragment Reassembly8.8 High
- google chromeOut of bounds write in GPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who...8.3 High
- eclipse foundation threadx levelxOut-of-bounds Write via NAND Metadata Parsing at Mount in LevelX8.6 High
- eclipse foundation guix`gx_binres_theme_load()` sizes its theme buffer for the theme it was asked for, and allocates it...5.9 Medium
- eclipse foundation threadx netx duomDNS string cache accepts a shorter name as a match for a longer stored one, so the known-answer encoder writes past the transmit packet7.1 High
- eclipse foundation netx duoNetX Duo's WebSocket client resets the unmasking cursor to the first `NX_PACKET` each time it...9.3 Critical
- eclipse foundation threadxAn unprivileged, memory-protected ThreadX module can have the kernel read and write memory at...8.5 High
- opennmt ctranslate2CTranslate2 before 4.8.1 Heap Buffer Overflow via model.bin8.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreRpm: rpm: integer overflow in iterreadarchivenext() leads to heap-based buffer overflow when parsing untrusted rpm packages7.1 High
- denx software engineering das u-bootOut-of-bounds write in Das U-Boot9.0 Critical
- red hat enterprise linux 6Dash: dash: heap out-of-bounds write in conv_escape via undersized unicode escape reservation4.0 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreParted: parted: heap-based buffer overflow via crafted fat32 filesystem image6.6 Medium
- opensslOut-of-Bounds Access After SSL_set_SSL_CTX() During a Handshake7.5 High
- faststone image viewerFastStone Image Viewer 1bpp RLE Decoder out-of-bounds write5.3 Medium
- faststone image viewerFastStone Image Viewer TGA Image out-of-bounds write5.3 Medium
- zephyrproject zephyrOut-of-bounds write in the IEEE 802.15.4 L2 transmit path for oversized non-6LoWPAN frames6.3 Medium
- zephyrproject zephyrOut-of-bounds write in the ADI MAX32 ADC driver due to incorrect adc_sequence buffer size validation7.8 High
- zephyrproject zephyrOut-of-bounds write in the NXP MCUX LPADC ADC driver due to missing adc_sequence buffer size validation7.8 High
- zephyrproject zephyrMissing write validation of user-supplied handle pointer in the RTIO syscall verifier allows arbitrary kernel write7.8 High
- wind river systems inc vxworks 7VxWorks 77.8 High
- apple ipados, macos, ios and ipados +2 more +4 moreAn out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in...8.8 High
- trusted domain project opendkimTrusted Domain Project OpenDKIM DKIM Signature Header Selection dkim-canon.c dkim_canon_selecthdrs out-of-bounds write6.9 Medium
- patriksimek vm2vm2 before 3.12.2 Memory Disclosure via zlib Buffer Pool6.9 Medium
- d-link dir-895lD-Link DIR-895L L2TP Control Channel tunnel.c tunnel_set_params out-of-bounds write9.4 Critical
- nationalsecurityagency ghidraGhidra through 12.1.4 Stack-based Buffer Overflow via leftshift1287.3 High
- google chromeOut of bounds write in GPU in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote...9.6 Critical
- google chromeOut of bounds write in ANGLE in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to...9.6 Critical
- google chromeOut of bounds write in WebGL in Google Chrome on on Android prior to 154.0.8037.57 allowed a...9.6 Critical
- google chromeOut of bounds write in GPU in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote...8.3 High
- google chromechromedriver-154.0.8037.57-1.1 on GA media8.8 High
- kitty project kittyOut-of-bounds write in the kitty text sizing protocol allows termination of the terminal process6.8 Medium
- linux, linux kernel +1 morewifi: mt76: mt7921: validate CLC firmware records5.5 Medium
- linux, linux kernel +1 moredrm/cirrus-qemu: Validate BAR0 size during probe5.5 Medium
- linux, linux kernel +1 moreBluetooth: L2CAP: fix chan mode for LE_CONN_REQ + EXT_FLOWCTL pchan7.5 High
- linux, linux kernel +1 moreBluetooth: L2CAP: fix out-of-bounds write in l2cap_ecred_connect7.8 High
- linux, linux kernel +1 moreipv6: sr: restore network header before routing and forwarding7.4 High
- botslab g980hBotslab G980H Dashcams Out-of-bounds Write6.9 Medium
- mongodb c driverHeap buffer overflow via mid-scan command list growth in client topology monitoring8.3 High
- altera trusted firmwareSystemic Missing Address Validation in SiP SMC Handlers8.3 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: gimp: out-of-bounds write in gimpressionist plugin via crafted preset file7.8 High
- d-link dir-825D-Link DIR-825 rp-l2tp tunnel.c tunnel_set_params out-of-bounds write9.3 Critical
- No product listedAn out-of-bounds write vulnerability in jslGetTokenValueAsString() in Espruino 2v29 (commit...7.7 High
quickjsDebian,quickjs-ngDebian +1 moreQuickJS commit 04be24600 contains a heap out-of-bounds write condition in JS_ReadFunctionTag().9.8 Critical- Show moreLoading…