CWE-787: Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.
Also known as Memory Corruption.
A kind of CWE-119 Buffer Overflow.
From the CWE List. © The MITRE Corporation.
Newest
- mediatek, inc. mediatek chipsetIn Modem, there is a possible out of bounds write due to a missing bounds check. This could lead...7.5 High
- mediatek, inc. mediatek chipsetIn Modem, there is a possible system crash due to a missing bounds check. This could lead to...7.1 High
- mediatek, inc. mediatek chipsetIn DA, there is a possible out of bounds write due to a missing bounds check. This could lead to...6.8 Medium
- mediatek, inc. mediatek chipsetIn Modem, there is a possible out of bounds write due to improper input validation. This could...7.5 High
- mediatek, inc. mediatek chipsetIn Modem, there is a possible out of bounds write due to an integer overflow. This could lead to...7.5 High
- mediatek, inc. mediatek chipsetIn Modem, there is a possible out of bounds write due to a missing bounds check. This could lead...7.5 High
- mediatek, inc. mediatek chipsetIn Modem, there is a possible out of bounds write due to an incorrect bounds check. This could...7.5 High
- mediatek, inc. mediatek chipsetIn Modem, there is a possible out of bounds write due to a missing bounds check. This could lead...7.5 High
- mediatek, inc. mediatek chipsetIn Modem, there is a possible out of bounds write due to a missing bounds check. This could lead...7.5 High
- imgproxyimgproxy before 4.0.17 Out-of-Bounds Write in ICO Loader8.7 High
- thalesgroup sentinel keys serverStack Buffer Overflow in Sentinel Keys Server7.3 High
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 7 +2 more +4 moreGstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: stack buffer overflow in h.266/vvc parser8.8 High
- scribusScribus before 1.6.7 and 1.7.x before 1.7.4 Out-of-Bounds Memory Access via SVM Import Plugin8.5 High
- scribusScribus before 1.6.7 and 1.7.x before 1.7.4 Heap Buffer Overflow via PICT 4-bit Pixel Unpacking8.5 High
- scribusScribus before 1.6.7 and 1.7.x before 1.7.4 Heap Out-of-Bounds Write via Micrografx Draw Import8.5 High
- scribusScribus before 1.6.7 and 1.7.x before 1.7.4 Heap Buffer Overflow via PICT Pixmap Loader8.5 High
- scribusScribus before 1.6.7 and 1.7.x before 1.7.4 Heap Out-of-Bounds Write via PSD Image Loader8.5 High
- qt frameworkOut-of-bounds write vulnerability in the assimp scene import plugin of Qt3D impacts Qt Framework4.3 Medium
- sshock afflibAFFLIB through 3.7.22 Heap Out-of-Bounds Write in af_get_page6.9 Medium
- sqliteSQLite before 3.54.0 Heap Buffer Overflow via Session Extension sessionUpdateFind()8.5 High
- sqliteSQLite before 3.54.0 Heap Buffer Overflow via FTS5 fts5DoSecureDelete()8.5 High
- sqliteSQLite before 3.54.0 FTS5 Heap Buffer Overflow via fts5MergeRowidLists()8.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +5 more +7 moreGcc: stack overflow in std::bitset on libstdc++6.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 moreGcc: confirmed out-of-bounds read/write in libstdc++ parallel `std6.2 Medium
- imagination technologies graphics ddkGPU DDK - OOB write in CalculateNPOTTwiddleSparsePageMap via TEXTURE_BASE_LEVEL change5.5 Medium
- google chromeImproper input validation in V8 in Google Chrome prior to 156.0.8078.79 allowed a remote attacker...8.8 High
- vtkA memory corruption vulnerability exists in the vtkDEMReader ReadProfiles functionality of vtk ...7.5 High
- vtkA memory corruption vulnerability exists in the vtkBMPReader ExecuteDataWithInformation...7.5 High
- randombit botanBotan: Integer overflow when reporting block size in FFI can cause memory corruption9.2 Critical
- keepassxcKeePassXC: Out-of-bounds write in browser integration response encryption with oversized database responses4.1 Medium
- rt-labs p-netOut-of-bounds write when parsing AR Vendor Block requests9.3 Critical
- rt-labs p-netOut-of-bounds write in CheckPeers block parser due to unvalidated peer station name length7.2 High
- red hat ceph storage 9, enterprise linux 10, enterprise linux 6 +7 more +9 moreDnsmasq: dnsmasq: heap out-of-bounds write in dnssec validator via to_wire/from_wire transforms5.3 Medium
- danoli3 freeimageFreeImage through 3.18.0 and danoli3 fork before 3.19.25 Heap Buffer Overflow via GIF_PLAYBACK Compositing8.5 High
- danoli3 freeimageFreeImage through 3.18.0 and danoli3 fork before 3.19.22 Heap Buffer Overflow via IFF/LBM PBM RLE Decoder8.5 High
- klei entertainment don't starve togetherDon't Starve Together Memory Corruption via world_gen_data6.9 Medium
- zephyrproject zephyrOut-of-bounds write in Zephyr Ethernet L2 when adding the link-layer header to a forwarded packet6.5 Medium
- zephyrproject zephyrUnvalidated pin index in GPIO syscall handlers allows out-of-bounds kernel writes from user mode7.8 High
- juniper networks session smart routerSession Smart Router: A SACK option causes out-of-bounds memory access and TCP payload corruption when TCP sequence stitching is enabled4.8 Medium
- juniper networks session smart routerSession Smart Router: An attacker-controlled TCP option causes an out-of-bounds write when using the TCP proxy feature5.3 Medium
- simulationcraft simcSimulationCraft: Heap-Based Buffer Overflow / Out-of-Bounds Write in SimulationCraft's gem_id Array7.5 High
- dell powerprotect data domainDell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release...7.6 High
- samsung open source escargotOut-of-bounds write vulnerability in Samsung Open Source escargot allows Buffer Manipulation.5.4 Medium
- ggml-org llama.cppllama.cpp b8841 before b11865 Stack-based Buffer Overflow via ggml-rpc RDMA rdma_recv()9.2 Critical
- google chromeOut of bounds write in Editing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker...9.6 Critical
- google chromeImproper input validation in Metrics in Google Chrome on on Mac prior to 156.0.8078.73 allowed a...8.8 High
- google chromeUse after free in Video in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to...8.8 High
- asterisk, asterisk certified-asterisk +1 moreAsterisk: Asterisk app_sms.c copies externally controlled SMS lengths into fixed in-struct buffers2.3 Low
- asterisk, asterisk certified-asterisk +1 moreAsterisk: Stack buffer overflow in MWI NOTIFY Message-Account parsing8.2 High
- asterisk, asterisk certified-asterisk +1 moreAsterisk: Out-of-Bounds Write in Codec2 Decoder Due to Floor/Ceil Sample Count Mismatch6.0 Medium
- Show moreLoading…