← Back
CWE-787

15,601 CVEs • Abstraction: Base • Likelihood of Exploit: High

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

JSON object

Loading...

CVEs (15,601)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Schneider Electric
1Interactive Graphical Scada System
Jun 17, 2026
Jun 11, 2021
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A CWE-787: Out-of-bounds write vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21041 and prior that could result in loss of data or remote code execution due to missing length checks, when a malicious CGF file i...Show more
A CWE-787: Out-of-bounds write vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21041 and prior that could result in loss of data or remote code execution due to missing length checks, when a malicious CGF file is imported to IGSS Definition.Show less
1Google
1Android
Jun 17, 2026
Jun 11, 2021
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
A possible buffer overflow vulnerability in NPU driver prior to SMR JUN-2021 Release 1 allows arbitrary memory write and code execution.
1Google
1Android
Jun 17, 2026
Jun 11, 2021
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
A possible out of bounds write vulnerability in NPU driver prior to SMR JUN-2021 Release 1 allows arbitrary memory write.
1Google
1Android
Jun 17, 2026
Jun 11, 2021
N/A· v4
6.7 MEDIUM· v3
4.6 MEDIUM· v2
An improper input validation vulnerability in NPU firmware prior to SMR MAY-2021 Release 1 allows arbitrary memory write and code execution.
1Google
1Android
Jun 17, 2026
Jun 11, 2021
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
An improper input validation vulnerability in sdfffd_parse_chunk_PROP() with Sample Rate Chunk in libsdffextractor library prior to SMR MAY-2021 Release 1 allows attackers to execute arbitrary code on mediaextractor proc...Show more
An improper input validation vulnerability in sdfffd_parse_chunk_PROP() with Sample Rate Chunk in libsdffextractor library prior to SMR MAY-2021 Release 1 allows attackers to execute arbitrary code on mediaextractor process.Show less
1Jerryscript
1Jerryscript
Jun 17, 2026
Jun 10, 2021
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
An issue was discovered in JerryScript 2.4.0. There is a heap-buffer-overflow in lexer_parse_number in js-lexer.c file.
1Jerryscript
1Jerryscript
Jun 17, 2026
Jun 10, 2021
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
There is a heap-buffer-overflow at re-parser.c in re_parse_char_escape in JerryScript 2.2.0.
1Jerryscript
1Jerryscript
Jun 17, 2026
Jun 10, 2021
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
There is a heap-buffer-overflow at lit-strings.c:431 in lit_read_code_unit_from_utf8 in JerryScript 2.2.0.
1Jerryscript
1Jerryscript
Jun 17, 2026
Jun 10, 2021
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
There is a stack-overflow at ecma-regexp-object.c:535 in ecma_regexp_match in JerryScript 2.2.0.
1Jerryscript
1Jerryscript
Jun 17, 2026
Jun 10, 2021
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
There is a heap-buffer-overflow at jmem-poolman.c:165 in jmem_pools_collect_empty in JerryScript 2.2.0.
5Apache
DebianFedoraproject+2 more
8Cloud Backup
Debian LinuxEnterprise Manager Ops Center+5 more
Jun 17, 2026
Jun 10, 2021
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
In Apache HTTP Server versions 2.4.0 to 2.4.46 a specially crafted SessionHeader sent by an origin server could cause a heap overflow
4Apache
DebianFedoraproject+1 more
6Debian Linux
Enterprise Manager Ops CenterFedora+3 more
Jun 17, 2026
Jun 10, 2021
N/A· v4
7.3 HIGH· v3
6.8 MEDIUM· v2
Apache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted Digest nonce can cause a stack overflow in mod_auth_digest. There is no report of this overflow being exploitable, nor the Apache HTTP Server team could cre...Show more
Apache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted Digest nonce can cause a stack overflow in mod_auth_digest. There is no report of this overflow being exploitable, nor the Apache HTTP Server team could create one, though some particular compiler and/or compilation option might make it possible, with limited consequences anyway due to the size (a single byte) and the value (zero byte) of the overflowShow less
1Intel
1Baseboard Management Controller Firmware
Jun 17, 2026
Jun 9, 2021
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
Out of bounds write in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.48.ce3e3bd2 may allow an authenticated user to potentially enable escalation of privilege via l...Show more
Out of bounds write in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.48.ce3e3bd2 may allow an authenticated user to potentially enable escalation of privilege via local access.Show less
1Intel
1Efi Bios 7215
Jun 17, 2026
Jun 9, 2021
N/A· v4
6.5 MEDIUM· v3
3.3 LOW· v2
Out of bounds write in the BMC firmware for Intel(R) Server Board M10JNP2SB before version EFI BIOS 7215, BMC 8100.01.08 may allow an unauthenticated user to potentially enable a denial of service via adjacent access.
3Intel
NetappSiemens
9Aff Bios
BiosCloud Backup+6 more
Oct 8, 2026
Jun 9, 2021
N/A· v4
4.4 MEDIUM· v3
2.1 LOW· v2
Out of bounds write in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable denial of service via local access.
1Intel
13Dsl5320 Thunderbolt 2 Firmware
Dsl5520 Thunderbolt 2 FirmwareDsl6340 Thunderbolt 3 Firmware+10 more
Jun 17, 2026
Jun 9, 2021
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
Out-of-bounds write in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable denial of service via local access.
2Debian
Intel
2Connection Manager
Debian Linux
Jun 17, 2026
Jun 9, 2021
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
ConnMan (aka Connection Manager) 1.30 through 1.39 has a stack-based buffer overflow in uncompress in dnsproxy.c via NAME, RDATA, or RDLENGTH (for A or AAAA).
1Mcafee
1Getsusp
Jun 17, 2026
Jun 9, 2021
N/A· v4
7.8 HIGH· v3
6.1 MEDIUM· v2
Memory corruption vulnerability in the driver file component in McAfee GetSusp prior to 4.0.0 could allow a program being investigated on the local machine to trigger a buffer overflow in GetSusp, leading to the executio...Show more
Memory corruption vulnerability in the driver file component in McAfee GetSusp prior to 4.0.0 could allow a program being investigated on the local machine to trigger a buffer overflow in GetSusp, leading to the execution of arbitrary code, potentially triggering a BSOD.Show less
1Sap
1Netweaver Abap
Jun 17, 2026
Jun 9, 2021
N/A· v4
5.9 MEDIUM· v3
4.3 MEDIUM· v2
SAP NetWeaver AS for ABAP (RFC Gateway), versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC - 8.04,7.22,7.22EXT,7.49,7.53,7.73, KERNEL - 7.22,8.04,7.49,7.53,7.73,7.77,7.81,7.82,7.83, allows an u...Show more
SAP NetWeaver AS for ABAP (RFC Gateway), versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC - 8.04,7.22,7.22EXT,7.49,7.53,7.73, KERNEL - 7.22,8.04,7.49,7.53,7.73,7.77,7.81,7.82,7.83, allows an unauthenticated attacker without specific knowledge of the system to send a specially crafted packet over a network which will trigger an internal error in the system due to improper input validation in method ThCpicDtCreate () causing the system to crash and rendering it unavailable. In this attack, no data in the system can be viewed or modified.Show less
1Sap
1Netweaver Abap
Jun 17, 2026
Jun 9, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
SAP NetWeaver AS for ABAP (RFC Gateway), versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC - 8.04,7.22,7.22EXT,7.49,7.53,7.73, KERNEL - 7.22,8.04,7.49,7.53,7.73,7.77,7.81,7.82,7.83, allows an u...Show more
SAP NetWeaver AS for ABAP (RFC Gateway), versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC - 8.04,7.22,7.22EXT,7.49,7.53,7.73, KERNEL - 7.22,8.04,7.49,7.53,7.73,7.77,7.81,7.82,7.83, allows an unauthenticated attacker without specific knowledge of the system to send a specially crafted packet over a network which will trigger an internal error in the system due to improper input validation in method ThCPIC() causing the system to crash and rendering it unavailable. In this attack, no data in the system can be viewed or modified.Show less