← Back
CWE-787

15,601 CVEs • Abstraction: Base • Likelihood of Exploit: High

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

JSON object

Loading...

CVEs (15,601)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Schneider Electric
1Interactive Graphical Scada System
Jun 17, 2026
Nov 19, 2020
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A CWE-787 Out-of-bounds Write vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247 that could cause Remote Code Execution when malicious CGF (Configuration Group File) file is imported to IGSS Definitio...Show more
A CWE-787 Out-of-bounds Write vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247 that could cause Remote Code Execution when malicious CGF (Configuration Group File) file is imported to IGSS Definition.Show less
1Schneider Electric
1Interactive Graphical Scada System
Jun 17, 2026
Nov 19, 2020
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A CWE-787 Out-of-bounds Write vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247 that could cause Remote Code Execution when malicious CGF (Configuration Group File) file is imported to IGSS Definitio...Show more
A CWE-787 Out-of-bounds Write vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247 that could cause Remote Code Execution when malicious CGF (Configuration Group File) file is imported to IGSS Definition.Show less
1Schneider Electric
1Interactive Graphical Scada System
Jun 17, 2026
Nov 19, 2020
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A CWE-787 Out-of-bounds Write vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247 that could cause Remote Code Execution when malicious CGF (Configuration Group File) file is imported to IGSS Definitio...Show more
A CWE-787 Out-of-bounds Write vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247 that could cause Remote Code Execution when malicious CGF (Configuration Group File) file is imported to IGSS Definition.Show less
1Schneider Electric
1Interactive Graphical Scada System
Jun 17, 2026
Nov 19, 2020
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A CWE-787: Out-of-bounds Write vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247, that could cause Remote Code Execution when malicious CGF (Configuration Group File) file is imported to IGSS Definit...Show more
A CWE-787: Out-of-bounds Write vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247, that could cause Remote Code Execution when malicious CGF (Configuration Group File) file is imported to IGSS Definition.Show less
1Schneider Electric
1Interactive Graphical Scada System
Jun 17, 2026
Nov 19, 2020
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A CWE-787: Out-of-bounds Write vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247, that could cause Remote Code Execution when malicious CGF (Configuration Group File) file is imported to IGSS Definit...Show more
A CWE-787: Out-of-bounds Write vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247, that could cause Remote Code Execution when malicious CGF (Configuration Group File) file is imported to IGSS Definition.Show less
1Trendmicro
1Interscan Web Security Virtual Appliance
Jun 17, 2026
Nov 18, 2020
N/A· v4
8.8 HIGH· v3
6.5 MEDIUM· v2
A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an authenticated, remote attacker to send a specially crafted HTTP message and achieve remote code execution with elevated privi...Show more
A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an authenticated, remote attacker to send a specially crafted HTTP message and achieve remote code execution with elevated privileges.Show less
1Trendmicro
1Interscan Web Security Virtual Appliance
Jun 17, 2026
Nov 18, 2020
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an unauthenticated, remote attacker to send a specially crafted HTTP message and achieve remote code execution with elevated pri...Show more
A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an unauthenticated, remote attacker to send a specially crafted HTTP message and achieve remote code execution with elevated privileges.Show less
1Valvesoftware
1Game Networking Sockets
Jun 17, 2026
Nov 18, 2020
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
Valve's Game Networking Sockets prior to version v1.2.0 improperly handles unreliable segments with negative offsets in function SNP_ReceiveUnreliableSegment(), leading to a Heap-Based Buffer Underflow and a free() of me...Show more
Valve's Game Networking Sockets prior to version v1.2.0 improperly handles unreliable segments with negative offsets in function SNP_ReceiveUnreliableSegment(), leading to a Heap-Based Buffer Underflow and a free() of memory not from the heap, resulting in a memory corruption and probably even a remote code execution.Show less
1Schneider Electric
20Modicon M340 Bmx Noc 0401 Firmware
Modicon M340 Bmx Noe 0100 FirmwareModicon M340 Bmx Noe 0100h Firmware+17 more
Jun 17, 2026
Nov 18, 2020
N/A· v4
8.8 HIGH· v3
6.5 MEDIUM· v2
A CWE-787: Out-of-bounds Write vulnerability exists in the Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules (see notification for details) which could cause co...Show more
A CWE-787: Out-of-bounds Write vulnerability exists in the Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules (see notification for details) which could cause corruption of data, a crash, or code execution when uploading a specially crafted file on the controller over FTP.Show less
1Huawei
1Mate 30 Firmware
Jun 17, 2026
Nov 13, 2020
N/A· v4
6.7 MEDIUM· v3
4.6 MEDIUM· v2
HUAWEI Mate 30 versions earlier than 10.1.0.159(C00E159R7P2) have a vulnerability of improper buffer operation. Due to improper restrictions, local attackers with high privileges can exploit the vulnerability to cause sy...Show more
HUAWEI Mate 30 versions earlier than 10.1.0.159(C00E159R7P2) have a vulnerability of improper buffer operation. Due to improper restrictions, local attackers with high privileges can exploit the vulnerability to cause system heap overflow.Show less
1Pixar
1Openusd
Jun 17, 2026
Nov 13, 2020
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD files. To trigger this vulnerability, the victim needs to open an attacker-provided malformed file in...Show more
A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD files. To trigger this vulnerability, the victim needs to open an attacker-provided malformed file in an instance USDC file format path element token index.Show less
1Pixar
1Openusd
Jun 17, 2026
Nov 13, 2020
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A heap overflow vulnerability exists in the Pixar OpenUSD 20.05 while parsing compressed value rep arrays in binary USD files. A specially crafted malformed file can trigger a heap overflow, which can result in remote co...Show more
A heap overflow vulnerability exists in the Pixar OpenUSD 20.05 while parsing compressed value rep arrays in binary USD files. A specially crafted malformed file can trigger a heap overflow, which can result in remote code execution. To trigger this vulnerability, the victim needs to access an attacker-provided malformed file.Show less
1Pixar
1Openusd
Jun 17, 2026
Nov 13, 2020
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software USDC file format SPECS section decompression heap overflow.
1Pixar
1Openusd
Jun 17, 2026
Nov 13, 2020
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD files. To trigger this vulnerability, the victim needs to open an attacker-provided malformed file in...Show more
A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD files. To trigger this vulnerability, the victim needs to open an attacker-provided malformed file in an instance in USDC file format PATHS section.Show less
1Pixar
1Openusd
Jun 17, 2026
Nov 13, 2020
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD files. An instance exists in USDC file format FIELDSETS section decompression heap overflow.
2Apple
Pixar
3Ipados
Iphone OsOpenusd
Jun 17, 2026
Nov 13, 2020
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD files. This instance exists in the USDC file format FIELDS section decompression heap overflow.
2Intel
Netapp
3Active Management Technology Firmware
Cloud BackupStandard Manageability
Jun 17, 2026
Nov 12, 2020
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Out-of-bounds write in IPv6 subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 14.0.45 may allow an unauthenticated user to potentially enable escalation of privileges via netw...Show more
Out-of-bounds write in IPv6 subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 14.0.45 may allow an unauthenticated user to potentially enable escalation of privileges via network access.Show less
2Intel
Netapp
6Aff Bios
BiosFas Bios+3 more
Jun 17, 2026
Nov 12, 2020
N/A· v4
6.7 MEDIUM· v3
4.6 MEDIUM· v2
Out of bounds write in Intel BIOS platform sample code for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
1Intel
1Bios
Jun 17, 2026
Nov 12, 2020
N/A· v4
6.7 MEDIUM· v3
4.6 MEDIUM· v2
Out of bounds write in BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege and/or denial of service via local access.
1Qualcomm
14Qsm8350 Firmware
Sa6145p FirmwareSa6150p Firmware+11 more
Jun 17, 2026
Nov 12, 2020
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
u'Possible integer overflow to heap overflow while processing command due to lack of check of packet length received' in Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile in QSM8350, SA6145P, SA6150P, SA6155, SA6155...Show more
u'Possible integer overflow to heap overflow while processing command due to lack of check of packet length received' in Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile in QSM8350, SA6145P, SA6150P, SA6155, SA6155P, SA8150P, SA8155P, SA8195P, SDX55M, SM8250, SM8350, SM8350P, SXR2130, SXR2130PShow less