← Back
CWE-787

14,750 CVEs • Abstraction: Base • Likelihood of Exploit: High

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

JSON object

Loading...

CVEs (14,750)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Google
1Android
Jun 17, 2026
Sep 27, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Pro...Show more
In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-117099943Show less
1Google
1Android
Jun 17, 2026
Sep 27, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Pro...Show more
In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-116114402Show less
1Google
1Android
Jun 17, 2026
Sep 27, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Pro...Show more
In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-117100617Show less
1Google
1Android
Jun 17, 2026
Sep 27, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Pro...Show more
In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-118143575Show less
1Google
1Android
Jun 17, 2026
Sep 27, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Pro...Show more
In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-116469592Show less
1Google
1Android
Jun 17, 2026
Sep 27, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution in the media server with no additional execution privileges needed. User interaction is needed f...Show more
In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution in the media server with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-116019594Show less
1Google
1Android
Jun 17, 2026
Sep 27, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Pro...Show more
In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-117660045Show less
1Google
1Android
Jun 17, 2026
Sep 27, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Pro...Show more
In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112610994Show less
1Google
1Android
Jun 17, 2026
Sep 27, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Pro...Show more
In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-118386824Show less
1Google
1Android
Jun 17, 2026
Sep 27, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Pro...Show more
In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-113164693Show less
3Canonical
MozillaOpensuse
5Firefox
Firefox EsrLeap+2 more
Jun 17, 2026
Sep 27, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Mozilla developers and community members reported memory safety bugs present in Firefox 68, Firefox ESR 68, and Firefox 60.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort...Show more
Mozilla developers and community members reported memory safety bugs present in Firefox 68, Firefox ESR 68, and Firefox 60.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 69, Thunderbird < 68.1, Thunderbird < 60.9, Firefox ESR < 60.9, and Firefox ESR < 68.1.Show less
2Mozilla
Opensuse
3Firefox
Firefox EsrLeap
Jun 17, 2026
Sep 27, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Mozilla developers and community members reported memory safety bugs present in Firefox 68 and Firefox ESR 68. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of t...Show more
Mozilla developers and community members reported memory safety bugs present in Firefox 68 and Firefox ESR 68. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 69 and Firefox ESR < 68.1.Show less
1Mozilla
1Firefox
Jun 17, 2026
Sep 27, 2019
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Mozilla developers and community members reported memory safety bugs present in Firefox 68. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be explo...Show more
Mozilla developers and community members reported memory safety bugs present in Firefox 68. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 69.Show less
1Netskope
1Netskope
Jun 17, 2026
Sep 26, 2019
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
The Netskope client service, v57 before 57.2.0.219 and v60 before 60.2.0.214, running with NT\SYSTEM privilege, accepts network connections from localhost. The connection handling function in this service suffers from a...Show more
The Netskope client service, v57 before 57.2.0.219 and v60 before 60.2.0.214, running with NT\SYSTEM privilege, accepts network connections from localhost. The connection handling function in this service suffers from a stack based buffer overflow in "doHandshakefromServer" function. Local users can use this vulnerability to trigger a crash of the service and potentially cause additional impact on the system.Show less
2Apache
Oracle
8Communications Element Manager
Communications Session Report ManagerCommunications Session Route Manager+5 more
Jun 17, 2026
Sep 26, 2019
N/A· v4
7.2 HIGH· v3
6.0 MEDIUM· v2
In Apache HTTP Server 2.4.32-2.4.39, when mod_remoteip was configured to use a trusted intermediary proxy server using the "PROXY" protocol, a specially crafted PROXY header could trigger a stack buffer overflow or NULL...Show more
In Apache HTTP Server 2.4.32-2.4.39, when mod_remoteip was configured to use a trusted intermediary proxy server using the "PROXY" protocol, a specially crafted PROXY header could trigger a stack buffer overflow or NULL pointer deference. This vulnerability could only be triggered by a trusted proxy and not by untrusted HTTP clients.Show less
5Canonical
DebianE2fsprogs Project+2 more
6Debian Linux
E2fsprogsFedora+3 more
Jun 17, 2026
Sep 24, 2019
N/A· v4
6.7 MEDIUM· v3
4.6 MEDIUM· v2
An exploitable code execution vulnerability exists in the quota file functionality of E2fsprogs 1.45.3. A specially crafted ext4 partition can cause an out-of-bounds write on the heap, resulting in code execution. An att...Show more
An exploitable code execution vulnerability exists in the quota file functionality of E2fsprogs 1.45.3. A specially crafted ext4 partition can cause an out-of-bounds write on the heap, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.Show less
1Microsoft
1Internet Explorer
Jun 17, 2026
Sep 23, 2019
N/A· v4
7.5 HIGH· v3
7.6 HIGH· v2
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-201...Show more
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1221.Show less
7Canonical
DebianFedoraproject+4 more
39A220 Firmware
A320 FirmwareA700s Firmware+36 more
Jun 17, 2026
Sep 20, 2019
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
There is heap-based buffer overflow in kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of service(system crash) or possibly execute ar...Show more
There is heap-based buffer overflow in kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of service(system crash) or possibly execute arbitrary code.Show less
6Canonical
DebianLinux+3 more
34A220 Firmware
A320 FirmwareA700s Firmware+31 more
Jun 17, 2026
Sep 20, 2019
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
There is heap-based buffer overflow in Linux kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of service(system crash) or possibly exec...Show more
There is heap-based buffer overflow in Linux kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of service(system crash) or possibly execute arbitrary code.Show less
1Libav
1Libav
Jun 17, 2026
Sep 19, 2019
N/A· v4
6.5 MEDIUM· v3
7.1 HIGH· v2
A stack-based buffer overflow in the subtitle decoder in Libav 12.3 allows attackers to corrupt the stack via a crafted video file in Matroska format, because srt_to_ass in libavcodec/srtdec.c misuses snprintf.