CWE-787
14,750 CVEs • Abstraction: Base • Likelihood of Exploit: High
Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.
CVEs (14,750)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
A flaw in Thunderbird's implementation of iCal causes a stack buffer overflow in icalrecur_add_bydayrules when processing certain email messages, resulting in a potentially exploitable crash. This vulnerability affects T...Show more |
A flaw in Thunderbird's implementation of iCal causes a heap buffer overflow in icalmemory_strdup_and_dequote when processing certain email messages, resulting in a potentially exploitable crash. This vulnerability affec...Show more |
A flaw in Thunderbird's implementation of iCal causes a heap buffer overflow in parser_get_next_char when processing certain email messages, resulting in a potentially exploitable crash. This vulnerability affects Thunde...Show more |
1Mozilla 2Firefox ThunderbirdJun 17, 2026 Jul 23, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 The bufferdata function in WebGL is vulnerable to a buffer overflow with specific graphics drivers on Linux. This could result in malicious content freezing a tab or triggering a potentially exploitable crash. *Note: thi...Show more |
In SweetScape 010 Editor 9.0.1, improper validation of arguments in the internal implementation of the Memcpy function (provided by the scripting engine) allows an attacker to overwrite arbitrary memory, which could lead...Show more |
1Cherokee Project 1Cherokee Web Server Jun 17, 2026 Jul 22, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Cherokee Webserver Latest Cherokee Web server Upto Version 1.2.103 (Current stable) is affected by: Buffer Overflow - CWE-120. The impact is: Crash. The component is: Main cherokee command. The attack vector is: Overwrit...Show more |
2Fedoraproject Offis2Dcmtk FedoraJun 17, 2026 Jul 22, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 OFFIS.de DCMTK 3.6.3 and below is affected by: Buffer Overflow. The impact is: Possible code execution and confirmed Denial of Service. The component is: DcmRLEDecoder::decompress() (file dcrledec.h, line 122). The attac...Show more |
The Htek UC902 VoIP phone web management interface contains several buffer overflow vulnerabilities in the firmware version 2.0.4.4.46, which allow an attacker to crash the device (DoS) without authentication or execute...Show more |
Juniper juniper/libslax libslax latest version (as of commit 084ddf6ab4a55b59dfa9a53f9c5f14d192c4f8e5 Commits on Sep 1, 2018) is affected by: Buffer Overflow. The impact is: remote dos. The component is: slaxlexer.c:601(...Show more |
1Qualcomm 31Mdm9150 Firmware Mdm9650 FirmwareMsm8996au Firmware+28 moreJun 17, 2026 Jul 22, 2019 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 Out of bound access can occur due to buffer copy without checking size of input received from WLAN firmware in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Mu...Show more |
1Qualcomm 42Mdm9150 Firmware Mdm9206 FirmwareMdm9607 Firmware+39 moreJun 17, 2026 Jul 22, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Improper validation for inputs received from firmware can lead to an out of bound write issue in video driver. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile...Show more |
1Qualcomm 38Mdm9150 Firmware Mdm9607 FirmwareMdm9650 Firmware+35 moreJun 17, 2026 Jul 22, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Shared memory gets updated with invalid data and may lead to access beyond the allocated memory. in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdra...Show more |
1Qualcomm 56Ipq8074 Firmware Mdm9150 FirmwareMdm9206 Firmware+53 moreNov 21, 2024 Jul 22, 2019 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 Lack of check to prevent the buffer length taking negative values can lead to stack overflow. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Indu...Show more |
An issue was discovered in Foxit PhantomPDF before 8.3.10. The application could be exposed to Memory Corruption due to the use of an invalid pointer copy, resulting from a destructed string object. |
An issue was discovered in Foxit PhantomPDF before 8.3.10. The application could be exposed to Heap Corruption due to data desynchrony when adding AcroForm. |
dpic 2019.06.20 has a Stack-based Buffer Overflow in the wfloat() function in main.c. |
6Canonical DebianFedoraproject+3 more13Debian Linux Enterprise LinuxEnterprise Linux Desktop+10 moreJun 17, 2026 Jul 19, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Gnome Pango 1.42 and later is affected by: Buffer Overflow. The impact is: The heap based buffer overflow can be used to get code execution. The component is: function name: pango_log2vis_get_embedding_levels, assignment...Show more |
The set_ipv6() function in zscan_rfc1035.rl in gdnsd before 2.4.3 and 3.x before 3.2.1 has a stack-based buffer overflow via a long and malformed IPv6 address in zone data. |
The set_ipv4() function in zscan_rfc1035.rl in gdnsd 3.x before 3.2.1 has a stack-based buffer overflow via a long and malformed IPv4 address in zone data. |
1Facebook 1Hiphop Virtual Machine Jun 17, 2026 Jul 18, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Call to the scrypt_enc() function in HHVM can lead to heap corruption by using specifically crafted parameters (N, r and p). This happens if the parameters are configurable by an attacker for instance by providing the ou...Show more |