← Back
CWE-787

14,730 CVEs • Abstraction: Base • Likelihood of Exploit: High

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

JSON object

Loading...

CVEs (14,730)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Microsoft
2Chakracore
Edge
Jun 17, 2026
Sep 13, 2018
N/A· v4
7.5 HIGH· v3
7.6 HIGH· v2
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. Thi...Show more
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8354, CVE-2018-8391, CVE-2018-8457, CVE-2018-8459.Show less
1Microsoft
1Internet Explorer
Jun 17, 2026
Sep 13, 2018
N/A· v4
7.5 HIGH· v3
7.6 HIGH· v2
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11,...Show more
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from CVE-2018-8461.Show less
1Microsoft
1Chakracore
Jun 17, 2026
Sep 13, 2018
N/A· v4
7.5 HIGH· v3
7.6 HIGH· v2
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore. This CVE ID is uniq...Show more
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore. This CVE ID is unique from CVE-2018-8354, CVE-2018-8456, CVE-2018-8457, CVE-2018-8459.Show less
1Microsoft
2Chakracore
Edge
Jun 17, 2026
Sep 13, 2018
N/A· v4
7.5 HIGH· v3
7.6 HIGH· v2
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft...Show more
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8465, CVE-2018-8466, CVE-2018-8467.Show less
1Microsoft
2Chakracore
Edge
Jun 17, 2026
Sep 13, 2018
N/A· v4
7.5 HIGH· v3
7.6 HIGH· v2
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCo...Show more
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8391, CVE-2018-8456, CVE-2018-8457, CVE-2018-8459.Show less
2Debian
Nothings
2Debian Linux
Stb Image.h
Nov 21, 2024
Sep 12, 2018
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
stb stb_image.h 2.19, as used in catimg, Emscripten, and other products, has a heap-based buffer overflow in the stbi__out_gif_code function.
1Radare
1Radare2
Nov 21, 2024
Sep 12, 2018
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
In radare2 before 2.9.0, a heap overflow vulnerability exists in the read_module_referenced_functions function in libr/anal/flirt.c via a crafted flirt signature file.
1Kakaocorp
1Potplayer
Nov 21, 2024
Sep 10, 2018
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A heap-based buffer overflow in PotPlayerMini.exe in PotPlayer 1.7.8556 allows remote attackers to execute arbitrary code via a .wav file with large BytesPerSec and SamplesPerSec values, and a small Data_Chunk_Size value...Show more
A heap-based buffer overflow in PotPlayerMini.exe in PotPlayer 1.7.8556 allows remote attackers to execute arbitrary code via a .wav file with large BytesPerSec and SamplesPerSec values, and a small Data_Chunk_Size value.Show less
1Contiki Ng
1Contiki Ng.
Nov 21, 2024
Sep 7, 2018
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
An issue was discovered in Contiki-NG through 4.1. There is a stack-based buffer overflow in next_string in os/storage/antelope/aql-lexer.c while parsing AQL (parsing next string).
1Contiki Ng
1Contiki Ng.
Nov 21, 2024
Sep 7, 2018
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
An issue was discovered in Contiki-NG through 4.1. There is a stack-based buffer overflow in parse_relations in os/storage/antelope/aql-parser.c while parsing AQL (storage of relations).
3Canonical
DebianImagemagick
3Debian Linux
ImagemagickUbuntu Linux
Nov 21, 2024
Sep 6, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
The function InsertRow in coders/cut.c in ImageMagick 7.0.7-37 allows remote attackers to cause a denial of service via a crafted image file due to an out-of-bounds write.
2Redhat
Starcounter Jack
2Json Patch
Openshift Container Platform
Nov 21, 2024
Sep 6, 2018
N/A· v4
7.7 HIGH· v3
4.0 MEDIUM· v2
An out of bound write can occur when patching an Openshift object using the 'oc patch' functionality in OpenShift Container Platform before 3.7. An attacker can use this flaw to cause a denial of service attack on the Op...Show more
An out of bound write can occur when patching an Openshift object using the 'oc patch' functionality in OpenShift Container Platform before 3.7. An attacker can use this flaw to cause a denial of service attack on the Openshift master api service which provides cluster management.Show less
4Artifex
CanonicalDebian+1 more
8Debian Linux
Enterprise LinuxEnterprise Linux Desktop+5 more
Nov 21, 2024
Sep 5, 2018
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use insufficient interpreter stack-size checking during error handling to crash the interpreter.
1Google
1Android
Nov 21, 2024
Sep 4, 2018
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
In Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel while trying to find out total number of partition via a non zero check, there could be possibility where...Show more
In Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel while trying to find out total number of partition via a non zero check, there could be possibility where the 'TotalPart' could cross 'GptHeader->MaxPtCnt' and which could result in OOB write in patching GPT.Show less
4Debian
GlusterOpensuse+1 more
5Debian Linux
Enterprise Linux ServerGlusterfs+2 more
Nov 21, 2024
Sep 4, 2018
N/A· v4
8.8 HIGH· v3
6.5 MEDIUM· v2
It was found that glusterfs server is vulnerable to multiple stack based buffer overflows due to functions in server-rpc-fopc.c allocating fixed size buffers using 'alloca(3)'. An authenticated attacker could exploit thi...Show more
It was found that glusterfs server is vulnerable to multiple stack based buffer overflows due to functions in server-rpc-fopc.c allocating fixed size buffers using 'alloca(3)'. An authenticated attacker could exploit this by mounting a gluster volume and sending a string longer that the fixed buffer size to cause crash or potential code execution.Show less
4Canonical
DebianLittlecms+1 more
6Debian Linux
Enterprise Linux DesktopEnterprise Linux Server+3 more
Nov 21, 2024
Sep 4, 2018
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer overflow in the SetData function via a crafted file in the second...Show more
Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile.Show less
1Uclouvain
1Openjpeg
Nov 21, 2024
Sep 3, 2018
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
An issue was discovered in OpenJPEG 2.3.0. A heap-based buffer overflow was discovered in the function t2_encode_packet in lib/openmj2/t2.c. The vulnerability causes an out-of-bounds write, which may lead to remote denia...Show more
An issue was discovered in OpenJPEG 2.3.0. A heap-based buffer overflow was discovered in the function t2_encode_packet in lib/openmj2/t2.c. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service or possibly unspecified other impact.Show less
1Uclouvain
1Openjpeg
Nov 21, 2024
Sep 3, 2018
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
An issue was discovered in OpenJPEG 2.3.0. Missing checks for header_info.height and header_info.width in the function pnmtoimage in bin/jpwl/convert.c can lead to a heap-based buffer overflow.
2Debian
Libtiff
2Debian Linux
Libtiff
Nov 21, 2024
Sep 2, 2018
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
newoffsets handling in ChopUpSingleUncompressedStrip in tif_dirread.c in LibTIFF 4.0.9 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified...Show more
newoffsets handling in ChopUpSingleUncompressedStrip in tif_dirread.c in LibTIFF 4.0.9 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted TIFF file, as demonstrated by tiff2pdf. This is a different vulnerability than CVE-2018-15209.Show less
3Canonical
DebianLinux
3Debian Linux
Linux KernelUbuntu Linux
Nov 21, 2024
Aug 31, 2018
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
An issue was discovered in yurex_read in drivers/usb/misc/yurex.c in the Linux kernel before 4.17.7. Local attackers could use user access read/writes with incorrect bounds checking in the yurex USB driver to crash the k...Show more
An issue was discovered in yurex_read in drivers/usb/misc/yurex.c in the Linux kernel before 4.17.7. Local attackers could use user access read/writes with incorrect bounds checking in the yurex USB driver to crash the kernel or potentially escalate privileges.Show less