← Back
CWE-787

14,765 CVEs • Abstraction: Base • Likelihood of Exploit: High

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

JSON object

Loading...

CVEs (14,765)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
2Jungo
Mitsubishielectric
35Cpu Module Logging Configuration Tool
Cw ConfiguratorData Transfer+32 more
Jun 17, 2026
Jul 2, 2024
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Out-of-Bounds Write vulnerability in Jungo WinDriver before 12.1.0 allows local attackers to cause a Windows blue screen error and Denial of Service (DoS).
1Samsung
1Android
Jun 17, 2026
Jul 2, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Improper input validation in copying data to buffer cache in libsaped prior to SMR Jul-2024 Release 1 allows local attackers to write out-of-bounds memory.
1Samsung
1Android
Jun 17, 2026
Jul 2, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Improper input validation in libmediaextractorservice.so prior to SMR Jul-2024 Release 1 allows local attackers to trigger memory corruption.
1Openatom
1Openharmony
Jun 17, 2026
Jul 2, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
in OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through out-of-bounds write.
1Openatom
1Openharmony
Jun 17, 2026
Jul 2, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
in OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through out-of-bounds write.
1Openatom
1Openharmony
Jun 17, 2026
Jul 2, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
in OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through out-of-bounds write.
1Openatom
1Openharmony
Jun 17, 2026
Jul 2, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
in OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through out-of-bounds read and write.
1Qualcomm
2229205 Lte Modem Firmware
Aqt1000 FirmwareAr8031 Firmware+219 more
Jun 17, 2026
Jul 1, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption when an invoke call and a TEE call are bound for the same trusted application.
1Qualcomm
42Aqt1000 Firmware
Fastconnect 6200 FirmwareFastconnect 6700 Firmware+39 more
Jun 17, 2026
Jul 1, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption while processing IOCTL handler in FastRPC.
1Google
1Android
Jun 17, 2026
Jul 1, 2024
N/A· v4
6.2 MEDIUM· v3
N/A· v2
In faceid servive, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed
1Google
1Android
Jun 17, 2026
Jul 1, 2024
N/A· v4
6.2 MEDIUM· v3
N/A· v2
In faceid servive, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed
1Google
1Android
Jun 17, 2026
Jul 1, 2024
N/A· v4
4.4 MEDIUM· v3
N/A· v2
In trusty service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
1Google
1Android
Jun 17, 2026
Jul 1, 2024
N/A· v4
4.4 MEDIUM· v3
N/A· v2
In trusty service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
4Google
LinuxfoundationOpenwrt+1 more
4Android
OpenwrtRdk B+1 more
Jun 17, 2026
Jul 1, 2024
N/A· v4
6.7 MEDIUM· v3
N/A· v2
In gnss service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for expl...Show more
In gnss service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08719602; Issue ID: MSV-1412.Show less
1Google
1Android
Jun 17, 2026
Jul 1, 2024
N/A· v4
6.7 MEDIUM· v3
N/A· v2
In gnss service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for expl...Show more
In gnss service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08044040; Issue ID: MSV-1491.Show less
-
-
Jun 17, 2026
Jun 29, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
Factorio before 1.1.101 allows a crafted server to execute arbitrary code on clients via a custom map that leverages the ability of certain Lua base module functions to execute bytecode and generate fake objects.
-
-
Jun 17, 2026
Jun 28, 2024
N/A· v4
6.5 MEDIUM· v3
N/A· v2
ZKsync Era is a layer 2 rollup that uses zero-knowledge proofs to scale Ethereum. There is possible invalid stack access due to the addresses used to access the stack not properly being converted to cells. This issue has...Show more
ZKsync Era is a layer 2 rollup that uses zero-knowledge proofs to scale Ethereum. There is possible invalid stack access due to the addresses used to access the stack not properly being converted to cells. This issue has been patched in version 1.5.0.Show less
1Tendacn
1A301 Firmware
Jun 17, 2026
Jun 28, 2024
7.1 HIGH· v4
9.8 CRITICAL· v3
6.8 MEDIUM· v2
A vulnerability, which was classified as critical, has been found in Tenda A301 15.13.08.12. Affected by this issue is the function formWifiBasicSet of the file /goform/SetOnlineDevName. The manipulation of the argument...Show more
A vulnerability, which was classified as critical, has been found in Tenda A301 15.13.08.12. Affected by this issue is the function formWifiBasicSet of the file /goform/SetOnlineDevName. The manipulation of the argument devName leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-269948. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.Show less
1Tendacn
1A301 Firmware
Jun 17, 2026
Jun 28, 2024
7.1 HIGH· v4
9.8 CRITICAL· v3
6.8 MEDIUM· v2
A vulnerability classified as critical was found in Tenda A301 15.13.08.12. Affected by this vulnerability is the function fromSetWirelessRepeat of the file /goform/SetOnlineDevName. The manipulation of the argument devN...Show more
A vulnerability classified as critical was found in Tenda A301 15.13.08.12. Affected by this vulnerability is the function fromSetWirelessRepeat of the file /goform/SetOnlineDevName. The manipulation of the argument devName leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-269947. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.Show less
1Dell
1Data Domain Operating System
Jun 17, 2026
Jun 26, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
Dell PowerProtect DD, version(s) 8.0, 7.13.1.0, 7.10.1.30, 7.7.5.40, contain(s) an Out-of-bounds Write vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to...Show more
Dell PowerProtect DD, version(s) 8.0, 7.13.1.0, 7.10.1.30, 7.7.5.40, contain(s) an Out-of-bounds Write vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution.Show less