← Back
CWE-787

15,360 CVEs • Abstraction: Base • Likelihood of Exploit: High

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

JSON object

Loading...

CVEs (15,360)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Dlink
1Dir X4860 Firmware
Jun 17, 2026
Sep 16, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
The web service of certain models of D-Link wireless routers contains a Stack-based Buffer Overflow vulnerability, which allows unauthenticated remote attackers to exploit this vulnerability to execute arbitrary code on...Show more
The web service of certain models of D-Link wireless routers contains a Stack-based Buffer Overflow vulnerability, which allows unauthenticated remote attackers to exploit this vulnerability to execute arbitrary code on the device.Show less
1Zephyrproject
1Zephyr
Jun 17, 2026
Sep 13, 2024
N/A· v4
6.5 MEDIUM· v3
N/A· v2
BT: HCI: adv_ext_report Improper discarding in adv_ext_report
1Google
1Android
Jun 17, 2026
Sep 13, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
In ppmp_protect_mfcfw_buf of code/drm_fw.c, there is a possible corrupt memory due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User inter...Show more
In ppmp_protect_mfcfw_buf of code/drm_fw.c, there is a possible corrupt memory due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Show less
1Google
1Android
Jun 17, 2026
Sep 13, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
In ppmp_protect_mfcfw_buf of code/drm_fw.c, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User in...Show more
In ppmp_protect_mfcfw_buf of code/drm_fw.c, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Show less
1Google
1Android
Jun 17, 2026
Sep 13, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
In ppmp_unprotect_buf of drm/code/drm_fw.c, there is a possible memory corruption due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User in...Show more
In ppmp_unprotect_buf of drm/code/drm_fw.c, there is a possible memory corruption due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Show less
1Zephyrproject
1Zephyr
Jun 17, 2026
Sep 13, 2024
N/A· v4
6.5 MEDIUM· v3
N/A· v2
BT: Classic: SDP OOB access in get_att_search_list
1Zephyrproject
1Zephyr
Jun 17, 2026
Sep 13, 2024
N/A· v4
6.5 MEDIUM· v3
N/A· v2
BT: Unchecked user input in bap_broadcast_assistant
1Linux
1Linux Kernel
Aug 4, 2026
Sep 13, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
In the Linux kernel, the following vulnerability has been resolved: perf/aux: Fix AUX buffer serialization Ole reported that event->mmap_mutex is strictly insufficient to serialize the AUX buffer, add a per RB mutex to...Show more
In the Linux kernel, the following vulnerability has been resolved: perf/aux: Fix AUX buffer serialization Ole reported that event->mmap_mutex is strictly insufficient to serialize the AUX buffer, add a per RB mutex to fully serialize it. Note that in the lock order comment the perf_event::mmap_mutex order was already wrong, that is, it nesting under mmap_lock is not new with this patch.Show less
1Tenda
1O6 Firmware
Jun 17, 2026
Sep 13, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda O6 V3.0 firmware V1.0.0.7(2054) contains a stack overflow vulnerability in the formexeCommand function.
1Tenda
1Fh451 Firmware
Jun 17, 2026
Sep 13, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Tenda FH451 v1.0.0.9 has a stack overflow vulnerability in the fromDhcpListClient function.
1Tenda
1Fh451 Firmware
Jun 17, 2026
Sep 13, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda FH451 v1.0.0.9 has a stack overflow vulnerability located in the RouteStatic function.
1Tenda
1Ch22 Firmware
Jun 17, 2026
Sep 13, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda CH22 V1.0.0.6(468) has a stack overflow vulnerability located in the frmL7PlotForm function.
1Tenda
1Ch22 Firmware
Jun 17, 2026
Sep 13, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
CH22 V1.0.0.6(468) has a stack overflow vulnerability located in the fromqossetting function.
1Adobe
1Photoshop
Jun 17, 2026
Sep 13, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Photoshop Desktop versions 24.7.4, 25.11 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requi...Show more
Photoshop Desktop versions 24.7.4, 25.11 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
1Adobe
1Photoshop
Jun 17, 2026
Sep 13, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Photoshop Desktop versions 24.7.4, 25.11 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requi...Show more
Photoshop Desktop versions 24.7.4, 25.11 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
1Adobe
1Photoshop
Jun 17, 2026
Sep 13, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Photoshop Desktop versions 24.7.4, 25.11 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requi...Show more
Photoshop Desktop versions 24.7.4, 25.11 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
1Adobe
1After Effects
Jun 17, 2026
Sep 13, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
After Effects versions 23.6.6, 24.5 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires u...Show more
After Effects versions 23.6.6, 24.5 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
1Adobe
1Premiere Pro
Jun 17, 2026
Sep 13, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Premiere Pro versions 24.5, 23.6.8 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires us...Show more
Premiere Pro versions 24.5, 23.6.8 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
1Adobe
1After Effects
Jun 17, 2026
Sep 13, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
After Effects versions 23.6.6, 24.5 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires u...Show more
After Effects versions 23.6.6, 24.5 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
1Adobe
1Media Encoder
Jun 17, 2026
Sep 13, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Media Encoder versions 24.5, 23.6.8 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires u...Show more
Media Encoder versions 24.5, 23.6.8 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less