← Back
CWE-787

14,824 CVEs • Abstraction: Base • Likelihood of Exploit: High

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

JSON object

Loading...

CVEs (14,824)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Asrmicro
2Asr1803 Firmware
Asr1806 Firmware
Jun 17, 2026
Nov 30, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Memory Corruption in SIM management while USIMPhase2init
1Asrmicro
2Asr1803 Firmware
Asr1806 Firmware
Jun 17, 2026
Nov 30, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory Corruption in IMS while calling VoLTE Streamingmedia Interface
1Openlinksw
1Virtuoso
Jun 17, 2026
Nov 29, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
A stack overflow in openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.
1Tenda
1Ac10 Firmware
Jun 17, 2026
Nov 29, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the shareSpeed parameter in the function fromSetWifiGuestBasic.
1Tenda
1Ac10 Firmware
Jun 17, 2026
Nov 29, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the time parameter in the function compare_parentcontrol_time.
1Tenda
1Ac10 Firmware
Jun 17, 2026
Nov 29, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the urls parameter in the function get_parentControl_list_Info.
1Tenda
1Ac10 Firmware
Jun 17, 2026
Nov 29, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the firewallEn parameter in the function SetFirewallCfg.
1Tenda
1Ac10 Firmware
Jun 17, 2026
Nov 29, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the src parameter in the function sub_47D878.
1Tenda
1Ac10 Firmware
Jun 17, 2026
Nov 29, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the list parameter in the function sub_49E098.
1Busybox
1Busybox
Jun 17, 2026
Nov 27, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.
1Tenda
1Ax1803 Firmware
Jun 17, 2026
Nov 27, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Stack Overflow vulnerability in Tenda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the ssid parameter in the function form_fast_setting_wifi_set.
1Tenda
1Ax1803 Firmware
Jun 17, 2026
Nov 27, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Tenda AX1803 v1.0.0.1 contains a stack overflow via the devName parameter in the function formSetDeviceName.
1Tenda
1Ax1803 Firmware
Jun 17, 2026
Nov 27, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Heap Overflow vulnerability in Tenda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the schedStartTime parameter or the schedEndTime parameter in the function setSchedWifi.
1Tenda
1Ax1803 Firmware
Jun 17, 2026
Nov 27, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Stack Overflow vulnerability in Tenda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the devName parameter in the function formAddMacfilterRule.
1Tenda
1Ax1803 Firmware
Jun 17, 2026
Nov 27, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Buffer Overflow vulnerability in Tenda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the wpapsk_crypto parameter in the function fromSetWirelessRepeat.
1Clickhouse
1Clickhouse
Jun 17, 2026
Nov 23, 2023
N/A· v4
6.5 MEDIUM· v3
N/A· v2
An issue was discovered in ClickHouse before 22.9.1.2603. An authenticated user (with the ability to load data) could cause a heap buffer overflow and crash the server by inserting a malformed CapnProto object. The fixed...Show more
An issue was discovered in ClickHouse before 22.9.1.2603. An authenticated user (with the ability to load data) could cause a heap buffer overflow and crash the server by inserting a malformed CapnProto object. The fixed versions are 22.9.1.2603, 22.8.2.11, 22.7.4.16, 22.6.6.16, and 22.3.12.19.Show less
1Clickhouse
1Clickhouse
Jun 17, 2026
Nov 23, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
An issue was discovered in ClickHouse before 22.9.1.2603. An attacker could send a crafted HTTP request to the HTTP Endpoint (usually listening on port 8123 by default), causing a heap-based buffer overflow that crashes...Show more
An issue was discovered in ClickHouse before 22.9.1.2603. An attacker could send a crafted HTTP request to the HTTP Endpoint (usually listening on port 8123 by default), causing a heap-based buffer overflow that crashes the process. This does not require authentication. The fixed versions are 22.9.1.2603, 22.8.2.11, 22.7.4.16, 22.6.6.16, and 22.3.12.19.Show less
1Autodesk
10Autocad
Autocad Advance SteelAutocad Architecture+7 more
Jun 17, 2026
Nov 23, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
A maliciously crafted PRT file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause a Heap-Based Buffer Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data...Show more
A maliciously crafted PRT file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause a Heap-Based Buffer Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process. Show less
1Autodesk
10Autocad
Autocad Advance SteelAutocad Architecture+7 more
Jun 17, 2026
Nov 23, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
A maliciously crafted PRT file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause an Out-Of-Bounds Write. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or e...Show more
A maliciously crafted PRT file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause an Out-Of-Bounds Write. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process. Show less
1Autodesk
10Autocad
Autocad Advance SteelAutocad Architecture+7 more
Jun 17, 2026
Nov 23, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
A maliciously crafted CATPART file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause an Out-Of-Bounds Write. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data,...Show more
A maliciously crafted CATPART file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause an Out-Of-Bounds Write. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process. Show less