← Back
CWE-787

14,829 CVEs • Abstraction: Base • Likelihood of Exploit: High

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

JSON object

Loading...

CVEs (14,829)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Tenda
1Ac9 Firmware
Jun 17, 2026
Aug 30, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda AC9 V3.0 V15.03.06.42_multi was discovered to contain a stack overflow via parameter firewallEn at url /goform/SetFirewallCfg.
1Tenda
3Ac5 Firmware
Ac7 FirmwareAc9 Firmware
Jun 17, 2026
Aug 30, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda AC7 V1.0 V15.03.06.44, Tenda AC9 V3.0 V15.03.06.42_multi, and Tenda AC5 V1.0RTL_V15.03.06.28 were discovered to contain a stack overflow via parameter page at url /goform/NatStaticSetting.
1Tenda
1Ac7 Firmware
Jun 17, 2026
Aug 30, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda AC7 V1.0 V15.03.06.44 was discovered to contain a stack overflow via parameter timeZone at url /goform/SetSysTimeCfg.
1Tenda
2Ac5 Firmware
Ac7 Firmware
Jun 17, 2026
Aug 30, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda AC7 V1.0 V15.03.06.44 and Tenda AC5 V1.0RTL_V15.03.06.28 were discovered to contain a stack overflow via parameter entrys and mitInterface at url /goform/addressNat.
1Tenda
3Ac5 Firmware
Ac7 FirmwareAc9 Firmware
Jun 17, 2026
Aug 30, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda AC7 V1.0 V15.03.06.44, Tenda AC9 V3.0 V15.03.06.42_multi, and Tenda AC5 V1.0RTL_V15.03.06.28 were discovered to contain a stack overflow via parameter list at url /goform/SetIpMacBind.
1Tenda
1Ac7 Firmware
Jun 17, 2026
Aug 30, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda AC7 V1.0 V15.03.06.44 was discovered to contain a stack overflow via parameter security_5g at url /goform/WifiBasicSet.
1Tenda
1Ac9 Firmware
Jun 17, 2026
Aug 30, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda AC9 V3.0 V15.03.06.42_multi was discovered to contain a stack overflow via parameter wpapsk_crypto at url /goform/WifiExtraSet.
1Tenda
2Ac5 Firmware
Ac9 Firmware
Jun 17, 2026
Aug 30, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda AC9 V3.0 V15.03.06.42_multi and Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 were discovered to contain a stack overflow via parameter list at url /goform/SetStaticRouteCfg.
1Tenda
2Ac7 Firmware
Ac9 Firmware
Jun 17, 2026
Aug 30, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda AC7 V1.0 V15.03.06.44 and Tenda AC9 V3.0 V15.03.06.42_multi were discovered to contain a stack overflow via parameter ssid at url /goform/fast_setting_wifi_set.
1Hpe
1Arubaos Switch
Jun 17, 2026
Aug 29, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
A memory corruption vulnerability in ArubaOS-Switch could lead to unauthenticated remote code execution by receiving specially crafted packets. Successful exploitation of this vulnerability results in the ability to exec...Show more
A memory corruption vulnerability in ArubaOS-Switch could lead to unauthenticated remote code execution by receiving specially crafted packets. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.Show less
1Zbar Project
1Zbar
Jun 17, 2026
Aug 29, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
A stack-based buffer overflow vulnerability exists in the lookup_sequence function of ZBar 0.23.90. Specially crafted QR codes may lead to information disclosure and/or arbitrary code execution. To trigger this vulnerabi...Show more
A stack-based buffer overflow vulnerability exists in the lookup_sequence function of ZBar 0.23.90. Specially crafted QR codes may lead to information disclosure and/or arbitrary code execution. To trigger this vulnerability, an attacker can digitally input the malicious QR code, or prepare it to be physically scanned by the vulnerable scanner.Show less
1Zbar Project
1Zbar
Jun 17, 2026
Aug 29, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
A heap-based buffer overflow exists in the qr_reader_match_centers function of ZBar 0.23.90. Specially crafted QR codes may lead to information disclosure and/or arbitrary code execution. To trigger this vulnerability, a...Show more
A heap-based buffer overflow exists in the qr_reader_match_centers function of ZBar 0.23.90. Specially crafted QR codes may lead to information disclosure and/or arbitrary code execution. To trigger this vulnerability, an attacker can digitally input the malicious QR code, or prepare it to be physically scanned by the vulnerable scanner.Show less
1Virustotal
1Yara
Jun 17, 2026
Aug 28, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
Buffer Overflow vulnerability in VirusTotal yara v.4.3.2 allows a remote attacker to execute arbtirary code via the yr_execute_cod function in the exe.c component.
1Libming
1Libming
Jun 17, 2026
Aug 28, 2023
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Buffer Overflow vulnerability in Libming Libming v.0.4.8 allows a remote attacker to cause a denial of service via a crafted .swf file to the makeswf function.
1Tenda
1Ac6 Firmware
Jun 17, 2026
Aug 28, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function sub_90998.
1Tenda
1Ax3 Firmware
Jun 17, 2026
Aug 25, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Tenda AX3 v16.03.12.11 has a stack buffer overflow vulnerability detected at function form_fast_setting_wifi_set. This vulnerability allows attackers to cause a Denial of Service (DoS) via the ssid parameter.
1Tenda
1Ac23 Firmware
Jun 17, 2026
Aug 25, 2023
N/A· v4
6.5 MEDIUM· v3
N/A· v2
The get_parentControl_list_Info function does not verify the parameters entered by the user, causing a post-authentication heap overflow vulnerability in Tenda AC23 v16.03.07.45_cn
1Tenda
1Ac23 Firmware
Jun 17, 2026
Aug 25, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda AC23 Vv16.03.07.45_cn is vulnerable to Buffer Overflow via sub_450A4C function.
1Tenda
1Ac10v4 Firmware
Jun 17, 2026
Aug 24, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter macFilterType and parameter deviceList at /goform/setMacFilterCfg.
1Tenda
1Ac10v4 Firmware
Jun 17, 2026
Aug 24, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter list and bindnum at /goform/SetIpMacBind.