← Back
CWE-787

15,500 CVEs • Abstraction: Base • Likelihood of Exploit: High

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

JSON object

Loading...

CVEs (15,500)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-33032
1Qualcomm
1179205 Lte Modem Firmware
Aqt1000 FirmwareAr8031 Firmware+114 more
Jun 17, 2026
Jan 2, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption in TZ Secure OS while requesting a memory allocation from TA region.
CVE-2023-33030
1Qualcomm
293315 5g Iot Modem Firmware
9205 Lte Modem Firmware9206 Lte Modem Firmware+290 more
Jun 17, 2026
Jan 2, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption in HLOS while running playready use-case.
CVE-2023-32891
2Google
Mediatek
5Android
Lr13Nr15+2 more
Jun 17, 2026
Jan 2, 2024
N/A· v4
6.7 MEDIUM· v3
N/A· v2
In bluetooth service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for...Show more
In bluetooth service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07933038; Issue ID: MSV-559.Show less
CVE-2023-32889
1Google
1Android
Jun 17, 2026
Jan 2, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
In Modem IMS Call UA, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for...Show more
In Modem IMS Call UA, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01161825; Issue ID: MOLY01161825 (MSV-895).Show less
CVE-2023-32888
1Mediatek
3Nr15
Nr16Nr17
Jun 17, 2026
Jan 2, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
In Modem IMS Call UA, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for...Show more
In Modem IMS Call UA, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01161830; Issue ID: MOLY01161830 (MSV-894).Show less
CVE-2023-32887
1Mediatek
3Nr15
Nr16Nr17
Jun 17, 2026
Jan 2, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
In Modem IMS Stack, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitat...Show more
In Modem IMS Stack, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01161837; Issue ID: MOLY01161837 (MSV-892).Show less
CVE-2023-32886
1Mediatek
3Nr15
Nr16Nr17
Jun 17, 2026
Jan 2, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
In Modem IMS SMS UA, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for e...Show more
In Modem IMS SMS UA, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00730807; Issue ID: MOLY00730807.Show less
CVE-2023-32883
1Google
1Android
Jun 17, 2026
Jan 2, 2024
N/A· v4
6.7 MEDIUM· v3
N/A· v2
In Engineer Mode, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploi...Show more
In Engineer Mode, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08282249; Issue ID: ALPS08282249.Show less
CVE-2023-32882
1Google
1Android
Jun 17, 2026
Jan 2, 2024
N/A· v4
6.7 MEDIUM· v3
N/A· v2
In battery, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation....Show more
In battery, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08308070; Issue ID: ALPS08308616.Show less
CVE-2023-32879
1Google
1Android
Jun 17, 2026
Jan 2, 2024
N/A· v4
6.7 MEDIUM· v3
N/A· v2
In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...Show more
In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08308070; Issue ID: ALPS08308064.Show less
CVE-2023-32877
1Google
1Android
Jun 17, 2026
Jan 2, 2024
N/A· v4
6.7 MEDIUM· v3
N/A· v2
In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...Show more
In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08308070; Issue ID: ALPS08308070.Show less
CVE-2023-32874
1Mediatek
4Lr13
Nr15Nr16+1 more
Jun 17, 2026
Jan 2, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
In Modem IMS Stack, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for explo...Show more
In Modem IMS Stack, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01161803; Issue ID: MOLY01161803 (MSV-893).Show less
CVE-2023-32872
1Google
1Android
Jun 17, 2026
Jan 2, 2024
N/A· v4
6.7 MEDIUM· v3
N/A· v2
In keyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitat...Show more
In keyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08308607; Issue ID: ALPS08308607.Show less
CVE-2021-46901
1Cetic
1Cetic 6lbr
Jun 17, 2026
Dec 31, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
examples/6lbr/apps/6lbr-webserver/httpd.c in CETIC-6LBR (aka 6lbr) 1.5.0 has a strcat stack-based buffer overflow via a request for a long URL over a 6LoWPAN network.
CVE-2023-52277
1Royalapps
1Royaltsx
Jun 17, 2026
Dec 31, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Royal RoyalTSX before 6.0.2.1 allows attackers to cause a denial of service (Heap Memory Corruption and application crash) or possibly have unspecified other impact via a long hostname in an RTSZ file, if the victim clic...Show more
Royal RoyalTSX before 6.0.2.1 allows attackers to cause a denial of service (Heap Memory Corruption and application crash) or possibly have unspecified other impact via a long hostname in an RTSZ file, if the victim clicks on Test Connection. This occurs during SecureGatewayHost object processing in RAPortCheck.createNWConnection.Show less
CVE-2023-51136
1Totolink
1X2000r Firmware
Jun 17, 2026
Dec 30, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formRebootSchedule.
CVE-2023-51135
1Totolink
1X2000r Firmware
Jun 17, 2026
Dec 30, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formPasswordSetup.
CVE-2023-51133
1Totolink
1X2000r Firmware
Jun 17, 2026
Dec 30, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formRoute.
CVE-2023-50572
1Jline
1Jline
Oct 7, 2026
Dec 29, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
An issue in the component GroovyEngine.execute of jline-groovy v3.24.1 allows attackers to cause an OOM (OutofMemory) error.
CVE-2023-7158
1Micropython
1Micropython
Jun 17, 2026
Dec 29, 2023
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
A vulnerability was found in MicroPython up to 1.21.0. It has been classified as critical. Affected is the function slice_indices of the file objslice.c. The manipulation leads to heap-based buffer overflow. It is possib...Show more
A vulnerability was found in MicroPython up to 1.21.0. It has been classified as critical. Affected is the function slice_indices of the file objslice.c. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.22.0 is able to address this issue. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-249180.Show less