← Back
CWE-787

14,830 CVEs • Abstraction: Base • Likelihood of Exploit: High

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

JSON object

Loading...

CVEs (14,830)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
2Busybox
Debian
2Busybox
Debian Linux
Jul 14, 2026
Aug 22, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can be executed from command to arbitrary code execution.
17 Zip
1P7zip
Jun 17, 2026
Aug 22, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
p7zip 16.02 was discovered to contain a heap-buffer-overflow vulnerability via the function NArchive::NZip::CInArchive::FindCd(bool) at CPP/7zip/Archive/Zip/ZipIn.cpp. NOTE: the Supplier has found that this is not a buff...Show more
p7zip 16.02 was discovered to contain a heap-buffer-overflow vulnerability via the function NArchive::NZip::CInArchive::FindCd(bool) at CPP/7zip/Archive/Zip/ZipIn.cpp. NOTE: the Supplier has found that this is not a buffer overflow; at most an out-of-bounds read can occur.Show less
1Gnu
1Binutils
Jun 17, 2026
Aug 22, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Heap buffer overflow vulnerability in binutils readelf before 2.40 via function display_debug_section in file readelf.c.
1Gnu
1Binutils
Jun 17, 2026
Aug 22, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Heap buffer overflow vulnerability in binutils readelf before 2.40 via function find_section_in_set in file readelf.c.
1Sass Lang
1Libsass
Jun 17, 2026
Aug 22, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Stack overflow vulnerability in ast_selectors.cpp: in function Sass::ComplexSelector::has_placeholder in libsass:3.6.5-8-g210218, which can be exploited by attackers to cause a denial of service (DoS).
1Sass Lang
2Libsass
Sassc
Jun 17, 2026
Aug 22, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Stack overflow vulnerability in ast_selectors.cpp in function Sass::CompoundSelector::has_real_parent_ref in libsass:3.6.5-8-g210218, which can be exploited by attackers to causea denial of service (DoS). Also affects th...Show more
Stack overflow vulnerability in ast_selectors.cpp in function Sass::CompoundSelector::has_real_parent_ref in libsass:3.6.5-8-g210218, which can be exploited by attackers to causea denial of service (DoS). Also affects the command line driver for libsass, sassc 3.6.2.Show less
1Etcd
1Etcd
Jun 17, 2026
Aug 22, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Etcd v3.5.4 allows remote attackers to cause a denial of service via function PageWriter.write in pagewriter.go. NOTE: the vendor's position is that this is not a vulnerability.
1Radare
1Radare2
Jun 17, 2026
Aug 22, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
A heap buffer overflow in r_read_le32 function in radare25.4.2 and 5.4.0.
1Radare
1Radare2
Jun 17, 2026
Aug 22, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
A heap buffer overflow in vax_opfunction in radare2 5.4.2 and 5.4.0.
1Radare
1Radare2
Jun 17, 2026
Aug 22, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
A heap buffer overflow in r_sleb128 function in radare2 5.4.2 and 5.4.0.
1Sass Lang
1Libsass
Jun 17, 2026
Aug 22, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
Stack Overflow vulnerability in libsass 3.6.5 via the CompoundSelector::has_real_parent_ref function.
1Gnu
1Binutils
Jun 17, 2026
Aug 22, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Heap-based Buffer Overflow in function bfd_getl32 in Binutils objdump 3.37.
1Freeimage Project
1Freeimage
Jun 17, 2026
Aug 22, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
A heap overflow bug exists FreeImage before 1.18.0 via ofLoad function in PluginJPEG.cpp.
1Freeimage Project
1Freeimage
Jun 17, 2026
Aug 22, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
A heap overflow vulnerability in FreeImage 1.18.0 via the ofLoad function in PluginTIFF.cpp.
1Freeimage Project
1Freeimage
Jun 17, 2026
Aug 22, 2023
N/A· v4
6.5 MEDIUM· v3
N/A· v2
A stack exhaustion issue was discovered in FreeImage before 1.18.0 via the Validate function in PluginRAW.cpp.
1Opensc Project
1Opensc
Jun 17, 2026
Aug 22, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Stack overflow vulnerability in OpenSC smart card middleware before 0.23 via crafted responses to APDUs.
1Dpic Project
1Dpic
Jun 17, 2026
Aug 22, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
dpic 2021.04.10 has a Heap Buffer Overflow in themakevar() function in dpic.y
1Dpic Project
1Dpic
Jun 17, 2026
Aug 22, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
dpic 2021.01.01 has a Heap-based Buffer Overflow in thestorestring function in dpic.y.
2Json C
Netapp
2Active Iq Unified Manager
Json C
Jun 17, 2026
Aug 22, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
An issue was discovered in json-c from 20200420 (post 0.14 unreleased code) through 0.15-20200726. A stack-buffer-overflow exists in the auxiliary sample program json_parse which is located in the function parseit.
2Fedoraproject
Libjpeg Turbo
2Fedora
Libjpeg Turbo
Jun 17, 2026
Aug 22, 2023
N/A· v4
7.1 HIGH· v3
N/A· v2
libjpeg-turbo version 2.0.90 has a heap-based buffer over-read (2 bytes) in decompress_smooth_data in jdcoefct.c.