← Back
CWE-787

14,832 CVEs • Abstraction: Base • Likelihood of Exploit: High

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

JSON object

Loading...

CVEs (14,832)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-38938
1Tenda
4F1202 Firmware
Fh1202 FirmwarePa202 Firmware+1 more
Jun 17, 2026
Aug 7, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda F1202 V1.2.0.9, PA202 V1.1.2.5, PW201A V1.1.2.5 and FH1202 V1.2.0.9 were discovered to contain a stack overflow via the page parameter at /L7Im.
CVE-2023-38937
1Tenda
7Ac10 Firmware
Ac1206 FirmwareAc5 Firmware+4 more
Jun 17, 2026
Aug 7, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5 V1.0 V15.03.06.28, AC9 V3.0 V15.03.06.42_multi and AC10 v4.0 V16.03.10.13 were discovered to conta...Show more
Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5 V1.0 V15.03.06.28, AC9 V3.0 V15.03.06.42_multi and AC10 v4.0 V16.03.10.13 were discovered to contain a stack overflow via the list parameter in the formSetVirtualSer function.Show less
CVE-2023-38936
1Tenda
9Ac10 Firmware
Ac1206 FirmwareAc5 Firmware+6 more
Jun 17, 2026
Aug 7, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6, AC9 V3.0 V15.03.06.42_multi and FH1205 V2.0.0.7(775) were discovered to contain a s...Show more
Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6, AC9 V3.0 V15.03.06.42_multi and FH1205 V2.0.0.7(775) were discovered to contain a stack overflow via the speed_dir parameter in the formSetSpeedWan function.Show less
CVE-2023-38935
1Tenda
5Ac10 Firmware
Ac1206 FirmwareAc5 Firmware+2 more
Jun 17, 2026
Aug 7, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda AC1206 V15.03.06.23, AC8 V4 V16.03.34.06, AC5 V1.0 V15.03.06.28, AC10 v4.0 V16.03.10.13 and AC9 V3.0 V15.03.06.42_multi were discovered to contain a tack overflow via the list parameter in the formSetQosBand functi...Show more
Tenda AC1206 V15.03.06.23, AC8 V4 V16.03.34.06, AC5 V1.0 V15.03.06.28, AC10 v4.0 V16.03.10.13 and AC9 V3.0 V15.03.06.42_multi were discovered to contain a tack overflow via the list parameter in the formSetQosBand function.Show less
CVE-2023-38934
1Tenda
3F1203 Firmware
Fh1203 FirmwareFh1205 Firmware
Jun 17, 2026
Aug 7, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda F1203 V2.0.1.6, FH1203 V2.0.1.6 and FH1205 V2.0.0.7(775) was discovered to contain a stack overflow via the deviceId parameter in the formSetDeviceName function.
CVE-2023-38933
1Tenda
9Ac10 Firmware
Ac1206 FirmwareAc5 Firmware+6 more
Jun 17, 2026
Aug 7, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6 and AC9 V3.0 V15.03.06.42_multi, and FH1205 V2.0.0.7(775) were discovered to contain a stack overflow via the dev...Show more
Tenda AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6 and AC9 V3.0 V15.03.06.42_multi, and FH1205 V2.0.0.7(775) were discovered to contain a stack overflow via the deviceId parameter in the formSetClientState function.Show less
CVE-2023-38932
1Tenda
4F1202 Firmware
Fh1202 FirmwarePa202 Firmware+1 more
Jun 17, 2026
Aug 7, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda F1202 V1.2.0.9, PA202 V1.1.2.5, PW201A V1.1.2.5 and FH1202 V1.2.0.9 were discovered to contain a stack overflow via the page parameter in the SafeEmailFilter function.
CVE-2023-38931
1Tenda
8Ac10 Firmware
Ac1206 FirmwareAc5 Firmware+5 more
Jun 17, 2026
Aug 7, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, AC10 v4.0 V16.03.10.13 and FH1203 V2.0.1.6 were discovered to c...Show more
Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, AC10 v4.0 V16.03.10.13 and FH1203 V2.0.1.6 were discovered to contain a stack overflow via the list parameter in the setaccount function.Show less
CVE-2023-38930
1Tenda
5Ac5 Firmware
Ac7 FirmwareAc9 Firmware+2 more
Jun 17, 2026
Aug 7, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda AC7 V1.0,V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0,V15.03.06.28, AC9 V3.0,V15.03.06.42_multi and FH1205 V2.0.0.7(775) were discovered to contain a stack overflow via the deviceId parameter in the addWifiMacFilter func...Show more
Tenda AC7 V1.0,V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0,V15.03.06.28, AC9 V3.0,V15.03.06.42_multi and FH1205 V2.0.0.7(775) were discovered to contain a stack overflow via the deviceId parameter in the addWifiMacFilter function.Show less
CVE-2023-38929
1Tenda
14g300 Firmware
Jun 17, 2026
Aug 7, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda 4G300 v1.01.42 was discovered to contain a stack overflow via the page parameter at /VirtualSer.
CVE-2023-20817
1Google
1Android
Jun 17, 2026
Aug 7, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for expl...Show more
In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07453600; Issue ID: ALPS07453600.Show less
CVE-2023-20816
1Google
1Android
Jun 17, 2026
Aug 7, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for expl...Show more
In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07453589; Issue ID: ALPS07453589.Show less
CVE-2023-20815
1Google
1Android
Jun 17, 2026
Aug 7, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for expl...Show more
In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07453587; Issue ID: ALPS07453587.Show less
CVE-2023-20814
1Google
1Android
Jun 17, 2026
Aug 7, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for expl...Show more
In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07453560; Issue ID: ALPS07453560.Show less
CVE-2023-20812
2Google
Mediatek
2Android
Iot Yocto
Jun 17, 2026
Aug 7, 2023
N/A· v4
4.4 MEDIUM· v3
N/A· v2
In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploi...Show more
In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07944987; Issue ID: ALPS07944987.Show less
CVE-2023-20811
2Google
Linux
2Android
Linux Kernel
Jun 17, 2026
Aug 7, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
In IOMMU, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation....Show more
In IOMMU, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: DTV03692061; Issue ID: DTV03692061.Show less
CVE-2023-20809
1Google
1Android
Jun 17, 2026
Aug 7, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. P...Show more
In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: DTV03751198; Issue ID: DTV03751198.Show less
CVE-2023-20808
1Google
1Android
Jun 17, 2026
Aug 7, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
In OPTEE, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation....Show more
In OPTEE, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: DTV03645895; Issue ID: DTV03645895.Show less
CVE-2023-20807
1Google
1Android
Jun 17, 2026
Aug 7, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
In dpe, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Pa...Show more
In dpe, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07608433; Issue ID: ALPS07608433.Show less
CVE-2023-20806
1Google
1Android
Jun 17, 2026
Aug 7, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
In hcp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Pa...Show more
In hcp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07340433; Issue ID: ALPS07537437.Show less