← Back
CWE-787

15,500 CVEs • Abstraction: Base • Likelihood of Exploit: High

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

JSON object

Loading...

CVEs (15,500)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-49425
1Tenda
1Ax12 Firmware
Jun 17, 2026
Dec 7, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda AX12 V22.03.01.46 was discovered to contain a stack overflow via the deviceList parameter at /goform/setMacFilterCfg .
CVE-2023-49424
1Tenda
1Ax12 Firmware
Jun 17, 2026
Dec 7, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda AX12 V22.03.01.46 was discovered to contain a stack overflow via the list parameter at /goform/SetVirtualServerCfg.
CVE-2023-41268
1Samsung
1Escargot
Jun 17, 2026
Dec 6, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Improper input validation vulnerability in Samsung Open Source Escargot allows stack overflow and segmentation fault. This issue affects Escargot: from 3.0.0 through 4.0.0.
CVE-2023-42567
1Samsung
1Android
Jun 17, 2026
Dec 5, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Improper size check vulnerability in softsimd prior to SMR Dec-2023 Release 1 allows stack-based buffer overflow.
CVE-2023-42566
1Samsung
1Android
Jun 17, 2026
Dec 5, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Out-of-bound write vulnerability in libsavsvc prior to SMR Dec-2023 Release 1 allows local attackers to execute arbitrary code.
CVE-2023-42561
1Samsung
1Android
Jun 17, 2026
Dec 5, 2023
N/A· v4
6.8 MEDIUM· v3
N/A· v2
Heap out-of-bounds write vulnerability in bootloader prior to SMR Dec-2023 Release 1 allows a physical attacker to execute arbitrary code.
CVE-2023-42560
1Samsung
1Android
Jun 17, 2026
Dec 5, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Heap out-of-bounds write vulnerability in dec_mono_audb of libsavsac.so prior to SMR Dec-2023 Release 1 allows an attacker to execute arbitrary code.
CVE-2023-42558
1Samsung
1Android
Jun 17, 2026
Dec 5, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Out of bounds write vulnerability in HDCP in HAL prior to SMR Dec-2023 Release 1 allows attacker to perform code execution.
CVE-2023-42557
1Samsung
1Android
Jun 17, 2026
Dec 5, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
Out-of-bound write vulnerability in libIfaaCa prior to SMR Dec-2023 Release 1 allows local system attackers to execute arbitrary code.
CVE-2023-28587
1Qualcomm
184315 5g Iot Modem Firmware
Aqt1000 FirmwareAr8031 Firmware+181 more
Jun 17, 2026
Dec 5, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption in BT controller while parsing debug commands with specific sub-opcodes at HCI interface level.
CVE-2023-28580
1Qualcomm
44Ar8035 Firmware
Fastconnect 6900 FirmwareFastconnect 7800 Firmware+41 more
Jun 17, 2026
Dec 5, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption in WLAN Host while setting the PMK length in PMK length in internal cache.
CVE-2023-28551
1Qualcomm
242315 5g Iot Modem Firmware
9205 Lte Modem Firmware9206 Lte Modem Firmware+239 more
Jun 17, 2026
Dec 5, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption in UTILS when modem processes memory specific Diag commands having arbitrary address values as input arguments.
CVE-2023-28550
1Qualcomm
329315 5g Iot Modem Firmware
9205 Lte Modem Firmware9206 Lte Modem Firmware+326 more
Jun 17, 2026
Dec 5, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption in MPP performance while accessing DSM watermark using external memory address.
CVE-2023-22383
1Qualcomm
58Aqt1000 Firmware
C V2x 9150 FirmwareFastconnect 6200 Firmware+55 more
Jun 17, 2026
Dec 5, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory Corruption in camera while installing a fd for a particular DMA buffer.
CVE-2023-21634
1Qualcomm
50Aqt1000 Firmware
Fastconnect 6200 FirmwareFastconnect 6800 Firmware+47 more
Jun 17, 2026
Dec 5, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory Corruption in Radio Interface Layer while sending an SMS or writing an SMS to SIM.
CVE-2023-48697
1Eclipse
1Threadx Usbx
Jun 17, 2026
Dec 5, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Azure RTOS USBX is a USB host, device, and on-the-go (OTG) embedded stack, that is fully integrated with Azure RTOS ThreadX. An attacker can cause remote code execution due to memory buffer and pointer vulnerabilities in...Show more
Azure RTOS USBX is a USB host, device, and on-the-go (OTG) embedded stack, that is fully integrated with Azure RTOS ThreadX. An attacker can cause remote code execution due to memory buffer and pointer vulnerabilities in Azure RTOS USBX. The affected components include functions/processes in pictbridge and host class, related to PIMA, storage, CDC ACM, ECM, audio, hub in RTOS v6.2.1 and below. The fixes have been included in USBX release 6.3.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.Show less
CVE-2023-48695
1Eclipse
1Threadx Usbx
Jun 17, 2026
Dec 5, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Azure RTOS USBX is a USB host, device, and on-the-go (OTG) embedded stack, that is fully integrated with Azure RTOS ThreadX. An attacker can cause remote code execution due to out of bounds write vulnerabilities in Azure...Show more
Azure RTOS USBX is a USB host, device, and on-the-go (OTG) embedded stack, that is fully integrated with Azure RTOS ThreadX. An attacker can cause remote code execution due to out of bounds write vulnerabilities in Azure RTOS USBX. The affected components include functions/processes in host and device classes, related to CDC ECM and RNDIS in RTOS v6.2.1 and below. The fixes have been included in USBX release 6.3.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.Show less
CVE-2023-48692
1Microsoft
1Azure Rtos Netx Duo
Jun 17, 2026
Dec 5, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Azure RTOS NetX Duo is a TCP/IP network stack designed specifically for deeply embedded real-time and IoT applications. An attacker can cause remote code execution due to memory overflow vulnerabilities in Azure RTOS NET...Show more
Azure RTOS NetX Duo is a TCP/IP network stack designed specifically for deeply embedded real-time and IoT applications. An attacker can cause remote code execution due to memory overflow vulnerabilities in Azure RTOS NETX Duo. The affected components include processes/functions related to icmp, tcp, snmp, dhcp, nat and ftp in RTOS v6.2.1 and below. The fixes have been included in NetX Duo release 6.3.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.Show less
CVE-2023-48691
1Microsoft
1Azure Rtos Netx Duo
Jun 17, 2026
Dec 5, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Azure RTOS NetX Duo is a TCP/IP network stack designed specifically for deeply embedded real-time and IoT applications. An attacker can cause an out-of-bounds write in Azure RTOS NETX Duo, that could lead to remote code...Show more
Azure RTOS NetX Duo is a TCP/IP network stack designed specifically for deeply embedded real-time and IoT applications. An attacker can cause an out-of-bounds write in Azure RTOS NETX Duo, that could lead to remote code execution. The affected components include process related to IGMP protocol in RTOS v6.2.1 and below. The fix has been included in NetX Duo release 6.3.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.Show less
CVE-2023-48316
1Microsoft
1Azure Rtos Netx Duo
Jun 17, 2026
Dec 5, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Azure RTOS NetX Duo is a TCP/IP network stack designed specifically for deeply embedded real-time and IoT applications. An attacker can cause remote code execution due to memory overflow vulnerabilities in Azure RTOS NET...Show more
Azure RTOS NetX Duo is a TCP/IP network stack designed specifically for deeply embedded real-time and IoT applications. An attacker can cause remote code execution due to memory overflow vulnerabilities in Azure RTOS NETX Duo. The affected components include processes/functions related to snmp, smtp, ftp and dtls in RTOS v6.2.1 and below. The fixes have been included in NetX Duo release 6.3.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.Show less