CWE-787
14,833 CVEs • Abstraction: Base • Likelihood of Exploit: High
Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.
CVEs (14,833)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
Out of bounds read and write in callrunTspCmdNoRead of sysinput HAL service prior to SMR Jul-2023 Release 1 allows local attackers to execute arbitrary code. |
Out of bounds read and write in callgetTspsysfs of sysinput HAL service prior to SMR Jul-2023 Release 1 allows local attackers to execute arbitrary code. |
Out of bounds read and write in callrunTspCmd of sysinput HAL service prior to SMR Jul-2023 Release 1 allows local attackers to execute arbitrary code. |
Heap out of bound write vulnerability in RmtUimNeedApdu of RILD prior to SMR Jul-2023 Release 1 allows attackers to execute arbitrary code. |
Stack out-of-bounds write vulnerability in IpcRxImeiUpdateImeiNoti of RILD priro to SMR Jul-2023 Release 1 cause a denial of service on the system. |
Heap out of bound write vulnerability in IpcRxUsimPhoneBookCapa of RILD prior to SMR Jul-2023 Release 1 allows attackers to execute arbitrary code. |
Heap out of bound write vulnerability in BroadcastSmsConfig of RILD prior to SMR Jul-2023 Release 1 allows attackers to execute arbitrary code. |
Heap out of bound write vulnerability in IpcRxIncomingCBMsg of RILD prior to SMR Jul-2023 Release 1 allows attackers to execute arbitrary code. |
Stack out of bound write vulnerability in CdmaSmsParser of RILD prior to SMR Jul-2023 Release 1 allows attackers to execute arbitrary code. |
4Debian FedoraprojectLinux+1 more8Debian Linux FedoraH300s+5 moreJun 17, 2026 Jul 5, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability; nft_byteorder poorly handled vm register contents when CAP_NET_ADMIN is in any user or network namespace |
A heap-based buffer overflow vulnerability exists in the Sequence::DrawText functionality of Diagon v1.0.139. A specially crafted markdown file can lead to arbitrary code execution. A victim would need to open a maliciou...Show more |
Memory safety bugs present in Firefox 114. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability...Show more |
2Debian Mozilla4Debian Linux FirefoxFirefox Esr+1 moreJun 17, 2026 Jul 5, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Memory safety bugs present in Firefox 114, Firefox ESR 102.12, and Thunderbird 102.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploite...Show more |
1Qualcomm 158215 Firmware Ar8035 FirmwareCsra6620 Firmware+155 moreJun 17, 2026 Jul 4, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory Corruption in WLAN HOST while parsing QMI WLAN Firmware response message. |
1Qualcomm 186Ar8035 Firmware Csr8811 FirmwareCsra6620 Firmware+183 moreJun 17, 2026 Jul 4, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory Corruption in WLAN HOST while parsing QMI response message from firmware. |
1Qualcomm 196215 Firmware Ar8035 FirmwareCsr8811 Firmware+193 moreJun 17, 2026 Jul 4, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory Corruption in WLAN HOST while processing WLAN FW request to allocate memory. |
1Qualcomm 6Fastconnect 6900 Firmware Fastconnect 7800 FirmwareSnapdragon 8 Gen 1 Firmware+3 moreJun 17, 2026 Jul 4, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in Linux when the file upload API is called with parameters having large buffer. |
1Qualcomm 22Aqt1000 Firmware Fastconnect 6200 FirmwareQca6420 Firmware+19 moreJun 17, 2026 Jul 4, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in Audio while processing sva_model_serializer using memory size passed by HIDL client. |
1Qualcomm 54Aqt1000 Firmware Fastconnect 6200 FirmwareFastconnect 6800 Firmware+51 moreJun 17, 2026 Jul 4, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in Linux while calling system configuration APIs. |
1Qualcomm 48Aqt1000 Firmware Csrb31024 FirmwareFastconnect 6200 Firmware+45 moreJun 17, 2026 Jul 4, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory Corruption in Data Network Stack & Connectivity when sim gets detected on telephony. |