← Back
CWE-787

15,502 CVEs • Abstraction: Base • Likelihood of Exploit: High

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

JSON object

Loading...

CVEs (15,502)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-20837
1Google
1Android
Jun 17, 2026
Sep 4, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
In seninf, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation....Show more
In seninf, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07992786; Issue ID: ALPS07992786.Show less
CVE-2023-20832
4Google
LinuxfoundationOpenwrt+1 more
4Android
OpenwrtRdk B+1 more
Jun 17, 2026
Sep 4, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Pa...Show more
In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08014144; Issue ID: ALPS08013530.Show less
CVE-2023-20831
4Google
LinuxfoundationOpenwrt+1 more
4Android
OpenwrtRdk B+1 more
Jun 17, 2026
Sep 4, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Pa...Show more
In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08014144; Issue ID: ALPS08014162.Show less
CVE-2023-20830
4Google
LinuxfoundationOpenwrt+1 more
4Android
OpenwrtRdk B+1 more
Jun 17, 2026
Sep 4, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Pa...Show more
In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08014144; Issue ID: ALPS08014156.Show less
CVE-2023-20829
4Google
LinuxfoundationOpenwrt+1 more
4Android
OpenwrtRdk B+1 more
Jun 17, 2026
Sep 4, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Pa...Show more
In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08014144; Issue ID: ALPS08014148.Show less
CVE-2023-20828
4Google
LinuxfoundationOpenwrt+1 more
4Android
OpenwrtRdk B+1 more
Jun 17, 2026
Sep 4, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Pa...Show more
In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08014144; Issue ID: ALPS08014144.Show less
CVE-2023-20822
1Google
1Android
Jun 17, 2026
Sep 4, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
In netdagent, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitati...Show more
In netdagent, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07944012; Issue ID: ALPS07944012.Show less
CVE-2023-20821
4Google
LinuxfoundationOpenwrt+1 more
4Android
OpenwrtRdk B+1 more
Jun 17, 2026
Sep 4, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
In nvram, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation....Show more
In nvram, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07937113; Issue ID: ALPS07937113.Show less
CVE-2023-38554
1Google
1Android
Jun 17, 2026
Sep 4, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
In wcn bsp driver, there is a possible out of bounds write due to a missing bounds check.This could lead to local denial of service with no additional execution privileges
CVE-2023-38553
1Google
1Android
Jun 17, 2026
Sep 4, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
In gnss service, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed
CVE-2023-38468
1Google
1Android
Jun 17, 2026
Sep 4, 2023
N/A· v4
4.4 MEDIUM· v3
N/A· v2
In urild service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
CVE-2023-38467
1Google
1Android
Jun 17, 2026
Sep 4, 2023
N/A· v4
4.4 MEDIUM· v3
N/A· v2
In urild service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
CVE-2022-48453
1Google
1Android
Jun 17, 2026
Sep 4, 2023
N/A· v4
4.4 MEDIUM· v3
N/A· v2
In camera driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
CVE-2023-4744
1Tenda
1Ac8 Firmware
Jun 17, 2026
Sep 4, 2023
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
A vulnerability was found in Tenda AC8 16.03.34.06_cn_TDC01. It has been declared as critical. Affected by this vulnerability is the function formSetDeviceName. The manipulation leads to stack-based buffer overflow. The...Show more
A vulnerability was found in Tenda AC8 16.03.34.06_cn_TDC01. It has been declared as critical. Affected by this vulnerability is the function formSetDeviceName. The manipulation leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-238633 was assigned to this vulnerability.Show less
CVE-2023-4751
3Apple
NeovimVim
3Macos
NeovimVim
Sep 17, 2026
Sep 3, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1331.
CVE-2023-4738
4Apple
DebianNeovim+1 more
4Debian Linux
MacosNeovim+1 more
Sep 18, 2026
Sep 2, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1848.
CVE-2023-4735
2Apple
Vim
2Macos
Vim
Jun 23, 2026
Sep 2, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1847.
CVE-2023-40574
1Freerdp
1Freerdp
Jun 17, 2026
Aug 31, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an Out-Of-Bounds Write in the `writePixelBGRX` function. This issue is likely dow...Show more
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an Out-Of-Bounds Write in the `writePixelBGRX` function. This issue is likely down to incorrect calculations of the `nHeight` and `srcStep` variables. This issue has been addressed in version 3.0.0-beta3. Users are advised to upgrade. There are no known workarounds for this issue.Show less
CVE-2023-40569
3Debian
FedoraprojectFreerdp
3Debian Linux
FedoraFreerdp
Jun 17, 2026
Aug 31, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an Out-Of-Bounds Write in the `progressive_decompress` function. This issue is li...Show more
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an Out-Of-Bounds Write in the `progressive_decompress` function. This issue is likely down to incorrect calculations of the `nXSrc` and `nYSrc` variables. This issue has been addressed in versions 2.11.0 and 3.0.0-beta3. Users are advised to upgrade. there are no known workarounds for this vulnerability.Show less
CVE-2023-40567
3Debian
FedoraprojectFreerdp
3Debian Linux
FedoraFreerdp
Jun 17, 2026
Aug 31, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an Out-Of-Bounds Write in the `clear_decompress_bands_data` function in which the...Show more
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an Out-Of-Bounds Write in the `clear_decompress_bands_data` function in which there is no offset validation. Abuse of this vulnerability may lead to an out of bounds write. This issue has been addressed in versions 2.11.0 and 3.0.0-beta3. Users are advised to upgrade. there are no known workarounds for this vulnerability.Show less