← Back
CWE-787

15,502 CVEs • Abstraction: Base • Likelihood of Exploit: High

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

JSON object

Loading...

CVEs (15,502)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Radare
1Radare2
Jun 17, 2026
Aug 22, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
A heap buffer overflow in vax_opfunction in radare2 5.4.2 and 5.4.0.
1Radare
1Radare2
Jun 17, 2026
Aug 22, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
A heap buffer overflow in r_sleb128 function in radare2 5.4.2 and 5.4.0.
1Sass Lang
1Libsass
Jun 17, 2026
Aug 22, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
Stack Overflow vulnerability in libsass 3.6.5 via the CompoundSelector::has_real_parent_ref function.
1Gnu
1Binutils
Jun 17, 2026
Aug 22, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Heap-based Buffer Overflow in function bfd_getl32 in Binutils objdump 3.37.
1Freeimage Project
1Freeimage
Jun 17, 2026
Aug 22, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
A heap overflow bug exists FreeImage before 1.18.0 via ofLoad function in PluginJPEG.cpp.
1Freeimage Project
1Freeimage
Jun 17, 2026
Aug 22, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
A heap overflow vulnerability in FreeImage 1.18.0 via the ofLoad function in PluginTIFF.cpp.
1Freeimage Project
1Freeimage
Jun 17, 2026
Aug 22, 2023
N/A· v4
6.5 MEDIUM· v3
N/A· v2
A stack exhaustion issue was discovered in FreeImage before 1.18.0 via the Validate function in PluginRAW.cpp.
1Opensc Project
1Opensc
Jun 17, 2026
Aug 22, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Stack overflow vulnerability in OpenSC smart card middleware before 0.23 via crafted responses to APDUs.
1Dpic Project
1Dpic
Jun 17, 2026
Aug 22, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
dpic 2021.04.10 has a Heap Buffer Overflow in themakevar() function in dpic.y
1Dpic Project
1Dpic
Jun 17, 2026
Aug 22, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
dpic 2021.01.01 has a Heap-based Buffer Overflow in thestorestring function in dpic.y.
2Json C
Netapp
2Active Iq Unified Manager
Json C
Oct 14, 2026
Aug 22, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
An issue was discovered in json-c from 20200420 (post 0.14 unreleased code) through 0.15-20200726. A stack-buffer-overflow exists in the auxiliary sample program json_parse which is located in the function parseit.
2Fedoraproject
Libjpeg Turbo
2Fedora
Libjpeg Turbo
Jun 17, 2026
Aug 22, 2023
N/A· v4
7.1 HIGH· v3
N/A· v2
libjpeg-turbo version 2.0.90 has a heap-based buffer over-read (2 bytes) in decompress_smooth_data in jdcoefct.c.
1Libssh2
1Libssh2
Oct 14, 2026
Aug 22, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
An issue was discovered in function _libssh2_packet_add in libssh2 1.10.0 allows attackers to access out of bounds memory.
1Artifex
1Ghostscript
Jun 17, 2026
Aug 22, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Buffer Overflow vulnerability in clj_media_size function in devices/gdevclj.c in Artifex Ghostscript 9.50 allows remote attackers to cause a denial of service or other unspecified impact(s) via opening of crafted PDF doc...Show more
Buffer Overflow vulnerability in clj_media_size function in devices/gdevclj.c in Artifex Ghostscript 9.50 allows remote attackers to cause a denial of service or other unspecified impact(s) via opening of crafted PDF document.Show less
1Ogg Video Tools Project
1Ogg Video Tools
Jun 17, 2026
Aug 22, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Buffer Overflow vulnerability in ExtractorInformation function in streamExtractor.cpp in oggvideotools 0.9.1 allows remaote attackers to run arbitrary code via opening of crafted ogg file.
1Ogg Video Tools Project
1Ogg Video Tools
Jun 17, 2026
Aug 22, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
A Segmentation Fault issue discovered StreamSerializer::extractStreams function in streamSerializer.cpp in oggvideotools 0.9.1 allows remote attackers to cause a denial of service (crash) via opening of crafted ogg file.
1Nasm
1Netwide Assembler
Jun 17, 2026
Aug 22, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Buffer Overflow vulnerability in scan function in stdscan.c in nasm 2.15rc0 allows remote attackers to cause a denial of service via crafted asm file.
1Nasm
1Netwide Assembler
Jun 17, 2026
Aug 22, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Buffer Overflow vulnerability in hash_findi function in hashtbl.c in nasm 2.15rc0 allows remote attackers to cause a denial of service via crafted asm file.
1Graphicsmagick
1Graphicsmagick
Jun 17, 2026
Aug 22, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Buffer Overflow vulnerability in WritePCXImage function in pcx.c in GraphicsMagick 1.4 allows remote attackers to cause a denial of service via converting of crafted image file to pcx format.
1Elfutils Project
1Elfutils
Oct 14, 2026
Aug 22, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
The libcpu component which is used by libasm of elfutils version 0.177 (git 47780c9e), suffers from denial-of-service vulnerability caused by application crashes due to out-of-bounds write (CWE-787), off-by-one error (CW...Show more
The libcpu component which is used by libasm of elfutils version 0.177 (git 47780c9e), suffers from denial-of-service vulnerability caused by application crashes due to out-of-bounds write (CWE-787), off-by-one error (CWE-193) and reachable assertion (CWE-617); to exploit the vulnerability, the attackers need to craft certain ELF files which bypass the missing bound checks.Show less