← Back
CWE-787

14,849 CVEs • Abstraction: Base • Likelihood of Exploit: High

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

JSON object

Loading...

CVEs (14,849)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1H3c
1Magic R200 Firmware
Jun 17, 2026
Apr 21, 2023
N/A· v4
4.9 MEDIUM· v3
N/A· v2
H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the UpdateMacClone interface at /goform/aspForm.
1H3c
1Magic R200 Firmware
Jun 17, 2026
Apr 21, 2023
N/A· v4
4.9 MEDIUM· v3
N/A· v2
H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the AddWlanMacList interface at /goform/aspForm.
1H3c
1Magic R200 Firmware
Jun 17, 2026
Apr 21, 2023
N/A· v4
4.9 MEDIUM· v3
N/A· v2
H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the SetMobileAPInfoById interface at /goform/aspForm.
1H3c
1Magic R200 Firmware
Jun 17, 2026
Apr 21, 2023
N/A· v4
4.9 MEDIUM· v3
N/A· v2
H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the Edit_BasicSSID_5G interface at /goform/aspForm.
1H3c
1Magic R200 Firmware
Jun 17, 2026
Apr 21, 2023
N/A· v4
4.9 MEDIUM· v3
N/A· v2
H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the Edit_BasicSSID interface at /goform/aspForm.
1H3c
1Magic R200 Firmware
Jun 17, 2026
Apr 21, 2023
N/A· v4
4.9 MEDIUM· v3
N/A· v2
H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the UpdateSnat interface at /goform/aspForm.
3Fedoraproject
LinuxRedhat
3Enterprise Linux
FedoraLinux Kernel
Jun 17, 2026
Apr 20, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
An out-of-bounds write vulnerability was found in the Linux kernel's SLIMpro I2C device driver. The userspace "data->block[0]" variable was not capped to a number between 0-255 and was used as the size of a memcpy, possi...Show more
An out-of-bounds write vulnerability was found in the Linux kernel's SLIMpro I2C device driver. The userspace "data->block[0]" variable was not capped to a number between 0-255 and was used as the size of a memcpy, possibly writing beyond the end of dma_buffer. This flaw could allow a local privileged user to crash the system or potentially achieve code execution.Show less
1Datakit
1Crosscadware
Jun 17, 2026
Apr 20, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Datakit CrossCadWare_x64.dll contains an out-of-bounds write past the end of an allocated buffer while parsing a specially crafted SLDPRT file. This could allow an attacker to execute code in the context of the...Show more
Datakit CrossCadWare_x64.dll contains an out-of-bounds write past the end of an allocated buffer while parsing a specially crafted SLDPRT file. This could allow an attacker to execute code in the context of the current process. Show less
1Slic3r
1Libslic3r
Jun 17, 2026
Apr 20, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
A heap-based buffer overflow vulnerability exists in the TriangleMesh clone functionality of Slic3r libslic3r 1.3.0 and Master Commit b1a5500. A specially-crafted STL file can lead to a heap buffer overflow. An attacker...Show more
A heap-based buffer overflow vulnerability exists in the TriangleMesh clone functionality of Slic3r libslic3r 1.3.0 and Master Commit b1a5500. A specially-crafted STL file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.Show less
1Google
1Android
Jun 17, 2026
Apr 19, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
In inflate of inflate.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not nee...Show more
In inflate of inflate.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12L Android-13Android ID: A-242544249Show less
1Google
1Android
Jun 17, 2026
Apr 19, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
In nci_snd_set_routing_cmd of nci_hmsgs.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges need...Show more
In nci_snd_set_routing_cmd of nci_hmsgs.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-264879662Show less
1Google
1Android
Jun 17, 2026
Apr 19, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
In avdt_scb_hdl_pkt_no_frag of avdt_scb_act.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. U...Show more
In avdt_scb_hdl_pkt_no_frag of avdt_scb_act.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-225879503Show less
1Google
1Android
Jun 17, 2026
Apr 19, 2023
N/A· v4
6.6 MEDIUM· v3
N/A· v2
In acc_ctrlrequest_composite of f_accessory.c, there is a possible out of bounds write due to a missing bounds check. This could lead to physical escalation of privilege with no additional execution privileges needed. Us...Show more
In acc_ctrlrequest_composite of f_accessory.c, there is a possible out of bounds write due to a missing bounds check. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-264029575References: Upstream kernelShow less
3Debian
FedoraprojectGoogle
3Chrome
Debian LinuxFedora
Jun 17, 2026
Apr 19, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
Heap buffer overflow in sqlite in Google Chrome prior to 112.0.5615.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
3Debian
FedoraprojectGoogle
3Chrome
Debian LinuxFedora
Jun 17, 2026
Apr 19, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
Out of bounds memory access in Service Worker API in Google Chrome prior to 112.0.5615.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
3Debian
FedoraprojectGoogle
3Chrome
Debian LinuxFedora
Jun 17, 2026
Apr 19, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
Out of bounds memory access in Service Worker API in Google Chrome prior to 112.0.5615.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
1Autodesk
1Fbx Software Development Kit
Jun 17, 2026
Apr 17, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
A user may be tricked into opening a malicious FBX file that may exploit a heap buffer overflow vulnerability in Autodesk® FBX® SDK 2020 or prior which may lead to code execution.
1Autodesk
1Fbx Software Development Kit
Jun 17, 2026
Apr 17, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
A user may be tricked into opening a malicious FBX file that may exploit a stack buffer overflow vulnerability in Autodesk® FBX® SDK 2020 or prior which may lead to code execution.
1Autodesk
1Fbx Software Development Kit
Jun 17, 2026
Apr 17, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
An Out-Of-Bounds Write Vulnerability in Autodesk® FBX® SDK version 2020 or prior may lead to code execution through maliciously crafted FBX files or information disclosure.
1Autodesk
1Maya Usd
Jun 17, 2026
Apr 17, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
A malicious actor may convince a victim to open a malicious USD file that may trigger an out-of-bounds write vulnerability which may result in code execution.