← Back
CWE-787

14,855 CVEs • Abstraction: Base • Likelihood of Exploit: High

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

JSON object

Loading...

CVEs (14,855)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Google
1Android
Jun 17, 2026
Apr 6, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
In geniezone, there is a possible out of bounds write due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch...Show more
In geniezone, there is a possible out of bounds write due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07571494; Issue ID: ALPS07571494.Show less
1Google
1Android
Jun 17, 2026
Apr 6, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
In keyinstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitat...Show more
In keyinstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628168; Issue ID: ALPS07589148.Show less
1Google
1Android
Jun 17, 2026
Apr 6, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
In keyinstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitat...Show more
In keyinstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628168; Issue ID: ALPS07589144.Show less
1Google
1Android
Jun 17, 2026
Apr 6, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
In keyinstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitat...Show more
In keyinstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628168; Issue ID: ALPS07589135.Show less
1Google
1Android
Jun 17, 2026
Apr 6, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
In rpmb, there is a possible out of bounds write due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID:...Show more
In rpmb, there is a possible out of bounds write due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07460390; Issue ID: ALPS07460390.Show less
1Bzip3 Project
1Bzip3
Jun 17, 2026
Apr 6, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
An issue was discovered in libbzip3.a in bzip3 before 1.2.3. There is an out-of-bounds write in bz3_decode_block.
1Bzip3 Project
1Bzip3
Jun 17, 2026
Apr 6, 2023
N/A· v4
6.5 MEDIUM· v3
N/A· v2
An issue was discovered in libbzip3.a in bzip3 before 1.3.0. A bz3_decode_block out-of-bounds write can occur with a crafted archive because bzip3 does not follow the required procedure for interacting with libsais.
3Debian
FedoraprojectGoogle
3Chrome
Debian LinuxFedora
Jun 17, 2026
Apr 4, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
Heap buffer overflow in Browser History in Google Chrome prior to 112.0.5615.49 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via a crafted HTM...Show more
Heap buffer overflow in Browser History in Google Chrome prior to 112.0.5615.49 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)Show less
3Debian
FedoraprojectGoogle
3Chrome
Debian LinuxFedora
Jun 17, 2026
Apr 4, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
Out of bounds memory access in DOM Bindings in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium)
3Debian
FedoraprojectGoogle
3Chrome
Debian LinuxFedora
Jun 17, 2026
Apr 4, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
Heap buffer overflow in Visuals in Google Chrome prior to 112.0.5615.49 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium securit...Show more
Heap buffer overflow in Visuals in Google Chrome prior to 112.0.5615.49 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)Show less
1Jsish
1Jsish
Jun 17, 2026
Apr 4, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
An issue found in Jsish v.3.0.11 and before allows an attacker to cause a denial of service via the StringReplaceCmd function in the src/jsiChar.c file.
1Jsish
1Jsish
Jun 17, 2026
Apr 4, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
An issue found in Jsish v.3.0.11 allows a remote attacker to cause a denial of service via the Jsi_ValueIsNumber function in ./src/jsiValue.c file.
1Espruino
1Espruino
Jun 17, 2026
Apr 4, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
An issue found in Espruino Espruino 6ea4c0a allows an attacker to execute arbitrrary code via oldFunc parameter of the jswrap_object.c:jswrap_function_replacewith endpoint.
1Tenda
1Ac6 Firmware
Jun 17, 2026
Apr 4, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the ssid parameter in the form_fast_setting_wifi_set function.
1Gnu
1Binutils
Jun 17, 2026
Apr 3, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Heap based buffer overflow in binutils-gdb/bfd/libbfd.c in bfd_getl64.
1Trellix
1Agent
Jun 17, 2026
Apr 3, 2023
N/A· v4
6.5 MEDIUM· v3
N/A· v2
A heap-based overflow vulnerability in Trellix Agent (Windows and Linux) version 5.7.8 and earlier, allows a remote user to alter the page heap in the macmnsvc process memory block resulting in the service becoming unav...Show more
A heap-based overflow vulnerability in Trellix Agent (Windows and Linux) version 5.7.8 and earlier, allows a remote user to alter the page heap in the macmnsvc process memory block resulting in the service becoming unavailable. Show less
1Nvidia
1Virtual Gpu
Jun 17, 2026
Apr 1, 2023
N/A· v4
7.1 HIGH· v3
N/A· v2
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer handler, where an out-of-bounds access may lead to denial of service or data tampering.
1Nvidia
1Virtual Gpu
Jun 17, 2026
Apr 1, 2023
N/A· v4
7.1 HIGH· v3
N/A· v2
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer, where an out-of-bounds write can lead to denial of service and data tampering.
1Nvidia
1Virtual Gpu
Jun 17, 2026
Apr 1, 2023
N/A· v4
7.1 HIGH· v3
N/A· v2
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an out-of-bounds write can lead to denial of service and data tampering.
1Nvidia
1Virtual Gpu
Jun 17, 2026
Apr 1, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer, where an out-of-bounds write can lead to denial of service, information disclosure, and data tampering.