← Back
CWE-787

14,869 CVEs • Abstraction: Base • Likelihood of Exploit: High

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

JSON object

Loading...

CVEs (14,869)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Dlink
1Dir 605l Firmware
Jun 17, 2026
Feb 10, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the webpage parameter at /goform/formWlanGuestSetup.
1Dlink
1Dir 605l Firmware
Jun 17, 2026
Feb 10, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the curTime parameter at /goform/formSchedule.
1Dell
1Emc Powerscale Onefs
Jun 17, 2026
Feb 10, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
Dell PowerScale OneFS, versions 8.2.x-9.3.x, contain a heap-based buffer overflow. A local privileged malicious user could potentially exploit this vulnerability, leading to system takeover. This impacts compliance mode...Show more
Dell PowerScale OneFS, versions 8.2.x-9.3.x, contain a heap-based buffer overflow. A local privileged malicious user could potentially exploit this vulnerability, leading to system takeover. This impacts compliance mode clusters. Show less
2Debian
Gpac
2Debian Linux
Gpac
Jun 17, 2026
Feb 9, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.2.
1Samsung
1Android
Jun 17, 2026
Feb 9, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
A Stack-based overflow vulnerability in IpcRxEmbmsSessionList in SECRIL prior to Android S(12) allows attacker to cause memory corruptions.
1Gpac
1Gpac
Jun 17, 2026
Feb 9, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to V2.1.0-DEV.
1Deltaww
1Diascreen
Jun 17, 2026
Feb 8, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Delta Electronics DIAScreen versions 1.2.1.23 and prior are vulnerable to out-of-bounds write, which may allow an attacker to remotely execute arbitrary code.
1Br Automation
1Industrial Automation Aprol
Jun 17, 2026
Feb 8, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Insufficient validation of input parameters when changing configuration on Tbase server in B&R APROL versions < R 4.2-07 could result in buffer overflow. This may lead to Denial-of-Service conditions or execution of arbi...Show more
Insufficient validation of input parameters when changing configuration on Tbase server in B&R APROL versions < R 4.2-07 could result in buffer overflow. This may lead to Denial-of-Service conditions or execution of arbitrary code. Show less
1Google
1Chrome
Jun 17, 2026
Feb 7, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
Heap buffer overflow in WebUI in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via UI interaction . (Chro...Show more
Heap buffer overflow in WebUI in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via UI interaction . (Chromium security severity: Medium)Show less
1Mediatek
2En7528 Firmware
En7580 Firmware
Jun 17, 2026
Feb 6, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
In Boa, there is a possible escalation of privilege due to a stack buffer overflow. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User interact...Show more
In Boa, there is a possible escalation of privilege due to a stack buffer overflow. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20210008; Issue ID: OSBNB00123241.Show less
1Google
1Android
Jun 17, 2026
Feb 6, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Pa...Show more
In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07629572; Issue ID: ALPS07629572.Show less
1Google
1Android
Jun 17, 2026
Feb 6, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Pa...Show more
In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628615; Issue ID: ALPS07628615.Show less
1Google
1Android
Jun 17, 2026
Feb 6, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
In ged, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Pa...Show more
In ged, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07494067; Issue ID: ALPS07494067.Show less
1Pycdc Project
1Pycdc
Jun 17, 2026
Feb 6, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
pycdc commit 44a730f3a889503014fec94ae6e62d8401cb75e5 was discovered to contain a stack overflow via the component ASTree.cpp:BuildFromCode.
1Kodi
1Kodi
Jun 17, 2026
Feb 3, 2023
N/A· v4
4.6 MEDIUM· v3
N/A· v2
A heap buffer overflow vulnerability in Kodi Home Theater Software up to 19.5 allows attackers to cause a denial of service due to an improper length of the value passed to the offset argument.
1Json.h Project
1Json.h
Jun 17, 2026
Feb 3, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Buffer overflow vulnerability in function json_parse_string in sheredom json.h before commit 0825301a07cbf51653882bf2b153cc81fdadf41 (November 14, 2022) allows attackers to code arbitrary code and gain escalated privileg...Show more
Buffer overflow vulnerability in function json_parse_string in sheredom json.h before commit 0825301a07cbf51653882bf2b153cc81fdadf41 (November 14, 2022) allows attackers to code arbitrary code and gain escalated privileges.Show less
1Json.h Project
1Json.h
Jun 17, 2026
Feb 3, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Buffer overflow vulnerability in function json_parse_key in sheredom json.h before commit 0825301a07cbf51653882bf2b153cc81fdadf41 (November 14, 2022) allows attackers to code arbitrary code and gain escalated privileges.
1Json.h Project
1Json.h
Jun 17, 2026
Feb 3, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Buffer overflow vulnerability in function json_parse_number in sheredom json.h before commit 0825301a07cbf51653882bf2b153cc81fdadf41 (November 14, 2022) allows attackers to code arbitrary code and gain escalated privileg...Show more
Buffer overflow vulnerability in function json_parse_number in sheredom json.h before commit 0825301a07cbf51653882bf2b153cc81fdadf41 (November 14, 2022) allows attackers to code arbitrary code and gain escalated privileges.Show less
1Json.h Project
1Json.h
Jun 17, 2026
Feb 3, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Buffer overflow vulnerability in function json_parse_value in sheredom json.h before commit 0825301a07cbf51653882bf2b153cc81fdadf41 (November 14, 2022) allows attackers to code arbitrary code and gain escalated privilege...Show more
Buffer overflow vulnerability in function json_parse_value in sheredom json.h before commit 0825301a07cbf51653882bf2b153cc81fdadf41 (November 14, 2022) allows attackers to code arbitrary code and gain escalated privileges.Show less
1Json Parser Project
1Json Parser
Jun 17, 2026
Feb 3, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Buffer OverFlow Vulnerability in Barenboim json-parser master and v1.1.0 fixed in v1.1.1 allows an attacker to execute arbitrary code via the json_value_parse function.