← Back
CWE-787

15,502 CVEs • Abstraction: Base • Likelihood of Exploit: High

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

JSON object

Loading...

CVEs (15,502)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Fastweb
2Fastgate Gpon Fga2130fwb Firmware
Fastgate Vdsl2 Dga4131fwb Firmware
Jun 17, 2026
May 19, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
A heap-based buffer overflow in a network service in Fastweb FASTGate MediaAccess FGA2130FWB, firmware version 18.3.n.0482_FW_230_FGA2130, and DGA4131FWB, firmware version up to 18.3.n.0462_FW_261_DGA4131, allows a remot...Show more
A heap-based buffer overflow in a network service in Fastweb FASTGate MediaAccess FGA2130FWB, firmware version 18.3.n.0482_FW_230_FGA2130, and DGA4131FWB, firmware version up to 18.3.n.0462_FW_261_DGA4131, allows a remote attacker to reboot the device through a crafted HTTP request, causing DoS.Show less
1Facebook
1Netconsd
Jun 17, 2026
May 18, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
netconsd prior to v0.2 was vulnerable to an integer overflow in its parse_packet function. A malicious individual could leverage this overflow to create heap memory corruption with attacker controlled data.
1Facebook
1Hermes
Jun 17, 2026
May 18, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
An error in BigInt conversion to Number in Hermes prior to commit a6dcafe6ded8e61658b40f5699878cd19a481f80 could have been used by a malicious attacker to execute arbitrary code due to an out-of-bound write. Note that th...Show more
An error in BigInt conversion to Number in Hermes prior to commit a6dcafe6ded8e61658b40f5699878cd19a481f80 could have been used by a malicious attacker to execute arbitrary code due to an out-of-bound write. Note that this bug is only exploitable in cases where Hermes is used to execute untrusted JavaScript. Hence, most React Native applications are not affected.Show less
1Belkin
1F7c063 Firmware
Jun 17, 2026
May 18, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
A stack-based buffer overflow in the ChangeFriendlyName() function of Belkin Smart Outlet V2 F7c063 firmware_2.00.11420.OWRT.PVT_SNSV2 allows attackers to cause a Denial of Service (DoS) via a crafted UPNP request.
1Gnu
1Binutils
Jun 17, 2026
May 17, 2023
N/A· v4
6.5 MEDIUM· v3
N/A· v2
A potential heap based buffer overflow was found in _bfd_elf_slurp_version_tables() in bfd/elf.c. This may lead to loss of availability.
1Nasm
1Netwide Assembler
Jun 17, 2026
May 17, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
There exists a heap buffer overflow in nasm 2.16.02rc1 (GitHub commit: b952891).
1Jenkins
1Pipeline Utility Steps
Jun 17, 2026
May 16, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
An arbitrary file write vulnerability in Jenkins Pipeline Utility Steps Plugin 2.15.2 and earlier allows attackers able to provide crafted archives as parameters to create or replace arbitrary files on the agent file sys...Show more
An arbitrary file write vulnerability in Jenkins Pipeline Utility Steps Plugin 2.15.2 and earlier allows attackers able to provide crafted archives as parameters to create or replace arbitrary files on the agent file system with attacker-specified content.Show less
1Dlink
1Dir 605l Firmware
Jun 17, 2026
May 16, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
D-Link DIR-605L firmware version 1.17B01 BETA is vulnerable to stack overflow via /goform/formTcpipSetup,
3Debian
LinuxNetapp
7Debian Linux
H300s FirmwareH410c Firmware+4 more
Jun 17, 2026
May 15, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
An out-of-bounds memory access flaw was found in the Linux kernel’s XFS file system in how a user restores an XFS image after failure (with a dirty log journal). This flaw allows a local user to crash or potentially esca...Show more
An out-of-bounds memory access flaw was found in the Linux kernel’s XFS file system in how a user restores an XFS image after failure (with a dirty log journal). This flaw allows a local user to crash or potentially escalate their privileges on the system.Show less
2Google
Yoctoproject
2Android
Yocto
Jun 17, 2026
May 15, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
In isp, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation....Show more
In isp, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07162155; Issue ID: ALPS07162155.Show less
1Google
1Android
Jun 17, 2026
May 15, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
In pqframework, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitat...Show more
In pqframework, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07629586; Issue ID: ALPS07629586.Show less
1Google
1Android
Jun 17, 2026
May 15, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
In widevine, there is a possible out of bounds write due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch...Show more
In widevine, there is a possible out of bounds write due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07643270; Issue ID: ALPS07643270.Show less
1Google
1Android
Jun 17, 2026
May 15, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
In widevine, there is a possible out of bounds write due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch...Show more
In widevine, there is a possible out of bounds write due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07643304; Issue ID: ALPS07643304.Show less
1Google
1Android
Jun 17, 2026
May 15, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
In adsp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. P...Show more
In adsp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07696073; Issue ID: ALPS07696073.Show less
2Google
Openwrt
2Android
Openwrt
Jun 17, 2026
May 15, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
In preloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitati...Show more
In preloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07856356 / ALPS07874388 (For MT6880 and MT6890 only); Issue ID: ALPS07856356 / ALPS07874388 (For MT6880 and MT6890 only).Show less
2Google
Openwrt
2Android
Openwrt
Jun 17, 2026
May 15, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
In preloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitati...Show more
In preloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07734012 / ALPS07874363 (For MT6880, MT6890, MT6980 and MT6990 only); Issue ID: ALPS07734012 / ALPS07874363 (For MT6880, MT6890, MT6980 and MT6990 only).Show less
2Google
Openwrt
2Android
Openwrt
Jun 17, 2026
May 15, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
In preloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitati...Show more
In preloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07733998 / ALPS07874388 (For MT6880 and MT6890 only); Issue ID: ALPS07733998 / ALPS07874388 (For MT6880 and MT6890 only).Show less
3Fedoraproject
LibrawRedhat
3Enterprise Linux
FedoraLibraw
Jun 17, 2026
May 15, 2023
N/A· v4
6.5 MEDIUM· v3
N/A· v2
A flaw was found in LibRaw. A heap-buffer-overflow in raw2image_ex() caused by a maliciously crafted file may lead to an application crash.
1Codesys
17Control For Beaglebone Sl
Control For Empc A/imx6 SlControl For Iot2000 Sl+14 more
Jun 17, 2026
May 15, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a de...Show more
An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution.Show less
1Codesys
17Control For Beaglebone Sl
Control For Empc A/imx6 SlControl For Iot2000 Sl+14 more
Jun 17, 2026
May 15, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a de...Show more
An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution.Show less