← Back
CWE-787

15,502 CVEs • Abstraction: Base • Likelihood of Exploit: High

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

JSON object

Loading...

CVEs (15,502)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Apple
5Ipados
Iphone OsMacos+2 more
Jun 17, 2026
May 8, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Monterey 12.6.4, tvOS 16.4, watchOS 9.4. An app with root privileges may be able to execut...Show more
The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Monterey 12.6.4, tvOS 16.4, watchOS 9.4. An app with root privileges may be able to execute arbitrary code with kernel privileges.Show less
1Apple
4Ipados
Iphone OsMacos+1 more
Jun 17, 2026
May 8, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5, Safari 15.6. Processing maliciously crafted web content may lead to arbitrary code e...Show more
A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5, Safari 15.6. Processing maliciously crafted web content may lead to arbitrary code executionShow less
1H3c
1Gr 1200w Firmware
Jun 17, 2026
May 8, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function version_set.
1H3c
1Gr 1200w Firmware
Jun 17, 2026
May 8, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function set_tftp_upgrad.
1Advantech
3Eki 1521 Firmware
Eki 1522 FirmwareEki 1524 Firmware
Jun 17, 2026
May 8, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by a Stack-based Buffer Overflow vulnerability, which can be triggered by authenticated users via a crafted POST request.
1Samsung
1Samsung Blockchain Keystore
Jun 17, 2026
May 4, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Out-of-bounds Write vulnerability while processing BC_TUI_CMD_UPDATE_SCREEN in bc_tui trustlet from Samsung Blockchain Keystore prior to version 1.3.12.1 allows local attacker to execute arbitrary code.
1Samsung
1Samsung Blockchain Keystore
Jun 17, 2026
May 4, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Out-of-bounds Write vulnerability while processing BC_TUI_CMD_SEND_RESOURCE_DATA command in bc_tui trustlet from Samsung Blockchain Keystore prior to version 1.3.12.1 allows local attacker to execute arbitrary code.
1Samsung
1Samsung Blockchain Keystore
Jun 17, 2026
May 4, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Out-of-bounds Write vulnerability while processing BC_TUI_CMD_SEND_RESOURCE_DATA_ARRAY command in bc_tui trustlet from Samsung Blockchain Keystore prior to version 1.3.12.1 allows local attacker to execute arbitrary code...Show more
Out-of-bounds Write vulnerability while processing BC_TUI_CMD_SEND_RESOURCE_DATA_ARRAY command in bc_tui trustlet from Samsung Blockchain Keystore prior to version 1.3.12.1 allows local attacker to execute arbitrary code.Show less
1Samsung
1Android
Jun 17, 2026
May 4, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Out-of-bounds write vulnerability in TA_Communication_mpos_encrypt_pin in mPOS TUI trustlet prior to SMR May-2023 Release 1 allows local attackers to execute arbitrary code.
1Samsung
1Android
Jun 17, 2026
May 4, 2023
N/A· v4
6.8 MEDIUM· v3
N/A· v2
Heap out-of-bounds write vulnerability in bootloader prior to SMR May-2023 Release 1 allows a physical attacker to execute arbitrary code.
1Illumos
1Illumos Gate
Jun 17, 2026
May 4, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
illumos illumos-gate before 676abcb has a stack buffer overflow in /dev/net, leading to privilege escalation via a stat on a long file name in /dev/net.
1Emqx
1Nanomq
Jun 17, 2026
May 4, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
In NanoMQ v0.15.0-0, a Heap overflow occurs in copyn_utf8_str function of mqtt_parser.c
1Emqx
1Nanomq
Jun 17, 2026
May 4, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
In NanoMQ v0.15.0-0, Heap overflow occurs in read_byte function of mqtt_code.c.
1Ibm
33948 Ved Firmware
3957 Vec Firmware3957 Ved Firmware
Jun 17, 2026
May 4, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
A vulnerability in the IBM TS7700 Management Interface 8.51.2.12, 8.52.200.111, 8.52.102.13, and 8.53.0.63 could allow an authenticated user to submit a specially crafted URL leading to privilege escalation and remote co...Show more
A vulnerability in the IBM TS7700 Management Interface 8.51.2.12, 8.52.200.111, 8.52.102.13, and 8.53.0.63 could allow an authenticated user to submit a specially crafted URL leading to privilege escalation and remote code execution. IBM X-Force ID: 246320.Show less
1Fortinet
2Fortios
Fortiproxy
Oct 22, 2026
May 3, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
A out-of-bounds write vulnerability in Fortinet FortiOS 7.2.0 through 7.2.3, FortiOS 7.0.0 through 7.0.10, FortiOS 6.4.0 through 6.4.11, FortiOS 6.2.0 through 6.2.13, FortiOS 6.0.0 through 6.0.16, FortiProxy 7.2.0 throug...Show more
A out-of-bounds write vulnerability in Fortinet FortiOS 7.2.0 through 7.2.3, FortiOS 7.0.0 through 7.0.10, FortiOS 6.4.0 through 6.4.11, FortiOS 6.2.0 through 6.2.13, FortiOS 6.0.0 through 6.0.16, FortiProxy 7.2.0 through 7.2.1, FortiProxy 7.0.0 through 7.0.7, FortiProxy 2.0 all versions, FortiProxy 01.02 all versions, FortiProxy 1.2 all versions, FortiProxy 01.01 all versions, FortiProxy 1.1 all versions, FortiProxy 01.00 all versions allows an authenticated attacker to execute unauthorized code or commands via specifically crafted requests.Show less
1Pymumu
1Smartdns
Jun 17, 2026
Apr 28, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
SmartDNS through 41 before 56d0332 allows an out-of-bounds write because of a stack-based buffer overflow in the _dns_encode_domain function in the dns.c file, via a crafted DNS request.
1Hp
46Laserjet Pro M304 M305 W1a46a Firmware
Laserjet Pro M304 M305 W1a47a FirmwareLaserjet Pro M304 M305 W1a48a Firmware+43 more
Jun 25, 2026
Apr 28, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Certain HP LaserJet Pro print products are potentially vulnerable to Heap Overflow and/or Remote Code Execution.
1Linux
1Linux Kernel
Oct 14, 2026
Apr 28, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
qfq_change_class in net/sched/sch_qfq.c in the Linux kernel before 6.2.13 allows an out-of-bounds write because lmax can exceed QFQ_MIN_LMAX.
1Swftools
1Swftools
Jun 17, 2026
Apr 27, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
swfrender v0.9.2 was discovered to contain a heap buffer overflow in the function enumerateUsedIDs_fillstyle at modules/swftools.c
1Vmware
2Fusion
Workstation
Jun 17, 2026
Apr 25, 2023
N/A· v4
8.2 HIGH· v3
N/A· v2
VMware Workstation (17.x) and VMware Fusion (13.x) contain a stack-based buffer-overflow vulnerability that exists in the functionality for sharing host Bluetooth devices with the virtual machine.