← Back
CWE-787

14,869 CVEs • Abstraction: Base • Likelihood of Exploit: High

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

JSON object

Loading...

CVEs (14,869)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Google
1Android
Jun 17, 2026
Jan 3, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitat...Show more
In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07573237; Issue ID: ALPS07573237.Show less
1Google
1Android
Jun 17, 2026
Jan 3, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
In mdp, there is a possible out of bounds write due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation....Show more
In mdp, there is a possible out of bounds write due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07342114; Issue ID: ALPS07342114.Show less
1Fujielectric
1V Server
Jun 17, 2026
Jan 3, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Stack-based buffer overflow vulnerability in V-Server v4.0.12.0 and earlier allows a local attacker to obtain the information and/or execute arbitrary code by having a user to open a specially crafted project file.
1Fujielectric
1V Server
Jun 17, 2026
Jan 3, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Out-of-bounds write vulnerability in V-Server v4.0.12.0 and earlier allows a local attacker to obtain the information and/or execute arbitrary code by having a user to open a specially crafted project file.
1Fujielectric
2Tellus
V Sft
Jun 17, 2026
Jan 3, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Out-of-bounds write vulnerability in V-SFT v6.1.7.0 and earlier and TELLUS v4.0.12.0 and earlier allows a local attacker to obtain the information and/or execute arbitrary code by having a user to open a specially crafte...Show more
Out-of-bounds write vulnerability in V-SFT v6.1.7.0 and earlier and TELLUS v4.0.12.0 and earlier allows a local attacker to obtain the information and/or execute arbitrary code by having a user to open a specially crafted image file.Show less
1Fortinet
2Fortios
Fortiproxy
Jun 17, 2026
Jan 2, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
A heap-based buffer overflow vulnerability [CWE-122] in FortiOS SSL-VPN 7.2.0 through 7.2.2, 7.0.0 through 7.0.8, 6.4.0 through 6.4.10, 6.2.0 through 6.2.11, 6.0.15 and earlier and FortiProxy SSL-VPN 7.2.0 through 7.2.1...Show more
A heap-based buffer overflow vulnerability [CWE-122] in FortiOS SSL-VPN 7.2.0 through 7.2.2, 7.0.0 through 7.0.8, 6.4.0 through 6.4.10, 6.2.0 through 6.2.11, 6.0.15 and earlier and FortiProxy SSL-VPN 7.2.0 through 7.2.1, 7.0.7 and earlier may allow a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests.Show less
1Nvidia
1Jetson Linux
Jun 17, 2026
Dec 30, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
NVIDIA distributions of Linux contain a vulnerability in nvdla_emu_task_submit, where unvalidated input may allow a local attacker to cause stack-based buffer overflow in kernel code, which may lead to escalation of priv...Show more
NVIDIA distributions of Linux contain a vulnerability in nvdla_emu_task_submit, where unvalidated input may allow a local attacker to cause stack-based buffer overflow in kernel code, which may lead to escalation of privileges, compromised integrity and confidentiality, and denial of service. Show less
1Nvidia
3Cloud Gaming
Gpu Display DriverVirtual Gpu
Jun 17, 2026
Dec 30, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where an input index is not validated, which may lead to buffer overrun, which in turn may cause data tampering, information disclos...Show more
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where an input index is not validated, which may lead to buffer overrun, which in turn may cause data tampering, information disclosure, or denial of service.Show less
1Nvidia
2Cloud Gaming
Virtual Gpu
Jun 17, 2026
Dec 30, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an out-of-bounds array access may lead to denial of service, information disclosure, or data tampering.
1Nvidia
1Gpu Display Driver
Jun 17, 2026
Dec 30, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
NVIDIA GPU Display Driver for Windows contains a vulnerability in the user-mode layer, where an unprivileged user can cause an out-of-bounds write, which may lead to code execution, information disclosure, and denial of...Show more
NVIDIA GPU Display Driver for Windows contains a vulnerability in the user-mode layer, where an unprivileged user can cause an out-of-bounds write, which may lead to code execution, information disclosure, and denial of service.Show less
1Tenda
1A15 Firmware
Jun 17, 2026
Dec 30, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wepkey2 parameter at /goform/WifiBasicSet.
1Tenda
1A15 Firmware
Jun 17, 2026
Dec 30, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wrlPwd parameter at /goform/WifiBasicSet.
1Tenda
1A15 Firmware
Jun 17, 2026
Dec 30, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wrlEn parameter at /goform/WifiBasicSet.
1Tenda
1A15 Firmware
Jun 17, 2026
Dec 30, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wrlEn_5g parameter at /goform/WifiBasicSet.
1Tenda
1A15 Firmware
Jun 17, 2026
Dec 30, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wepkey4 parameter at /goform/WifiBasicSet.
1Tenda
1A15 Firmware
Jun 17, 2026
Dec 30, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wepkey3 parameter at /goform/WifiBasicSet.
1Tenda
1A15 Firmware
Jun 17, 2026
Dec 30, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wrlPwd_5g parameter at /goform/WifiBasicSet.
1Tenda
1A15 Firmware
Jun 17, 2026
Dec 30, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wepkey parameter at /goform/WifiBasicSet.
1Tenda
1A15 Firmware
Jun 17, 2026
Dec 30, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the security_5g parameter at /goform/WifiBasicSet.
1Tenda
1A15 Firmware
Jun 17, 2026
Dec 30, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the ssid parameter at /goform/WifiBasicSet.