← Back
CWE-787

15,502 CVEs • Abstraction: Base • Likelihood of Exploit: High

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

JSON object

Loading...

CVEs (15,502)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Qualcomm
74Ar9380 Firmware
Csr8811 FirmwareIpq4019 Firmware+71 more
Jun 17, 2026
Feb 12, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Memory corruption due to stack based buffer overflow in WLAN having invalid WNM frame length.
1Qualcomm
201Apq8009 Firmware
Apq8009w FirmwareApq8017 Firmware+198 more
Jun 17, 2026
Feb 12, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption due to configuration weakness in modem wile sending command to write protected files.
1Qualcomm
30Ar8031 Firmware
Csra6620 FirmwareCsra6640 Firmware+27 more
Jun 17, 2026
Feb 12, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Memory corruption in modem due to improper length check while copying into memory
1Tenda
1Ac23 Firmware
Jun 17, 2026
Feb 11, 2023
N/A· v4
9.8 CRITICAL· v3
8.3 HIGH· v2
A vulnerability was found in Tenda AC23 16.03.07.45 and classified as critical. Affected by this issue is the function formSetSysToolDDNS/formGetSysToolDDNS of the file /bin/httpd. The manipulation leads to out-of-bounds...Show more
A vulnerability was found in Tenda AC23 16.03.07.45 and classified as critical. Affected by this issue is the function formSetSysToolDDNS/formGetSysToolDDNS of the file /bin/httpd. The manipulation leads to out-of-bounds write. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-220640.Show less
1Keystorage
1Global Facilities Management Software
Jun 17, 2026
Feb 10, 2023
N/A· v4
9.1 CRITICAL· v3
N/A· v2
Hardcoded credentials in Global Facilities Management Software (GFMS) Version 3 software distributed by Key Systems Management permits remote attackers to impact availability, confidentiality, accessibility and dependabi...Show more
Hardcoded credentials in Global Facilities Management Software (GFMS) Version 3 software distributed by Key Systems Management permits remote attackers to impact availability, confidentiality, accessibility and dependability of electronic key boxes.Show less
1Dlink
1Dir 605l Firmware
Jun 17, 2026
Feb 10, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the webpage parameter at /goform/formWPS.
1Dlink
1Dir 605l Firmware
Jun 17, 2026
Feb 10, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the FILECODE parameter at /goform/formLogin.
1Dlink
1Dir 605l Firmware
Jun 17, 2026
Feb 10, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the config.smtp_email_subject parameter at /goform/formSetEmail.
1Dlink
1Dir 605l Firmware
Jun 17, 2026
Feb 10, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the curTime parameter at /goform/formSetRoute.
1Dlink
1Dir 605l Firmware
Jun 17, 2026
Feb 10, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the curTime parameter at /goform/formSetACLFilter.
1Dlink
1Dir 605l Firmware
Jun 17, 2026
Feb 10, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the webpage parameter at /goform/formSetWanDhcpplus.
1Dlink
1Dir 605l Firmware
Jun 17, 2026
Feb 10, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the wan_connected parameter at /goform/formEasySetupWizard3.
1Dlink
1Dir 605l Firmware
Jun 17, 2026
Feb 10, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the curTime parameter at /goform/formSetWanDhcpplus.
1Dlink
1Dir 605l Firmware
Jun 17, 2026
Feb 10, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the webpage parameter at /goform/formWlanGuestSetup.
1Dlink
1Dir 605l Firmware
Jun 17, 2026
Feb 10, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the curTime parameter at /goform/formSchedule.
1Dell
1Emc Powerscale Onefs
Jun 17, 2026
Feb 10, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
Dell PowerScale OneFS, versions 8.2.x-9.3.x, contain a heap-based buffer overflow. A local privileged malicious user could potentially exploit this vulnerability, leading to system takeover. This impacts compliance mode...Show more
Dell PowerScale OneFS, versions 8.2.x-9.3.x, contain a heap-based buffer overflow. A local privileged malicious user could potentially exploit this vulnerability, leading to system takeover. This impacts compliance mode clusters. Show less
2Debian
Gpac
2Debian Linux
Gpac
Jun 17, 2026
Feb 9, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.2.
1Samsung
1Android
Jun 17, 2026
Feb 9, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
A Stack-based overflow vulnerability in IpcRxEmbmsSessionList in SECRIL prior to Android S(12) allows attacker to cause memory corruptions.
1Gpac
1Gpac
Jun 17, 2026
Feb 9, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to V2.1.0-DEV.
1Deltaww
1Diascreen
Jun 17, 2026
Feb 8, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Delta Electronics DIAScreen versions 1.2.1.23 and prior are vulnerable to out-of-bounds write, which may allow an attacker to remotely execute arbitrary code.