← Back
CWE-787

15,502 CVEs • Abstraction: Base • Likelihood of Exploit: High

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

JSON object

Loading...

CVEs (15,502)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Br Automation
1Industrial Automation Aprol
Jun 17, 2026
Feb 8, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Insufficient validation of input parameters when changing configuration on Tbase server in B&R APROL versions < R 4.2-07 could result in buffer overflow. This may lead to Denial-of-Service conditions or execution of arbi...Show more
Insufficient validation of input parameters when changing configuration on Tbase server in B&R APROL versions < R 4.2-07 could result in buffer overflow. This may lead to Denial-of-Service conditions or execution of arbitrary code. Show less
1Google
1Chrome
Jun 17, 2026
Feb 7, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
Heap buffer overflow in WebUI in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via UI interaction . (Chro...Show more
Heap buffer overflow in WebUI in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via UI interaction . (Chromium security severity: Medium)Show less
1Mediatek
2En7528 Firmware
En7580 Firmware
Jun 17, 2026
Feb 6, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
In Boa, there is a possible escalation of privilege due to a stack buffer overflow. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User interact...Show more
In Boa, there is a possible escalation of privilege due to a stack buffer overflow. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20210008; Issue ID: OSBNB00123241.Show less
1Google
1Android
Jun 17, 2026
Feb 6, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Pa...Show more
In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07629572; Issue ID: ALPS07629572.Show less
1Google
1Android
Jun 17, 2026
Feb 6, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Pa...Show more
In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628615; Issue ID: ALPS07628615.Show less
1Google
1Android
Jun 17, 2026
Feb 6, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
In ged, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Pa...Show more
In ged, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07494067; Issue ID: ALPS07494067.Show less
1Pycdc Project
1Pycdc
Jun 17, 2026
Feb 6, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
pycdc commit 44a730f3a889503014fec94ae6e62d8401cb75e5 was discovered to contain a stack overflow via the component ASTree.cpp:BuildFromCode.
1Kodi
1Kodi
Jun 17, 2026
Feb 3, 2023
N/A· v4
4.6 MEDIUM· v3
N/A· v2
A heap buffer overflow vulnerability in Kodi Home Theater Software up to 19.5 allows attackers to cause a denial of service due to an improper length of the value passed to the offset argument.
1Json.h Project
1Json.h
Jun 17, 2026
Feb 3, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Buffer overflow vulnerability in function json_parse_string in sheredom json.h before commit 0825301a07cbf51653882bf2b153cc81fdadf41 (November 14, 2022) allows attackers to code arbitrary code and gain escalated privileg...Show more
Buffer overflow vulnerability in function json_parse_string in sheredom json.h before commit 0825301a07cbf51653882bf2b153cc81fdadf41 (November 14, 2022) allows attackers to code arbitrary code and gain escalated privileges.Show less
1Json.h Project
1Json.h
Jun 17, 2026
Feb 3, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Buffer overflow vulnerability in function json_parse_key in sheredom json.h before commit 0825301a07cbf51653882bf2b153cc81fdadf41 (November 14, 2022) allows attackers to code arbitrary code and gain escalated privileges.
1Json.h Project
1Json.h
Jun 17, 2026
Feb 3, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Buffer overflow vulnerability in function json_parse_number in sheredom json.h before commit 0825301a07cbf51653882bf2b153cc81fdadf41 (November 14, 2022) allows attackers to code arbitrary code and gain escalated privileg...Show more
Buffer overflow vulnerability in function json_parse_number in sheredom json.h before commit 0825301a07cbf51653882bf2b153cc81fdadf41 (November 14, 2022) allows attackers to code arbitrary code and gain escalated privileges.Show less
1Json.h Project
1Json.h
Jun 17, 2026
Feb 3, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Buffer overflow vulnerability in function json_parse_value in sheredom json.h before commit 0825301a07cbf51653882bf2b153cc81fdadf41 (November 14, 2022) allows attackers to code arbitrary code and gain escalated privilege...Show more
Buffer overflow vulnerability in function json_parse_value in sheredom json.h before commit 0825301a07cbf51653882bf2b153cc81fdadf41 (November 14, 2022) allows attackers to code arbitrary code and gain escalated privileges.Show less
1Json Parser Project
1Json Parser
Jun 17, 2026
Feb 3, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Buffer OverFlow Vulnerability in Barenboim json-parser master and v1.1.0 fixed in v1.1.1 allows an attacker to execute arbitrary code via the json_value_parse function.
1Mojojson Project
1Mojojson
Jun 17, 2026
Feb 3, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Buffer OverFlow Vulnerability in MojoJson v1.2.3 allows an attacker to execute arbitrary code via the SkipString function.
1Memcached
1Memcached
Jun 17, 2026
Feb 3, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Buffer Overflow vulnerability in authfile.c memcached 1.6.9 allows attackers to cause a denial of service via crafted authenticattion file.
1Hdfgroup
1Hdf5
Jun 17, 2026
Feb 3, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Buffer Overflow vulnerability in HDFGroup hdf5-h5dump 1.12.0 through 1.13.0 allows attackers to cause a denial of service via h5tools_str_sprint in /hdf5/tools/lib/h5tools_str.c.
1Cesanta
1Mjs
Jun 17, 2026
Feb 3, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Buffer Overflow vulnerability in Cesanta mJS 1.26 allows remote attackers to cause a denial of service via crafted .js file to mjs_set_errorf.
1Xpdfreader
1Xpdf
Jun 17, 2026
Feb 3, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Buffer Overflow vulnerability in pdfimages in xpdf 4.03 allows attackers to crash the application via crafted command.
1Liballeg
1Allegro
Jun 17, 2026
Feb 3, 2023
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Buffer Overflow vulnerability in Allegro through 5.2.6 allows attackers to cause a denial of service via crafted PCX/TGA/BMP files to allegro_image addon.
1Gnu
1Glibc
Oct 14, 2026
Feb 3, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
sprintf in the GNU C Library (glibc) 2.37 has a buffer overflow (out-of-bounds write) in some situations with a correct buffer size. This is unrelated to CWE-676. It may write beyond the bounds of the destination buffer...Show more
sprintf in the GNU C Library (glibc) 2.37 has a buffer overflow (out-of-bounds write) in some situations with a correct buffer size. This is unrelated to CWE-676. It may write beyond the bounds of the destination buffer when attempting to write a padded, thousands-separated string representation of a number, if the buffer is allocated the exact size required to represent that number as a string. For example, 1,234,567 (with padding to 13) overflows by two bytes.Show less