← Back
CWE-787

15,502 CVEs • Abstraction: Base • Likelihood of Exploit: High

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

JSON object

Loading...

CVEs (15,502)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Google
1Android
Jun 17, 2026
Dec 5, 2022
N/A· v4
6.7 MEDIUM· v3
N/A· v2
In mpu, there is a possible memory corruption due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALP...Show more
In mpu, there is a possible memory corruption due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07541753; Issue ID: ALPS07541753.Show less
1Google
1Android
Jun 17, 2026
Dec 5, 2022
N/A· v4
6.7 MEDIUM· v3
N/A· v2
In keyinstall, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploi...Show more
In keyinstall, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07439659; Issue ID: ALPS07439659.Show less
1Google
1Android
Jun 17, 2026
Dec 5, 2022
N/A· v4
6.7 MEDIUM· v3
N/A· v2
In widevine, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploita...Show more
In widevine, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07446228; Issue ID: ALPS07446228.Show less
1Google
1Android
Jun 17, 2026
Dec 5, 2022
N/A· v4
6.7 MEDIUM· v3
N/A· v2
In widevine, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploita...Show more
In widevine, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07446228; Issue ID: ALPS07446228.Show less
1Google
1Android
Jun 17, 2026
Dec 5, 2022
N/A· v4
6.7 MEDIUM· v3
N/A· v2
In widevine, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploita...Show more
In widevine, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07446213; Issue ID: ALPS07446213.Show less
1Google
1Android
Jun 17, 2026
Dec 5, 2022
N/A· v4
6.7 MEDIUM· v3
N/A· v2
In widevine, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploita...Show more
In widevine, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07446207; Issue ID: ALPS07446207.Show less
1Vim
1Vim
Jun 17, 2026
Dec 3, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0742.
1Vim
1Vim
Jun 17, 2026
Dec 2, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0765.
1Tenda
1I21 Firmware
Jun 17, 2026
Dec 2, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda i21 V1.0.0.14(4656) is vulnerable to Buffer Overflow via /goform/setUplinkInfo.
1Tenda
1I21 Firmware
Jun 17, 2026
Dec 2, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda i21 V1.0.0.14(4656) is vulnerable to Buffer Overflow via /goform/setDiagnoseInfo.
1Tenda
1I21 Firmware
Jun 17, 2026
Dec 2, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda i21 V1.0.0.14(4656) has a stack overflow vulnerability via /goform/setSysPwd.
1Tenda
1I21 Firmware
Jun 17, 2026
Dec 2, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda i21 V1.0.0.14(4656) is vulnerable to Buffer Overflow via /goform/setSnmpInfo.
1Tenda
1I21 Firmware
Jun 17, 2026
Dec 2, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda i21 V1.0.0.14(4656) is vulnerable to Buffer Overflow via /goform/AddSysLogRule.
1Tenda
1Ac6 Firmware
Jun 17, 2026
Dec 1, 2022
N/A· v4
7.5 HIGH· v3
N/A· v2
Tenda Tenda AC6V1.0 V15.03.05.19 is affected by buffer overflow. Causes a denial of service (local).
1Tenda
1Tx9 Pro Firmware
Jun 17, 2026
Nov 30, 2022
N/A· v4
7.5 HIGH· v3
N/A· v2
Tenda TX9 Pro v22.03.02.10 was discovered to contain a stack overflow via the list parameter at /goform/SetIpMacBind.
1Gnu
1Libredwg
Jun 17, 2026
Nov 30, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
LibreDWG v0.12.4.4643 was discovered to contain a heap buffer overflow via the function decode_preR13_section_hdr at decode_r11.c.
1Google
1Chrome
Jun 17, 2026
Nov 30, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
Out of bounds write in Lacros Graphics in Google Chrome on Chrome OS and Lacros prior to 108.0.5359.71 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corr...Show more
Out of bounds write in Lacros Graphics in Google Chrome on Chrome OS and Lacros prior to 108.0.5359.71 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via UI interactions. (Chromium security severity: High)Show less
1Gpac
1Gpac
Jun 17, 2026
Nov 29, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
GPAC v2.1-DEV-rev428-gcb8ae46c8-master was discovered to contain a stack overflow via the function dimC_box_read at isomedia/box_code_3gpp.c.
4Debian
FedoraprojectNeovim+1 more
4Debian Linux
FedoraNeovim+1 more
Sep 24, 2026
Nov 25, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
Heap based buffer overflow in vim/vim 9.0.0946 and below by allowing an attacker to CTRL-W gf in the expression used in the RHS of the substitute command.
2Google
Microsoft
3Chrome
EdgeEdge Chromium
Jun 17, 2026
Nov 25, 2022
N/A· v4
9.6 CRITICAL· v3
N/A· v2
Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security...Show more
Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)Show less