← Back
CWE-787

15,502 CVEs • Abstraction: Base • Likelihood of Exploit: High

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

JSON object

Loading...

CVEs (15,502)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
3Artifex
DebianFedoraproject
3Debian Linux
FedoraMujs
Jun 17, 2026
Nov 23, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
A logical issue in O_getOwnPropertyDescriptor() in Artifex MuJS 1.0.0 through 1.3.x before 1.3.2 allows an attacker to achieve Remote Code Execution through memory corruption, via the loading of a crafted JavaScript file...Show more
A logical issue in O_getOwnPropertyDescriptor() in Artifex MuJS 1.0.0 through 1.3.x before 1.3.2 allows an attacker to achieve Remote Code Execution through memory corruption, via the loading of a crafted JavaScript file.Show less
1Totolink
1Lr350 Firmware
Jun 17, 2026
Nov 23, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via parameter sPort/ePort in the setIpPortFilterRules function.
1Totolink
1Lr350 Firmware
Jun 17, 2026
Nov 23, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via parameter week, sTime, and eTime in the setParentalRules function.
1Totolink
1Lr350 Firmware
Jun 17, 2026
Nov 23, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via parameter command in the setTracerouteCfg function.
1Totolink
1Lr350 Firmware
Jun 17, 2026
Nov 23, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via parameter pppoeUser in the setOpModeCfg function.
1Totolink
1Nr1800x Firmware
Jun 17, 2026
Nov 23, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via parameter lang in the setLanguageCfg function.
1Totolink
1Lr350 Firmware
Jun 17, 2026
Nov 23, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a pre-authentication buffer overflow in the main function via long post data.
1Totolink
1Lr350 Firmware
Jun 17, 2026
Nov 23, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via parameter text in the setSmsCfg function.
1Totolink
1Lr350 Firmware
Jun 17, 2026
Nov 23, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via parameter ip in the setDiagnosisCfg function.
1Insyde
1Kernel
Jun 17, 2026
Nov 23, 2022
N/A· v4
8.2 HIGH· v3
N/A· v2
An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. A stack buffer overflow vulnerability in the MebxConfiguration driver leads to arbitrary code execution. Control of a UEFI variable under the OS ca...Show more
An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. A stack buffer overflow vulnerability in the MebxConfiguration driver leads to arbitrary code execution. Control of a UEFI variable under the OS can cause this overflow when read by BIOS code.Show less
1Dlink
1Dir 882 Firmware
Jun 17, 2026
Nov 22, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
D-Link DIR-882 1.10B02 and 1.20B06 is vulnerable to Buffer Overflow via webGetVarString.
1Dlink
1Dir 882 Firmware
Jun 17, 2026
Nov 22, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
D-Link DIR-882 1.10B02 and 1.20B06 is vulnerable to Buffer Overflow.
1Dlink
1Dir 882 Firmware
Jun 17, 2026
Nov 22, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
D-Link DIR-882 1.10B02 and1.20B06 is vulnerable to Buffer Overflow via the websRedirect function.
1Dlink
1Dir 878 Firmware
Jun 17, 2026
Nov 22, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
D-Link DIR878 1.02B04 and 1.02B05 are vulnerable to Buffer Overflow.
1Netgear
1R7000p Firmware
Jun 17, 2026
Nov 22, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow in /usr/sbin/httpd via parameter wan_dns1_sec.
1Netgear
1R7000p Firmware
Jun 17, 2026
Nov 22, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Netgear R7000P V1.3.0.8, V1.3.1.64 is vulnerable to Buffer Overflow via parameters: stamode_dns1_pri and stamode_dns1_sec.
1Netgear
1R7000p Firmware
Jun 17, 2026
Nov 22, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow via parameter openvpn_server_ip.
1Netgear
1R7000p Firmware
Jun 17, 2026
Nov 22, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow via parameter openvpn_push1.
1Netgear
1R7000p Firmware
Jun 17, 2026
Nov 22, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow via parameter openvpn_server_ip.
1Netgear
1R7000p Firmware
Jun 17, 2026
Nov 22, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow via parameter openvpn_push1.