← Back
CWE-787

14,869 CVEs • Abstraction: Base • Likelihood of Exploit: High

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

JSON object

Loading...

CVEs (14,869)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
3Dpdk
FedoraprojectRedhat
4Data Plane Development Kit
Enterprise LinuxEnterprise Linux Fast Datapath+1 more
Jun 17, 2026
Aug 23, 2022
N/A· v4
7.5 HIGH· v3
N/A· v2
A flaw was found in the vhost library in DPDK. Function vhost_user_set_inflight_fd() does not validate `msg->payload.inflight.num_queues`, possibly causing out-of-bounds memory read/write. Any software using DPDK vhost l...Show more
A flaw was found in the vhost library in DPDK. Function vhost_user_set_inflight_fd() does not validate `msg->payload.inflight.num_queues`, possibly causing out-of-bounds memory read/write. Any software using DPDK vhost library may crash as a result of this vulnerability.Show less
2Debian
Openexr
2Debian Linux
Openexr
Jun 17, 2026
Aug 23, 2022
N/A· v4
7.5 HIGH· v3
N/A· v2
A flaw was found in OpenEXR's B44Compressor. This flaw allows an attacker who can submit a crafted file to be processed by OpenEXR, to exhaust all memory accessible to the application. The highest threat from this vulner...Show more
A flaw was found in OpenEXR's B44Compressor. This flaw allows an attacker who can submit a crafted file to be processed by OpenEXR, to exhaust all memory accessible to the application. The highest threat from this vulnerability is to system availability.Show less
1Hdfgroup
1Hdf5
Jun 17, 2026
Aug 22, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
A heap-based buffer overflow vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger thi...Show more
A heap-based buffer overflow vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.Show less
1Hdfgroup
1Hdf5
Jun 17, 2026
Aug 22, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
An out-of-bounds write vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vuln...Show more
An out-of-bounds write vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.Show less
1Tendacn
1Ac9 Firmware
Jul 9, 2026
Aug 19, 2022
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Tenda AC9 V15.03.2.13 is vulnerable to Buffer Overflow via httpd, form_fast_setting_wifi_set. httpd.
1Tenda
1Ac15 Firmware
Jun 17, 2026
Aug 19, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda ac15 firmware V15.03.05.18 httpd server has stack buffer overflow in /goform/formWifiBasicSet.
1Faststone
1Image Viewer
Jun 17, 2026
Aug 18, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Unsafe Parsing of a PNG tRNS chunk in FastStone Image Viewer through 7.5 results in a stack buffer overflow.
2Broadcom
Fedoraproject
2Fedora
Tcpreplay
Jun 17, 2026
Aug 18, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
The component tcpprep in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer overflow in parse_mpls at common/get.c:150. NOTE: this is different from CVE-2022-27942.
2Broadcom
Fedoraproject
2Fedora
Tcpreplay
Jun 17, 2026
Aug 18, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
The component tcprewrite in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer overflow in get_l2len_protocol at common/get.c:344. NOTE: this is different from CVE-2022-27941.
2Broadcom
Fedoraproject
2Fedora
Tcpreplay
Jun 17, 2026
Aug 18, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
The component tcprewrite in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer overflow in get_ipv6_next at common/get.c:713. NOTE: this is different from CVE-2022-27940.
1Intel
3Proset Wi Fi 6e Ax210 Firmware
Wi Fi 6e Ax211 FirmwareWi Fi 6e Ax411 Firmware
Jun 17, 2026
Aug 18, 2022
N/A· v4
6.7 MEDIUM· v3
N/A· v2
Out of bounds write for some Intel(R) PROSet/Wireless WiFi products may allow a privileged user to potentially enable escalation of privilege via local access.
2Intel
Netapp
72Aff A200 Firmware
Aff A220 FirmwareAff A250 Firmware+69 more
Jun 17, 2026
Aug 18, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
Out-of-bounds write in the BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via local access.
3Debian
FedoraprojectLibtiff
3Debian Linux
FedoraLibtiff
Jun 17, 2026
Aug 17, 2022
N/A· v4
5.5 MEDIUM· v3
N/A· v2
libtiff's tiffcrop tool has a uint32_t underflow which leads to out of bounds read and write in the extractContigSamples8bits routine. An attacker who supplies a crafted file to tiffcrop could trigger this flaw, most lik...Show more
libtiff's tiffcrop tool has a uint32_t underflow which leads to out of bounds read and write in the extractContigSamples8bits routine. An attacker who supplies a crafted file to tiffcrop could trigger this flaw, most likely by tricking a user into opening the crafted file with tiffcrop. Triggering this flaw could cause a crash or potentially further exploitation.Show less
3Debian
FedoraprojectLibtiff
3Debian Linux
FedoraLibtiff
Jun 17, 2026
Aug 17, 2022
N/A· v4
5.5 MEDIUM· v3
N/A· v2
libtiff's tiffcrop utility has a uint32_t underflow that can lead to out of bounds read and write. An attacker who supplies a crafted file to tiffcrop (likely via tricking a user to run tiffcrop on it with certain parame...Show more
libtiff's tiffcrop utility has a uint32_t underflow that can lead to out of bounds read and write. An attacker who supplies a crafted file to tiffcrop (likely via tricking a user to run tiffcrop on it with certain parameters) could cause a crash or in some cases, further exploitation.Show less
1Gpac
1Gpac
Jun 17, 2026
Aug 17, 2022
N/A· v4
5.5 MEDIUM· v3
N/A· v2
A heap-buffer-overflow had occurred in function gf_isom_dovi_config_get of isomedia/avc_ext.c:2490, as demonstrated by MP4Box. This vulnerability was fixed in commit fef6242.
1Xpdf Project
1Xpdf
Jun 17, 2026
Aug 16, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::lookChar() at /xpdf/Stream.cc.
1Xpdf Project
1Xpdf
Jun 17, 2026
Aug 16, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::readScan() at /xpdf/Stream.cc.
1Xpdf Project
1Xpdf
Jun 17, 2026
Aug 16, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::getChar() at /xpdf/Stream.cc.
1Xpdf Project
1Xpdf
Jun 17, 2026
Aug 16, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::readHuffSym(DCTHuffTable*) at /xpdf/Stream.cc.
1Xpdf Project
1Xpdf
Jun 17, 2026
Aug 16, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::transformDataUnit at /xpdf/Stream.cc.