← Back
CWE-787

14,869 CVEs • Abstraction: Base • Likelihood of Exploit: High

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

JSON object

Loading...

CVEs (14,869)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Pngdec Project
1Pngdec
Jun 17, 2026
Aug 16, 2022
N/A· v4
6.5 MEDIUM· v3
N/A· v2
PNGDec commit 8abf6be was discovered to contain a stack overflow via /linux/main.cpp.
1Pngdec Project
1Pngdec
Jun 17, 2026
Aug 16, 2022
N/A· v4
6.5 MEDIUM· v3
N/A· v2
PNGDec commit 8abf6be was discovered to contain a heap buffer overflow via __interceptor_fwrite.part.57 at sanitizer_common_interceptors.inc.
1Blender
1Blender
Jun 17, 2026
Aug 16, 2022
N/A· v4
7.5 HIGH· v3
N/A· v2
A flaw was found in Blender 3.3.0. An interger overflow in source/blender/blendthumb/src/blendthumb_extract.cc may lead to program crash or memory corruption.
1Nordicsemi
1Nrf5 Sdk For Mesh
Jun 17, 2026
Aug 15, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
In Nordic nRF5 SDK for Mesh 5.0, a heap overflow vulnerability can be triggered by sending a series of segmented packets with SegO > SegN
1Nordicsemi
1Nrf5 Sdk For Mesh
Jun 17, 2026
Aug 15, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
In Nordic nRF5 SDK for Mesh 5.0, a heap overflow vulnerability can be triggered by sending a series of segmented control packets and access packets with the same SeqAuth
2Fedoraproject
Tats
2Fedora
W3m
Jun 17, 2026
Aug 15, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
There is an out-of-bounds write in checkType located in etc.c in w3m 0.5.3. It can be triggered by sending a crafted HTML file to the w3m binary. It allows an attacker to cause Denial of Service or possibly have unspecif...Show more
There is an out-of-bounds write in checkType located in etc.c in w3m 0.5.3. It can be triggered by sending a crafted HTML file to the w3m binary. It allows an attacker to cause Denial of Service or possibly have unspecified other impact.Show less
2Fedoraproject
Google
2Chrome
Fedora
Jun 17, 2026
Aug 12, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
Heap buffer overflow in PDF in Google Chrome prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via a crafted PDF file.
1Google
1Chrome
Jun 17, 2026
Aug 12, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Out of bounds write in Chrome OS Audio Server in Google Chrome on Chrome OS prior to 102.0.5005.125 allowed a remote attacker to potentially exploit heap corruption via crafted audio metadata.
1Tenda
1W6 Firmware
Jun 17, 2026
Aug 12, 2022
N/A· v4
7.5 HIGH· v3
N/A· v2
A stack overflow vulnerability exists in /goform/WifiMacFilterSet in Tenda W6 V1.0.0.9(4122) version, which can be exploited by attackers to cause a denial of service (DoS) via the index parameter.
1Tenda
1W6 Firmware
Jun 17, 2026
Aug 12, 2022
N/A· v4
7.5 HIGH· v3
N/A· v2
A stack overflow vulnerability exists in /goform/wifiSSIDset in Tenda W6 V1.0.0.9(4122) version, which can be exploited by attackers to cause a denial of service (DoS) via the index parameter.
1Tenda
1W6 Firmware
Jun 17, 2026
Aug 12, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
A stack overflow vulnerability exists in /goform/setAutoPing in Tenda W6 V1.0.0.9(4122), which allows an attacker to construct ping1 parameters and ping2 parameters for a stack overflow attack. An attacker can use this v...Show more
A stack overflow vulnerability exists in /goform/setAutoPing in Tenda W6 V1.0.0.9(4122), which allows an attacker to construct ping1 parameters and ping2 parameters for a stack overflow attack. An attacker can use this vulnerability to execute arbitrary code execution.Show less
1Tenda
1W6 Firmware
Jun 17, 2026
Aug 12, 2022
N/A· v4
7.5 HIGH· v3
N/A· v2
A stack overflow vulnerability exists in /goform/WifiMacFilterGet in Tenda W6 V1.0.0.9(4122) version, which can be exploited by attackers to cause a denial of service (DoS) via the index parameter.
1Tenda
1W6 Firmware
Jun 17, 2026
Aug 12, 2022
N/A· v4
7.5 HIGH· v3
N/A· v2
A stack overflow vulnerability exists in /goform/wifiSSIDget in Tenda W6 V1.0.0.9(4122) version, which can be exploited by attackers to cause a denial of service (DoS) via the index parameter.
1Google
1Android
Jun 17, 2026
Aug 12, 2022
N/A· v4
6.8 MEDIUM· v3
N/A· v2
In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitati...Show more
In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-192206329Show less
1Google
1Android
Jun 17, 2026
Aug 12, 2022
N/A· v4
6.5 MEDIUM· v3
N/A· v2
In Bluetooth, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for expl...Show more
In Bluetooth, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-206478022Show less
1Google
1Android
Jun 17, 2026
Aug 12, 2022
N/A· v4
6.8 MEDIUM· v3
N/A· v2
In Bluetooth, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploit...Show more
In Bluetooth, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-209062898Show less
1Adobe
4Acrobat
Acrobat DcAcrobat Reader+1 more
Jun 17, 2026
Aug 11, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
Adobe Acrobat Reader versions 22.001.20169 (and earlier), 20.005.30362 (and earlier) and 17.012.30249 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in th...Show more
Adobe Acrobat Reader versions 22.001.20169 (and earlier), 20.005.30362 (and earlier) and 17.012.30249 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
1Adobe
1Illustrator
Jun 17, 2026
Aug 11, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
Adobe Illustrator versions 26.3.1 (and earlier) and 25.4.6 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation...Show more
Adobe Illustrator versions 26.3.1 (and earlier) and 25.4.6 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
1Zoom
1Meeting Connector
Jun 17, 2026
Aug 11, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Zoom On-Premise Meeting Connector Zone Controller (ZC) before version 4.8.20220419.112 fails to properly parse STUN error codes, which can result in memory corruption and could allow a malicious actor to crash the applic...Show more
Zoom On-Premise Meeting Connector Zone Controller (ZC) before version 4.8.20220419.112 fails to properly parse STUN error codes, which can result in memory corruption and could allow a malicious actor to crash the application. In versions older than 4.8.12.20211115, this vulnerability could also be leveraged to execute arbitrary code.Show less
1Google
1Android
Jun 17, 2026
Aug 11, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
In cd_CodeMsg of cd_codec.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed...Show more
In cd_CodeMsg of cd_codec.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-225178325References: N/AShow less