← Back
CWE-787

15,502 CVEs • Abstraction: Base • Likelihood of Exploit: High

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

JSON object

Loading...

CVEs (15,502)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Wolfssl
1Wolfssl
Jun 17, 2026
Sep 29, 2022
N/A· v4
7.5 HIGH· v3
N/A· v2
In wolfSSL before 5.5.1, malicious clients can cause a buffer overflow during a TLS 1.3 handshake. This occurs when an attacker supposedly resumes a previous TLS session. During the resumption Client Hello a Hello Retry...Show more
In wolfSSL before 5.5.1, malicious clients can cause a buffer overflow during a TLS 1.3 handshake. This occurs when an attacker supposedly resumes a previous TLS session. During the resumption Client Hello a Hello Retry Request must be triggered. Both Client Hellos are required to contain a list of duplicate cipher suites to trigger the buffer overflow. In total, two Client Hellos have to be sent: one in the resumed session, and a second one as a response to a Hello Retry Request message.Show less
1Dell
1Smartfabric Os10
Jun 17, 2026
Sep 28, 2022
N/A· v4
7.5 HIGH· v3
N/A· v2
Networking OS10, versions 10.5.1.x, 10.5.2.x, and 10.5.3.x contain a vulnerability that could allow an attacker to cause a system crash by running particular security scans.
2Debian
Graphicsmagick
2Debian Linux
Graphicsmagick
Jun 17, 2026
Sep 28, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
In GraphicsMagick, a heap buffer overflow was found when parsing MIFF.
1Tenda
1Tx3 Firmware
Jun 17, 2026
Sep 28, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda TX3 US_TX3V1.0br_V16.03.13.11 is vulnerable to stack overflow via compare_parentcontrol_time.
1Sony
2Playstation 4 Firmware
Playstation 5 Firmware
Jun 17, 2026
Sep 28, 2022
N/A· v4
6.8 MEDIUM· v3
N/A· v2
A vulnerability was found in Sony PS4 and PS5. It has been classified as critical. This affects the function UVFAT_readupcasetable of the component exFAT Handler. The manipulation of the argument dataLength leads to heap...Show more
A vulnerability was found in Sony PS4 and PS5. It has been classified as critical. This affects the function UVFAT_readupcasetable of the component exFAT Handler. The manipulation of the argument dataLength leads to heap-based buffer overflow. It is possible to launch the attack on the physical device. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-209679.Show less
4Debian
FedoraprojectNeovim+1 more
4Debian Linux
FedoraNeovim+1 more
Sep 24, 2026
Sep 27, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0598.
1Toaruos
1Toaruos
Jun 17, 2026
Sep 27, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
readelf in ToaruOS 2.0.1 has a global overflow allowing RCE when parsing a crafted ELF file.
1Westerndigital
3My Cloud Home Duo Firmware
My Cloud Home FirmwareSandisk Ibi Firmware
Jun 17, 2026
Sep 27, 2022
N/A· v4
6.7 MEDIUM· v3
N/A· v2
A stack-based buffer overflow vulnerability was found on Western Digital My Cloud Home, My Cloud Home Duo, and SanDisk ibi that could allow an attacker accessing the system locally to read information from /etc/version f...Show more
A stack-based buffer overflow vulnerability was found on Western Digital My Cloud Home, My Cloud Home Duo, and SanDisk ibi that could allow an attacker accessing the system locally to read information from /etc/version file. This vulnerability can only be exploited by chaining it with another issue. If an attacker is able to carry out a remote code execution attack, they can gain access to the vulnerable file, due to the presence of insecure functions in code. User interaction is required for exploitation. Exploiting the vulnerability could result in exposure of information, ability to modify files, memory access errors, or system crashes.Show less
1Mipcm
1Mipc Camera Firmware
Jun 17, 2026
Sep 26, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
Unlimited strcpy on user input when setting a locale file leads to stack buffer overflow in mIPC camera firmware 5.3.1.2003161406.
2Fedoraproject
Google
2Chrome
Fedora
Jun 17, 2026
Sep 26, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
Heap buffer overflow in Internals in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
2Fedoraproject
Google
2Chrome
Fedora
Jun 17, 2026
Sep 26, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
Out of bounds write in Storage in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High)
2Fedoraproject
Google
3Chrome
FedoraLinux And Chrome Os
Jun 17, 2026
Sep 26, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
Heap buffer overflow in Window Manager in Google Chrome on Chrome OS, Lacros prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corrupt...Show more
Heap buffer overflow in Window Manager in Google Chrome on Chrome OS, Lacros prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via crafted UI interactions.Show less
2Fedoraproject
Google
3Chrome
FedoraLinux And Chrome Os
Jun 17, 2026
Sep 26, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
Heap buffer overflow in Exosphere in Google Chrome on Chrome OS, Lacros prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption v...Show more
Heap buffer overflow in Exosphere in Google Chrome on Chrome OS, Lacros prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via crafted UI interactions.Show less
2Fedoraproject
Google
2Chrome
Fedora
Jun 17, 2026
Sep 26, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
Heap buffer overflow in WebUI in Google Chrome on Chrome OS prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via crafted U...Show more
Heap buffer overflow in WebUI in Google Chrome on Chrome OS prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via crafted UI interactions.Show less
2Fedoraproject
Google
2Chrome
Fedora
Jun 17, 2026
Sep 26, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
Insufficient validation of untrusted input in V8 in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
2Fedoraproject
Google
2Chrome
Fedora
Jun 17, 2026
Sep 26, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
Heap buffer overflow in Screen Capture in Google Chrome on Chrome OS prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via...Show more
Heap buffer overflow in Screen Capture in Google Chrome on Chrome OS prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page.Show less
2Fedoraproject
Google
2Chrome
Fedora
Jun 17, 2026
Sep 26, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
Use after free in Layout in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
2Fedoraproject
Google
2Chrome
Fedora
Jun 17, 2026
Sep 26, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
Heap buffer overflow in Downloads in Google Chrome on Android prior to 104.0.5112.101 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.
3Fedoraproject
NeovimVim
3Fedora
NeovimVim
Sep 24, 2026
Sep 25, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0577.
1Apple
7Ipados
Iphone OsItunes+4 more
Jun 17, 2026
Sep 23, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.3, Safari 15.4, watchOS 8.5, iTunes 12.12.3 for Windows, iOS 15.4 and iPadOS 15.4, tvOS 15.4. Processing malic...Show more
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.3, Safari 15.4, watchOS 8.5, iTunes 12.12.3 for Windows, iOS 15.4 and iPadOS 15.4, tvOS 15.4. Processing maliciously crafted web content may lead to arbitrary code execution.Show less