← Back
CWE-787

14,869 CVEs • Abstraction: Base • Likelihood of Exploit: High

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

JSON object

Loading...

CVEs (14,869)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Nvidia
1Dgx A100 Firmware
Jun 17, 2026
Jul 2, 2022
N/A· v4
8.2 HIGH· v3
4.6 MEDIUM· v2
NVIDIA DGX A100 contains a vulnerability in SBIOS in the BiosCfgTool, where a local user with elevated privileges can read and write beyond intended bounds in SMRAM, which may lead to code execution, escalation of privil...Show more
NVIDIA DGX A100 contains a vulnerability in SBIOS in the BiosCfgTool, where a local user with elevated privileges can read and write beyond intended bounds in SMRAM, which may lead to code execution, escalation of privileges, denial of service, and information disclosure. The scope of impact can extend to other components.Show less
1Pdfalto Project
1Pdfalto
Jun 17, 2026
Jul 1, 2022
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
PDFAlto v0.4 was discovered to contain a heap buffer overflow via the component /pdfalto/src/pdfalto.cc.
1Tendacn
1Ac23 Ac2100 Firmware
Jul 9, 2026
Jul 1, 2022
N/A· v4
8.8 HIGH· v3
5.8 MEDIUM· v2
Tenda AC23 v16.03.07.44 was discovered to contain a stack overflow via the security_5g parameter in the function formWifiBasicSet.
1Totolink
1T6 Firmware
Jun 17, 2026
Jul 1, 2022
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the cloneMac parameter in the function FUN_0041621c.
1Totolink
1T6 Firmware
Jun 17, 2026
Jul 1, 2022
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the desc parameter in the function FUN_004137a4.
1Totolink
1T6 Firmware
Jun 17, 2026
Jul 1, 2022
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the desc, week, sTime, eTime parameters in the function FUN_004133c4.
1Totolink
1T6 Firmware
Jun 17, 2026
Jul 1, 2022
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the cloneMac parameter in the function FUN_0041af40.
1Totolink
1T6 Firmware
Jun 17, 2026
Jul 1, 2022
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the url parameter in the function FUN_00418540.
1Totolink
1T6 Firmware
Jun 17, 2026
Jul 1, 2022
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the command parameter in the function FUN_0041cc88.
1Totolink
1T6 Firmware
Jun 17, 2026
Jul 1, 2022
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the desc parameter in the function FUN_00412ef4.
1Totolink
1T6 Firmware
Jun 17, 2026
Jul 1, 2022
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the desc parameter in the function FUN_0041880c.
1Totolink
1T6 Firmware
Jun 17, 2026
Jul 1, 2022
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the desc parameter in the function FUN_00413be4.
1Totolink
1T6 Firmware
Jun 17, 2026
Jul 1, 2022
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the password parameter in the function FUN_00413f80.
1Tenda
1M3 Firmware
Jun 17, 2026
Jul 1, 2022
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formSetAccessCodeInfo.
1Tenda
1M3 Firmware
Jun 17, 2026
Jul 1, 2022
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formGetPassengerAnalyseData.
1Tenda
1M3 Firmware
Jun 17, 2026
Jul 1, 2022
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formSetCfm.
1Tenda
1M3 Firmware
Jun 17, 2026
Jul 1, 2022
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the listN parameter in the function fromDhcpListClient.
1Tenda
1M3 Firmware
Jun 17, 2026
Jul 1, 2022
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formSetAPCfg.
1Tenda
1M3 Firmware
Jun 17, 2026
Jul 1, 2022
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
Tenda M3 V1.0.0.12 was discovered to contain multiple stack overflow vulnerabilities via the ssidList, storeName, and trademark parameters in the function formSetStoreWeb.
1Tenda
1M3 Firmware
Jun 17, 2026
Jul 1, 2022
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formMasterMng.