← Back
CWE-787

14,856 CVEs • Abstraction: Base • Likelihood of Exploit: High

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

JSON object

Loading...

CVEs (14,856)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-26715
1Apple
2Mac Os X
Macos
Jun 17, 2026
May 26, 2022
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. An application may be able to gain elevated p...Show more
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. An application may be able to gain elevated privileges.Show less
CVE-2022-26714
1Apple
5Ipados
Iphone OsMac Os X+2 more
Jun 17, 2026
May 26, 2022
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
A memory corruption issue was addressed with improved validation. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, Security Update 2022-004 Catalina, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey 12.4. An...Show more
A memory corruption issue was addressed with improved validation. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, Security Update 2022-004 Catalina, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey 12.4. An application may be able to execute arbitrary code with kernel privileges.Show less
CVE-2022-22675
1Apple
5Ipados
Iphone OsMacos+2 more
Jun 17, 2026
May 26, 2022
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey 12.3.1, iOS 15.4.1 and iPadOS 15.4.1. An application may be ab...Show more
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey 12.3.1, iOS 15.4.1 and iPadOS 15.4.1. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited..Show less
CVE-2022-22672
1Apple
4Ipados
Iphone OsMac Os X+1 more
Jun 17, 2026
May 26, 2022
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 15.4 and iPadOS 15.4, Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. A malicious applicatio...Show more
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 15.4 and iPadOS 15.4, Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. A malicious application may be able to execute arbitrary code with kernel privileges.Show less
CVE-2022-30789
3Debian
FedoraprojectTuxera
3Debian Linux
FedoraNtfs 3g
Jun 17, 2026
May 26, 2022
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
A crafted NTFS image can cause a heap-based buffer overflow in ntfs_check_log_client_array in NTFS-3G through 2021.8.22.
CVE-2022-30788
3Debian
FedoraprojectTuxera
3Debian Linux
FedoraNtfs 3g
Jun 17, 2026
May 26, 2022
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
A crafted NTFS image can cause a heap-based buffer overflow in ntfs_mft_rec_alloc in NTFS-3G through 2021.8.22.
CVE-2022-30786
3Debian
FedoraprojectTuxera
3Debian Linux
FedoraNtfs 3g
Jun 17, 2026
May 26, 2022
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
A crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate in NTFS-3G through 2021.8.22.
CVE-2022-30477
1Tenda
1Ac18 Firmware
Jun 17, 2026
May 26, 2022
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Tenda AC Series Router AC18_V15.03.05.19(6318) was discovered to contain a stack-based buffer overflow in the httpd module when handling /goform/SetClientState request.
CVE-2022-30476
1Tenda
1Ac18 Firmware
Jun 17, 2026
May 26, 2022
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Tenda AC Series Router AC18_V15.03.05.19(6318) was discovered to contain a stack-based buffer overflow in the httpd module when handling /goform/SetFirewallCfg request.
CVE-2022-30475
1Tenda
1Ac18 Firmware
Jun 17, 2026
May 26, 2022
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Tenda AC Series Router AC18_V15.03.05.19(6318) was discovered to contain a stack-based buffer overflow in the httpd module when handling /goform/WifiExtraSet request.
CVE-2022-30474
1Tenda
1Ac18 Firmware
Jun 17, 2026
May 26, 2022
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Tenda AC Series Router AC18_V15.03.05.19(6318) was discovered to contain a heap overflow in the httpd module when handling /goform/saveParentControlInfo request.
CVE-2022-30473
1Tenda
1Ac18 Firmware
Jun 17, 2026
May 26, 2022
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Tenda AC Series Router AC18_V15.03.05.19(6318) has a stack-based buffer overflow vulnerability in function form_fast_setting_wifi_set
CVE-2022-30472
1Tenda
1Ac18 Firmware
Jun 17, 2026
May 26, 2022
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Tenda AC Seris Router AC18_V15.03.05.19(6318) has a stack-based buffer overflow vulnerability in function fromAddressNat
CVE-2022-1886
2Fedoraproject
Vim
2Fedora
Vim
Jun 17, 2026
May 26, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
CVE-2021-42692
1Tinytoml Project
1Tinytoml
Jun 17, 2026
May 26, 2022
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
There is a stack-overflow vulnerability in tinytoml v0.4 that can cause a crash or DoS.
CVE-2022-29379
1F5
1Njs
Jun 17, 2026
May 25, 2022
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Nginx NJS v0.7.3 was discovered to contain a stack overflow in the function njs_default_module_loader at /src/njs/src/njs_module.c. NOTE: multiple third parties dispute this report, e.g., the behavior is only found in un...Show more
Nginx NJS v0.7.3 was discovered to contain a stack overflow in the function njs_default_module_loader at /src/njs/src/njs_module.c. NOTE: multiple third parties dispute this report, e.g., the behavior is only found in unreleased development code that was not part of the 0.7.2, 0.7.3, or 0.7.4 releaseShow less
CVE-2022-30595
1Python
1Pillow
Jun 17, 2026
May 25, 2022
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
libImaging/TgaRleDecode.c in Pillow 9.1.0 has a heap buffer overflow in the processing of invalid TGA image files.
CVE-2021-32969
1Deltaww
1Diascreen
Jun 17, 2026
May 24, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Delta Electronics DIAScreen versions prior to 1.1.0 are vulnerable to an out-of-bounds write condition, which may result in a system crash or allow an attacker to remotely execute arbitrary code.
CVE-2022-29377
1Totolink
1A3600r Firmware
Jun 17, 2026
May 24, 2022
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Totolink A3600R V4.1.2cu.5182_B20201102 was discovered to contain a stacker overflow in the fread function at infostat.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via the parameter CONTENT...Show more
Totolink A3600R V4.1.2cu.5182_B20201102 was discovered to contain a stacker overflow in the fread function at infostat.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via the parameter CONTENT_LENGTH.Show less
CVE-2021-32941
1Annke
1N48pbb Firmware
Jun 17, 2026
May 23, 2022
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
Annke N48PBB (Network Video Recorder) products of version 3.4.106 build 200422 and prior are vulnerable to a stack-based buffer overflow, which allows an unauthorized remote attacker to execute arbitrary code with the sa...Show more
Annke N48PBB (Network Video Recorder) products of version 3.4.106 build 200422 and prior are vulnerable to a stack-based buffer overflow, which allows an unauthorized remote attacker to execute arbitrary code with the same privileges as the server user (root).Show less