← Back
CWE-787

15,523 CVEs • Abstraction: Base • Likelihood of Exploit: High

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

JSON object

Loading...

CVEs (15,523)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Tenda
1Ac18 Firmware
Jun 17, 2026
Sep 7, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the time parameter at /goform/PowerSaveSet.
1Tenda
1Ac18 Firmware
Jun 17, 2026
Sep 7, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the list parameter at /goform/SetStaticRouteCfg.
1Tenda
1Ac18 Firmware
Jun 17, 2026
Sep 7, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the list parameter at /goform/SetVirtualServerCfg.
1Xhyve Project
1Xhyve
Jun 17, 2026
Sep 7, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
xhyve commit dfbe09b was discovered to contain a stack buffer overflow via the component pci_vtrnd_notify().
1Gpac
1Gpac
Jun 17, 2026
Sep 6, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
GPAC v2.1-DEV-rev232-gfcaa01ebb-master was discovered to contain a stack overflow when processing ISOM_IOD.
1Tinyexr Project
1Tinyexr
Jun 17, 2026
Sep 6, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
tinyexr commit 0647fb3 was discovered to contain a heap-buffer overflow via the component rleUncompress.
1Dell
399Alienware M15 R6 Firmware
Chengming 3980 FirmwareChengming 3988 Firmware+396 more
Jun 17, 2026
Sep 6, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
Dell BIOS versions contain a stack-based buffer overflow vulnerability. A local attacker could exploit this vulnerability by sending malicious input via SMI to bypass security checks resulting in arbitrary code execution...Show more
Dell BIOS versions contain a stack-based buffer overflow vulnerability. A local attacker could exploit this vulnerability by sending malicious input via SMI to bypass security checks resulting in arbitrary code execution in SMM.Show less
1Rizin
1Rizin
Jun 17, 2026
Sep 6, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.4.0 and prior are vulnerable to an out-of-bounds write when getting data from Luac files. A user opening a malicious Luac file could...Show more
Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.4.0 and prior are vulnerable to an out-of-bounds write when getting data from Luac files. A user opening a malicious Luac file could be affected by this vulnerability, allowing an attacker to execute code on the user's machine. Commits 07b43bc8aa1ffebd9b68d60624c9610cf7e460c7 and 05bbd147caccc60162d6fba9baaaf24befa281cd contain fixes for the issue.Show less
1Rizin
1Rizin
Jun 17, 2026
Sep 6, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.4.0 and prior are vulnerable to an out-of-bounds write when parsing Mach-O files. A user opening a malicious Mach-O file could be af...Show more
Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.4.0 and prior are vulnerable to an out-of-bounds write when parsing Mach-O files. A user opening a malicious Mach-O file could be affected by this vulnerability, allowing an attacker to execute code on the user's machine. Commit number 7323e64d68ecccfb0ed3ee480f704384c38676b2 contains a patch.Show less
1Rizin
1Rizin
Jun 17, 2026
Sep 6, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.4.0 and prior are vulnerable to an out-of-bounds write when getting data from PYC(python) files. A user opening a malicious PYC file...Show more
Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.4.0 and prior are vulnerable to an out-of-bounds write when getting data from PYC(python) files. A user opening a malicious PYC file could be affected by this vulnerability, allowing an attacker to execute code on the user's machine. Commit number 68948017423a12786704e54227b8b2f918c2fd27 contains a patch.Show less
1Rizin
1Rizin
Jun 17, 2026
Sep 6, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.4.0 and prior are vulnerable to an out-of-bounds write when getting data from dyld cache files. A user opening a malicious dyld cach...Show more
Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.4.0 and prior are vulnerable to an out-of-bounds write when getting data from dyld cache files. A user opening a malicious dyld cache file could be affected by this vulnerability, allowing an attacker to execute code on the user's machine. Commit number 556ca2f9eef01ec0f4a76d1fbacfcf3a87a44810 contains a patch.Show less
1Rizin
1Rizin
Jun 17, 2026
Sep 6, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.4.0 and prior are vulnerable to out-of-bounds write when parsing DEX files. A user opening a malicious DEX file could be affected by...Show more
Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.4.0 and prior are vulnerable to out-of-bounds write when parsing DEX files. A user opening a malicious DEX file could be affected by this vulnerability, allowing an attacker to execute code on the user's machine. A patch is available on the `dev` branch of the repository.Show less
1Eset
2Endpoint Encryption
Full Disk Encryption
Jun 17, 2026
Sep 6, 2022
N/A· v4
6.5 MEDIUM· v3
N/A· v2
The vulnerability in the driver dlpfde.sys enables a user logged into the system to perform system calls leading to kernel stack overflow, resulting in a system crash, for instance, a BSOD.
1Google
1Android
Jun 17, 2026
Sep 6, 2022
N/A· v4
6.7 MEDIUM· v3
N/A· v2
In aie, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation....Show more
In aie, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07116037; Issue ID: ALPS07116037.Show less
1Google
1Android
Jun 17, 2026
Sep 6, 2022
N/A· v4
6.6 MEDIUM· v3
N/A· v2
In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execu...Show more
In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS07168125; Issue ID: ALPS07168125.Show less
1Google
1Android
Jun 17, 2026
Sep 6, 2022
N/A· v4
6.7 MEDIUM· v3
N/A· v2
In rpmb, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...Show more
In rpmb, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07167738; Issue ID: ALPS07167738.Show less
2Google
Yoctoproject
2Android
Yocto
Jun 17, 2026
Sep 6, 2022
N/A· v4
6.7 MEDIUM· v3
N/A· v2
In audio ipi, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploit...Show more
In audio ipi, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06558799; Issue ID: ALPS06558799.Show less
1Google
1Android
Jun 17, 2026
Sep 6, 2022
N/A· v4
6.7 MEDIUM· v3
N/A· v2
In vow, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation....Show more
In vow, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07032699; Issue ID: ALPS07032699.Show less
1Google
1Android
Jun 17, 2026
Sep 6, 2022
N/A· v4
6.7 MEDIUM· v3
N/A· v2
In vow, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation....Show more
In vow, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07032590; Issue ID: ALPS07032590.Show less
1Google
1Android
Jun 17, 2026
Sep 6, 2022
N/A· v4
6.7 MEDIUM· v3
N/A· v2
In vow, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Pa...Show more
In vow, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07032678; Issue ID: ALPS07032678.Show less