← Back
CWE-787

14,829 CVEs • Abstraction: Base • Likelihood of Exploit: High

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

JSON object

Loading...

CVEs (14,829)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-1975
1Qualcomm
180Apq8009 Firmware
Apq8009w FirmwareApq8017 Firmware+177 more
Jun 17, 2026
Nov 12, 2021
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
Possible heap overflow due to improper length check of domain while parsing the DNS response in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon...Show more
Possible heap overflow due to improper length check of domain while parsing the DNS response in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon WearablesShow less
CVE-2020-23904
1Xiph
1Speex
Jun 17, 2026
Nov 10, 2021
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
A stack buffer overflow in speexenc.c of Speex v1.2 allows attackers to cause a denial of service (DoS) via a crafted WAV file. NOTE: the vendor states "I cannot reproduce it" and it "is a demo program.
CVE-2020-23901
1Wildbit Soft
1Wildbit Viewer
Jun 17, 2026
Nov 10, 2021
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
A User Mode Write AV in Editor+0x5d15 of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted tga file.
CVE-2020-23899
1Wildbit Soft
1Wildbit Viewer
Jun 17, 2026
Nov 10, 2021
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
A User Mode Write AV in Editor+0x5f91 of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted tga file.
CVE-2020-23898
1Wildbit Soft
1Wildbit Viewer
Jun 17, 2026
Nov 10, 2021
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
A User Mode Write AV in Editor+0x5ea2 of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted tga file.
CVE-2020-23897
1Wildbit Soft
1Wildbit Viewer
Jun 17, 2026
Nov 10, 2021
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
A User Mode Write AV in Editor!TMethodImplementationIntercept+0x54dcec of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted tga file.
CVE-2020-23896
1Wildbit Soft
1Wildbit Viewer
Jun 17, 2026
Nov 10, 2021
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
A User Mode Write AV in Editor+0x576b of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted tiff file.
CVE-2020-23895
1Wildbit Soft
1Wildbit Viewer
Jun 17, 2026
Nov 10, 2021
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
A User Mode Write AV in Editor+0x76af of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted tiff file.
CVE-2020-23894
1Wildbit Soft
1Wildbit Viewer
Jun 17, 2026
Nov 10, 2021
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
A User Mode Write AV in ntdll!RtlpCoalesceFreeBlocks+0x268 of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted tiff file.
CVE-2020-23893
1Wildbit Soft
1Wildbit Viewer
Jun 17, 2026
Nov 10, 2021
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
A User Mode Write AV in Editor!TMethodImplementationIntercept+0x3c3682 of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted tiff file.
CVE-2020-23891
1Wildbit Soft
1Wildbit Viewer
Jun 17, 2026
Nov 10, 2021
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
A User Mode Write AV in Editor+0x5cd7 of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted tiff file.
CVE-2020-23889
1Wildbit Soft
1Wildbit Viewer
Jun 17, 2026
Nov 10, 2021
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
A User Mode Write AV starting at Editor!TMethodImplementationIntercept+0x4189c6 of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted ico file.
CVE-2020-23888
1Wildbit Soft
1Wildbit Viewer
Jun 17, 2026
Nov 10, 2021
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
A User Mode Write AV in Editor!TMethodImplementationIntercept+0x53f6c3 of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted psd file.
CVE-2020-23887
1Xnview
1Xnview Mp
Jun 17, 2026
Nov 10, 2021
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
XnView MP v0.96.4 was discovered to contain a heap overflow which allows attackers to cause a denial of service (DoS) via a crafted ico file. Related to a Read Access Violation starting at USER32!SmartStretchDIBits+0x33.
CVE-2020-23886
1Xnview
1Xnview Mp
Jun 17, 2026
Nov 10, 2021
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
XnView MP v0.96.4 was discovered to contain a heap overflow which allows attackers to cause a denial of service (DoS) via a crafted pict file. Related to a User Mode Write AV starting at ntdll!RtlpLowFragHeapFree.
CVE-2020-23878
1Flowpaper
1Pdf2json
Jun 17, 2026
Nov 10, 2021
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
pdf2json v0.71 was discovered to contain a stack buffer overflow in the component XRef::fetch.
CVE-2020-23877
1Science Miner
1Pdf2xml
Jun 17, 2026
Nov 10, 2021
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
pdf2xml v2.0 was discovered to contain a stack buffer overflow in the component getObjectStream.
CVE-2020-23874
1Science Miner
1Pdf2xml
Jun 17, 2026
Nov 10, 2021
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
pdf2xml v2.0 was discovered to contain a heap-buffer overflow in the function TextPage::addAttributsNode.
CVE-2020-23873
1Science Miner
1Pdf2xml
Jun 17, 2026
Nov 10, 2021
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
pdf2xml v2.0 was discovered to contain a heap-buffer overflow in the function TextPage::dump.
CVE-2021-3064
1Paloaltonetworks
1Pan Os
Jun 17, 2026
Nov 10, 2021
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
A memory corruption vulnerability exists in Palo Alto Networks GlobalProtect portal and gateway interfaces that enables an unauthenticated network-based attacker to disrupt system processes and potentially execute arbitr...Show more
A memory corruption vulnerability exists in Palo Alto Networks GlobalProtect portal and gateway interfaces that enables an unauthenticated network-based attacker to disrupt system processes and potentially execute arbitrary code with root privileges. The attacker must have network access to the GlobalProtect interface to exploit this issue. This issue impacts PAN-OS 8.1 versions earlier than PAN-OS 8.1.17. Prisma Access customers are not impacted by this issue.Show less