← Back
CWE-787

15,586 CVEs • Abstraction: Base • Likelihood of Exploit: High

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

JSON object

Loading...

CVEs (15,586)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-22633
1Apple
5Ipados
Iphone OsMacos+2 more
Jun 17, 2026
Mar 18, 2022
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
A memory corruption issue was addressed with improved state management. This issue is fixed in watchOS 8.5, iOS 15.4 and iPadOS 15.4, macOS Big Sur 11.6.5, macOS Monterey 12.3. Opening a maliciously crafted PDF file may...Show more
A memory corruption issue was addressed with improved state management. This issue is fixed in watchOS 8.5, iOS 15.4 and iPadOS 15.4, macOS Big Sur 11.6.5, macOS Monterey 12.3. Opening a maliciously crafted PDF file may lead to an unexpected application termination or arbitrary code execution.Show less
CVE-2022-22631
1Apple
2Mac Os X
Macos
Jun 17, 2026
Mar 18, 2022
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. An application may be able to gain elevated p...Show more
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. An application may be able to gain elevated privileges.Show less
CVE-2022-22613
1Apple
6Ipados
Iphone OsMac Os X+3 more
Jun 17, 2026
Mar 18, 2022
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, macOS Big Sur 11.6.5, Security Update 2022-003 Catalina, watchOS 8.5, macOS Monterey 1...Show more
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, macOS Big Sur 11.6.5, Security Update 2022-003 Catalina, watchOS 8.5, macOS Monterey 12.3. An application may be able to execute arbitrary code with kernel privileges.Show less
CVE-2022-22612
1Apple
6Ipados
Iphone OsItunes+3 more
Jun 17, 2026
Mar 18, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A memory consumption issue was addressed with improved memory handling. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, iTunes 12.12.3 for Windows, watchOS 8.5, macOS Monterey 12.3. Processing a maliciously c...Show more
A memory consumption issue was addressed with improved memory handling. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, iTunes 12.12.3 for Windows, watchOS 8.5, macOS Monterey 12.3. Processing a maliciously crafted image may lead to heap corruption.Show less
CVE-2022-22597
1Apple
2Mac Os X
Macos
Jun 17, 2026
Mar 18, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. Processing a maliciously crafted file may lead to arb...Show more
A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. Processing a maliciously crafted file may lead to arbitrary code execution.Show less
CVE-2022-22596
1Apple
3Ipados
Iphone OsWatchos
Jun 17, 2026
Mar 18, 2022
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
A memory corruption issue was addressed with improved validation. This issue is fixed in watchOS 8.5, iOS 15.4 and iPadOS 15.4. An application may be able to execute arbitrary code with kernel privileges.
CVE-2022-22591
1Apple
1Macos
Jun 17, 2026
Mar 18, 2022
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.2. A malicious application may be able to execute arbitrary code with kernel privileges.
CVE-2022-22587
1Apple
3Ipados
Iphone OsMacos
Jun 17, 2026
Mar 18, 2022
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 15.3 and iPadOS 15.3, macOS Big Sur 11.6.3, macOS Monterey 12.2. A malicious application may be able to execute arbitrary...Show more
A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 15.3 and iPadOS 15.3, macOS Big Sur 11.6.3, macOS Monterey 12.2. A malicious application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited..Show less
CVE-2022-22586
1Apple
1Macos
Jun 17, 2026
Mar 18, 2022
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.2. A malicious application may be able to execute arbitrary code with kernel privileges.
CVE-2022-22584
1Apple
5Ipados
Iphone OsMacos+2 more
Jun 17, 2026
Mar 18, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A memory corruption issue was addressed with improved validation. This issue is fixed in tvOS 15.3, iOS 15.3 and iPadOS 15.3, watchOS 8.4, macOS Monterey 12.2. Processing a maliciously crafted file may lead to arbitrary...Show more
A memory corruption issue was addressed with improved validation. This issue is fixed in tvOS 15.3, iOS 15.3 and iPadOS 15.3, watchOS 8.4, macOS Monterey 12.2. Processing a maliciously crafted file may lead to arbitrary code execution.Show less
CVE-2021-30771
1Apple
5Ipados
Iphone OsMacos+2 more
Jun 17, 2026
Mar 18, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.4, iOS 14.6 and iPadOS 14.6, watchOS 7.5, tvOS 14.6. Processing a maliciously crafted font file may lead to arb...Show more
An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.4, iOS 14.6 and iPadOS 14.6, watchOS 7.5, tvOS 14.6. Processing a maliciously crafted font file may lead to arbitrary code execution.Show less
CVE-2022-24655
1Netgear
4Cax80 Firmware
Dc112a FirmwareEx6100 Firmware+1 more
Jun 17, 2026
Mar 18, 2022
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
A stack overflow vulnerability exists in the upnpd service in Netgear EX6100v1 201.0.2.28, CAX80 2.1.2.6, and DC112A 1.0.0.62, which may lead to the execution of arbitrary code without authentication.
CVE-2022-25949
1Kingsoft
1Internet Security 9 Plus
Jun 17, 2026
Mar 17, 2022
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
The kernel mode driver kwatch3 of KINGSOFT Internet Security 9 Plus Version 2010.06.23.247 fails to properly handle crafted inputs, leading to stack-based buffer overflow.
CVE-2022-25516
1Nothings
1Stb Truetype.h
Jun 17, 2026
Mar 17, 2022
N/A· v4
6.5 MEDIUM· v3
5.0 MEDIUM· v2
stb_truetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function stbtt__find_table at stb_truetype.h. NOTE: Third party has disputed stating that the source code has also a disclaimer that it should...Show more
stb_truetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function stbtt__find_table at stb_truetype.h. NOTE: Third party has disputed stating that the source code has also a disclaimer that it should only be used with trusted input.Show less
CVE-2022-25515
1Nothings
1Stb Truetype.h
Jun 17, 2026
Mar 17, 2022
N/A· v4
6.5 MEDIUM· v3
5.0 MEDIUM· v2
stb_truetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function ttULONG() at stb_truetype.h. NOTE: Third party has disputed stating that the source code has also a disclaimer that it should only be...Show more
stb_truetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function ttULONG() at stb_truetype.h. NOTE: Third party has disputed stating that the source code has also a disclaimer that it should only be used with trusted input.Show less
CVE-2022-25514
1Nothings
1Stb Truetype.h
Jun 17, 2026
Mar 17, 2022
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
stb_truetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function ttUSHORT() at stb_truetype.h. NOTE: Third party has disputed stating that the source code has also a disclaimer that it should only b...Show more
stb_truetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function ttUSHORT() at stb_truetype.h. NOTE: Third party has disputed stating that the source code has also a disclaimer that it should only be used with trusted input.Show less
CVE-2022-26300
1Eosio Project
1Eos
Jun 17, 2026
Mar 17, 2022
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
EOS v2.1.0 was discovered to contain a heap-buffer-overflow via the function txn_test_gen_plugin.
CVE-2022-0982
1Accel Ppp
1Accel Ppp
Jun 17, 2026
Mar 16, 2022
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
The telnet_input_char function in opt/src/accel-pppd/cli/telnet.c suffers from a memory corruption vulnerability, whereby user input cmdline_len is copied into a fixed buffer b->buf without any bound checks. If the serve...Show more
The telnet_input_char function in opt/src/accel-pppd/cli/telnet.c suffers from a memory corruption vulnerability, whereby user input cmdline_len is copied into a fixed buffer b->buf without any bound checks. If the server connects with a malicious client, crafted client requests can remotely trigger this vulnerability.Show less
CVE-2021-41987
1Mikrotik
1Routeros
Jun 17, 2026
Mar 16, 2022
N/A· v4
8.1 HIGH· v3
6.8 MEDIUM· v2
In the SCEP Server of RouterOS in certain Mikrotik products, an attacker can trigger a heap-based buffer overflow that leads to remote code execution. The attacker must know the scep_server_name value. This affects Route...Show more
In the SCEP Server of RouterOS in certain Mikrotik products, an attacker can trigger a heap-based buffer overflow that leads to remote code execution. The attacker must know the scep_server_name value. This affects RouterOS 6.46.8, 6.47.9, and 6.47.10.Show less
CVE-2021-39793
1Google
1Android
Jun 17, 2026
Mar 16, 2022
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
In kbase_jd_user_buf_pin_pages of mali_kbase_mem.c, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges neede...Show more
In kbase_jd_user_buf_pin_pages of mali_kbase_mem.c, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-210470189References: N/AShow less