← Back
CWE-787

14,825 CVEs • Abstraction: Base • Likelihood of Exploit: High

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

JSON object

Loading...

CVEs (14,825)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Irfanview
1Irfanview
Jun 17, 2026
Sep 28, 2021
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A buffer overflow vulnerability in FORMATS!GetPlugInInfo+0x2de9 of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted RLE file.
1Irfanview
1Irfanview
Jun 17, 2026
Sep 28, 2021
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A buffer overflow vulnerability in Formats!ReadRAS_W+0x1001 of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted RLE file.
1Irfanview
1Irfanview
Jun 17, 2026
Sep 28, 2021
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A buffer overflow vulnerability in FORMATS!ReadRAS_W+0xa74 of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted RLE file.0xa74
1Irfanview
1Irfanview
Jun 17, 2026
Sep 28, 2021
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A buffer overflow vulnerability in FORMATS!ReadRAS_W+0xa30 of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted RLE file.
1Irfanview
1Irfanview
Jun 17, 2026
Sep 28, 2021
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A buffer overflow vulnerability in FORMATS!Read_Utah_RLE+0x340 of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted RLE file.
1Irfanview
1Irfanview
Jun 17, 2026
Sep 28, 2021
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A buffer overflow vulnerability in FORMATS!Read_Utah_RLE+0x37a of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted RLE file.
1Netop
1Vision Pro
Jun 17, 2026
Sep 27, 2021
N/A· v4
6.5 MEDIUM· v3
3.3 LOW· v2
Out of bounds write vulnerability in the JPEG parsing code of Netop Vision Pro up to and including 9.7.2 allows an adjacent unauthenticated attacker to write to arbitrary memory potentially leading to a Denial of Service...Show more
Out of bounds write vulnerability in the JPEG parsing code of Netop Vision Pro up to and including 9.7.2 allows an adjacent unauthenticated attacker to write to arbitrary memory potentially leading to a Denial of Service (DoS).Show less
1Adobe
1Photoshop Elements
Jun 17, 2026
Sep 27, 2021
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Photoshop Elements versions 2021 build 19.0 (20210304.m.156367) (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploit...Show more
Photoshop Elements versions 2021 build 19.0 (20210304.m.156367) (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious TTF file.Show less
1Skale
1Sgxwallet
Jun 17, 2026
Sep 27, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An issue was discovered in SKALE sgxwallet 1.58.3. sgx_disp_ippsAES_GCMEncrypt allows an out-of-bounds write, resulting in a segfault and compromised enclave. This issue describes a buffer overflow, which was resolved pr...Show more
An issue was discovered in SKALE sgxwallet 1.58.3. sgx_disp_ippsAES_GCMEncrypt allows an out-of-bounds write, resulting in a segfault and compromised enclave. This issue describes a buffer overflow, which was resolved prior to v1.77.0 and not reproducible in latest sgxwallet v1.77.0Show less
1Cisco
1Ios Xe
Jun 17, 2026
Sep 23, 2021
N/A· v4
9.8 CRITICAL· v3
9.0 HIGH· v2
A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Software for Cisco Catalyst 9000 Family Wireless Controllers could allow an unauthenticated, remote a...Show more
A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Software for Cisco Catalyst 9000 Family Wireless Controllers could allow an unauthenticated, remote attacker to execute arbitrary code with administrative privileges or cause a denial of service (DoS) condition on an affected device. The vulnerability is due to a logic error that occurs during the validation of CAPWAP packets. An attacker could exploit this vulnerability by sending a crafted CAPWAP packet to an affected device. A successful exploit could allow the attacker to execute arbitrary code with administrative privileges or cause the affected device to crash and reload, resulting in a DoS condition.Show less
1Broadcom
1Tcpreplay
Jun 17, 2026
Sep 22, 2021
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
Heap-buffer overflow in the randomize_iparp function in edit_packet.c. of Tcpreplay v4.3.2 allows attackers to cause a denial of service (DOS) via a crafted pcap.
1Gpac
1Gpac
Jun 17, 2026
Sep 22, 2021
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
An issue was discovered in gpac 0.8.0. The stbl_GetSampleSize function in isomedia/stbl_read.c has a heap-based buffer overflow which can lead to a denial of service (DOS) via a crafted media file.
1Gpac
1Gpac
Jun 17, 2026
Sep 22, 2021
N/A· v4
7.1 HIGH· v3
5.8 MEDIUM· v2
An issue was discovered in gpac 0.8.0. The gf_hinter_track_process function in isom_hinter_track_process.c has a heap-based buffer overflow which can lead to a denial of service (DOS) via a crafted media file
1Gpac
1Gpac
Jun 17, 2026
Sep 22, 2021
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
An issue was discovered in gpac 0.8.0. The OD_ReadUTF8String function in odf_code.c has a heap-based buffer overflow which can lead to a denial of service (DOS) via a crafted media file.
1Google
1Android
Jun 17, 2026
Sep 21, 2021
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
In GetTimeStampAndPkt of DumpstateDevice.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User intera...Show more
In GetTimeStampAndPkt of DumpstateDevice.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-179620905 References: N/AShow less
1Swftools
1Swftools
Jun 17, 2026
Sep 20, 2021
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
An issue was discovered in swftools through 20200710. A stack-buffer-overflow exists in the function rfx_alloc() located in mem.c. It allows an attacker to cause code Execution.
1Swftools
1Swftools
Jun 17, 2026
Sep 20, 2021
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
An issue was discovered in swftools through 20200710. A heap-buffer-overflow exists in the function swf_GetPlaceObject() located in swfobject.c. It allows an attacker to cause code Execution.
1Swftools
1Swftools
Jun 17, 2026
Sep 20, 2021
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
An issue was discovered in swftools through 20200710. A heap-buffer-overflow exists in the function string_hash() located in q.c. It allows an attacker to cause code Execution.
1Swftools
1Swftools
Jun 17, 2026
Sep 20, 2021
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
An issue was discovered in swftools through 20200710. A heap-buffer-overflow exists in the function main() located in swfdump.c. It allows an attacker to cause code Execution.
1Swftools
1Swftools
Jun 17, 2026
Sep 20, 2021
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
An issue was discovered in swftools through 20200710. A heap-buffer-overflow exists in the function pool_read() located in pool.c. It allows an attacker to cause code Execution.