CWE-787: Out-of-bounds Write, page 110
Filter
The product writes data past the end, or before the beginning, of the intended buffer.
What the weakness is: CWE-787 at MITRE
Ask an AI about CWE-787
Show the prompt
Explain CWE-787: Out-of-bounds Write and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/787.html and https://cve.bz/cve/cwe/787?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 9.8CVE-2023-4280EPSS 0.4%
An unvalidated input in Silicon Labs TrustZone implementation in v4.3.x and earlier of the Gecko SDK allows an attacker to access the trusted region of memory from the untrusted region.
- 5.3CVE-2023-6693EPSS 0.3%
A stack based buffer overflow was found in the virtio-net device of QEMU. This issue occurs when flushing TX in the virtio_net_flush_tx function if guest features VIRTIO_NET_F_HASH_REPORT, VIRTIO_F_VERSION_1 and VIRTIO_NET_F_MRG_RXBUF are …
- 7.8CVE-2023-47039EPSS 0.4%
A vulnerability was found in Perl. This security issue occurs while Perl for Windows relies on the system path environment variable to find the shell (`cmd.exe`). When running an executable that uses the Windows Perl interpreter, Perl atte…
- 7.8CVE-2023-33113EPSS 0.1%
Memory corruption when resource manager sends the host kernel a reply message with multiple fragments.
- 7.8CVE-2023-33038EPSS 0.1%
Memory corruption while receiving a message in Bus Socket Transport Server.
- 7.8CVE-2023-33033EPSS 0.1%
Memory corruption in Audio during playback with speaker protection.
- 7.8CVE-2023-33032EPSS 0.1%
Memory corruption in TZ Secure OS while requesting a memory allocation from TA region.
- 7.8CVE-2023-33030EPSS 0.1%
Memory corruption in HLOS while running playready use-case.
- 6.7CVE-2023-32891EPSS 0.09%
In bluetooth service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patc…
- 7.5CVE-2023-32889EPSS 0.4%
In Modem IMS Call UA, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch…
- 7.5CVE-2023-32888EPSS 0.9%
In Modem IMS Call UA, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch…
- 7.5CVE-2023-32887EPSS 0.9%
In Modem IMS Stack, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY…
- 7.5CVE-2023-32886EPSS 0.8%
In Modem IMS SMS UA, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch …
- 6.7CVE-2023-32883EPSS 0.09%
In Engineer Mode, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: A…
- 6.7CVE-2023-32882EPSS 0.1%
In battery, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08308…
- 6.7CVE-2023-32879EPSS 0.09%
In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS083…
- 6.7CVE-2023-32877EPSS 0.09%
In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS083…
- 9.8CVE-2023-32874EPSS 1.0%
In Modem IMS Stack, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: …
- 6.7CVE-2023-32872EPSS 0.09%
In keyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS…
- 7.5CVE-2021-46901EPSS 0.7%
examples/6lbr/apps/6lbr-webserver/httpd.c in CETIC-6LBR (aka 6lbr) 1.5.0 has a strcat stack-based buffer overflow via a request for a long URL over a 6LoWPAN network.
- 7.8CVE-2023-52277EPSS 0.2%
Royal RoyalTSX before 6.0.2.1 allows attackers to cause a denial of service (Heap Memory Corruption and application crash) or possibly have unspecified other impact via a long hostname in an RTSZ file, if the victim clicks on Test Connecti…
- 9.8CVE-2023-51136EPSS 0.6%
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formRebootSchedule.
- 9.8CVE-2023-51135EPSS 0.6%
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formPasswordSetup.
- 9.8CVE-2023-51133EPSS 0.6%
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formRoute.
- 5.5CVE-2023-50572EPSS 0.3%
An issue in the component GroovyEngine.execute of jline-groovy v3.24.1 allows attackers to cause an OOM (OutofMemory) error.
- 9.8CVE-2023-7158EPSS 1.2%
A vulnerability was found in MicroPython up to 1.21.0. It has been classified as critical. Affected is the function slice_indices of the file objslice.c. The manipulation leads to heap-based buffer overflow. It is possible to launch the at…
- 9.8CVE-2023-52174EPSS 0.7%
XnView Classic before 2.51.3 on Windows has a Write Access Violation at xnview.exe+0x3125D6.
- 9.8CVE-2023-52173EPSS 0.6%
XnView Classic before 2.51.3 on Windows has a Write Access Violation at xnview.exe+0x3ADBD0.
- 9.8CVE-2023-6879EPSS 1.2%
Increasing the resolution of video frames, while performing a multi-threaded encode, can result in a heap overflow in av1_loop_restoration_dealloc().
- 9.8CVE-2023-51084EPSS 0.7%
hyavijava v6.0.07.1 was discovered to contain a stack overflow via the ResultConverter.convert2Xml method.
- 7.5CVE-2023-51080EPSS 0.6%
The NumberUtil.toBigDecimal method in hutool-core v5.8.23 was discovered to contain a stack overflow.
- 9.8CVE-2023-51102EPSS 0.7%
Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a stack overflow via the function formWifiMacFilterSet.
- 9.8CVE-2023-51101EPSS 0.7%
Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a stack overflow via the function formSetUplinkInfo.
- 9.8CVE-2023-51097EPSS 0.8%
Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a stack overflow via the function formSetAutoPing.
- 9.8CVE-2023-51093EPSS 0.8%
Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function fromSetLocalVlanInfo.
- 9.8CVE-2023-51092EPSS 13%
Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function upgrade.
- 9.8CVE-2023-51091EPSS 8.5%
Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function R7WebsSecurityHandler.
- 9.8CVE-2023-51090EPSS 0.7%
Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function formGetWeiXinConfig.
- 9.8CVE-2023-51095EPSS 0.8%
Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function formDelWlRfPolicy.
- 7.8CVE-2023-5180EPSS 0.2%
An issue was discovered in Open Design Alliance Drawings SDK before 2024.12. A corrupted value of number of sectors used by the Fat structure in a crafted DGN file leads to an out-of-bounds write. An attacker can leverage this vulnerabilit…
- 7.5CVE-2023-48704EPSS 0.5%
ClickHouse is an open-source column-oriented database management system that allows generating analytical data reports in real-time. A heap buffer overflow issue was discovered in ClickHouse server. An attacker could send a specially craft…
- 7.5CVE-2023-49356EPSS 0.7%
A stack buffer overflow vulnerability in MP3Gain v1.6.2 allows an attacker to cause a denial of service via the WriteMP3GainAPETag function at apetag.c:592.
- 8.8CVE-2023-7024KEVEPSS 6.7%
Heap buffer overflow in WebRTC in Google Chrome prior to 120.0.6099.129 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
- 5.5CVE-2023-4255EPSS 0.3%
An out-of-bounds write issue has been discovered in the backspace handling of the checkType() function in etc.c within the W3M application. This vulnerability is triggered by supplying a specially crafted HTML file to the w3m binary. Explo…
- 9.8CVE-2023-50992EPSS 0.8%
Tenda i29 v1.0 V1.0.0.5 was discovered to contain a stack overflow via the ip parameter in the setPing function.
- 9.8CVE-2023-50990EPSS 0.8%
Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the rebootTime parameter in the sysScheduleRebootSet function.
- 9.8CVE-2023-50988EPSS 0.8%
Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the bandwidth parameter in the wifiRadioSetIndoor function.
- 9.8CVE-2023-50987EPSS 0.8%
Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the time parameter in the sysTimeInfoSet function.
- 9.8CVE-2023-50986EPSS 0.8%
Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the time parameter in the sysLogin function.
- 9.8CVE-2023-50985EPSS 0.8%
Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the lanGw parameter in the lanCfgSet function.