cve.bz

CWE-787: Out-of-bounds Write, page 113

Filter

The product writes data past the end, or before the beginning, of the intended buffer.

What the weakness is: CWE-787 at MITRE

Ask an AI about CWE-787

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-787: Out-of-bounds Write and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/787.html and https://cve.bz/cve/cwe/787?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.8CVE-2023-42566EPSS 0.3%

    Out-of-bound write vulnerability in libsavsvc prior to SMR Dec-2023 Release 1 allows local attackers to execute arbitrary code.

  2. 6.8CVE-2023-42561EPSS 0.4%

    Heap out-of-bounds write vulnerability in bootloader prior to SMR Dec-2023 Release 1 allows a physical attacker to execute arbitrary code.

  3. 7.8CVE-2023-42560EPSS 0.2%

    Heap out-of-bounds write vulnerability in dec_mono_audb of libsavsac.so prior to SMR Dec-2023 Release 1 allows an attacker to execute arbitrary code.

  4. 7.8CVE-2023-42558EPSS 0.2%

    Out of bounds write vulnerability in HDCP in HAL prior to SMR Dec-2023 Release 1 allows attacker to perform code execution.

  5. 6.7CVE-2023-42557EPSS 0.3%

    Out-of-bound write vulnerability in libIfaaCa prior to SMR Dec-2023 Release 1 allows local system attackers to execute arbitrary code.

  6. 7.8CVE-2023-28587EPSS 0.2%

    Memory corruption in BT controller while parsing debug commands with specific sub-opcodes at HCI interface level.

  7. 7.8CVE-2023-28580EPSS 0.2%

    Memory corruption in WLAN Host while setting the PMK length in PMK length in internal cache.

  8. 7.8CVE-2023-28551EPSS 0.1%

    Memory corruption in UTILS when modem processes memory specific Diag commands having arbitrary address values as input arguments.

  9. 7.8CVE-2023-28550EPSS 0.1%

    Memory corruption in MPP performance while accessing DSM watermark using external memory address.

  10. 7.8CVE-2023-22383EPSS 0.1%

    Memory Corruption in camera while installing a fd for a particular DMA buffer.

  11. 7.8CVE-2023-21634EPSS 0.1%

    Memory Corruption in Radio Interface Layer while sending an SMS or writing an SMS to SIM.

  12. 9.8CVE-2023-48697EPSS 1.2%

    Azure RTOS USBX is a USB host, device, and on-the-go (OTG) embedded stack, that is fully integrated with Azure RTOS ThreadX. An attacker can cause remote code execution due to memory buffer and pointer vulnerabilities in Azure RTOS USBX. T…

  13. 9.8CVE-2023-48695EPSS 1.2%

    Azure RTOS USBX is a USB host, device, and on-the-go (OTG) embedded stack, that is fully integrated with Azure RTOS ThreadX. An attacker can cause remote code execution due to out of bounds write vulnerabilities in Azure RTOS USBX. The aff…

  14. 9.8CVE-2023-48692EPSS 3.1%

    Azure RTOS NetX Duo is a TCP/IP network stack designed specifically for deeply embedded real-time and IoT applications. An attacker can cause remote code execution due to memory overflow vulnerabilities in Azure RTOS NETX Duo. The affected…

  15. 9.8CVE-2023-48691EPSS 3.1%

    Azure RTOS NetX Duo is a TCP/IP network stack designed specifically for deeply embedded real-time and IoT applications. An attacker can cause an out-of-bounds write in Azure RTOS NETX Duo, that could lead to remote code execution. The affe…

  16. 9.8CVE-2023-48316EPSS 4.3%

    Azure RTOS NetX Duo is a TCP/IP network stack designed specifically for deeply embedded real-time and IoT applications. An attacker can cause remote code execution due to memory overflow vulnerabilities in Azure RTOS NETX Duo. The affected…

  17. 9.8CVE-2023-48315EPSS 3.9%

    Azure RTOS NetX Duo is a TCP/IP network stack designed specifically for deeply embedded real-time and IoT applications. An attacker can cause remote code execution due to memory overflow vulnerabilities in Azure RTOS NETX Duo. The affected…

  18. 7.8CVE-2023-5944EPSS 0.4%

    Delta Electronics DOPSoft is vulnerable to a stack-based buffer overflow, which may allow for arbitrary code execution if an attacker can lead a legitimate user to execute a specially crafted file.

  19. 7.8CVE-2023-45776EPSS 0.1%

    In CreateAudioBroadcast of broadcaster.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not need…

  20. 7.8CVE-2023-45775EPSS 0.1%

    In CreateAudioBroadcast of broadcaster.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not need…

  21. 7.8CVE-2023-45773EPSS 0.1%

    In multiple functions of btm_ble_gap.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for expl…

  22. 5.5CVE-2023-40465EPSS 0.2%

    Several versions of ALEOS, including ALEOS 4.16.0, include an opensource third-party component which can be exploited from the local area network, resulting in a Denial of Service condition for the captive portal.

  23. 7.8CVE-2023-40091EPSS 0.1%

    In onTransact of IncidentService.cpp, there is a possible out of bounds write due to memory corruption. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exp…

  24. 8.8CVE-2023-40087EPSS 0.2%

    In transcodeQ*ToFloat of btif_avrcp_audio_track.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to paired device escalation of privilege with no additional execution privileges needed. User intera…

  25. 7.8CVE-2023-40080EPSS 0.1%

    In multiple functions of btm_ble_gap.cc, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not nee…

  26. 9.8CVE-2023-40078EPSS 0.5%

    In a2dp_vendor_opus_decoder_decode_packet of a2dp_vendor_opus_decoder.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to paired device escalation of privilege with no additional execution privileg…

  27. 7.8CVE-2023-32804EPSS 0.3%

    Out-of-bounds Write vulnerability in Arm Ltd Midgard GPU Userspace Driver, Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a local non-privileged user…

  28. 9.8CVE-2023-44305EPSS 1.0%

    Dell DM5500 5.14.0.0, contains a Stack-based Buffer Overflow Vulnerability in the appliance. An unauthenticated remote attacker may exploit this vulnerability to crash the affected process or execute arbitrary code on the system by sending…

  29. 6.7CVE-2023-32869EPSS 0.1%

    In display drm, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALP…

  30. 6.7CVE-2023-32868EPSS 0.1%

    In display drm, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALP…

  31. 6.7CVE-2023-32867EPSS 0.1%

    In display drm, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALP…

  32. 6.7CVE-2023-32866EPSS 0.1%

    In mmp, there is a possible memory corruption due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS073421…

  33. 6.7CVE-2023-32865EPSS 0.1%

    In display drm, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: …

  34. 6.7CVE-2023-32864EPSS 0.1%

    In display drm, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: …

  35. 6.7CVE-2023-32854EPSS 0.1%

    In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS0824013…

  36. 6.7CVE-2023-32853EPSS 0.1%

    In rpmb, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS076487…

  37. 7.8CVE-2023-32851EPSS 0.1%

    In decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS…

  38. 7.8CVE-2023-32850EPSS 0.1%

    In decoder, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS080…

  39. 6.7CVE-2023-32849EPSS 0.1%

    In cmdq, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08161758; Issu…

  40. 6.7CVE-2023-32848EPSS 0.1%

    In vdec, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08163896; Issu…

  41. 7.8CVE-2023-32847EPSS 0.1%

    In audio, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS08…

  42. 4.4CVE-2023-42751EPSS 0.1%

    In gnss service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed

  43. 4.4CVE-2023-42729EPSS 0.1%

    In ril service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed

  44. 4.4CVE-2023-42727EPSS 0.1%

    In gpu driver, there is a possible out of bounds write due to a incorrect bounds check. This could lead to local denial of service with System execution privileges needed

  45. 4.4CVE-2023-42682EPSS 0.1%

    In gsp driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed

  46. 4.4CVE-2023-42679EPSS 0.1%

    In gpu driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed

  47. 5.5CVE-2022-48464EPSS 0.10%

    In wifi service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed

  48. 5.5CVE-2022-48463EPSS 0.10%

    In wifi service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed

  49. 5.5CVE-2022-48462EPSS 0.10%

    In wifi service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed

  50. 8.8CVE-2023-42917KEVEPSS 9.3%

    A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may lead to arbitrary code execution. Apple is aware of …