CWE-787: Out-of-bounds Write, page 61
Filter
The product writes data past the end, or before the beginning, of the intended buffer.
What the weakness is: CWE-787 at MITRE
Ask an AI about CWE-787
Show the prompt
Explain CWE-787: Out-of-bounds Write and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/787.html and https://cve.bz/cve/cwe/787?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 7.5CVE-2025-32396EPSS 0.4%
An Heap-based Buffer Overflow in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to induce a crash in IO devices that use the library by sending a malicious RPC packet.
- 8.9CVE-2025-0649EPSS 0.2%
Incorrect JSON input stringification in Google's Tensorflow serving versions up to 2.18.0 allows for potentially unbounded recursion leading to server crash.
- 4.6CVE-2025-32022EPSS 0.1%
Finit provides fast init for Linux systems. Finit's urandom plugin has a heap buffer overwrite vulnerability at boot which leads to it overwriting other parts of the heap, possibly causing random instabilities and undefined behavior. The u…
- 8.7CVE-2025-4356EPSS 1.6%
A vulnerability was found in Tenda DAP-1520 1.10B04_BETA02. It has been declared as critical. This vulnerability affects the function mod_graph_auth_uri_handler of the file /storage of the component Authentication Handler. The manipulation…
- 8.7CVE-2025-4355EPSS 1.2%
A vulnerability was found in Tenda DAP-1520 1.10B04_BETA02. It has been classified as critical. This affects the function set_ws_action of the file /dws/api/. The manipulation leads to heap-based buffer overflow. It is possible to initiate…
- 8.7CVE-2025-4354EPSS 1.2%
A vulnerability was found in Tenda DAP-1520 1.10B04_BETA02 and classified as critical. Affected by this issue is the function check_dws_cookie of the file /storage. The manipulation leads to stack-based buffer overflow. The attack may be l…
- 7.8CVE-2025-27132EPSS 0.2%
in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios.
- 7.8CVE-2025-21470EPSS 0.09%
Memory corruption while processing image encoding, when configuration is NULL in IOCTL parameter.
- 7.8CVE-2025-21469EPSS 0.09%
Memory corruption while processing image encoding, when input buffer length is 0 in IOCTL call.
- 7.8CVE-2025-21468EPSS 0.1%
Memory corruption while reading response from FW, when buffer size is changed by FW while driver is using this size to write null character at the end of buffer.
- 7.8CVE-2025-21467EPSS 0.1%
Memory corruption while reading the FW response from the shared queue.
- 7.8CVE-2025-21462EPSS 0.1%
Memory corruption while processing an IOCTL request, when buffer significantly exceeds the command argument limit.
- 7.8CVE-2025-21460EPSS 0.1%
Memory corruption while processing a message, when the buffer is controlled by a Guest VM, the value can be changed continuously.
- 7.8CVE-2024-49845EPSS 0.1%
Memory corruption during the FRS UDS generation process.
- 7.8CVE-2024-49844EPSS 0.1%
Memory corruption while triggering commands in the PlayReady Trusted application.
- 7.8CVE-2024-49835EPSS 0.1%
Memory corruption while reading secure file.
- 7.8CVE-2024-45581EPSS 0.1%
Memory corruption while sound model registration for voice activation with audio kernel driver.
- 7.8CVE-2024-45579EPSS 0.1%
Memory corruption may occur when invoking IOCTL calls from userspace to the camera kernel driver to dump request information, due to a missing memory requirement check.
- 7.8CVE-2024-45577EPSS 0.1%
Memory corruption while invoking IOCTL calls from userspace to camera kernel driver to dump request information.
- 7.8CVE-2024-45563EPSS 0.1%
Memory corruption while handling schedule request in Camera Request Manager(CRM) due to invalid link count in the corresponding session.
- 7.0CVE-2025-46585EPSS 0.1%
Out-of-bounds array read/write vulnerability in the kernel module Impact: Successful exploitation of this vulnerability may affect availability.
- 8.8CVE-2025-4050EPSS 0.4%
Out of bounds memory access in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium secu…
- 7.0CVE-2025-20671EPSS 0.08%
In thermal, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. …
- 7.8CVE-2025-20668EPSS 0.08%
In scp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation…
- 7.8CVE-2023-53142EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: ice: copy last block omitted in ice_get_module_eeprom() ice_get_module_eeprom() is broken since commit e9c9692c8a81 ("ice: Reimplement module reads used by ethtool") In …
- 7.8CVE-2023-53081EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix data corruption after failed write When buffered write fails to copy data into underlying page cache page, ocfs2_write_end_nolock() just zeroes out and dirtie…
- 7.8CVE-2023-53077EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix shift-out-of-bounds in CalculateVMAndRowBytes [WHY] When PTEBufferSizeInRequests is zero, UBSAN reports the following warning because dml_log2 retur…
- 7.8CVE-2023-53065EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output syzkaller reportes a KASAN issue with stack-out-of-bounds. The call trace is a…
- 7.8CVE-2025-1883EPSS 0.2%
Out-Of-Bounds Write vulnerability exists in the OBJ file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025. This vulnerability could allow an attacker to execute arbitrary code while opening a specially crafted O…
- 8.6CVE-2025-35975EPSS 0.6%
MicroDicom DICOM Viewer is vulnerable to an out-of-bounds write which may allow an attacker to execute arbitrary code. The user must open a malicious DCM file for exploitation.
- 7.8CVE-2022-49888EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: arm64: entry: avoid kprobe recursion The cortex_a76_erratum_1463225_debug_handler() function is called when handling debug exceptions (and synchronous exceptions from BR…
- 7.8CVE-2022-49859EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: net: lapbether: fix issue of invalid opcode in lapbeth_open() If lapb_register() failed when lapb device goes to up for the first time, the NAPI is not disabled. As a re…
- 7.8CVE-2022-49846EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: udf: Fix a slab-out-of-bounds write bug in udf_find_entry() Syzbot reported a slab-out-of-bounds Write bug: loop0: detected capacity change from 0 to 2048 =============…
- 7.8CVE-2022-49804EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: s390: avoid using global register for current_stack_pointer Commit 30de14b1884b ("s390: current_stack_pointer shouldn't be a function") made current_stack_pointer a glob…
- 5.5CVE-2025-23159EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: media: venus: hfi: add a check to handle OOB in sfr region sfr->buf_size is in shared memory and can be modified by malicious user. OOB write is possible when the size i…
- 7.8CVE-2025-23158EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: media: venus: hfi: add check to handle incorrect queue size qsize represents size of shared queued between driver and video firmware. Firmware can modify this value to a…
- 9.8CVE-2025-4125EPSS 0.4%
Delta Electronics ISPSoft version 3.20 is vulnerable to an Out-Of-Bounds Write vulnerability that could allow an attacker to execute arbitrary code when parsing ISP file.
- 9.8CVE-2025-4124EPSS 0.4%
Delta Electronics ISPSoft version 3.20 is vulnerable to an Out-Of-Bounds Write vulnerability that could allow an attacker to execute arbitrary code when parsing ISP file.
- 9.8CVE-2025-22884EPSS 0.4%
Delta Electronics ISPSoft version 3.20 is vulnerable to a Stack-Based buffer overflow vulnerability that could allow an attacker to execute arbitrary code when parsing DVP file.
- 9.8CVE-2025-22883EPSS 0.4%
Delta Electronics ISPSoft version 3.20 is vulnerable to an Out-Of-Bounds Write vulnerability that could allow an attacker to execute arbitrary code when parsing DVP file.
- 9.8CVE-2025-22882EPSS 0.4%
Delta Electronics ISPSoft version 3.20 is vulnerable to a Stack-Based buffer overflow vulnerability that could allow an attacker to leverage debugging logic to execute arbitrary code when parsing CBDGL file.
- 4.8CVE-2025-4077EPSS 0.4%
A vulnerability classified as critical was found in code-projects School Billing System 1.0. This vulnerability affects the function searchrec. The manipulation of the argument Name leads to stack-based buffer overflow. It is possible to l…
- 4.8CVE-2025-4068EPSS 0.4%
A vulnerability classified as critical was found in code-projects Simple Movie Ticket Booking System 1.0. Affected by this vulnerability is the function changeprize. The manipulation of the argument prize leads to stack-based buffer overfl…
- 4.8CVE-2025-4063EPSS 0.3%
A vulnerability was found in code-projects Student Information Management System 1.0 and classified as critical. Affected by this issue is the function cancel. The manipulation of the argument first_name/last_name leads to stack-based buff…
- 4.8CVE-2025-4062EPSS 0.3%
A vulnerability has been found in code-projects Theater Seat Booking System 1.0 and classified as critical. Affected by this vulnerability is the function cancel. The manipulation of the argument cancelcustomername leads to stack-based buf…
- 4.8CVE-2025-4061EPSS 0.3%
A vulnerability, which was classified as critical, was found in code-projects Clothing Store Management System up to 1.0. Affected is the function add_item. The manipulation of the argument st.productname leads to stack-based buffer overfl…
- 4.8CVE-2025-4059EPSS 0.4%
A vulnerability classified as critical was found in code-projects Prison Management System 1.0. This vulnerability affects the function addrecord of the component Prison_Mgmt_Sys. The manipulation of the argument filename leads to stack-ba…
- 5.5CVE-2024-58099EPSS 0.3%
In the Linux kernel, the following vulnerability has been resolved: vmxnet3: Fix packet corruption in vmxnet3_xdp_xmit_frame Andrew and Nikolay reported connectivity issues with Cilium's service load-balancing in case of vmxnet3. If a B…
- 4.8CVE-2025-4038EPSS 0.3%
A vulnerability was found in code-projects Train Ticket Reservation System 1.0. It has been declared as critical. Affected by this vulnerability is the function Reservation of the component Ticket Reservation. The manipulation of the argum…
- 4.8CVE-2025-4029EPSS 0.4%
A vulnerability was found in code-projects Personal Diary Management System 1.0 and classified as critical. Affected by this issue is the function addrecord of the component New Record Handler. The manipulation of the argument filename lea…