CWE-787

14,104 vulnerabilities with CWE-787

CVE-2026-6784 HIGH

Memory safety bugs fixed in Firefox 150 and Thunderbird 150

CVSS 7.5

CVE-2026-5450 CRITICAL

glibc 2.7-2.43 - Heap-based Buffer Overflow via scanf %mc with Explicit Width

CVSS 9.8

CVE-2026-40494 CRITICAL

SAIL has heap buffer overflow in TGA RLE decoder — raw packet path missing bounds check

CVSS 9.8

CVE-2026-40493 CRITICAL

SAIL has heap buffer overflow in PSD decoder — bpp mismatch in LAB 16-bit mode

CVSS 9.8

CVE-2026-40492 CRITICAL

SAIL has heap buffer overflow in XWD decoder — bits_per_pixel vs pixmap_depth type confusion in byte-swap

CVSS 9.8

CVE-2026-40489 HIGH

editorconfig-core-c has incomplete fix for CVE-2023-0341

CVE-2026-27890 HIGH

Firebird has Pre-Auth DOS when Processing Out of Order CNCT_specific_data Segments

CVSS 8.2

CVE-2026-6507 HIGH

Dnsmasq: dnsmasq: denial of service due to out-of-bounds write in dhcp bootreply processing

CVSS 7.5

CVE-2026-6314 HIGH

Google Chrome < 147.0.7727.101 - Out-of-bounds Write in GPU

CVSS 8.3

CVE-2026-6305 HIGH

Google Chrome < 147.0.7727.101 - Remote Code Execution via PDFium Heap Buffer Overflow

CVSS 8.8

CVE-2026-40919 MEDIUM

Gimp: gimp: denial of service via specially crafted seattle filmworks file

CVSS 6.1

CVE-2026-40916 MEDIUM

Gimp: gimp: denial of service due to stack buffer overflow in tim image loader

CVSS 5.0

CVE-2026-40688 HIGH

FortiWeb 8.0.0-8.0.3, 7.6.0-7.6.6, 7.4.0-7.4.11 - Authenticated Remote Code Execution via Crafted HTTP Requests

CVSS 7.2

CVE-2026-27295 HIGH

Adobe Framemaker | Out-of-bounds Write (CWE-787)

CVSS 7.8

CVE-2026-34631 HIGH

InCopy | Out-of-bounds Write (CWE-787)

CVSS 7.8

CVE-2026-34618 HIGH

Illustrator | Out-of-bounds Write (CWE-787)

CVSS 7.8

CVE-2026-27258 MEDIUM

DNG SDK < 1.7.1 2502 - Out-of-bounds Write

CVSS 5.5

CVE-2026-27291 HIGH

InDesign Desktop | Out-of-bounds Write (CWE-787)

CVSS 7.8

CVE-2026-40310 MEDIUM

ImageMagick: Heap out-of-bounds write in JP2 encoder

CVSS 5.5

CVE-2026-40169 MEDIUM

ImageMagick: Heap buffer overflow (WRITE) in the YAML and JSON encoders

CVSS 6.2

CVE-2026-34238 MEDIUM

ImageMagick: Integer overflow in despeckle operation causes heap buffer overflow on 32-bit builds

CVSS 5.1

CVE-2026-33901 HIGH

ImageMagick MVG Decoder - Heap Buffer Overflow

CVSS 7.5

CVE-2026-6100 CRITICAL

Use-after-free in lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile after re-use under memory pressure

CVE-2026-34863 MEDIUM

HarmonyOS - Out-of-bounds Write in File System

CVSS 6.7

CVE-2026-25207 HIGH

Samsung Open Source Escargot 97e8115ab1110bc502b4b5e4a0c689a71520d335 - Out-of-bounds Write

CVSS 7.4