CWE-787

High likelihood

Out-of-bounds Write

Parent: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

The product writes data past the end, or before the beginning, of the intended buffer.

14,144 vulnerabilities with CWE-787
CVE-2026-0648 HIGH
Eclipse ThreadX 6.1.7-6.4.2 - Denial of Service via Incorrect Return Value Check in CreateCounter
CVSS 7.8
CVE-2026-1489 MEDIUM
Red Hat Enterprise Linux 6-10 - Out-of-bounds Write in Unicode Case Conversion
CVSS 5.4
CVE-2026-1484 MEDIUM
Red Hat Enterprise Linux 6-10 - Out-of-bounds Write in GLib Base64 Encoding Routine
CVSS 4.2
CVE-2026-24829 MEDIUM
Is-Daouda is-Engine <3.3.4 - Heap-based Buffer Overflow
CVSS 6.5
CVE-2026-24827 HIGH
gerstrong Commander-Genius <Release refs/pull/358/merge - Memory Co...
CVSS 7.5
CVE-2026-24826 CRITICAL
cadaver turso3d - Memory Safety and Divide-by-Zero Flaws
CVE-2026-24823 CRITICAL
FASTSHIFT X-TRACK <2.7 - Buffer Overflow
CVE-2026-24822 CRITICAL
wxhelper <3.9.10.19-v1 - Heap-based Buffer Overflow
CVE-2026-24817 HIGH
praydog UEVR <1.05 - Buffer Overflow
CVE-2026-24811 CRITICAL
root < 6.34.08 - Out-of-bounds Read in builtins/zlib inffast.C
CVSS 9.8
CVE-2026-24809 MEDIUM
praydog/REFramework <1.5.5 - Buffer Overflow
CVE-2026-24800 CRITICAL
tildearrow furnace - Buffer Overflow
CVE-2026-24799 MEDIUM
davisking dlib <19.24.9 - Buffer Overflow
CVE-2026-24797 MEDIUM
cupoch < v0.2.11.0 - Out-of-bounds Write in libjpeg-turbo tjbench.C
CVE-2026-24795 MEDIUM
CloverBootloader <5162 - Buffer Overflow
CVE-2026-24793 CRITICAL
azerothcore-wotlk <4.0.0 - Buffer Overflow
CVSS 9.8
CVE-2026-1361 HIGH
ASDA-Soft < 7.2.2.0 - Stack-based Buffer Overflow
CVSS 7.8
CVE-2026-1284 HIGH
SOLIDWORKS eDrawings 2025-2026 - Out-of-bounds Write via EPRT File Parsing
CVSS 7.8
CVE-2026-1418 MEDIUM
GPAC < 2.4.0 - Out-of-Bounds Write in SRT Subtitle Import
CVSS 5.3
CVE-2026-0793 CRITICAL
ALGO 8180 IP Audio Alerter Firmware - Unauthenticated Heap-based Buffer Overflow via InformaCast
CVSS 9.8
CVE-2026-0792 CRITICAL
ALGO 8180 IP Audio Alerter Firmware - Unauthenticated Stack-based Buffer Overflow via SIP INVITE Alert-Info Header
CVSS 9.8
CVE-2026-0791 CRITICAL
ALGO 8180 IP Audio Alerter Firmware - Unauthenticated Remote Code Execution via SIP INVITE Replaces Header
CVSS 9.8
CVE-2026-0899 HIGH
Google Chrome < 144.0.7559.59 - Out-of-bounds Read in V8
CVSS 8.8
CVE-2026-0962 MEDIUM
Wireshark 4.4.0-4.4.12 4.6.0-4.6.2 - Denial of Service in SOME/IP-SD Dissector
CVSS 5.3
CVE-2026-0961 MEDIUM
Wireshark 4.4.0-4.4.12 4.6.0-4.6.2 - Denial of Service in BLF File Parser
CVSS 5.5
Details
Vulnerabilities 14,144
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits