CWE-787

14,406 vulnerabilities with CWE-787

CVE-2026-65705 HIGH

FFmpeg 3.4 - 8.1.2 vf_floodfill Out-of-Bounds Write via filter_frame()

CVSS 7.8

CVE-2026-65704 HIGH

FFmpeg 8.1.2 Out-of-Bounds Write via TY Demuxer and Shorten Decoder

CVSS 7.8

CVE-2026-65703 HIGH

FFmpeg 2.7 - 8.1.2 Out-of-Bounds Write in TDSC Video Decoder

CVSS 7.8

CVE-2026-64835 HIGH

FFmpeg 4.4 - 8.1.2 Out-of-Bounds Memory Access in ADX Audio Decoder

CVSS 8.8

CVE-2026-40691 HIGH

NLnet Labs Unbound - Packet of Death for DNSCrypt Over TCP

CVSS 7.5

CVE-2026-16419 CRITICAL

Google Chrome - Out-of-Bounds Access

CVSS 9.6

CVE-2026-16413 HIGH

Google Chrome - Out-of-bounds Write

CVSS 8.3

CVE-2026-47178 MEDIUM

libheif has Heap Out Of Bounds Write in unci subsystem

CVSS 6.1

CVE-2026-10678 HIGH

NULL-pointer / out-of-bounds write in Zephyr MCTP I2C+GPIO target binding driven by an unauthenticated I2C controller

CVSS 8.1

CVE-2026-59147 CRITICAL

Data::DisjointSet::Shared versions before 0.02 for Perl allow out-of-bounds reads and writes via an unvalidated parent index in dsu_find

CVSS 9.8

CVE-2026-59146 HIGH

Data::SpatialHash::Shared < 0.02 - Out-of-Bounds Access

CVSS 7.8

CVE-2026-16367 CRITICAL

Sandbox escape due to invalid pointer in the Disability Access APIs component

CVSS 10.0

CVE-2026-64608 CRITICAL

Apache Fory: Heap type confusion and out-of-bounds read/write in C++ compatible-mode field-skip paths

CVSS 9.8

CVE-2026-15903 HIGH

Google Chrome - Out-of-Bounds Access

CVSS 8.8

CVE-2026-15813 MEDIUM

Kronosnet: kronosnet: memory corruption and out-of-bounds access via malformed network packet defragmentation

CVSS 6.5

CVE-2026-63794 HIGH

KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path

CVSS 7.8

CVE-2026-53380 HIGH

media: rzv2h-ivc: Fix concurrent buffer list access

CVSS 7.8

CVE-2026-16225 MEDIUM

davenardella snap7 s7_peer.cpp NegotiatePDULength out-of-bounds write

CVSS 6.3

CVE-2026-16095 HIGH

Shibby Tomato rc setup_conntrack out-of-bounds write

CVSS 8.8

CVE-2026-45784 HIGH

rust-openssl: Potential out-of-bounds write in `CipherCtxRef::cipher_update_inplace` for AES-KW-PAD ciphers

CVSS 7.1

CVE-2026-44436 HIGH

Quicly is vulnerable to connection state corruption

CVSS 7.5

CVE-2026-15997 LOW

Native ARM SHA3 / SHAKE `restoreFullState` fails to detect size_t underflow in a crafted encoded state

CVE-2026-61389 HIGH

AutomationDirect Productivity Suite Out-of-bounds Write

CVSS 7.0

CVE-2026-60063 HIGH

AutomationDirect Productivity Suite Out-of-bounds Write

CVSS 7.0

CVE-2026-15422 CRITICAL

SCTP needs to better-check INIT ACK chunk parameters