CWE-787

High likelihood

Out-of-bounds Write

Parent: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

The product writes data past the end, or before the beginning, of the intended buffer.

14,279 vulnerabilities with CWE-787
CVE-2021-21231 HIGH
Google Chrome <90.0.4430.93 - Heap Corruption
CVSS 8.8
CVE-2021-21227 HIGH
Google Chrome <90.0.4430.93 - Heap Corruption
CVSS 8.8
CVE-2021-29464 LOW
Exiv2 < 0.27.4 - Heap-based Buffer Overflow via Crafted Image File Metadata Write
CVSS 3.3
CVE-2021-20515 MEDIUM
IBM Informix Dynamic Server <14.10 - Buffer Overflow
CVSS 6.7
CVE-2021-1504 HIGH
Cisco Adaptive Security Appliance and Firepower Threat Defense - Unauthenticated Denial of Service via HTTPS Request
CVSS 8.6
CVE-2021-1445 HIGH
Cisco Firepower Threat Defense and Adaptive Security Appliance Software - Denial of Service via HTTPS Request
CVSS 8.6
CVE-2021-31438 HIGH
Foxit Studio Photo < 3.6.6.933 - Remote Code Execution via PSP File Handling
CVSS 7.8
CVE-2021-31437 HIGH
Foxit Studio Photo < 3.6.6.933 - Remote Code Execution via JP2 File Parsing
CVSS 7.8
CVE-2021-31436 HIGH
Foxit Studio Photo < 3.6.6.933 - Remote Code Execution via SGI File Handling
CVSS 7.8
CVE-2021-31434 HIGH
Foxit Studio Photo < 3.6.6.933 - Remote Code Execution via JPM File Parsing
CVSS 7.8
CVE-2021-31433 HIGH
Foxit Studio Photo < 3.6.6.933 - Remote Code Execution via ARW File Parsing
CVSS 7.8
CVE-2021-20294 HIGH
binutils 2.35-2.35.1 - Stack Buffer Overflow via Crafted File in readelf
CVSS 7.8
CVE-2021-31875 CRITICAL
Cesanta MongooseOS mJS 1.26 - Heap-Based Buffer Overflow via Malformed JSON String
CVSS 9.8
CVE-2021-22330 MEDIUM
Huawei P30 Firmware 9.1.0.131(C00E130R1P21) - Unauthenticated Out-of-bounds Write via Message Processing
CVSS 6.5
CVE-2021-22327 MEDIUM
Huawei P30 Firmware - Out-of-bounds Write via File Parsing
CVSS 6.5
CVE-2021-22664 HIGH
CNCSoft-B < 1.0.0.3 - Out-of-bounds Write
CVSS 7.8
CVE-2021-31784 HIGH
Open Design Alliance Drawings SDK < 2021.6 - Out-of-bounds Write in File-Reading Procedure
CVSS 7.8
CVE-2021-29672 HIGH
IBM Spectrum Protect Client 8.1.0.0-8.1.11.0 - Stack-Based Buffer Overflow via Locale Settings Processing
CVSS 7.8
CVE-2021-21225 HIGH
Google Chrome <90.0.4430.85 - Memory Corruption
CVSS 8.8
CVE-2021-21222 MEDIUM
Google Chrome <90.0.4430.85 - Buffer Overflow
CVSS 6.5
CVE-2021-21220 HIGH KEV
Google Chrome <89.0.4389.128 - Heap Corruption
CVSS 8.8
CVE-2021-20546 MEDIUM
IBM Spectrum Protect Client <8.1.11.0 - Buffer Overflow
CVSS 5.5
CVE-2021-31802 HIGH
NETGEAR R7000 Firmware < 1.0.11.116 - Unauthenticated Remote Code Execution via Backup.cgi File Upload
CVSS 8.8
CVE-2021-31795 HIGH
pvrsrvkm.ko < 2021-04-24 - Out-of-bounds Write via PhysmemNewRamBackedPMR
CVSS 7.0
CVE-2021-31598 HIGH
ezxml 0.8.6 - Heap-Based Buffer Overflow in ezxml_decode
CVSS 7.5
Details
Vulnerabilities 14,279
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits