CWE-787

High likelihood

Out-of-bounds Write

Parent: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

The product writes data past the end, or before the beginning, of the intended buffer.

14,327 vulnerabilities with CWE-787
CVE-2017-11012 HIGH
Android for MSM - Stack-based Buffer Overflow via QCA_NL80211_VENDOR_SUBCMD_ENCRYPTION_TEST Command
CVSS 7.8
CVE-2017-2894 CRITICAL
Cesanta Mongoose 6.8 - Remote Code Execution via MQTT SUBSCRIBE Packet Parsing
CVSS 9.8
CVE-2017-1000255 MEDIUM
Linux Kernel - Out-of-bounds Write via Signal Frame Handling on PowerPC
CVSS 5.5
CVE-2017-5113 HIGH
Google Chrome <61.0.3163.79-61.0.3163.81 - Memory Corruption
CVSS 8.8
CVE-2017-5095 HIGH
Google Chrome <60.0.3112.78 - Memory Corruption
CVSS 8.8
CVE-2017-15289 MEDIUM
Qemu < 2.10.2 - Out-of-bounds Write in Cirrus VGA Mode4and5 Write Functions
CVSS 6.0
CVE-2017-15303 HIGH
CPUID CPU-Z < 1.42 - Unauthenticated Arbitrary Memory Write via ioctl 0x9C402430
CVSS 7.8
CVE-2017-2887 HIGH
SDL_image 2.0.1 - Stack-based Buffer Overflow in XCF Property Handling
CVSS 8.8
CVE-2017-11046 HIGH
Android - Out-of-bounds Write in Audio Driver ioctl Handler
CVSS 7.8
CVE-2017-1000111 HIGH
Linux Kernel 2.6.27-3.2.92 - Heap Out-of-bounds Write in AF_PACKET Socket Option Handling
CVSS 7.8
CVE-2017-14491 CRITICAL
dnsmasq < 2.78 - Remote Code Execution via Crafted DNS Response
CVSS 9.8
CVE-2017-12166 CRITICAL
OpenVPN <2.3.3-2.4.4 - Buffer Overflow
CVSS 9.8
CVE-2017-14648 CRITICAL
BladeEnc 0.94.2 - Out-of-bounds Write in iteration_loop Function
CVSS 9.8
CVE-2017-14647 HIGH
Bento4 <1.5.0-617 - Buffer Overflow
CVSS 8.8
CVE-2017-14644 HIGH
Bento4 <1.5.0-617 - Buffer Overflow
CVSS 8.8
CVE-2017-4924 HIGH
VMware ESXi <6.5-12.x <12.5.7-8.x <8.5.8 - RCE
CVSS 8.8
CVE-2017-14412 HIGH
MP3Gain 1.5.2 - Out-of-bounds Write in copy_mp Function
CVSS 7.8
CVE-2017-14411 HIGH
MP3Gain 1.5.2 - Stack-Based Buffer Overflow in copy_mp Function
CVSS 7.8
CVE-2017-14409 HIGH
MP3Gain 1.5.2 - Out-of-bounds Write in III_dequantize_sample
CVSS 7.8
CVE-2017-1000251 HIGH
Linux Kernel 2.6.32-4.13.1 - Remote Code Execution via Bluetooth L2CAP Configuration Response
CVSS 8.0
CVE-2017-14075 HIGH
Jungos WinDriver <12.4.0 - Privilege Escalation
CVSS 7.8
CVE-2017-14164 HIGH
OpenJPEG 2.2.0 - Heap-Based Buffer Overflow
CVSS 8.8
CVE-2017-2862 HIGH
Gdk-Pixbuf 2.36.6 - Heap Overflow via JPEG Image Loading
CVSS 7.8
CVE-2017-2779 HIGH
LabVIEW 2014-2017 - Out-of-bounds Write in RSRC Segment Parsing
CVSS 7.5
CVE-2017-14152 HIGH
OpenJPEG 2.2.0 - Heap-Based Buffer Overflow in opj_j2k_set_cinema_parameters
CVSS 8.8
Details
Vulnerabilities 14,327
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits