CWE-787

High likelihood

Out-of-bounds Write

Parent: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

The product writes data past the end, or before the beginning, of the intended buffer.

14,327 vulnerabilities with CWE-787
CVE-2017-7523 HIGH
Cygwin 1.7.2-1.8.0 - Buffer Overflow in wcsxfrm/wcsxfrm_l Functions
CVSS 7.5
CVE-2017-11465 CRITICAL
Ruby 2.4.1 - Out-of-bounds Read in UTF-8 Parser
CVSS 9.8
CVE-2017-10984 CRITICAL
FreeRADIUS 3.x - Remote Code Execution via data2vp_wimax() Write Overflow
CVSS 9.8
CVE-2017-10979 CRITICAL
FreeRADIUS 2.x < 2.2.10 - Remote Code Execution via rad_coalesce() Write Overflow
CVSS 9.8
CVE-2017-3100 MEDIUM
Adobe Flash Player <= 26.0.0.131 - Memory Corruption in ActionScript 2 BitmapData
CVSS 6.5
CVE-2017-3099 HIGH
Adobe Flash Player <= 26.0.0.131 - Remote Code Execution via ActionScript 3 Raster Data Model
CVSS 8.8
CVE-2017-11335 HIGH
LibTIFF - Heap-Based Buffer Overflow via PlanarConfig=Contig Image
CVSS 8.8
CVE-2017-1000363 HIGH
Linux Kernel 2.6.12-3.2.90 - Out-of-Bounds Write in lp.c parport_nr Array
CVSS 7.8
CVE-2017-2863 HIGH
Infix 7.1.5 - Out-of-bounds Write in PDF Parser
CVSS 7.8
CVE-2017-11110 HIGH
catdoc 0.95 - Out-of-bounds Write in ole_init Function
CVSS 7.8
CVE-2017-0701 HIGH
Android 7.1.1-7.1.2 - Remote Code Execution via Out-of-bounds Write
CVSS 7.8
CVE-2017-0695 MEDIUM
Android 5.0.2 5.1.1 6.0 6.0.1 7.0 7.1.1 7.1.2 - Denial of Service in Media Framework
CVSS 5.5
CVE-2017-0684 HIGH
Android <7.1.2 - Privilege Escalation
CVSS 7.8
CVE-2017-10699 CRITICAL
VideoLAN VLC media player 2.2.7-x - Out-of-bounds Write via memcpy()
CVSS 9.8
CVE-2017-10671 HIGH
sthttpd < 2.27.1 - Heap-based Buffer Overflow in de_dotdot Function
CVSS 7.8
CVE-2017-9445 HIGH
systemd 223-233 - Out-of-bounds Write via DNS Response TCP Payload
CVSS 7.5
CVE-2017-9949 HIGH
radare2 1.5.0 - Out-of-bounds Write via Crafted Binary File
CVSS 7.8
CVE-2017-2781 CRITICAL
MatrixSSL 3.8.7b - Remote Code Execution via X509 Certificate Parsing
CVSS 9.8
CVE-2017-2780 CRITICAL
MatrixSSL 3.8.7b - Remote Code Execution via X509 Certificate Parsing
CVSS 9.8
CVE-2017-3630 MEDIUM
Solaris RSH Stack Clash Privilege Escalation
CVSS 5.3
CVE-2017-2805 CRITICAL
Foscam C1 Indoor HD Camera Firmware < 1.9.3.17 - Stack-Based Buffer Overflow via HTTP Request
CVSS 9.8
CVE-2017-0663 HIGH
Android 4.4.4 5.0.2 5.1.1 6.0 6.0.1 7.0 7.1.1 7.1.2 - Remote Code Execution via libxml2 Out-of-bounds Write
CVSS 7.8
CVE-2017-0638 HIGH
Android 7.1.1-7.1.2 - Remote Code Execution via System UI Component
CVSS 7.8
CVE-2017-8233 HIGH
Android - Out-of-bounds Write in Camera Driver Function
CVSS 7.8
CVE-2017-9544 CRITICAL
EFS Software Easy Chat Server <3.1 - Buffer Overflow
CVSS 9.8
Details
Vulnerabilities 14,327
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits