CWE-787

High likelihood

Out-of-bounds Write

Parent: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

The product writes data past the end, or before the beginning, of the intended buffer.

14,335 vulnerabilities with CWE-787
CVE-2016-7949 CRITICAL
X.org libXrender < 0.9.10 - Buffer Overflow in XvQueryAdaptors and XvQueryEncodings
CVSS 9.8
CVE-2016-7948 CRITICAL
X.org libXrandr < 1.5.1 - Out-of-bounds Write via Reply Data Mishandling
CVSS 9.8
CVE-2016-7947 CRITICAL
Fedora < 1.5.0 - Integer Overflow
CVSS 9.8
CVE-2016-7943 CRITICAL
Fedora < 1.6.3 - Out-of-Bounds Write
CVSS 9.8
CVE-2016-7942 CRITICAL
Fedora < 1.6.3 - Out-of-Bounds Write
CVSS 9.8
CVE-2016-9540 CRITICAL
libtiff 4.0.6 - Heap-Based Buffer Overflow in tiffcp
CVSS 9.8
CVE-2016-9537 CRITICAL
libtiff 4.0.6 - Out-of-Bounds Write in tiffcrop
CVSS 9.8
CVE-2016-9536 CRITICAL
libtiff 4.0.6 - Heap-Based Buffer Overflow in t2p_process_jpeg_strip
CVSS 9.8
CVE-2016-9533 CRITICAL
libtiff - Heap-Based Buffer Overflow in PixarLog horizontalDifference
CVSS 9.8
CVE-2016-4331 HIGH
HDF5 1.8.16 - Out-of-bounds Write in H5Z_NBIT Decoding
CVSS 8.6
CVE-2016-7200 HIGH KEV
Microsoft Edge - Remote Code Execution via Chakra JavaScript Engine Memory Corruption
CVSS 8.8
CVE-2016-8879 MEDIUM
Foxit Reader & PhantomPDF <8.1 - DoS
CVSS 6.5
CVE-2016-8877 HIGH
Foxit Reader & PhantomPDF <8.1 - RCE
CVSS 8.8
CVE-2016-8339 CRITICAL
Redis 3.2.x <3.2.4 - Buffer Overflow
CVSS 9.8
CVE-2016-6990 HIGH
Adobe Flash Player < 23.0.0.185 - Remote Code Execution via Memory Corruption
CVSS 8.8
CVE-2016-6989 HIGH
Adobe Flash Player < 23.0.0.185 - Remote Code Execution via Memory Corruption
CVSS 8.8
CVE-2016-6986 HIGH
Adobe Flash Player < 23.0.0.185 - Remote Code Execution via Memory Corruption
CVSS 8.8
CVE-2016-6985 HIGH
Adobe Flash Player < 23.0.0.185 - Remote Code Execution via Memory Corruption
CVSS 8.8
CVE-2016-6984 HIGH
Adobe Flash Player < 23.0.0.185 - Remote Code Execution via Memory Corruption
CVSS 8.8
CVE-2016-6983 HIGH
Adobe Flash Player < 23.0.0.185 - Remote Code Execution via Memory Corruption
CVSS 8.8
CVE-2016-6982 HIGH
Adobe Flash Player < 23.0.0.185 - Remote Code Execution via Memory Corruption
CVSS 8.8
CVE-2016-4273 HIGH
Adobe Flash Player <18.0.0.382,19.x-23.x - Memory Corruption
CVSS 8.8
CVE-2016-7161 CRITICAL
QEMU < 2.6.2 - Heap-Based Buffer Overflow in xlnx.xps-ethernetlite Receive Callback
CVSS 9.8
CVE-2016-6352 HIGH
Gdk-Pixbuf <2.35.3 - DoS
CVSS 7.5
CVE-2016-3624 HIGH
libtiff < 4.0.6 - Out-of-bounds Write via cvtClump Function
CVSS 7.5
Details
Vulnerabilities 14,335
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits