CWE-787 · Out-of-bounds Write (page 21)
Page 21 of 100 — CVEs classified under CWE-787, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-4809 | High | 8.8 | 2025-05-16 | A vulnerability was found in Tenda AC7 15.03.06.44. It has been classified as critical. Affected is the function fromSafeSetMacFilter of the file /goform/setMa… |
CVE-2025-4791 | High | 7.3 | 2025-05-16 | A vulnerability has been found in FreeFloat FTP Server 1.0 and classified as critical. This vulnerability affects unknown code of the component HASH Command Ha… |
CVE-2025-4790 | High | 7.3 | 2025-05-16 | A vulnerability, which was classified as critical, was found in FreeFloat FTP Server 1.0. This affects an unknown part of the component GLOB Command Handler. T… |
CVE-2025-4789 | High | 7.3 | 2025-05-16 | A vulnerability, which was classified as critical, has been found in FreeFloat FTP Server 1.0. Affected by this issue is some unknown functionality of the comp… |
CVE-2025-4788 | High | 7.3 | 2025-05-16 | A vulnerability classified as critical was found in FreeFloat FTP Server 1.0. Affected by this vulnerability is an unknown functionality of the component DELET… |
CVE-2025-30421 | High | 7.8 | 2025-05-15 | There is a memory corruption vulnerability due to a stack-based buffer overflow in DrObjectStorage::XML_Serialize() when using the SymbolEditor in NI Circuit D… |
CVE-2025-30418 | High | 7.8 | 2025-05-15 | There is a memory corruption vulnerability due to an out of bounds write in CheckPins() when using the SymbolEditor in NI Circuit Design Suite. This vulnerabi… |
CVE-2025-30417 | High | 7.8 | 2025-05-15 | There is a memory corruption vulnerability due to an out of bounds write in Library!DecodeBase64() when using the SymbolEditor in NI Circuit Design Suite. Thi… |
CVE-2024-55569 | High | 7.5 | 2025-05-14 | An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110… |
CVE-2025-4640 | | 2025-05-14 | Out-of-bounds Write vulnerability in PointCloudLibrary pcl allows Overflow Buffers. Since version 1.14.0, PCL by default uses a zlib installation from the syst… | |
CVE-2025-2900 | High | 7.5 | 2025-05-14 | IBM Semeru Runtime 8.0.302.0 through 8.0.442.0, 11.0.12.0 through 11.0.26.0, 17.0.0.0 through 17.0.14.0, and 21.0.0.0 through 12.0.6.0 is vulnerable to a denia… |
CVE-2025-26785 | High | 7.5 | 2025-05-14 | An issue was discovered in NAS in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400… |
CVE-2025-26784 | Medium | 6.5 | 2025-05-14 | An issue was discovered in NAS in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400… |
CVE-2025-43572 | High | 7.8 | 2025-05-13 | Dimension versions 4.1.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the c… |
CVE-2025-43569 | High | 7.8 | 2025-05-13 | Substance3D - Stager versions 3.1.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the conte… |
CVE-2025-43554 | High | 7.8 | 2025-05-13 | Substance3D - Modeler versions 1.21.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the con… |
CVE-2025-43548 | High | 7.8 | 2025-05-13 | Dimension versions 4.1.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the c… |
CVE-2024-29222 | Medium | 6.1 | 2025-05-13 | Out-of-bounds write for some Intel(R) Graphics Driver software may allow an authenticated user to potentially enable denial of service via local access. |
CVE-2025-30330 | High | 7.8 | 2025-05-13 | Illustrator versions 29.3, 28.7.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the c… |
CVE-2025-30328 | High | 7.8 | 2025-05-13 | Animate versions 24.0.8, 23.0.11 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context… |
CVE-2025-30322 | High | 7.8 | 2025-05-13 | Substance3D - Painter versions 11.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the conte… |
CVE-2025-27197 | High | 7.8 | 2025-05-13 | Lightroom Desktop versions 8.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of… |
CVE-2025-30388 | High | 7.8 | 2025-05-13 | Heap-based buffer overflow in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally. |
CVE-2025-30376 | High | 7.8 | 2025-05-13 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2025-30318 | High | 7.8 | 2025-05-13 | InDesign Desktop versions ID19.5.2, ID20.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in th… |
CVE-2025-29979 | High | 7.8 | 2025-05-13 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2025-29967 | High | 8.8 | 2025-05-13 | Heap-based buffer overflow in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network. |
CVE-2025-29966 | High | 8.8 | 2025-05-13 | Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network. |
CVE-2025-29964 | High | 8.8 | 2025-05-13 | Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network. |
CVE-2025-29963 | High | 8.8 | 2025-05-13 | Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network. |
CVE-2025-29962 | High | 8.8 | 2025-05-13 | Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network. |
CVE-2025-29840 | High | 8.8 | 2025-05-13 | Stack-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network. |
CVE-2025-24063 | High | 7.8 | 2025-05-13 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2025-32756 | Critical | 9.8 | 2025-05-13 | A stack-based buffer overflow vulnerability [CWE-121] vulnerability in Fortinet FortiCamera 2.1.0 through 2.1.3, FortiCamera 2.0 all versions, FortiCamera 1.1… |
CVE-2025-40580 | Medium | 6.7 | 2025-05-13 | A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected devices are vulnerable to a stack-based buffer… |
CVE-2025-40579 | Medium | 6.7 | 2025-05-13 | A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected devices are vulnerable to a stack-based buffer… |
CVE-2025-30175 | High | 7.5 | 2025-05-13 | A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NMS (All versions < V4.0), SINEMA Remote… |
CVE-2025-4544 | Medium | 6.6 | 2025-05-11 | A vulnerability was found in D-Link DI-8100 up to 16.07.26A1 and classified as critical. This issue affects some unknown processing of the file /ddos.asp of th… |
CVE-2025-47815 | Medium | 4.5 | 2025-05-10 | libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a heap-based buffer overflow in inflate_read (called indirectly from zip_member_read_all) in… |
CVE-2025-47814 | Medium | 4.5 | 2025-05-10 | libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a heap-based buffer overflow in inflate_read (called indirectly from spv_read_xml_member) in… |
CVE-2025-4501 | Medium | 5.3 | 2025-05-10 | A vulnerability, which was classified as critical, was found in code-projects Album Management System 1.0. This affects the function searchalbum of the compone… |
CVE-2025-4500 | Medium | 5.3 | 2025-05-10 | A vulnerability, which was classified as critical, has been found in code-projects Hotel Management System 1.0. Affected by this issue is the function Edit of… |
CVE-2025-4499 | Medium | 5.3 | 2025-05-10 | A vulnerability classified as critical was found in code-projects Simple Hospital Management System 1.0. Affected by this vulnerability is the function Add of… |
CVE-2025-4498 | Medium | 5.3 | 2025-05-10 | A vulnerability classified as critical has been found in code-projects Simple Bus Reservation System 1.0. Affected is the function a::install of the component… |
CVE-2025-4480 | Medium | 5.3 | 2025-05-09 | A vulnerability was found in code-projects Simple College Management System 1.0. It has been declared as critical. This vulnerability affects the function inpu… |
CVE-2025-4472 | Medium | 5.3 | 2025-05-09 | A vulnerability was found in code-projects Departmental Store Management System 1.0. It has been classified as critical. Affected is the function bill. The man… |
CVE-2025-4471 | Medium | 5.3 | 2025-05-09 | A vulnerability, which was classified as critical, has been found in code-projects Jewelery Store Management system 1.0. Affected by this issue is some unknown… |
CVE-2025-1330 | High | 7.8 | 2025-05-08 | IBM CICS TX Standard 11.1 and IBM CICS TX Advanced 10.1 and 11.1 could allow a local user to execute arbitrary code on the system due to failure to handle DNS… |
CVE-2025-1329 | High | 7.8 | 2025-05-08 | IBM CICS TX Standard 11.1 and IBM CICS TX Advanced 10.1 and 11.1 could allow a local user to execute arbitrary code on the system due to failure to handle DNS… |
CVE-2025-45797 | Critical | 9.8 | 2025-05-08 | TOTOlink A950RG V4.1.2cu.5204_B20210112 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the NoticeUrl… |
CVE-2025-45790 | Critical | 9.8 | 2025-05-08 | TOTOLINK A3100R V5.9c.1527 is vulnerable to Buffer Overflow via the priority parameter in the setMacQos interface of /lib/cste_modules/firewall.so. |
CVE-2025-45789 | Critical | 9.8 | 2025-05-08 | TOTOLINK A3100R V5.9c.1527 is vulnerable to buffer overflow via the urlKeyword parameter in setParentalRules. |
CVE-2025-45788 | Critical | 9.8 | 2025-05-08 | TOTOLINK A3100R V5.9c.1527 is vulnerable to Buffer Overflow via the comment parameter in setMacFilterRules. |
CVE-2025-45787 | Critical | 9.8 | 2025-05-08 | TOTOLINK A3100R V5.9c.1527 is vulnerable to Buffer Overflow viathe comment parameter in setIpPortFilterRules. |
CVE-2025-30102 | Medium | 5.5 | 2025-05-08 | Dell PowerScale OneFS, versions 9.4.0.0 through 9.10.1.0, contains an out-of-bounds write vulnerability. A local low privileged attacker could potentially expl… |
CVE-2025-45845 | High | 8.8 | 2025-05-08 | TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid5g parameter in the setWiFiEasyGuestCfg function. |
CVE-2025-45844 | High | 8.8 | 2025-05-08 | TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid parameter in the setWiFiBasicCfg function. |
CVE-2025-45843 | High | 8.8 | 2025-05-08 | TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid parameter in the setWiFiGuestCfg function. |
CVE-2025-45842 | High | 8.8 | 2025-05-08 | TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid5g parameter in the setWiFiEasyCfg function. |
CVE-2025-45841 | Critical | 9.8 | 2025-05-08 | TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the text parameter in the setSmsCfg function. |
CVE-2025-1254 | High | 7.4 | 2025-05-08 | Out-of-bounds Read, Out-of-bounds Write vulnerability in RTI Connext Professional (Recording Service) allows Overflow Buffers, Overread Buffers.This issue affe… |
CVE-2025-1252 | High | 7.1 | 2025-05-08 | Heap-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags.This issue affects Connext Professiona… |
CVE-2025-37810 | High | 7.8 | 2025-05-08 | In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: check that event count does not exceed event buffer length The event c… |
CVE-2025-41431 | High | 7.5 | 2025-05-07 | When connection mirroring is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate in the standb… |
CVE-2025-20182 | High | 8.6 | 2025-05-07 | A vulnerability in the Internet Key Exchange version 2 (IKEv2) protocol processing of Cisco Adaptive Security Appliance (ASA) Software, Cisco Firepower Threat… |
CVE-2025-20980 | Medium | 4.0 | 2025-05-07 | Out-of-bounds write in libsavscmn prior to Android 15 allows local attackers to cause memory corruption. |
CVE-2025-20979 | High | 8.4 | 2025-05-07 | Out-of-bounds write in libsavscmn prior to Android 15 allows local attackers to execute arbitrary code. |
CVE-2025-20964 | Medium | 6.6 | 2025-05-07 | Out-of-bounds write in parsing media files in libsavsvc.so prior to SMR May-2025 Release 1 allows local attackers to write out-of-bounds memory. |
CVE-2025-20963 | Medium | 6.6 | 2025-05-07 | Out-of-bounds write in memory initialization in libsavsvc.so prior to SMR May-2025 Release 1 allows local attackers to write out-of-bounds memory. |
CVE-2025-20937 | Medium | 6.7 | 2025-05-07 | Out-of-bounds write in Keymaster trustlet prior to SMR May-2025 Release 1 allows local privileged attackers to write out-of-bounds memory. |
CVE-2025-32405 | High | 7.5 | 2025-05-07 | An Out-of-bounds Write in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to induce a crash in IO devices that use the library by sending a malicious… |
CVE-2025-32404 | Medium | 4.8 | 2025-05-07 | An Out-of-bounds Write in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to corrupt the memory of IO devices that use the library by sending a malic… |
CVE-2025-32403 | Medium | 4.8 | 2025-05-07 | An Out-of-bounds Write in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to corrupt the memory of IO devices that use the library by sending a malic… |
CVE-2025-32402 | High | 7.5 | 2025-05-07 | An Out-of-bounds Write in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to induce a crash in IO devices that use the library by sending a malicious… |
CVE-2025-32401 | Medium | 4.8 | 2025-05-07 | An Heap-based Buffer Overflow in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to corrupt the memory of IO devices that use the library by sending… |
CVE-2025-32400 | High | 7.5 | 2025-05-07 | An Heap-based Buffer Overflow in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to induce a crash in IO devices that use the library by sending a ma… |
CVE-2025-32397 | High | 7.5 | 2025-05-07 | An Heap-based Buffer Overflow in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to induce a crash in IO devices that use the library by sending a ma… |
CVE-2025-32396 | High | 7.5 | 2025-05-07 | An Heap-based Buffer Overflow in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to induce a crash in IO devices that use the library by sending a ma… |
CVE-2025-0649 | High | 7.5 | 2025-05-06 | Incorrect JSON input stringification in Google's Tensorflow serving versions up to 2.18.0 allows for potentially unbounded recursion leading to server crash. |
CVE-2025-32022 | Medium | 4.6 | 2025-05-06 | Finit provides fast init for Linux systems. Finit's urandom plugin has a heap buffer overwrite vulnerability at boot which leads to it overwriting other parts… |
CVE-2025-4356 | High | 8.8 | 2025-05-06 | A vulnerability was found in Tenda DAP-1520 1.10B04_BETA02. It has been declared as critical. This vulnerability affects the function mod_graph_auth_uri_handle… |
CVE-2025-4355 | High | 8.8 | 2025-05-06 | A vulnerability was found in Tenda DAP-1520 1.10B04_BETA02. It has been classified as critical. This affects the function set_ws_action of the file /dws/api/… |
CVE-2025-4354 | High | 8.8 | 2025-05-06 | A vulnerability was found in Tenda DAP-1520 1.10B04_BETA02 and classified as critical. Affected by this issue is the function check_dws_cookie of the file /sto… |
CVE-2025-27132 | Low | 3.8 | 2025-05-06 | in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability… |
CVE-2025-21470 | High | 7.8 | 2025-05-06 | Memory corruption while processing image encoding, when configuration is NULL in IOCTL parameter. |
CVE-2025-21469 | High | 7.8 | 2025-05-06 | Memory corruption while processing image encoding, when input buffer length is 0 in IOCTL call. |
CVE-2025-21468 | High | 7.8 | 2025-05-06 | Memory corruption while reading response from FW, when buffer size is changed by FW while driver is using this size to write null character at the end of buffe… |
CVE-2025-21467 | High | 7.8 | 2025-05-06 | Memory corruption while reading the FW response from the shared queue. |
CVE-2025-21462 | High | 7.8 | 2025-05-06 | Memory corruption while processing an IOCTL request, when buffer significantly exceeds the command argument limit. |
CVE-2025-21460 | High | 7.8 | 2025-05-06 | Memory corruption while processing a message, when the buffer is controlled by a Guest VM, the value can be changed continuously. |
CVE-2024-49845 | High | 7.8 | 2025-05-06 | Memory corruption during the FRS UDS generation process. |
CVE-2024-49844 | High | 7.8 | 2025-05-06 | Memory corruption while triggering commands in the PlayReady Trusted application. |
CVE-2024-49835 | High | 7.8 | 2025-05-06 | Memory corruption while reading secure file. |
CVE-2024-45581 | Medium | 6.6 | 2025-05-06 | Memory corruption while sound model registration for voice activation with audio kernel driver. |
CVE-2024-45579 | High | 7.8 | 2025-05-06 | Memory corruption may occur when invoking IOCTL calls from userspace to the camera kernel driver to dump request information, due to a missing memory requireme… |
CVE-2024-45577 | High | 7.8 | 2025-05-06 | Memory corruption while invoking IOCTL calls from userspace to camera kernel driver to dump request information. |
CVE-2024-45563 | Medium | 6.6 | 2025-05-06 | Memory corruption while handling schedule request in Camera Request Manager(CRM) due to invalid link count in the corresponding session. |
CVE-2025-46585 | High | 7.5 | 2025-05-06 | Out-of-bounds array read/write vulnerability in the kernel module Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-4050 | High | 8.8 | 2025-05-05 | Out of bounds memory access in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote attacker who convinced a user to engage in specific UI gesture… |
CVE-2025-20671 | High | 7.0 | 2025-05-05 | In thermal, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege if a malicious actor has already… |