CWE-787 · Out-of-bounds Write (page 26)
Page 26 of 100 — CVEs classified under CWE-787, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-30318 | High | 7.8 | 2025-05-13 | InDesign Desktop versions ID19.5.2, ID20.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in th… |
CVE-2025-29979 | High | 7.8 | 2025-05-13 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2025-29967 | High | 8.8 | 2025-05-13 | Heap-based buffer overflow in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network. |
CVE-2025-29966 | High | 8.8 | 2025-05-13 | Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network. |
CVE-2025-29964 | High | 8.8 | 2025-05-13 | Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network. |
CVE-2025-29963 | High | 8.8 | 2025-05-13 | Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network. |
CVE-2025-29962 | High | 8.8 | 2025-05-13 | Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network. |
CVE-2025-29840 | High | 8.8 | 2025-05-13 | Stack-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network. |
CVE-2025-24063 | High | 7.8 | 2025-05-13 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2025-32756 | Critical | 9.8 | 2025-05-13 | A stack-based buffer overflow vulnerability [CWE-121] vulnerability in Fortinet FortiCamera 2.1.0 through 2.1.3, FortiCamera 2.0 all versions, FortiCamera 1.1… |
CVE-2025-40580 | Medium | 6.7 | 2025-05-13 | A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected devices are vulnerable to a stack-based buffer… |
CVE-2025-40579 | Medium | 6.7 | 2025-05-13 | A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected devices are vulnerable to a stack-based buffer… |
CVE-2025-30175 | High | 7.5 | 2025-05-13 | A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NMS (All versions < V4.0), SINEMA Remote… |
CVE-2025-4544 | Medium | 6.6 | 2025-05-11 | A vulnerability was found in D-Link DI-8100 up to 16.07.26A1 and classified as critical. This issue affects some unknown processing of the file /ddos.asp of th… |
CVE-2025-47815 | Medium | 4.5 | 2025-05-10 | libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a heap-based buffer overflow in inflate_read (called indirectly from zip_member_read_all) in… |
CVE-2025-47814 | Medium | 4.5 | 2025-05-10 | libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a heap-based buffer overflow in inflate_read (called indirectly from spv_read_xml_member) in… |
CVE-2025-4501 | Medium | 5.3 | 2025-05-10 | A vulnerability, which was classified as critical, was found in code-projects Album Management System 1.0. This affects the function searchalbum of the compone… |
CVE-2025-4500 | Medium | 5.3 | 2025-05-10 | A vulnerability, which was classified as critical, has been found in code-projects Hotel Management System 1.0. Affected by this issue is the function Edit of… |
CVE-2025-4499 | Medium | 5.3 | 2025-05-10 | A vulnerability classified as critical was found in code-projects Simple Hospital Management System 1.0. Affected by this vulnerability is the function Add of… |
CVE-2025-4498 | Medium | 5.3 | 2025-05-10 | A vulnerability classified as critical has been found in code-projects Simple Bus Reservation System 1.0. Affected is the function a::install of the component… |
CVE-2025-4480 | Medium | 5.3 | 2025-05-09 | A vulnerability was found in code-projects Simple College Management System 1.0. It has been declared as critical. This vulnerability affects the function inpu… |
CVE-2025-4472 | Medium | 5.3 | 2025-05-09 | A vulnerability was found in code-projects Departmental Store Management System 1.0. It has been classified as critical. Affected is the function bill. The man… |
CVE-2025-4471 | Medium | 5.3 | 2025-05-09 | A vulnerability, which was classified as critical, has been found in code-projects Jewelery Store Management system 1.0. Affected by this issue is some unknown… |
CVE-2025-1330 | High | 7.8 | 2025-05-08 | IBM CICS TX Standard 11.1 and IBM CICS TX Advanced 10.1 and 11.1 could allow a local user to execute arbitrary code on the system due to failure to handle DNS… |
CVE-2025-1329 | High | 7.8 | 2025-05-08 | IBM CICS TX Standard 11.1 and IBM CICS TX Advanced 10.1 and 11.1 could allow a local user to execute arbitrary code on the system due to failure to handle DNS… |
CVE-2025-45797 | Critical | 9.8 | 2025-05-08 | TOTOlink A950RG V4.1.2cu.5204_B20210112 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the NoticeUrl… |
CVE-2025-45790 | Critical | 9.8 | 2025-05-08 | TOTOLINK A3100R V5.9c.1527 is vulnerable to Buffer Overflow via the priority parameter in the setMacQos interface of /lib/cste_modules/firewall.so. |
CVE-2025-45789 | Critical | 9.8 | 2025-05-08 | TOTOLINK A3100R V5.9c.1527 is vulnerable to buffer overflow via the urlKeyword parameter in setParentalRules. |
CVE-2025-45788 | Critical | 9.8 | 2025-05-08 | TOTOLINK A3100R V5.9c.1527 is vulnerable to Buffer Overflow via the comment parameter in setMacFilterRules. |
CVE-2025-45787 | Critical | 9.8 | 2025-05-08 | TOTOLINK A3100R V5.9c.1527 is vulnerable to Buffer Overflow viathe comment parameter in setIpPortFilterRules. |
CVE-2025-30102 | Medium | 5.5 | 2025-05-08 | Dell PowerScale OneFS, versions 9.4.0.0 through 9.10.1.0, contains an out-of-bounds write vulnerability. A local low privileged attacker could potentially expl… |
CVE-2025-45845 | High | 8.8 | 2025-05-08 | TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid5g parameter in the setWiFiEasyGuestCfg function. |
CVE-2025-45844 | High | 8.8 | 2025-05-08 | TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid parameter in the setWiFiBasicCfg function. |
CVE-2025-45843 | High | 8.8 | 2025-05-08 | TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid parameter in the setWiFiGuestCfg function. |
CVE-2025-45842 | High | 8.8 | 2025-05-08 | TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid5g parameter in the setWiFiEasyCfg function. |
CVE-2025-45841 | Critical | 9.8 | 2025-05-08 | TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the text parameter in the setSmsCfg function. |
CVE-2025-1254 | High | 7.4 | 2025-05-08 | Out-of-bounds Read, Out-of-bounds Write vulnerability in RTI Connext Professional (Recording Service) allows Overflow Buffers, Overread Buffers. This issue aff… |
CVE-2025-1252 | High | 7.1 | 2025-05-08 | Heap-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags. This issue affects Connext Profession… |
CVE-2025-37810 | High | 7.8 | 2025-05-08 | In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: check that event count does not exceed event buffer length The event c… |
CVE-2025-41431 | High | 7.5 | 2025-05-07 | When connection mirroring is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate in the standb… |
CVE-2025-20182 | High | 8.6 | 2025-05-07 | A vulnerability in the Internet Key Exchange version 2 (IKEv2) protocol processing of Cisco Adaptive Security Appliance (ASA) Software, Cisco Firepower Threat… |
CVE-2025-20980 | Medium | 4.0 | 2025-05-07 | Out-of-bounds write in libsavscmn prior to Android 15 allows local attackers to cause memory corruption. |
CVE-2025-20979 | High | 8.4 | 2025-05-07 | Out-of-bounds write in libsavscmn prior to Android 15 allows local attackers to execute arbitrary code. |
CVE-2025-20964 | Medium | 6.6 | 2025-05-07 | Out-of-bounds write in parsing media files in libsavsvc.so prior to SMR May-2025 Release 1 allows local attackers to write out-of-bounds memory. |
CVE-2025-20963 | Medium | 6.6 | 2025-05-07 | Out-of-bounds write in memory initialization in libsavsvc.so prior to SMR May-2025 Release 1 allows local attackers to write out-of-bounds memory. |
CVE-2025-20937 | Medium | 6.7 | 2025-05-07 | Out-of-bounds write in Keymaster trustlet prior to SMR May-2025 Release 1 allows local privileged attackers to write out-of-bounds memory. |
CVE-2025-32405 | High | 7.5 | 2025-05-07 | An Out-of-bounds Write in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to induce a crash in IO devices that use the library by sending a malicious… |
CVE-2025-32404 | Medium | 4.8 | 2025-05-07 | An Out-of-bounds Write in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to corrupt the memory of IO devices that use the library by sending a malic… |
CVE-2025-32403 | Medium | 4.8 | 2025-05-07 | An Out-of-bounds Write in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to corrupt the memory of IO devices that use the library by sending a malic… |
CVE-2025-32402 | High | 7.5 | 2025-05-07 | An Out-of-bounds Write in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to induce a crash in IO devices that use the library by sending a malicious… |
CVE-2025-32401 | Medium | 4.8 | 2025-05-07 | An Heap-based Buffer Overflow in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to corrupt the memory of IO devices that use the library by sending… |
CVE-2025-32400 | High | 7.5 | 2025-05-07 | An Heap-based Buffer Overflow in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to induce a crash in IO devices that use the library by sending a ma… |
CVE-2025-32397 | High | 7.5 | 2025-05-07 | An Heap-based Buffer Overflow in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to induce a crash in IO devices that use the library by sending a ma… |
CVE-2025-32396 | High | 7.5 | 2025-05-07 | An Heap-based Buffer Overflow in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to induce a crash in IO devices that use the library by sending a ma… |
CVE-2025-0649 | High | 7.5 | 2025-05-06 | Incorrect JSON input stringification in Google's Tensorflow serving versions up to 2.18.0 allows for potentially unbounded recursion leading to server crash. |
CVE-2025-32022 | Medium | 4.6 | 2025-05-06 | Finit provides fast init for Linux systems. Finit's urandom plugin has a heap buffer overwrite vulnerability at boot which leads to it overwriting other parts… |
CVE-2025-4356 | High | 8.8 | 2025-05-06 | A vulnerability was found in Tenda DAP-1520 1.10B04_BETA02. It has been declared as critical. This vulnerability affects the function mod_graph_auth_uri_handle… |
CVE-2025-4355 | High | 8.8 | 2025-05-06 | A vulnerability was found in Tenda DAP-1520 1.10B04_BETA02. It has been classified as critical. This affects the function set_ws_action of the file /dws/api/… |
CVE-2025-4354 | High | 8.8 | 2025-05-06 | A vulnerability was found in Tenda DAP-1520 1.10B04_BETA02 and classified as critical. Affected by this issue is the function check_dws_cookie of the file /sto… |
CVE-2025-27132 | Low | 3.8 | 2025-05-06 | in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability… |
CVE-2025-21470 | High | 7.8 | 2025-05-06 | Memory corruption while processing image encoding, when configuration is NULL in IOCTL parameter. |
CVE-2025-21469 | High | 7.8 | 2025-05-06 | Memory corruption while processing image encoding, when input buffer length is 0 in IOCTL call. |
CVE-2025-21468 | High | 7.8 | 2025-05-06 | Memory corruption while reading response from FW, when buffer size is changed by FW while driver is using this size to write null character at the end of buffe… |
CVE-2025-21467 | High | 7.8 | 2025-05-06 | Memory corruption while reading the FW response from the shared queue. |
CVE-2025-21462 | High | 7.8 | 2025-05-06 | Memory corruption while processing an IOCTL request, when buffer significantly exceeds the command argument limit. |
CVE-2025-21460 | High | 7.8 | 2025-05-06 | Memory corruption while processing a message, when the buffer is controlled by a Guest VM, the value can be changed continuously. |
CVE-2024-49845 | High | 7.8 | 2025-05-06 | Memory corruption during the FRS UDS generation process. |
CVE-2024-49844 | High | 7.8 | 2025-05-06 | Memory corruption while triggering commands in the PlayReady Trusted application. |
CVE-2024-49835 | High | 7.8 | 2025-05-06 | Memory corruption while reading secure file. |
CVE-2024-45581 | Medium | 6.6 | 2025-05-06 | Memory corruption while sound model registration for voice activation with audio kernel driver. |
CVE-2024-45579 | High | 7.8 | 2025-05-06 | Memory corruption may occur when invoking IOCTL calls from userspace to the camera kernel driver to dump request information, due to a missing memory requireme… |
CVE-2024-45577 | High | 7.8 | 2025-05-06 | Memory corruption while invoking IOCTL calls from userspace to camera kernel driver to dump request information. |
CVE-2024-45563 | Medium | 6.6 | 2025-05-06 | Memory corruption while handling schedule request in Camera Request Manager(CRM) due to invalid link count in the corresponding session. |
CVE-2025-46585 | High | 7.5 | 2025-05-06 | Out-of-bounds array read/write vulnerability in the kernel module Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-4050 | High | 8.8 | 2025-05-05 | Out of bounds memory access in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote attacker who convinced a user to engage in specific UI gesture… |
CVE-2025-20671 | High | 7.0 | 2025-05-05 | In thermal, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege if a malicious actor has already… |
CVE-2025-20668 | High | 7.8 | 2025-05-05 | In scp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has alread… |
CVE-2023-53142 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: ice: copy last block omitted in ice_get_module_eeprom() ice_get_module_eeprom() is broken… |
CVE-2023-53081 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix data corruption after failed write When buffered write fails to copy data into… |
CVE-2023-53077 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix shift-out-of-bounds in CalculateVMAndRowBytes [WHY] When PTEBufferSi… |
CVE-2023-53065 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output… |
CVE-2025-1883 | High | 7.8 | 2025-05-02 | Out-Of-Bounds Write vulnerability exists in the OBJ file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025. This vulnerability could… |
CVE-2025-35975 | High | 8.8 | 2025-05-01 | MicroDicom DICOM Viewer is vulnerable to an out-of-bounds write which may allow an attacker to execute arbitrary code. The user must open a malicious DCM file… |
CVE-2022-49888 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: arm64: entry: avoid kprobe recursion The cortex_a76_erratum_1463225_debug_handler() funct… |
CVE-2022-49859 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: net: lapbether: fix issue of invalid opcode in lapbeth_open() If lapb_register() failed w… |
CVE-2022-49846 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: udf: Fix a slab-out-of-bounds write bug in udf_find_entry() Syzbot reported a slab-out-of… |
CVE-2022-49804 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: s390: avoid using global register for current_stack_pointer Commit 30de14b1884b ("s390: c… |
CVE-2025-23159 | High | 8.4 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: media: venus: hfi: add a check to handle OOB in sfr region sfr->buf_size is in shared mem… |
CVE-2025-23158 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: media: venus: hfi: add check to handle incorrect queue size qsize represents size of shar… |
CVE-2025-4125 | High | 7.8 | 2025-04-30 | Delta Electronics ISPSoft version 3.20 is vulnerable to an Out-Of-Bounds Write vulnerability that could allow an attacker to execute arbitrary code when parsin… |
CVE-2025-4124 | High | 7.8 | 2025-04-30 | Delta Electronics ISPSoft version 3.20 is vulnerable to an Out-Of-Bounds Write vulnerability that could allow an attacker to execute arbitrary code when parsin… |
CVE-2025-22884 | High | 7.8 | 2025-04-30 | Delta Electronics ISPSoft version 3.20 is vulnerable to a Stack-Based buffer overflow vulnerability that could allow an attacker to execute arbitrary code when… |
CVE-2025-22883 | High | 7.8 | 2025-04-30 | Delta Electronics ISPSoft version 3.20 is vulnerable to an Out-Of-Bounds Write vulnerability that could allow an attacker to execute arbitrary code when parsin… |
CVE-2025-22882 | High | 7.8 | 2025-04-30 | Delta Electronics ISPSoft version 3.20 is vulnerable to a Stack-Based buffer overflow vulnerability that could allow an attacker to leverage debugging logic to… |
CVE-2025-4077 | Medium | 5.3 | 2025-04-29 | A vulnerability classified as critical was found in code-projects School Billing System 1.0. This vulnerability affects the function searchrec. The manipulatio… |
CVE-2025-4068 | Medium | 5.3 | 2025-04-29 | A vulnerability classified as critical was found in code-projects Simple Movie Ticket Booking System 1.0. Affected by this vulnerability is the function change… |
CVE-2025-4063 | Medium | 5.3 | 2025-04-29 | A vulnerability was found in code-projects Student Information Management System 1.0 and classified as critical. Affected by this issue is the function cancel… |
CVE-2025-4062 | Medium | 5.3 | 2025-04-29 | A vulnerability has been found in code-projects Theater Seat Booking System 1.0 and classified as critical. Affected by this vulnerability is the function canc… |
CVE-2025-4061 | Medium | 5.3 | 2025-04-29 | A vulnerability, which was classified as critical, was found in code-projects Clothing Store Management System up to 1.0. Affected is the function add_item. Th… |
CVE-2025-4059 | Medium | 5.3 | 2025-04-29 | A vulnerability classified as critical was found in code-projects Prison Management System 1.0. This vulnerability affects the function addrecord of the compon… |