CWE-787 · Out-of-bounds Write (page 3)
Page 3 of 100 — CVEs classified under CWE-787, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-55365 | Medium | 6.7 | 2026-09-15 | In multiple functions of remap.c, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local escalation of privilege wi… |
CVE-2026-55351 | High | 7.8 | 2026-09-15 | In VPU, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privi… |
CVE-2026-55332 | Medium | 6.7 | 2026-09-15 | In multiple locations, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of privilege with System e… |
CVE-2026-55323 | High | 7.8 | 2026-09-15 | In gf_base_update_finger_base of gf_base.c, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to local escalation of privi… |
CVE-2026-55317 | Medium | 6.7 | 2026-09-15 | In printf of printf.c, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of privilege with System e… |
CVE-2026-55301 | High | 8.4 | 2026-09-15 | In Wave6VpuDecFlush of wave6.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no… |
CVE-2026-19885 | High | 7.8 | 2026-09-15 | OriginLab Origin Viewer OGWU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitr… |
CVE-2026-19773 | Critical | 9.8 | 2026-09-15 | libwebsockets HTTP/2 HPACK Path Header Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute a… |
CVE-2026-0200 | High | 8.8 | 2026-09-15 | In Cellular Modem, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote escalation of privilege with no additional… |
CVE-2026-0199 | High | 7.8 | 2026-09-15 | In gf_ta_test_set_config of gf_ta_test.c, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of priv… |
CVE-2026-0171 | High | 8.8 | 2026-09-15 | In multiple locations, there is a possible out-of-bounds write due to a logic error in the code. This could lead to remote code execution with no additional ex… |
CVE-2026-0170 | High | 8.8 | 2026-09-15 | In Vp9DecodeFrameTag of vp9hwd_headers.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote escalation of privi… |
CVE-2026-0159 | High | 8.8 | 2026-09-15 | In Cellular Modem, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution… |
CVE-2026-88765 | High | 8.5 | 2026-09-15 | GitLab has remediated an issue in GitLab EE affecting all versions from 12.3 to 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 under certain conditions cou… |
CVE-2026-11928 | Critical | 9.8 | 2026-09-15 | IBM Verify Identity Access is vulnerable to a buffer overflow attack. |
CVE-2026-11728 | High | 8.1 | 2026-09-15 | IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4… |
CVE-2026-14986 | Medium | 6.8 | 2026-09-14 | The ITE it51xxx I2C driver, when operating as an I2C target (slave) in buffer mode (CONFIG_I2C_TARGET + CONFIG_I2C_TARGET_BUFFER_MODE), copies host-supplied wr… |
CVE-2026-86901 | High | 7.1 | 2026-09-14 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27. Mounting a maliciously crafted exFAT vol… |
CVE-2026-86882 | Medium | 6.5 | 2026-09-14 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden G… |
CVE-2026-86876 | Medium | 5.2 | 2026-09-14 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden G… |
CVE-2026-86869 | Medium | 6.5 | 2026-09-14 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, macOS Golden Gate 27. Processing a m… |
CVE-2026-84619 | Medium | 6.1 | 2026-09-14 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An… |
CVE-2026-84611 | High | 7.3 | 2026-09-14 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden G… |
CVE-2026-84588 | Medium | 6.5 | 2026-09-14 | A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27. Mounting a maliciously crafted disk image… |
CVE-2026-84575 | High | 7.8 | 2026-09-14 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8… |
CVE-2026-84567 | Medium | 5.5 | 2026-09-14 | The issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to… |
CVE-2026-84552 | Medium | 5.5 | 2026-09-14 | The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequo… |
CVE-2026-84546 | High | 8.4 | 2026-09-14 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden G… |
CVE-2026-84531 | Medium | 6.2 | 2026-09-14 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27. Processing malicio… |
CVE-2026-84526 | Medium | 4.3 | 2026-09-14 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden G… |
CVE-2026-84523 | Medium | 5.5 | 2026-09-14 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden G… |
CVE-2026-84519 | Medium | 6.5 | 2026-09-14 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden G… |
CVE-2026-84515 | High | 7.8 | 2026-09-14 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Co… |
CVE-2026-84511 | High | 7.8 | 2026-09-14 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8… |
CVE-2026-84505 | High | 7.8 | 2026-09-14 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An… |
CVE-2026-65414 | Critical | 9.8 | 2026-09-14 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden G… |
CVE-2026-65395 | Medium | 6.5 | 2026-09-14 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden G… |
CVE-2026-65374 | High | 8.8 | 2026-09-14 | A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting… |
CVE-2026-65344 | High | 7.8 | 2026-09-14 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden G… |
CVE-2026-64752 | High | 7.3 | 2026-09-14 | A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Proces… |
CVE-2026-64736 | High | 7.1 | 2026-09-14 | An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe… |
CVE-2026-43815 | High | 8.8 | 2026-09-14 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Connecting t… |
CVE-2026-43790 | Critical | 9.1 | 2026-09-14 | The issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A remote attacker may… |
CVE-2026-43761 | Medium | 6.5 | 2026-09-14 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. M… |
CVE-2026-43677 | Medium | 6.5 | 2026-09-14 | An out-of-bounds write issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7… |
CVE-2026-28966 | Medium | 4.3 | 2026-09-14 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden G… |
CVE-2026-19280 | Medium | 5.2 | 2026-09-14 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a denial of service as a result of a buffer overflow in a PASE process. An authenticated attacker could leverage this… |
CVE-2026-54334 | Critical | 9.8 | 2026-09-14 | UEFI Firmware Parser parses BIOS, Intel ME, and UEFI firmware structures including volumes, file systems, and files. Prior to 1.14, ReadCLen() in uefi_firmware… |
CVE-2026-54333 | Critical | 9.8 | 2026-09-14 | UEFI Firmware Parser parses BIOS, Intel ME, and UEFI firmware structures including volumes, file systems, and files. Prior to 1.14, MakeTable() in uefi_firmwar… |
CVE-2026-90947 | High | 7.8 | 2026-09-14 | A flaw was found in GIMP. When processing a specially crafted lighting preset file, the Lighting Effects filter does not properly validate the number of light… |
CVE-2026-90949 | High | 7.8 | 2026-09-14 | A flaw was found in GIMP's PSP (Paint Shop Pro) file loader. When processing a compressed selection channel, a heap-based buffer overflow can occur due to a mi… |
CVE-2026-90948 | High | 7.8 | 2026-09-14 | A flaw was found in GIMP's ICO file loader. When processing an ICO file containing an embedded PNG image, an integer overflow can occur during the calculation… |
CVE-2026-82782 | Medium | 4.3 | 2026-09-14 | Out-of-bounds write vulnerability exists in CONPROSYS nano Series. Receiving a specially crafted request created and sent by a remote attacker may cause a deni… |
CVE-2026-33967 | Low | 2.8 | 2026-09-14 | An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680. In the camera driver, an out-of-bounds… |
CVE-2026-33960 | Low | 2.8 | 2026-09-14 | An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 1330, 1380, 1480, 1580, 1680, W920, W930, and W1000. . A malformed ioctl comm… |
CVE-2026-33957 | Medium | 4.2 | 2026-09-14 | An issue was discovered in CustOS Driver in Samsung Mobile Processor Exynos 1580. Requesting oversized shared memory from the custos_iwc device enables out-of-… |
CVE-2026-33956 | Low | 2.8 | 2026-09-14 | An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, and 2500. Sending a malformed message to the test_msg sysfs… |
CVE-2026-23793 | Low | 3.5 | 2026-09-14 | An issue was discovered in Samsung Mobile Processor Exynos 1330, 1380, 1480, and 2400. An out-of-bounds memory access vulnerability in the camera GDC driver ma… |
CVE-2026-23791 | Medium | 4.2 | 2026-09-14 | An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 2600. An out-of-bounds write vulnerabilit… |
CVE-2026-90559 | High | 7.5 | 2026-09-12 | snappy-java through 1.1.10.8 contains an out-of-bounds write vulnerability in Snappy.uncompress(ByteBuffer, ByteBuffer) because destination buffer capacity is… |
CVE-2026-89266 | High | 8.2 | 2026-09-12 | stb_vorbis through 1.22 contains a heap buffer overflow in start_decoder() where the codebook multiplicands allocation size is truncated from size_t to int. At… |
CVE-2026-54240 | High | 7.4 | 2026-09-11 | libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.1.1 use signed 32-bit arithmetic to calculate pixel offsets, allowing a… |
CVE-2026-47773 | | 2026-09-11 | ArduinoBLE enables Bluetooth Low Energy connectivity on certain Arduino models. Versions prior to 2.0.2 contain a missing bounds check in the ATT layer write r… | |
CVE-2026-78547 | | 2026-09-11 | Out-of-bounds write vulnerability in Citrix Citrix Workspace app for Windows. This issue affects Citrix Workspace app for Windows: before 2603.11 Current Rele… | |
CVE-2026-45770 | High | 7.5 | 2026-09-10 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to ve… |
CVE-2026-88053 | High | 7.8 | 2026-09-10 | Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Classify::ReadIntTemplates in src/classify/intproto.cpp reads NumClassPruners, NumClasses… |
CVE-2026-88052 | High | 7.8 | 2026-09-10 | Tesseract is an open source OCR engine. In version 5.5.3 and earlier, UNICHARSET::load_via_fgets in src/ccutil/unicharset.cpp trusts the declared unichar count… |
CVE-2026-88051 | High | 7.8 | 2026-09-10 | Tesseract is an open source OCR engine. In version 5.5.3 and earlier, the callback form of GenericVector::read in src/ccutil/genericvector.h reads the independ… |
CVE-2026-88050 | Medium | 5.5 | 2026-09-10 | Tesseract is an open source OCR engine. In version 5.5.3 and earlier, RecodedCharID::DeSerialize in src/ccutil/unicharcompress.h validates length_ but accepts… |
CVE-2026-88049 | Medium | 5.5 | 2026-09-10 | Tesseract is an open source OCR engine. In version 5.5.3 and earlier, prior .traineddata hardening added bounds checks to NetworkIO::CopyTimeStepGeneral and Ne… |
CVE-2026-88048 | High | 7.1 | 2026-09-10 | Tesseract is an open source OCR engine. In version 5.5.3 and earlier, FullyConnected::DeSerialize in src/lstm/fullyconnected.cpp does not validate the deserial… |
CVE-2026-59679 | Critical | 9.0 | 2026-09-10 | fs_read_glyphs() in the libXfont2 font-server client (src/fc/fserve.c) indexes the per-character encoding[] array using num_chars from the FS_QueryXBitmaps16 r… |
CVE-2026-0310 | | 2026-09-10 | A buffer overflow vulnerability in the XML processing functionality of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network acc… | |
CVE-2026-56711 | High | 7.0 | 2026-09-09 | VLC media player versions 3.0.0 through 3.0.23 contain a memory-safety vulnerability reachable when processing crafted media. Exploitation requires user intera… |
CVE-2026-21111 | | 2026-09-09 | Out-of-bounds write in libsthmbc.so prior to One UI 8.5 allows local attackers to write out-of-bounds memory. | |
CVE-2026-21110 | | 2026-09-09 | Out-of-bounds write in libsavscmn.so prior to One UI 8.5 allows local attackers to execute arbitrary code. | |
CVE-2026-21107 | Medium | 5.5 | 2026-09-09 | Out-of-bounds write in Samsung Notes prior to version 4.4.45.5 allows local attackers to write out-of-bounds memory. |
CVE-2026-21091 | High | 7.8 | 2026-09-09 | Out-of-bounds write in libcodec2secevrcdec.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory. |
CVE-2026-21090 | High | 7.8 | 2026-09-09 | Out-of-bounds write in libsaviextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory. |
CVE-2026-21087 | High | 7.8 | 2026-09-09 | Out-of-bounds write in libmdnie.so prior to SMR Sep-2026 Release 1 allows local attackers to execute arbitrary code with system server privilege. |
CVE-2026-21085 | Medium | 6.7 | 2026-09-09 | Out-of-bounds write in Keymaster trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to write out-of-bounds memory. |
CVE-2026-87638 | Critical | 9.6 | 2026-09-09 | Out of bounds write in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a… |
CVE-2026-87621 | Critical | 9.6 | 2026-09-09 | Out of bounds write in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the… |
CVE-2026-87491 | High | 8.8 | 2026-09-09 | Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML pag… |
CVE-2026-87438 | Critical | 9.6 | 2026-09-09 | Out of bounds write in WebGL in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via… |
CVE-2026-53938 | High | 8.2 | 2026-09-09 | OpenIDC/cjose is a C library implementing the Javascript Object Signing and Encryption (JOSE). Prior to version 0.6.2.5, cjose's JWE decryption path for the AE… |
CVE-2026-81983 | High | 7.8 | 2026-09-08 | Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitati… |
CVE-2026-81981 | High | 7.8 | 2026-09-08 | Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitati… |
CVE-2026-81980 | High | 7.8 | 2026-09-08 | Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitati… |
CVE-2026-81979 | High | 7.8 | 2026-09-08 | Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitati… |
CVE-2026-79908 | High | 7.8 | 2026-09-08 | Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitati… |
CVE-2026-30754 | High | 8.8 | 2026-09-08 | A memory corruption vulnerability exists in FFmpeg before 8.1. The RTP encoding process. In the nal_send function in libavformat/rtpenc_h264_hevc.c, a negative… |
CVE-2026-82005 | High | 7.8 | 2026-09-08 | Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploit… |
CVE-2026-75992 | High | 7.8 | 2026-09-08 | Illustrator is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation… |
CVE-2026-75631 | High | 7.8 | 2026-09-08 | Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploit… |
CVE-2026-49918 | High | 7.8 | 2026-09-08 | In multiple functions, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional… |
CVE-2026-49879 | High | 8.8 | 2026-09-08 | In multiple functions of rw_t3t.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additi… |
CVE-2026-45515 | High | 7.8 | 2026-09-08 | In a2dp_vendor_opus_decoder_decode_packet of a2dp_vendor_opus_decoder.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lea… |
CVE-2026-28662 | High | 8.0 | 2026-09-08 | In p2p_process_prov_disc_bootstrap_req of p2p_pd.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote (proximal/… |
CVE-2026-28653 | High | 7.8 | 2026-09-08 | In multiple functions of rw_t3t.cc, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with n… |