IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a heap-based
NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause an
NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause an
A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-1
A buffer overflow vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, th
Buffer overflow in parallel HNSW index build in pgvector 0.6.0 through 0.8.1 allows a database user to leak sensitive da
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-1
A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiManager 7.4.0 through 7.4.2, FortiM
HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA se
HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA se
HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA se
HTSlib is a library for reading and writing bioinformatics file formats. GZI files are used to index block-compressed GZ
HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA se
A heap-buffer-overflow vulnerability exists in wolfSSL's wolfSSL_d2i_SSL_SESSION() function. When deserializing session
Gigabyte Control Center developed by GIGABYTE has an Arbitrary File Write vulnerability. When the pairing feature is ena
Sereal::Decoder versions from 4.000 through 4.009_002 for Perl embeds a vulnerable version of the Zstandard library. Se
Sereal::Encoder versions from 4.000 through 4.009_002 for Perl embeds a vulnerable version of the Zstandard library. Se
In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory access can occur in WebGPU because the amount of to-be-
Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when a memo
Dell PowerProtect Data Domain with Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.6, LTS2
rust-openssl provides OpenSSL bindings for the Rust programming language. From to before 0.10.78, aes::unwrap_key() co
Insufficient validation of the prefix length field in IPv6 Router Advertisement processing in FreeRTOS-Plus-TCP before V
Memory safety bugs present in Firefox ESR 115.35.1, Firefox ESR 140.10.1 and Firefox 150.0.1. Some of these bugs showed
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix in-place encryption corruption in
A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a man in the middle att
Issue summary: A signed integer overflow when sizing the destination buffer for Unicode output in ASN1_mbstring_ncopy()
The $_internalApplyOplogUpdate aggregation pipeline stage can be used to execute a document diff containing a malformed
Incorrect boundary conditions in the Web Audio component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.1
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module modules.
Out-of-bounds Write, Out-of-bounds Write, Out-of-bounds Write vulnerability in RTI Connext Professional (Queueing Servic
The MCTP-over-I2C+GPIO target binding in Zephyr (subsys/pmci/mctp/mctp_i2c_gpio_target.c) processes pseudo-register writ
The Apache Traffic Server Cripts framework has out-of-bounds writes, path traversal, and use-after-free errors. This is
llama.cpp builds b4882 through b9058 contain a heap buffer overflow vulnerability in the KV cache state restore path whe
Contiki-NG's MQTT client parse_publish_vhdr() in os/net/app-layer/mqtt/mqtt.c sets topic_len_received=1 before checking
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code due to a buffer overflow.
The IPv6 neighbor-discovery code in subsys/net/ip/ipv6_nbr.c processes the 6LoWPAN Context Option (6CO, RFC 6775) carrie
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a buffer ov
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of
A stack-based buffer overflow in the tmpServer module of TP-Link Archer AX53 v1.0 allows an authenticated adjacent attac
In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation o
In KeyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalatio
In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation o
In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation o
In mminfra, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation o
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1.1 and below
Memory corruption while processing a secure logging command in the trusted application.
iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color
zlib versions up to and including 1.3.1.2 include a global buffer overflow in the untgz utility located under contrib/un
In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Fix OOB write in bnxt_re_copy_err_sta
Frequently Asked Questions
What is CWE-787?
CWE-787 (Out-of-bounds Write) is a weakness category in the Common Weakness Enumeration (CWE) system maintained by MITRE. It describes a class of software or hardware vulnerability that can lead to security issues.
How many CVEs are classified as CWE-787?
There are 17,111 CVE records associated with CWE-787 in our database. Of these, 2513 are critical severity, 8761 are high severity, and 2814 are medium severity.
How can I protect against CWE-787 vulnerabilities?
Protection strategies depend on the specific weakness type. General measures include input validation, secure coding practices, regular security testing, and keeping software up to date. CyberStrike can help by automatically scanning your infrastructure for vulnerabilities related to CWE-787 using AI-powered security agents.
Detect CWE-787 Vulnerabilities
CyberStrike's AI agents automatically detect out-of-bounds write vulnerabilities across your infrastructure.
Get Started