sqlite-vec v0.1.1 was discovered to contain a heap buffer overflow via the npy_token_next function. This vulnerability a
A stack buffer overflow was addressed through improved input validation. This issue is fixed in Apple TV 1.5.0.152 for W
An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Sonoma 14.6. An
An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.1, ma
An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.1, ma
An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.1, ma
An issue in radare2 v5.8.0 through v5.9.4 allows a local attacker to cause a denial of service via the __bf_div function
Substance3D - Painter versions 10.1.0 and earlier are affected by a Write-what-where Condition vulnerability that could
In ResStringPool::setTo of ResourceTypes.cpp, it's possible for an attacker to control the value of mStringPoolSize to b
The Imager package before 1.025 for Perl has a heap-based buffer overflow leading to denial of service, or possibly unsp
Out-of-bounds Write vulnerability in Apache Commons Configuration.This issue affects Apache Commons Configuration: from
A heap-based buffer overflow vulnerability in the processing of Link Control Protocol messages in FortiGate versions 5.6
Under non-default configuration, a stack-based buffer overflow in FortiOS version 6.0.10 and below, version 5.6.12 and b
A Heap-based Buffer Overflow vulnerability in the Routing Protocol Daemon (RPD) of Juniper Networks Junos OS and Junos
A vulnerability has been found in Nsasoft Product Key Explorer 4.0.9 and classified as problematic. Affected by this vul
A vulnerability was found in Nsasoft ShareAlarmPro 2.1.4 and classified as problematic. Affected by this issue is some u
An issue was discovered in QEMU 7.1.0 through 8.2.1. register_vfs in hw/pci/pcie_sriov.c mishandles the situation where
Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an Improper SMM communication buffer verification vulner
A vulnerability was found in appneta tcpreplay up to 4.4.4. It has been classified as problematic. This affects the func
An out of bounds write vulnerability in the AMD Radeon™ user mode driver for DirectX® 11 could allow an attacker with a
An out of bounds write vulnerability in the AMD Radeon™ user mode driver for DirectX® 11 could allow an attacker with a
Improper Input Validation vulnerability in Samsung Open Source escargot JavaScript engine allows Overflow Buffers. Howe
A Segmentation Fault issue discovered in Samsung Open Source Escargot JavaScript engine allows remote attackers to c
In Eclipse OpenJ9 release versions prior to 0.44.0 and after 0.13.0, when running with JVM option -Xgc:concurrentScaveng
A vulnerability has been found in SourceCodester Student Record Management System 1.0 and classified as critical. Affect
A vulnerability has been found in code-projects Hotel Management System 1.0 and classified as problematic. This vulnerab
A vulnerability was found in code-projects Hotel Management System 1.0 and classified as problematic. This issue affects
A vulnerability, which was classified as critical, was found in SourceCodester Phone Contact Manager System 1.0. Affecte
In trusty service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denia
In faceid servive, there is a possible out of bounds write due to a missing bounds check. This could lead to local denia
In faceid servive, there is a possible out of bounds write due to a missing bounds check. This could lead to local denia
Out-of-bound write in libsmat.so prior to SMR Aug-2024 Release 1 allows local attackers to cause memory corruption.
An out-of-bounds write in the engine module in AVG/Avast Antivirus signature <24092400 released on 24/Sep/2024 on MacOS
An out-of-bounds write in the engine module in AVG/Avast Antivirus signature <24092400 released on 24/Sep/2024 on MacOS
An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 9820, 9825, 980, 990, 850, 108
In the Linux kernel, the following vulnerability has been resolved: um: time-travel: fix time corruption In 'basic' ti
A stack based buffer overflow was found in the virtio-net device of QEMU. This issue occurs when flushing TX in the virt
SAP Replication Server allows an attacker to use gateway for executing some commands to RSSD. This could result in crash
A flaw was discovered in Elasticsearch, affecting document ingestion when an index template contains a dynamic field map
An improper restriction of operations within the bounds of a memory buffer in the parameter type parser of the Zyxel VMG
A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before version 2
A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before version 2
D-LINK DI-8003 v16.07.16A1 was discovered to contain a buffer overflow via the fn parameter in the tgfile_htm function.
D-LINK DI-8003 v16.07.16A1 was discovered to contain a buffer overflow via the notify parameter in the arp_sys_asp funct
D-LINK DI-8003 v16.07.26A1 was discovered to contain a buffer overflow via the host_ip parameter in the ipsec_road_asp f
When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed HTTP/3 requests can cause NGINX w
Dell iDRAC Service Module version 5.3.0.0 and prior, contain an Out of bound Read Vulnerability. A privileged local atta
Dell iDRAC Service Module version 5.3.0.0 and prior, contain a Out of bound Write Vulnerability. A privileged local atta
In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, due to an error in convert.quoted-printab
Dell BIOS contains an Out-of-Bounds Write vulnerability. A local authenticated malicious user with admin privileges coul
Frequently Asked Questions
What is CWE-787?
CWE-787 (Out-of-bounds Write) is a weakness category in the Common Weakness Enumeration (CWE) system maintained by MITRE. It describes a class of software or hardware vulnerability that can lead to security issues.
How many CVEs are classified as CWE-787?
There are 17,111 CVE records associated with CWE-787 in our database. Of these, 2513 are critical severity, 8761 are high severity, and 2814 are medium severity.
How can I protect against CWE-787 vulnerabilities?
Protection strategies depend on the specific weakness type. General measures include input validation, secure coding practices, regular security testing, and keeping software up to date. CyberStrike can help by automatically scanning your infrastructure for vulnerabilities related to CWE-787 using AI-powered security agents.
Detect CWE-787 Vulnerabilities
CyberStrike's AI agents automatically detect out-of-bounds write vulnerabilities across your infrastructure.
Get Started