CWE-787: Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.
Yearly Trend
Top Affected Vendors
All Out-of-bounds Write CVEs (3,172)
Cscape Envision RV version 4.60 has an out-of-bounds write vulnerability when parsing HMI project files. This allows attackers to execute arbitrary co...
Mar 9, 2023CVE-2023-27566 is an out-of-bounds write vulnerability in Live2D Cubism Editor's Cubism Core component that allows attackers to execute arbitrary code...
Mar 3, 2023This vulnerability is a heap buffer overflow in libde265's motion.cc component, allowing attackers to execute arbitrary code or cause denial of servic...
Mar 1, 2023This CVE describes an out-of-bounds write vulnerability in Adobe Bridge that could allow an attacker to execute arbitrary code on a victim's system. T...
Feb 17, 2023This CVE describes an out-of-bounds write vulnerability in Adobe After Effects that could allow arbitrary code execution when a user opens a malicious...
Feb 17, 2023This CVE describes an out-of-bounds write vulnerability in Adobe Photoshop that could allow an attacker to execute arbitrary code on a victim's system...
Feb 17, 2023CVE-2023-21619 is an out-of-bounds write vulnerability in Adobe FrameMaker that could allow arbitrary code execution when a user opens a malicious fil...
Feb 17, 2023This CVE describes a stack overflow vulnerability in the BIOS firmware of Acer Aspire E5-475G laptops. It allows local attackers to execute arbitrary ...
Feb 16, 2023This vulnerability allows remote code execution through a buffer overflow when parsing malicious SPP files in Tecnomatix Plant Simulation. Attackers c...
Feb 14, 2023This vulnerability allows remote code execution through specially crafted SPP files in Tecnomatix Plant Simulation. Attackers can exploit an out-of-bo...
Feb 14, 2023This vulnerability in Tecnomatix Plant Simulation allows remote code execution via a specially crafted SPP file, enabling an attacker to run arbitrary...
Feb 14, 2023This vulnerability allows remote code execution through specially crafted SPP files in Tecnomatix Plant Simulation. Attackers can exploit an out-of-bo...
Feb 14, 2023This vulnerability allows remote code execution via specially crafted SPP files in Tecnomatix Plant Simulation. Attackers can execute arbitrary code i...
Feb 14, 2023This vulnerability allows remote code execution via specially crafted SPP files in Tecnomatix Plant Simulation. Attackers can exploit an out-of-bounds...
Feb 14, 2023This vulnerability in Tecnomatix Plant Simulation allows remote code execution via a specially crafted SPP file, enabling an attacker to run arbitrary...
Feb 14, 2023This vulnerability allows remote code execution through specially crafted SPP files in Tecnomatix Plant Simulation. Attackers can exploit an out-of-bo...
Feb 14, 2023This vulnerability allows remote code execution via specially crafted SPP files in Tecnomatix Plant Simulation. Attackers can execute arbitrary code i...
Feb 14, 2023This vulnerability in Solid Edge allows attackers to execute arbitrary code by exploiting an out-of-bounds write when parsing malicious PAR files. Use...
Feb 14, 2023This is a buffer overflow vulnerability in the json_parse_key function of the sheredom json.h library. It allows attackers to execute arbitrary code a...
Feb 3, 2023This is a buffer overflow vulnerability in the json_parse_value function of the sheredom json.h library. It allows attackers to execute arbitrary code...
Feb 3, 2023Delta Electronics DOPSoft versions 4.00.16.22 and prior contain an out-of-bounds write vulnerability that allows remote code execution when processing...
Feb 3, 2023CVE-2022-45188 is a heap-based buffer overflow vulnerability in Netatalk's afp_getappl function that allows remote code execution via a malicious .app...
Nov 12, 2022Adobe InCopy versions 17.2 and earlier (macOS/Windows) and 16.4.1 and earlier (macOS/Windows) contain an out-of-bounds write vulnerability that could ...
Jul 15, 2022Adobe InDesign versions 17.2.1 and earlier (and 16.4.1 and earlier) contain an out-of-bounds write vulnerability that could allow attackers to execute...
Jul 15, 2022This CVE describes an out-of-bounds write vulnerability in Adobe Acrobat Reader that could allow arbitrary code execution when a user opens a maliciou...
Jul 15, 2022This vulnerability allows an authenticated attacker to execute arbitrary code with SYSTEM privileges on affected Windows systems by exploiting a flaw ...
Jul 12, 2022CVE-2022-33108 is a stack overflow vulnerability in XPDF v4.04's Object::Copy class that allows attackers to execute arbitrary code by crafting malici...
Jun 28, 2022CVE-2022-2210 is an out-of-bounds write vulnerability in Vim text editor versions prior to 8.2. This allows attackers to execute arbitrary code by tri...
Jun 27, 2022LibreDWG v0.12.4.4608 contains a heap buffer overflow vulnerability in the decode_preR13_section_hdr function. This allows attackers to execute arbitr...
Jun 23, 2022CVE-2022-33034 is a stack overflow vulnerability in LibreDWG's decode_r2007.c file that allows attackers to execute arbitrary code or cause denial of ...
Jun 23, 2022This vulnerability allows attackers to execute arbitrary code by tricking users into opening malicious TGA image files in AutoCAD 2023. The buffer ove...
Jun 21, 2022CVE-2022-2129 is an out-of-bounds write vulnerability in Vim text editor versions prior to 8.2. This allows attackers to execute arbitrary code by tri...
Jun 19, 2022This CVE describes an out-of-bounds write vulnerability in Adobe InCopy that could allow arbitrary code execution when a user opens a malicious file. ...
Jun 16, 2022CVE-2022-30656 is an out-of-bounds write vulnerability in Adobe InCopy that allows arbitrary code execution when a user opens a malicious file. This a...
Jun 16, 2022CVE-2022-30664 is an out-of-bounds write vulnerability in Adobe Animate that allows arbitrary code execution when a user opens a malicious file. This ...
Jun 16, 2022This CVE describes an out-of-bounds write vulnerability in Adobe InDesign that could allow an attacker to execute arbitrary code on a victim's system ...
Jun 16, 2022This CVE describes an out-of-bounds write vulnerability in Adobe InDesign that could allow an attacker to execute arbitrary code on a victim's system....
Jun 16, 2022An out-of-bounds write vulnerability in the simulator module of Fuji Electric's V-SFT graphic editor versions prior to v6.1.6.0 allows attackers to ex...
Jun 16, 2022This CVE describes an out-of-bounds write vulnerability in Adobe Illustrator that could allow an attacker to execute arbitrary code on a victim's syst...
Jun 15, 2022Adobe Bridge versions 12.0.1 and earlier contain an out-of-bounds write vulnerability that allows attackers to execute arbitrary code with the privile...
Jun 15, 2022CVE-2022-28843 is an out-of-bounds write vulnerability in Adobe Bridge that allows arbitrary code execution when a user opens a malicious file. This a...
Jun 15, 2022CVE-2022-28845 is an out-of-bounds write vulnerability in Adobe Bridge that allows arbitrary code execution when a user opens a malicious file. This a...
Jun 15, 2022CVE-2022-28847 is an out-of-bounds write vulnerability in Adobe Bridge that allows arbitrary code execution when a user opens a malicious file. This a...
Jun 15, 2022This CVE describes an out-of-bounds write vulnerability in Adobe After Effects that could allow arbitrary code execution when a user opens a malicious...
Jun 15, 2022Adobe Bridge versions 12.0.1 and earlier contain an out-of-bounds write vulnerability that allows attackers to execute arbitrary code with the privile...
Jun 15, 2022Adobe Prelude versions 22.1.1 and earlier contain an out-of-bounds write vulnerability that allows attackers to execute arbitrary code by tricking use...
Jun 15, 2022This vulnerability allows attackers to execute arbitrary code on affected Adobe InDesign installations by tricking users into opening malicious TIFF f...
Jun 15, 2022This vulnerability allows local privilege escalation on Android devices through an out-of-bounds write in the NFC stack. Attackers can gain elevated p...
Jun 15, 2022This CVE describes a heap-based buffer overflow vulnerability in the simulator module of Fuji Electric's V-SFT graphic editor. Attackers can exploit i...
Jun 14, 2022Adobe Premiere Pro versions 15.4 and earlier contain a memory corruption vulnerability that allows arbitrary code execution when a user opens a malici...
Jun 13, 2022About Out-of-bounds Write (CWE-787)
The product writes data past the end, or before the beginning, of the intended buffer.
Our database tracks 3,172 CVEs classified as CWE-787, with 796 rated critical and 2,163 rated high severity. The average CVSS score for Out-of-bounds Write vulnerabilities is 8.3.
External reference: View CWE-787 on MITRE CWE →
Monitor Out-of-bounds Write Vulnerabilities
Get alerted when new Out-of-bounds Write CVEs affect your infrastructure.
Start Monitoring Free