VYPR

CWE-787

Out-of-bounds Write

BaseDraftLikelihood: High

Description

The product writes data past the end, or before the beginning, of the intended buffer.

Hierarchy (View 1000)

CVEs mapped to this weakness (15,182)

page 283 of 760
  • CVE-2026-49918HigSep 8, 2026
    risk 0.51cvss 7.8epss 0.00

    In multiple functions, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

  • CVE-2026-45515HigSep 8, 2026
    risk 0.51cvss 7.8epss 0.00

    In a2dp_vendor_opus_decoder_decode_packet of a2dp_vendor_opus_decoder.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for…

  • CVE-2026-28653HigSep 8, 2026
    risk 0.51cvss 7.8epss 0.00

    In multiple functions of rw_t3t.cc, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

  • CVE-2026-28583HigSep 8, 2026
    risk 0.51cvss 7.8epss 0.00

    In validate_camera_metadata_structure of camera_metadata.c, there is a possible out of bounds write due to a logical error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for…

  • CVE-2026-71345HigSep 8, 2026
    risk 0.51cvss 7.8epss 0.00

    Out-of-bounds write in Windows Spaceport.sys allows an authorized attacker to execute code locally.

  • CVE-2026-64197HigSep 3, 2026
    risk 0.51cvss 7.8epss 0.00

    There is an out-of-bounds write vulnerability in DASYLab due to improper validation of user-supplied data, resulting in a write past the end of an allocated data structure. Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file.  This…

  • CVE-2026-64196HigSep 3, 2026
    risk 0.51cvss 7.8epss 0.00

    There is an out-of-bounds write vulnerability in DASYLab due to improper validation of user-supplied data, resulting in a write past the end of an allocated heap. Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file.  This issue…

  • CVE-2026-64195HigSep 3, 2026
    risk 0.51cvss 7.8epss 0.00

    There is an out-of-bounds write vulnerability in DASYLab due to lack of proper validation of user-supplied data. Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file.  This issue affects all versions before 2026.0.0.

  • CVE-2026-75770HigAug 25, 2026
    risk 0.51cvss 7.8epss 0.00

    Substance3D - Painter is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  • CVE-2026-75749HigAug 25, 2026
    risk 0.51cvss 7.8epss 0.00

    Substance3D - Painter is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  • CVE-2026-71564HigAug 25, 2026
    risk 0.51cvss 7.8epss 0.00

    Substance3D - Designer is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  • CVE-2026-71382HigAug 25, 2026
    risk 0.51cvss 7.8epss 0.00

    Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  • CVE-2026-48427HigAug 25, 2026
    risk 0.51cvss 7.8epss 0.00

    Substance3D - Designer is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  • CVE-2026-48426HigAug 25, 2026
    risk 0.51cvss 7.8epss 0.00

    Substance3D - Designer is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  • CVE-2026-48421HigAug 25, 2026
    risk 0.51cvss 7.8epss 0.00

    Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  • CVE-2026-48420HigAug 25, 2026
    risk 0.51cvss 7.8epss 0.00

    Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  • CVE-2026-48419HigAug 25, 2026
    risk 0.51cvss 7.8epss 0.00

    Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  • CVE-2026-48418HigAug 25, 2026
    risk 0.51cvss 7.8epss 0.00

    Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  • CVE-2026-64204HigAug 25, 2026
    risk 0.51cvss 7.8epss 0.00

    There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution.  Successful exploitation requires an attacker to get a user to open a specially crafted VI.  This vulnerability affects NI…

  • CVE-2026-64203HigAug 25, 2026
    risk 0.51cvss 7.8epss 0.00

    There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution.  Successful exploitation requires an attacker to get a user to open a specially crafted VI.  This vulnerability affects NI…