VYPR

CWE-787

Out-of-bounds Write

BaseDraftLikelihood: High

Description

The product writes data past the end, or before the beginning, of the intended buffer.

Hierarchy (View 1000)

CVEs mapped to this weakness (15,182)

page 487 of 760
  • CVE-2026-70058HigOct 13, 2026
    risk 0.49cvss 7.5epss 0.01

    Out-of-bounds write in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

  • CVE-2026-16167HigOct 8, 2026
    risk 0.49cvss 7.5epss 0.00

    IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to improper bounds checking.

  • CVE-2026-16164HigOct 8, 2026
    risk 0.49cvss 7.5epss 0.00

    IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to a buffer overflow.

  • CVE-2026-15819HigOct 8, 2026
    risk 0.49cvss 7.5epss 0.00

    IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to out-of-bounds memory access caused by a strict-weak-ordering violation in a…

  • CVE-2026-16178HigOct 8, 2026
    risk 0.49cvss 7.5epss 0.00

    IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to improper input validation.

  • CVE-2026-16170HigOct 8, 2026
    risk 0.49cvss 7.5epss 0.00

    IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to a heap buffer overflow.

  • CVE-2026-0461HigOct 5, 2026
    risk 0.49cvss —epss 0.00

    Insufficient boundary validation in the USB boot mode implementation of AMD Zynq™ UltraScale+ MPSoC and RFSoC devices could allow unbounded Device Firmware Upgrade (DFU) download requests to overflow the DDR receive buffer into FSBL memory, potentially resulting in…

  • CVE-2026-20526HigOct 5, 2026
    risk 0.49cvss 7.5epss 0.00

    In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is…

  • CVE-2026-20520HigOct 5, 2026
    risk 0.49cvss 7.5epss 0.00

    In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not…

  • CVE-2026-20519HigOct 5, 2026
    risk 0.49cvss 7.5epss 0.00

    In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not…

  • CVE-2026-95862HigSep 22, 2026
    risk 0.49cvss 7.5epss 0.00

    A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi gateway devices to execute a Denial of Service (DoS) attack on the device.

  • CVE-2026-77555HigSep 22, 2026
    risk 0.49cvss 7.5epss 0.00

    A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi gateway devices to execute a Denial of Service (DoS) attack on the device.

  • CVE-2026-77544HigSep 22, 2026
    risk 0.49cvss 7.5epss 0.01

    A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi gateway devices to execute a Denial of Service (DoS) attack on the device.

  • CVE-2026-88407HigSep 21, 2026
    risk 0.49cvss 7.5epss 0.00

    An out-of-bounds read in the node_token_count/relation_token_count component of FalkorDB (Redis module) v4.20.1 to v4.20.4 allows attackers to cause a Denial of Service (DoS) via a crafted input.

  • CVE-2026-62648HigSep 8, 2026
    risk 0.49cvss 7.5epss 0.01

    A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The length of the URL component contained in pre-authenticated HTTP messages is not properly validated before appending additional data to it, resulting in an out-of-bounds write condition in memory.…

  • CVE-2026-6071HigSep 3, 2026
    risk 0.49cvss —epss 0.01

    A remote code execution security issue exists in the affected products when parsing DOE files that could allow a remote attacker to write past the end of an allocated object and execute code within the context of the current process. To exploit this vulnerability, a legitimate…

  • CVE-2026-76640HigAug 27, 2026
    risk 0.49cvss 7.5epss 0.00

    Unitree G1 EDU firmware through 1.5.2 contains multiple chained vulnerabilities in the BLE GATT server and WiFi provisioning stack that allow unauthenticated proximate attackers to achieve root code execution without pairing or credentials by exploiting an unquoted heredoc…

  • CVE-2026-26459HigAug 27, 2026
    risk 0.49cvss 7.5epss 0.00

    ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 contains a vulnerability in the option parsing logic that causes a segmentation fault when processing malformed COAP messages with insufficient option data.

  • CVE-2026-77642HigAug 20, 2026
    risk 0.49cvss 7.5epss 0.00

    tor before 0.4.9.9 was prone to an out-of-bounds write when parsing a consensus or detached signature with unexpected signature digest type. Impact is minor for most Tor roles, but potentially major for directory authorities. This is TROVE-2026-019.

  • CVE-2026-17425HigAug 20, 2026
    risk 0.49cvss 7.5epss 0.01

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a stack buffer overflow.