CWE-787 Out-of-bounds Write
Description
The product writes data past the end, or before the beginning, of the intended buffer.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-787 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-pfwj-2f93-rf42 | CVE-2026-70007 | HIGH |
Microsoft Security Advisory CVE-2026-70007 - .NET and Visual Studio Remote Code Execution Vulnerability |
2026-10-13 | |
| GHSA-xq57-crx4-g373 | CVE-2026-96224 | HIGH |
Microsoft Security Advisory CVE-2026-96224 - .NET and Visual Studio Remote Code Execution Vulnerability |
2026-10-13 | |
| GHSA-g44w-h65v-4cw9 | CVE-2026-96235 | HIGH |
Microsoft Security Advisory CVE-2026-96235 - .NET and Visual Studio Remote Code Execution Vulnerability |
2026-10-13 | |
| GHSA-4mpw-cpwj-hxxj | CVE-2026-70197 | HIGH |
Microsoft Security Advisory CVE-2026-70197 - .NET and Visual Studio Remote Code Execution Vulnerability |
2026-10-13 | |
| GHSA-87vj-4hqv-22p9 | CVE-2026-96233 | HIGH |
nuget/Microsoft.NETCore.App.Runtime.linux-arm
nuget/Microsoft.NETCore.App.Runtime.linux-arm64
nuget/Microsoft.NETCore.App.Runtime.linux-musl-arm
nuget/Microsoft.NETCore.App.Runtime.linux-musl-arm64
nuget/Microsoft.NETCore.App.Runtime.linux-musl-x64
nuget/Microsoft.NETCore.App.Runtime.linux-x64
nuget/Microsoft.NETCore.App.Runtime.osx-arm64
nuget/Microsoft.NETCore.App.Runtime.osx-x64
nuget/Microsoft.NETCore.App.Runtime.win-arm
nuget/Microsoft.NETCore.App.Runtime.win-arm64
nuget/Microsoft.NETCore.App.Runtime.win-x64
nuget/Microsoft.NETCore.App.Runtime.win-x86
|
Microsoft Security Advisory CVE-2026-96233 - .NET and Visual Studio Denial of Service Vulnerability |
2026-10-13 |
| GHSA-jj3q-cwqj-842r | CVE-2026-106117 | HIGH |
ImageSharp: CCITT fax decompression (T4/Modified Huffman): unbounded WriteBits overflows strip buffer — heap OOB write in SixLabors.ImageSharp |
2026-10-12 | |
| GHSA-jjfr-hcj7-qf5w | CVE-2026-106115 | HIGH |
ImageSharp: TIFF CCITT T6 encoder writes beyond an undersized output buffer |
2026-10-07 | |
| GHSA-ffp7-56pq-64mr | CVE-2026-106112 | HIGH |
ImageSharp: ICC LUT16 output channel count can write beyond Vector4 |
2026-10-07 | |
| GHSA-j9gm-c75j-xc9q | CVE-2026-106110 | HIGH |
ImageSharp: TIFF CCITT T4 encoder can write past its compressed output buffer |
2026-10-07 | |
| GHSA-j3p4-wp97-rph4 | CVE-2026-106113 | HIGH |
ImageSharp: HistogramEqualization uses an unvalidated luminance as an unchecked histogram index |
2026-10-07 | |
| GHSA-8mcq-6wmr-jrjv | CVE-2026-107221 | MODERATE |
Excelize: a row whose earlier cell has a higher column reference than its last cell panics index out of range on almost every worksheet read API |
2026-10-07 | |
| GHSA-v76p-62qx-wwq2 | CVE-2026-106118 | HIGH |
ImageSharp: Tiled fax TIFF: tile buffer sized by TileWidth but fax decompressor writes scanlines of ImageWidth — heap OOB write |
2026-10-07 | |
| GHSA-489w-w794-jq94 | CVE-2026-100723 | MODERATE |
vm2: NodeVM zlib Buffers expose pooled host memory across the VM boundary |
2026-10-05 | |
| GHSA-vxg7-f2jj-jmqm | CVE-2026-76819 | HIGH |
Nuclei: Arbitrary Code Execution via Goja JavaScript Engine Vulnerability |
2026-09-22 | |
| GHSA-pmpg-6pww-fg6q | CVE-2026-56370 | LOW |
nuget/Magick.NET-Q16-AnyCPU
nuget/Magick.NET-Q16-HDRI-AnyCPU
nuget/Magick.NET-Q16-HDRI-OpenMP-arm64
nuget/Magick.NET-Q16-HDRI-OpenMP-x64
nuget/Magick.NET-Q16-HDRI-arm64
nuget/Magick.NET-Q16-HDRI-x64
nuget/Magick.NET-Q16-HDRI-x86
nuget/Magick.NET-Q16-OpenMP-arm64
nuget/Magick.NET-Q16-OpenMP-x64
nuget/Magick.NET-Q16-arm64
nuget/Magick.NET-Q16-x64
nuget/Magick.NET-Q16-x86
nuget/Magick.NET-Q8-AnyCPU
nuget/Magick.NET-Q8-OpenMP-arm64
nuget/Magick.NET-Q8-OpenMP-x64
nuget/Magick.NET-Q8-arm64
nuget/Magick.NET-Q8-x64
nuget/Magick.NET-Q8-x86
|
ImageMagick has out-of-bounds access in ConnectedComponentsImage() via CLI-controlled connected-components:* artifacts |
2026-09-18 |
| GHSA-mcmc-2m55-j8jj | CVE-2026-56340 | HIGH |
vLLM introduced enhanced protection for CVE-2025-62164 |
2026-09-11 | |
| GHSA-78fp-cf4h-g36p | - | HIGH |
Duplicate Advisory: vLLM introduced enhanced protection for CVE-2025-62164 |
2026-09-11 | |
| GHSA-26w7-cxv4-gfx2 | - | CRITICAL |
Astro: Remote code execution through AVIF image optimization |
2026-09-08 | |
| GHSA-vg44-h755-9hw7 | CVE-2026-62871 | HIGH |
Microsoft Security Advisory CVE-2026-62871 – .NET Elevation of Privilege Vulnerability |
2026-08-11 | |
| GHSA-gg8c-3338-xw2f | CVE-2026-70354 | HIGH |
Microsoft Security Advisory CVE-2026-70354 – .NET Core Remote Code Execution Vulnerability |
2026-08-11 | |
| GHSA-6588-8gv4-xfgh | CVE-2026-32203 | HIGH |
Microsoft Security Advisory CVE-2026-32203 – .NET and Visual Studio Denial of Service Vulnerability |
2026-07-28 | |
| GHSA-422r-8c97-xcg4 | CVE-2026-62363 | MODERATE |
nuget/Magick.NET-Q16-AnyCPU
nuget/Magick.NET-Q16-HDRI-AnyCPU
nuget/Magick.NET-Q16-HDRI-OpenMP-arm64
nuget/Magick.NET-Q16-HDRI-arm64
nuget/Magick.NET-Q16-HDRI-x64
nuget/Magick.NET-Q16-HDRI-x86
nuget/Magick.NET-Q16-OpenMP-arm64
nuget/Magick.NET-Q16-OpenMP-x64
nuget/Magick.NET-Q16-arm64
nuget/Magick.NET-Q16-x64
nuget/Magick.NET-Q16-x86
nuget/Magick.NET-Q8-AnyCPU
nuget/Magick.NET-Q8-OpenMP-arm64
nuget/Magick.NET-Q8-OpenMP-x64
nuget/Magick.NET-Q8-arm64
nuget/Magick.NET-Q8-x64
nuget/Magick.NET-Q8-x86
|
ImageMagick: Heap Buffer Over-Write in fx operation |
2026-07-24 |
| GHSA-c4v7-w88g-m6c4 | CVE-2026-55597 | MODERATE |
nuget/Magick.NET-Q16-AnyCPU
nuget/Magick.NET-Q16-HDRI-AnyCPU
nuget/Magick.NET-Q16-HDRI-OpenMP-arm64
nuget/Magick.NET-Q16-HDRI-arm64
nuget/Magick.NET-Q16-HDRI-x64
nuget/Magick.NET-Q16-HDRI-x86
nuget/Magick.NET-Q16-OpenMP-arm64
nuget/Magick.NET-Q16-OpenMP-x64
nuget/Magick.NET-Q16-arm64
nuget/Magick.NET-Q16-x64
nuget/Magick.NET-Q16-x86
nuget/Magick.NET-Q8-AnyCPU
nuget/Magick.NET-Q8-OpenMP-arm64
nuget/Magick.NET-Q8-OpenMP-x64
nuget/Magick.NET-Q8-arm64
nuget/Magick.NET-Q8-x64
nuget/Magick.NET-Q8-x86
|
ImageMagick: Heap Buffer Over-Write in JP2 encoder when due to incorrect handling of arguments |
2026-07-24 |
| GHSA-x2f5-4prf-w687 | CVE-2026-54696 | LOW |
Ruby json: JSON generator heap buffer overflow when streaming to an IO |
2026-07-23 | |
| GHSA-9hw9-ch79-4vh6 | CVE-2026-59205 | HIGH |
Pillow: Controlled heap out-of-bounds write in Pillow `ImageCmsTransform.apply()` via output mode mismatch |
2026-07-20 |