Common Weakness Enumeration

CWE-787 Out-of-bounds Write

Description

The product writes data past the end, or before the beginning, of the intended buffer.

Associated Reviewed Advisories

Vulnerabilities classified under CWE-787 ordered by modification date.

25 reviewed records
Advisory ID NVD ID Severity PURLs Summary Last Modified
GHSA-pfwj-2f93-rf42 CVE-2026-70007 HIGH

Microsoft Security Advisory CVE-2026-70007 - .NET and Visual Studio Remote Code Execution Vulnerability

2026-10-13
GHSA-xq57-crx4-g373 CVE-2026-96224 HIGH

Microsoft Security Advisory CVE-2026-96224 - .NET and Visual Studio Remote Code Execution Vulnerability

2026-10-13
GHSA-g44w-h65v-4cw9 CVE-2026-96235 HIGH

Microsoft Security Advisory CVE-2026-96235 - .NET and Visual Studio Remote Code Execution Vulnerability

2026-10-13
GHSA-4mpw-cpwj-hxxj CVE-2026-70197 HIGH

Microsoft Security Advisory CVE-2026-70197 - .NET and Visual Studio Remote Code Execution Vulnerability

2026-10-13
GHSA-87vj-4hqv-22p9 CVE-2026-96233 HIGH

Microsoft Security Advisory CVE-2026-96233 - .NET and Visual Studio Denial of Service Vulnerability

2026-10-13
GHSA-jj3q-cwqj-842r CVE-2026-106117 HIGH

ImageSharp: CCITT fax decompression (T4/Modified Huffman): unbounded WriteBits overflows strip buffer — heap OOB write in SixLabors.ImageSharp

2026-10-12
GHSA-jjfr-hcj7-qf5w CVE-2026-106115 HIGH

ImageSharp: TIFF CCITT T6 encoder writes beyond an undersized output buffer

2026-10-07
GHSA-ffp7-56pq-64mr CVE-2026-106112 HIGH

ImageSharp: ICC LUT16 output channel count can write beyond Vector4

2026-10-07
GHSA-j9gm-c75j-xc9q CVE-2026-106110 HIGH

ImageSharp: TIFF CCITT T4 encoder can write past its compressed output buffer

2026-10-07
GHSA-j3p4-wp97-rph4 CVE-2026-106113 HIGH

ImageSharp: HistogramEqualization uses an unvalidated luminance as an unchecked histogram index

2026-10-07
GHSA-8mcq-6wmr-jrjv CVE-2026-107221 MODERATE

Excelize: a row whose earlier cell has a higher column reference than its last cell panics index out of range on almost every worksheet read API

2026-10-07
GHSA-v76p-62qx-wwq2 CVE-2026-106118 HIGH

ImageSharp: Tiled fax TIFF: tile buffer sized by TileWidth but fax decompressor writes scanlines of ImageWidth — heap OOB write

2026-10-07
GHSA-489w-w794-jq94 CVE-2026-100723 MODERATE

vm2: NodeVM zlib Buffers expose pooled host memory across the VM boundary

2026-10-05
GHSA-vxg7-f2jj-jmqm CVE-2026-76819 HIGH

Nuclei: Arbitrary Code Execution via Goja JavaScript Engine Vulnerability

2026-09-22
GHSA-pmpg-6pww-fg6q CVE-2026-56370 LOW

ImageMagick has out-of-bounds access in ConnectedComponentsImage() via CLI-controlled connected-components:* artifacts

2026-09-18
GHSA-mcmc-2m55-j8jj CVE-2026-56340 HIGH

vLLM introduced enhanced protection for CVE-2025-62164

2026-09-11
GHSA-78fp-cf4h-g36p - HIGH

Duplicate Advisory: vLLM introduced enhanced protection for CVE-2025-62164

2026-09-11
GHSA-26w7-cxv4-gfx2 - CRITICAL

Astro: Remote code execution through AVIF image optimization

2026-09-08
GHSA-vg44-h755-9hw7 CVE-2026-62871 HIGH

Microsoft Security Advisory CVE-2026-62871 – .NET Elevation of Privilege Vulnerability

2026-08-11
GHSA-gg8c-3338-xw2f CVE-2026-70354 HIGH

Microsoft Security Advisory CVE-2026-70354 – .NET Core Remote Code Execution Vulnerability

2026-08-11
GHSA-6588-8gv4-xfgh CVE-2026-32203 HIGH

Microsoft Security Advisory CVE-2026-32203 – .NET and Visual Studio Denial of Service Vulnerability

2026-07-28
GHSA-422r-8c97-xcg4 CVE-2026-62363 MODERATE

ImageMagick: Heap Buffer Over-Write in fx operation

2026-07-24
GHSA-c4v7-w88g-m6c4 CVE-2026-55597 MODERATE

ImageMagick: Heap Buffer Over-Write in JP2 encoder when due to incorrect handling of arguments

2026-07-24
GHSA-x2f5-4prf-w687 CVE-2026-54696 LOW

Ruby json: JSON generator heap buffer overflow when streaming to an IO

2026-07-23
GHSA-9hw9-ch79-4vh6 CVE-2026-59205 HIGH

Pillow: Controlled heap out-of-bounds write in Pillow `ImageCmsTransform.apply()` via output mode mismatch

2026-07-20