By weakness (CWE)

CWE-787: related vulnerabilities

CVEs classified under CWE-787. Understanding the weakness class helps prioritize systemic fixes over one-off patches.

210 published vulnerabilities · page 3 of 3

• CVE-2026-6681MEDIUM 5.3

  wolfSSL versions 5.9.0 and earlier contain a buffer overflow vulnerability in their PKCS#7 decoding functionality. When applications call the PKCS#7 decoder and provide a buffer along with its size, the decoder ignores the size limit and writes decoded data beyond the buffer boundary. An unauthenticated remote attacker can exploit this to corrupt memory and potentially modify application state or behavior. The vulnerability was patched in wolfSSL 5.9.1.

• CVE-2026-45684MEDIUM 4.9

  OpenTelemetry eBPF Instrumentation versions 0.7.0 through 0.8.x contain a buffer handling flaw in the log enricher component. When log injection is enabled, attackers can craft a multi-segment write operation that tricks the instrumentation into reading beyond the intended buffer boundary, potentially overwriting memory. This could lead to information disclosure, data corruption, or application instability on systems using the affected versions.

• CVE-2026-10114MEDIUM 4.3

  Open5GS versions up to 2.7.7 contain a flaw in how they parse shared NF profile information. When processing certain malformed input, the application writes data beyond the intended memory boundary, potentially crashing the service. While an attacker must have valid network credentials to exploit this, the vulnerability has been publicly disclosed, increasing the likelihood it will be weaponized.

• CVE-2026-33799MEDIUM 4.3

  Juniper Networks Junos OS and Junos OS Evolved contain a memory management flaw in their SNMP daemon that can be triggered by authenticated attackers. By sending specially crafted SNMPv3 queries, an attacker can cause the snmpd process to leak memory. Over time, repeated exploitation exhausts available memory, forcing the process to crash and restart. This disrupts SNMP-based system monitoring until the process recovers. The vulnerability requires network access and valid SNMP credentials to exploit.

• CVE-2026-9930MEDIUM 4.3

  An out-of-bounds write vulnerability exists in the Dawn graphics component of Google Chrome on macOS. An attacker can craft a malicious HTML page that, when viewed by a user, writes data to memory locations outside the intended bounds of a buffer. This memory corruption could allow an attacker to modify sensitive data or potentially achieve code execution, though the CVSS assessment indicates the integrity impact is limited. The vulnerability requires user interaction—the victim must visit or be directed to the malicious page—and affects Chrome versions prior to 148.0.7778.216 on macOS.

• CVE-2026-10644MEDIUM 4.2

  A flaw in Microchip's SERCOM-G1 UART driver for PIC32CM-JH microcontrollers causes a one-byte memory write immediately after a receive buffer when asynchronous DMA reception is enabled with a minimal buffer size. An attacker with access to the serial interface can supply data that overwrites one byte in adjacent memory, potentially crashing the device or causing localized corruption. The vulnerability requires specific configuration (async UART mode and single-byte buffer usage) that is not enabled by default, limiting its immediate risk in most deployments.

• CVE-2026-14612MEDIUM 4.2

  FreeIPA's ipa-otpd daemon contains two off-by-one errors in its OAuth2 device authorization handler that can cause it to read or write one byte beyond the bounds of a fixed-size buffer. This flaw is triggered when processing oversized responses from an external OAuth2 or OIDC identity provider. An attacker would need to either control the identity provider or position themselves in the network path between FreeIPA and that provider to exploit this vulnerability. The primary risk is denial of service to the ipa-otpd daemon, though limited data integrity issues are also possible. Exploitation requires an actual user to initiate the OAuth2 device authorization flow, which adds a layer of practical constraint.

• CVE-2026-46559MEDIUM 4.0

  ImageMagick, a widely used open-source image editing tool, contains a flaw in how it validates JP2 (JPEG 2000) image files. When processing certain malformed JP2 files, the software writes a single byte of data beyond the boundaries of an allocated memory region. While limited to overwriting one byte, this heap buffer overflow could cause the application to crash or, in specific configurations, enable an attacker to influence program behavior. The issue affects ImageMagick versions before 6.9.13-48 and 7.1.2-23.

• CVE-2026-54696LOW 3.7

  Ruby JSON versions 2.9.0 through 2.19.8 contain a heap buffer overflow vulnerability in the JSON generator when handling streamed objects. If a JSON dump or generator operation receives a specially crafted object with an attacker-controlled string near 16 KB in size, the internal buffer can overflow, causing the application to crash. This is a denial-of-service issue that requires specific conditions to trigger but poses minimal impact to confidentiality or integrity. The vulnerability is fixed in version 2.19.9 and later.

• CVE-2026-39199LOW 2.9

  snes9x version 1.63 contains a flaw that allows an attacker to cause a denial of service by supplying a maliciously crafted .ups file. The vulnerability involves writing data outside the intended memory boundaries, but exploitation requires local access and specific conditions to be met. This is a low-severity issue primarily affecting users who process untrusted patch files on systems running the vulnerable version.