CWE-787: Out-of-bounds Write vulnerabilities

An integer underflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service (DoS) condition in VPN processing by sending specially crafted network traffic.

An integer underflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service (DoS) condition in VPN processing by sending specially crafted network traffic.

A stack-based buffer overflow vulnerability in the WatchGuard Fireware OS iked process iallows a remote unauthenticated attacker to create a Denial of Service (DoS) condition in VPN processing by sending specially crafted network traffic.

A stack-based buffer overflow in the epm (Endpoint Protection Manager) service used by the deprecated Mobile Security feature in WatchGuard Fireware OS allows an unauthenticated remote attacker to execute arbitrary code.

A buffer overflow vulnerability in the WatchGuard Fireware OS Management Web UI allows an authenticated administrator with network access to cause a denial of service (DoS) condition or potentially execute arbitrary code by sending specially crafted network traffic.

Bendix EC80 Brake ECU contains an out-of-bounds write vulnerability (CWE-787) that could allow an attacker to perform an arbitrary write operation, potentially crashing the ECU. The vulnerability has a CVSS score of 6.5, indicating a medium severity level. No patch or official remediation has been disclosed yet.

CVE-2026-18374 is a medium severity buffer overflow vulnerability in the GNU C Library (glibc) affecting version 2.45 and earlier. It occurs when an attacker-controlled mode string passed to the fopen function uses the ,ccs= syntax extension with an effectively empty string, potentially causing a heap buffer overflow. This usage pattern is uncommon in typical GNU/Linux applications, and applications should validate user-supplied ccs values before passing them to fopen.

A vulnerability in gdk-pixbuf's JPEG ICC profile parser can cause an out-of-bounds write during error recovery when processing specially crafted JPEG images. This flaw may lead to application crashes. The issue affects versions starting from 2.26.4. A fix is available upstream but has not yet been released in downstream packages. Users should avoid opening untrusted JPEG images with vulnerable versions until patched.

Adobe DNG Software Development Kit (SDK) versions 1.7.1 2502 and earlier contain an out-of-bounds write vulnerability. This flaw can cause memory corruption leading to application crashes or unresponsiveness, resulting in denial-of-service. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability has a medium severity rating with a CVSS score of 5.5.

CVE-2026-81625 is a high-severity vulnerability in Greenbone OS version 5.0 involving an out-of-bounds write (CWE-787). A remote attacker with user privileges can exploit a malicious or compromised NASL vulnerability test to trigger a stack buffer overflow, potentially gaining full access to the affected system. No official patch or remediation guidance is currently available.

An out-of-bounds write in the SmiFlash SMM module of ASUS FA507NU and FA507NV BIOS allows a local  administrator to cause a system crash (BSOD) or BIOS corruption via a crafted software SMI (SW SMI) request with an oversized length value.Refer to the '  Security Update for ASUS FA507NV / FA507NU BIOS   ' section on the ASUS Security Advisory for more information.

CVE-2026-9805 is a low-severity vulnerability in Insyde Software's InsydeH2O firmware. It involves an out-of-bounds write in the SMM IHISI command handler for the FMTS command 0x32, where data is read and written without proper buffer size checks, potentially causing a buffer overflow.

A heap-based buffer overflow vulnerability exists in the PyOpenEXR Python bindings of AcademySoftwareFoundation's OpenEXR library versions 3.3.0 through 3.3.12 and 3.4.0 through 3.4.13. This occurs when reading a crafted deep scanline EXR file with specific channel naming, causing memory corruption and a crash. The issue is fixed in versions 3.3.13 and 3.4.14.

A heap-based buffer overflow vulnerability exists in the PyOpenEXR component of AcademySoftwareFoundation's openexr library. This occurs in versions 3.3.0 through 3.3.12 and 3.4.0 through 3.4.13 when a specially crafted EXR file causes a channel-name key collision between literal and prefixed RGB channels. The overflow happens due to reuse of an undersized NumPy array during pixel decoding. This vulnerability is fixed in versions 3.3.13 and 3.4.14.

A heap-based buffer overflow vulnerability exists in the AcademySoftwareFoundation openexr project affecting the exrmultiview utility. This occurs when combining two attacker-supplied, individually valid scanline EXR files with a misaligned union dataWindow relative to one view's channel subsampling. The issue leads to a heap out-of-bounds write during normal processing. Versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13 are affected. The vulnerability is fixed in versions 3.2.11, 3.3.13, and 3.4.14.

CVE-2026-59984 is an out-of-bounds write vulnerability in the AcademySoftwareFoundation openexr library affecting ILP32 builds. The flaw occurs in versions 3.1.0 through 3.2.10, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13 when processing crafted B44-compressed scanline EXR images. The vulnerability allows an attacker to cause denial of service or memory corruption by triggering a logical scratch size truncation before allocation, leading to unsafe writes. Fixed versions are 3.2.11, 3.3.13, and 3.4.14. The CVSS score is 5.5 (medium severity).

CVE-2026-59982 is an integer overflow or wraparound vulnerability in the AcademySoftwareFoundation's OpenEXR library. Affected versions include >=3.1.0 <3.2.11, >=3.3.0 <3.3.13, and >=3.4.0 <3.4.14. The flaw allows the TypedDeepImageChannel::row() function to return an out-of-bounds pointer when processing a crafted deep EXR file with a nonzero dataWindow origin. This can lead to a crash or limited information disclosure. The issue is fixed in versions 3.2.11, 3.3.13, and 3.4.14. The CVSS score is 7.1, indicating a high severity vulnerability.

CVE-2026-75770 is an out-of-bounds write vulnerability in Adobe Substance3D - Painter. This flaw could allow an attacker to execute arbitrary code with the privileges of the current user. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability has a high severity rating with a CVSS score of 7.8.

Adobe Substance3D - Painter contains an out-of-bounds write vulnerability that can lead to arbitrary code execution with the privileges of the current user. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability is classified as high severity with a CVSS score of 7.8. No patch or official remediation has been confirmed yet.

Adobe Substance 3D Sampler contains an out-of-bounds write vulnerability that could allow arbitrary code execution with the privileges of the current user. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability is identified as CWE-787 and has a high severity rating with a CVSS score of 7.8. No patch or official remediation has been confirmed yet.