CWE-787: Out-of-bounds Write vulnerabilities

In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10965373; Issue ID: MSV-6935.

In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10965550 / ALPS11393405; Issue ID: MSV-6941.

CVE-2026-20478 is an out-of-bounds write vulnerability in the Audio HAL component of MediaTek chipsets. It results from a heap buffer overflow and can cause a local denial of service. Exploitation requires user-level privileges but does not need user interaction. The issue affects specific MediaTek chipset models including MT2735, MT2737, MT6880, MT6890, MT6988, and MT6990. No official patch or remediation level has been confirmed yet.

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11009963; Issue ID: MSV-7658.

CVE-2026-20476 is an out-of-bounds read vulnerability in the ccci component of MediaTek chipsets MT6813, MT6986, and MT6988. It arises from a missing bounds check and requires local user privileges to exploit. No user interaction is needed to trigger the issue, which can cause a local denial of service by impacting availability. The vulnerability has a medium severity rating with a CVSS score of 5.5.

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11004276; Issue ID: MSV-7748.

CVE-2026-20472 is an out-of-bounds write vulnerability in MediaTek chipsets, specifically affecting the MT6986 model. The flaw exists in TFA due to a missing bounds check, which could allow a local attacker with System privileges to cause a denial of service. Exploitation does not require user interaction. The vulnerability has a medium severity rating with a CVSS score of 4.4.

CVE-2026-20471 is an out-of-bounds write vulnerability in MediaTek chipsets caused by a missing bounds check. It can lead to a local denial of service without requiring user interaction or additional privileges, but physical access to the device is needed. The issue affects multiple MediaTek chipset models including MT2735, MT2737, MT6813, MT6880, MT6890, MT6986, MT6988, and MT6990. The vulnerability has a medium severity rating with a CVSS score of 4.6. No confirmed patch or official remediation guidance is provided in the available data.

In apusys, there is a possible escalation of privilege due to a confused deputy. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: AUTO00833804; Issue ID: MSV-6741.

CVE-2026-20466 is a medium severity vulnerability in MediaTek chipsets MT2737, MT6880, MT6890, and MT6990. It involves a heap buffer overflow in the secure boot process that could allow local escalation of privilege without user interaction. Exploitation requires physical access to the device but no additional execution privileges. The vulnerability is identified as CWE-787 (Out-of-bounds Write).

In hevc decoder, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11104718; Issue ID: MSV-8297.

Premiere Pro is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in *nix systems or through the browser. In version 1.10.2, parse_browser assumes the matched browser token begins with Opera and moves a trailing version substring to match plus five, allowing a crafted User-Agent in a processed access log to write one to four attacker-influenced bytes beyond the heap allocation and corrupt or crash GoAccess. This issue is fixed in version 1.11.

Kenwood DNR1007XR tchdr_bytestream_read Out-Of-Bounds Write Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DNR1007XR devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the tchdr_bytestream_read function. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-28980.

VMware ESX contains an out-of-bounds write vulnerability in the VMXNET3 virtual network adapter. A malicious actor with local administrative privileges on a virtual machine with VMXNET3 virtual network adapter may exploit this issue to execute code on the host. Non VMXNET3 virtual adapters are not affected by this issue.

CVE-2026-17544 is a high-severity vulnerability in the PHP programming language affecting versions 8.4.0 through 8.4.23 and 8.5.0 through 8.5.8. It involves an out-of-bounds write triggered by attacker-controlled inputs to the bccomp() function, which can cause stack and heap corruption. This vulnerability could potentially lead to serious memory corruption issues. No official patch or remediation level has been confirmed yet.

Integer wraparound in IVFFlat index build in pgvector before 0.8.6 allows a database user to write data out-of-bounds, which could lead to arbitrary code execution. Only 32-bit systems are affected.

CVE-2026-12927 is a high-severity out-of-bounds write vulnerability in Schneider Electric IGSS Definition (Def.exe). It occurs when a malicious CGF file is imported, potentially leading to data loss or arbitrary code execution. The vulnerability requires local access and user interaction to exploit.

Several Apache Traffic Server experimental plugins have memory-safety and limit-bypass errors. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix the issue.

The Apache Traffic Server multiplexer plugin overruns its chunk-decode buffer on upstream input, enabling denial of service. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix the issue.