Home/CWE/Out-of-bounds Write
Weakness

Out-of-bounds Write

CWE-787 · Base · Draft

The product writes data past the end, or before the beginning, of the intended buffer.

△

Weakness Relationships

Where this weakness sits in the CWE hierarchy. Walk up to broader classes or down to more specific variants.
Parent of this (broader)
ChildOfCWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer
Children (more specific)
ParentOfCWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
ParentOfCWE-121 · Stack-based Buffer Overflow
ParentOfCWE-122 · Heap-based Buffer Overflow
ParentOfCWE-123 · Write-what-where Condition
ParentOfCWE-124 · Buffer Underwrite ('Buffer Underflow')
⚠

CVEs With This Weakness

16,359
A sample of the 16,359 CVEs tagged with this weakness.
CVECVE-2026-8669
CVECVE-2026-8569
CVECVE-2026-8558
CVECVE-2026-8548
CVECVE-2026-8526
CVECVE-2026-8524
CVECVE-2026-8507
CVECVE-2026-8454
CVECVE-2026-8263
CVECVE-2026-8092
CVECVE-2026-8053
CVECVE-2026-7957
◉

Nuclei Scanner Templates

7
Open-source Nuclei templates that detect this weakness class - an actionable scan-for-it pivot. Licensed under the ProjectDiscovery / Nuclei terms.
criticalCisco Smart Install - Configuration Download
criticalIvanti Connect Secure - Stack-based Buffer Overflow
criticalTenda Router AC11 - Remote Command Injection
criticalSonicWall SMA100 Stack - Buffer Overflow/Remote Code Execution
criticalVMware vCenter Server - Out-of-Bounds Write
criticalVMware ESXi SLP - Heap Overflow DoS
highH3C Magic R300-2100M - Remote Code Execution
External lookups - second-class, for what we don’t hold ourselves
MITRE CWE
Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities
Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs
Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures
Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1
About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service
threatengine.sh  ·  Open-source threat intelligence platform  ·  100+ authoritative sources  ·  Every fact traces to its origin