CWE-787—Out-of-bounds Write
PUBLISHEDweakness recordHigh
released 2009-10-29 · last modified 2026-04-30
Metadata
- CWE ID:
- CWE-787
- Abstraction:
- Base
- Structure:
- Simple
- Status:
- Draft
- Release Date:
- 2009-10-29
- Latest Modification Date:
- 2026-04-30
Weakness Name
Out-of-bounds Write
Description
The product writes data past the end, or before the beginning, of the intended buffer.
Common Consequences
- Scope:
- Integrity
- Impact:
- Modify Memory, Execute Unauthorized Code or Commands
- Notes:
- Write operations could cause memory corruption. In some cases, an adversary can modify control data such as return addresses in order to execute unexpected code.
- Scope:
- Availability
- Impact:
- DoS: Crash, Exit, or Restart
- Notes:
- Attempting to access out-of-range, invalid, or unauthorized memory could cause the product to crash.
- Scope:
- Other
- Impact:
- Unexpected State
- Notes:
- Subsequent write operations can produce undefined or unexpected results.
