CWE-787 · Critical

CWE-787: Out-of-bounds Write

The software writes data past the end, or before the beginning, of the intended buffer.

Full guidestrcpy, strcat and sprintf: bounded replacements that are actually safe →Vulnerable and fixed code side by side, how to find it in your codebase, and a fix checklist.

About CWE-787

CWE-787 (Out-of-bounds Write) is classified as critical severity and is not in the OWASP Top 10 (2025).

The official CWE entry is maintained by MITRE at cwe.mitre.org/data/definitions/787.html.

Orbis AppSec automatically detects and fixes Out-of-bounds Write vulnerabilities in your code with AI-powered static analysis.