CWE-127
13 published CVEs are weaknesses of this kind, as the records or NVD name it.
- 13Published CVEs13 of them scored
- 7Last 12 monthspublished in the last year
- 1Critical5 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-125206
FFmpeg through 9.0.2 Out-of-Bounds Read via prores_ks Interlaced Alpha Encoding
FFmpeg · FFmpeg
Low2.0 - CVE-2026-125188
FFmpeg through 9.0.2 ProRes prores_aw Heap Out-of-Bounds Read in Interlaced Encoding
FFmpeg · FFmpeg
Low2.0 - CVE-2025-71450
inih before r63 Stack Buffer Under-Read in ini_parse_stream Discard Loop
benhoyt · inih
Medium4.8 - CVE-2026-103119
Apache Tomcat: AJP response mix-up
Apache Software Foundation · Apache Tomcat
Critical9.1 - CVE-2026-110758
Text::CSV_XS versions before 1.65 for Perl read before the start of an all-blank field under allow_whitespace in strip_trail_whitespace
Text-CSV_XS
High7.5 - CVE-2026-45683
OpenTelemetry eBPF Instrumentation: Java TLS ioctl kprobe allows kernel memory disclosure
open-telemetry · opentelemetry-ebpf-instrumentation
Low3.8 - CVE-2026-5928
Potential buffer under-read in ungetwc
The GNU C Library · glibc
High7.5 - CVE-2025-20359
Multiple Cisco Products Snort 3 MIME Information Disclosure or Denial of Service Vulnerability
Cisco · Cisco Cyber Vision
Medium6.5 - CVE-2025-32050
Libsoup: integer overflow in append_param_quoted
libsoup
Medium5.9 - CVE-2024-10395
net: lib: http_server: Buffer Under-read
zephyrproject-rtos · Zephyr
High8.6