CWE-129

707 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 1 of them as exploited in the wild.

Critical 107High 422Medium 166Low 11Not scored 1

CVEs per yearBy the year they were published

CVE-2022-48503
The issue was addressed with improved bounds checks. This issue is fixed in tvOS 15.6, watchOS 8.7, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5, Safari 15.6.…
Apple · macOS
ExploitedHigh8.8

CVE-2026-124310
Fraunhofer HHI VVdeC before 3.2.1 Out-of-Bounds Read via Slice::getRefPic
fraunhoferhhi · vvdec
Medium6.9
CVE-2026-116783
FreeSWITCH mod_spandsp: out-of-bounds write parsing UDPTL error-recovery data
signalwire · freeswitch
High8.2
CVE-2026-123200
VRPN through 07.36 Out-of-bounds Write via SENDER_DESCRIPTION/TYPE_DESCRIPTION length index
VRPN · VRPN
High8.7
CVE-2026-75615
ASN1SCC: Out-of-bounds read via unvalidated character index in ASN.1 string decoders
esa · asn1scc
Medium5.3
CVE-2026-75614
ASN1SCC: Out-of-bounds write in BitStream_DecodeConstraintWholeNumber (uPER/ACN)
esa · asn1scc
High8.1
CVE-2025-66366
Incorrect handling of unauthenticated downlink RRC Setup messages can cause the baseband to crash
Samsung Semiconductor · Exynos 1280
Not scored
CVE-2026-121968
Netrek-client-cow through 3.3.3 Out-of-Bounds Read via SP_S_MESSAGE Packets
quozl · netrek-client-cow
High7.1
CVE-2026-65165
NVIDIA Slurm contains a vulnerability where a user could deliberately alter the provided nodelist alongside the --distribution=arbitrary option to gain access…
NVIDIA · Slurm
Medium5.3
CVE-2026-120064
psqlODBC does not validate column numbers and row indexes in binding and descriptor functions
PostgreSQL · psqlODBC
High7.5
CVE-2026-107457
Memory corruption vulnerability in QMqttClient impacts Qt MQTT
qt · Qt
Low2.3