CWE-681

157 published CVEs are weaknesses of this kind, as the records or NVD name it.

Critical 10High 85Medium 56Low 5Not scored 1

CVEs per yearBy the year they were published

CVE-2026-116785
FreeSWITCH: Pre-authentication heap out-of-bounds write in mod_xml_rpc WebSocket frame length handling
signalwire · freeswitch
Critical9.1
CVE-2026-68990
In the Samsung Exynos H-Arx DRM plugin, improper input validation during buffer operations can cause memory corruption, potentially leading to denial of…
Samsung Semiconductor · Exynos 1480
Not scored
CVE-2026-119340
Tesseract: GENERIC_2D_ARRAY DeSerializeSize signed integer comparison bypass allows negative dimensions
tesseract-ocr · tesseract
Medium5.5
CVE-2026-118769
Botan: Integer overflow when reporting block size in FFI can cause memory corruption
randombit · botan
Critical9.2
CVE-2026-114654
BSON output corruption via out-of-range binary subtype bypassing UUID and OldBinary guards
MongoDB · C# Driver
Medium6.9
CVE-2026-114118
Vyper 0.3.4 through 0.5.0b1 create_from_blueprint Offset Validation Bypass via Unsigned Wraparound
vyperlang · vyper
Medium6.3
CVE-2026-12670
IBM MQ Denial of Service
IBM · MQ Operator
Medium5.3
CVE-2026-83872
Windows TCP/IP Local Elevation of Privilege Vulnerability
Microsoft · Windows 10 Version 1607
High7.8
CVE-2026-106432
Heap buffer overflow via 32-bit string-length truncation in MongoDB PHP Driver
MongoDB · PHP Driver
Low2.0
CVE-2026-107224
Excelize: A Zip64 uncompressed-size of 2^63 panics OpenFile/OpenReader
qax-os · excelize
Medium6.5