CWE-125

8,778 vulnerabilities with CWE-125

CVE-2026-41069 MEDIUM

libheif allows Out-of-bounds vector access leading to invalid dereference (DoS)

CVSS 6.5

CVE-2026-44067 MEDIUM

Netatalk 2.1.0-4.4.2 and >=4.5.0 - Authenticated Heap-Based Out-of-bounds Read in Extended Attribute Header Parsing

CVSS 4.2

CVE-2026-44066 HIGH

Heap out-of-bounds reads in Spotlight RPC unmarshalling

CVSS 7.1

CVE-2026-44064 HIGH

Netatalk 1.3-4.4.2 - Out-of-bounds Read in ASP Session ID Handling

CVSS 7.1

CVE-2026-9122 MEDIUM

Google Chrome < 148.0.7778.179 - Out-of-bounds Read in GPU via Crafted HTML Page

CVSS 6.5

CVE-2026-9121 HIGH

Google Chrome < 148.0.7778.179 - Out-of-bounds Read in GPU via Crafted HTML Page

CVSS 8.8

CVE-2026-9113 MEDIUM

Google Chrome < 148.0.7778.179 - Out-of-bounds Read in GPU via Crafted HTML Page

CVSS 4.3

CVE-2026-5946 HIGH

BIND 9.11.0-9.16.50, 9.18.0-9.18.48, 9.20.0-9.20.22, 9.21.0-9.21.21 - DoS via Non-IN DNS Message Handling

CVSS 7.5

CVE-2026-32792 MEDIUM

Unbound 1.6.2-1.25.0 - Denial of Service via DNSCrypt Packet Processing

CVSS 5.3

CVE-2026-24213 HIGH

NVIDIA Triton Inference Server < 26.03 - Out-of-bounds Read in DALI Backend

CVSS 8.0

CVE-2026-43620 MEDIUM

Rsync < 3.4.3 Out-of-Bounds Array Read via recv_files()

CVSS 6.5

CVE-2026-43618 HIGH

Rsync < 3.4.3 Integer Overflow Information Disclosure

CVSS 8.1

CVE-2026-32882 HIGH

libheif: Heap Buffer OOB Read in overlay compositing due to wrong alpha stride

CVSS 7.1

CVE-2026-33642 CRITICAL

Kitty <0.47.0 compose_rectangles - Heap Buffer Over-Read/Write

CVSS 9.9

CVE-2026-32738 MEDIUM

libheif <1.22.0 samples_per_chunk - Out-of-Bounds Read Denial of Service

CVSS 6.5

CVE-2026-38719 MEDIUM

OpENer v2.3-558-g1e99582 - Out-of-Bounds Read

CVSS 6.2

CVE-2026-8686 HIGH

DoS from MQTT v5.0 Deserialization Fault in core MQTT

CVSS 7.5

CVE-2026-8578 LOW

Google Chrome < 148.0.7778.168 - Out-of-bounds Read in GPU

CVSS 3.1

CVE-2026-8546 MEDIUM

Google Chrome < 148.0.7778.168 - Out-of-bounds Read in GPU

CVSS 5.3

CVE-2026-8543 MEDIUM

Google Chrome < 148.0.7778.168 - Out-of-bounds Read in FileSystem

CVSS 5.3

CVE-2026-8541 MEDIUM

Google Chrome < 148.0.7778.168 - Out-of-bounds Read in UI

CVSS 5.3

CVE-2026-8535 MEDIUM

Google Chrome < 148.0.7778.168 - Out-of-bounds Read in Media via Crafted JPEG File

CVSS 5.3

CVE-2026-43996 MEDIUM

OpenImageIO: Integer wraparound in bounds check of decode_pixel leads to out-of-bounds read in TGA paletted image decoder

CVSS 5.5

CVE-2026-43909 HIGH

OpenImageIO: Signed integer overflow in SwapRGBABytes loop index leads to out-of-bounds read/write in DPX ABGR decoder

CVSS 8.8

CVE-2026-42934 MEDIUM

NGINX Plus and NGINX Open Source - Out-of-bounds Read in ngx_http_charset_module

CVSS 4.8