CWE-131

209 vulnerabilities with CWE-131

CVE-2026-1188 CRITICAL

Eclipse OMR 0.2.0-0.7.9 - Buffer Overflow in Processor Feature Name API

CVSS 9.8

CVE-2026-22791 MEDIUM

openCryptoki 3.25.0-3.26.0 - Heap Buffer Overflow in CKM_ECDH_AES_KEY_WRAP via Compressed EC Public Key

CVSS 6.6

CVE-2026-21503 MEDIUM

iccDEV < 2.3.1.2 - Denial of Service via Null Pointer in CIccTagSparseMatrixArray

CVSS 6.1

CVE-2025-33216 MEDIUM

NVIDIA SNAP-4 Container < 4.9.0 and < 4.5.5 - Denial of Service via Crafted Configuration

CVSS 6.8

CVE-2025-33124 MEDIUM

IBM DB2 Merge Backup 12.1.0.0 - Authenticated Denial of Service via Buffer Size Calculation

CVSS 6.5

CVE-2025-62550 HIGH

Azure Monitor Agent < 1.35.9 - Authenticated Remote Code Execution via Out-of-Bounds Write

CVSS 8.8

CVE-2025-66216 CRITICAL

AIS-catcher <0.64 - Buffer Overflow

CVSS 9.8

CVE-2025-61661 MEDIUM

GNU grub2 < 2.14 - Denial of Service via USB Device String Conversion

CVSS 4.8

CVE-2025-27074 HIGH

Product <Version - Memory Corruption

CVSS 8.8

CVE-2025-33126 MEDIUM

IBM DB2 High Performance Unload - DoS

CVSS 6.5

CVE-2025-27053 HIGH

Qualcomm Mobile and Modem Firmware - Memory Corruption in PlayReady APP

CVSS 7.8

CVE-2025-57807 LOW

ImageMagick < 6.9.13-29 - Heap-Based Buffer Overflow via SeekBlob and WriteBlob Functions

CVSS 3.8

CVE-2025-55297 HIGH

espressif/esp-idf < 5.0.9 - Buffer Overflow in BluFi Example

CVSS 8.8

CVE-2025-52955 MEDIUM

Juniper Junos OS and Junos OS Evolved - Unauthenticated Denial of Service via rpd Memory Corruption

CVSS 6.5

CVE-2025-27042 HIGH

Qualcomm Firmware - Memory Corruption

CVSS 7.8

CVE-2025-46723 HIGH

OpenVM 1.0.0 - Buffer Overflow via AUIPC PC Limb Decomposition

CVE-2025-46688 MEDIUM

QuickJS <2025-04-26 - Buffer Overflow

CVSS 5.6

CVE-2025-46393 LOW

ImageMagick <7.1.1-44 - Buffer Overflow

CVSS 2.9

CVE-2025-43965 LOW

ImageMagick <7.1.1-44 - Info Disclosure

CVSS 2.9

CVE-2025-1861 CRITICAL

PHP <8.1.32, <8.2.28, <8.3.19, <8.4.5 - Info Disclosure

CVSS 9.8

CVE-2025-30334 MEDIUM

OpenBSD < 7.5 - Denial of Service via wg(4) Traffic Handling

CVSS 6.5

CVE-2025-0395 MEDIUM

GNU C Library <2.41 - Buffer Overflow

CVSS 6.2

CVE-2024-11425 HIGH

Schneider Electric Modicon M580 CPU - Unauthenticated Denial of Service via Crafted HTTPS Packet

CVSS 7.5

CVE-2024-8361 HIGH

WiSeConnect SDK < 3.3.4 - Denial of Service via SHA2/224 Hash Length Mismatch

CVSS 7.5

CVE-2024-49776 MEDIUM

tsMuxer nightly-2024-04-05-01-53-02 - DoS

CVSS 6.5