CWE-1284

476 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 2 of them as exploited in the wild.

Critical 29High 213Medium 203Low 30Not scored 1

CVEs per yearBy the year they were published

CVE-2010-3904
The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel before 2.6.36 does not…
Product not named
ExploitedHigh7.8
CVE-2022-20699
Cisco Small Business RV Series Routers Vulnerabilities
Cisco · Cisco Small Business RV Series Router Firmware
ExploitedCritical10.0

CVE-2026-119749
GetPaid WordPress Plugin < 2.8.63 Negative Quantity Payment Bypass
AyeCode Ltd · Payment forms, Buy now buttons, and Invoicing System | GetPaid
High8.7
CVE-2026-20562
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue…
MediaTek, Inc. · MediaTek chipset
Medium5.3
CVE-2026-115274
Unbounded integer parsing in JSON.decode/1 enables CPU and memory exhaustion denial of service in Elixir
elixir-lang · elixir
Medium6.9
CVE-2026-109821
Unbounded port parsing in URI.parse/1 enables CPU exhaustion denial of service in Elixir
elixir-lang · elixir
Medium6.3
CVE-2026-119186
Forge: AES-GCM authentication bypass via unvalidated tagLength option
digitalbazaar · forge
Medium5.9
CVE-2026-118782
Forge: PKCS#12 MAC forgery and constant-key PBE via zero iteration count
digitalbazaar · forge
High7.5
CVE-2026-114349
Apache Kafka: Denial of service via unbounded memory allocation when decoding compressed record batches
Apache Software Foundation · Apache Kafka
Not scored
CVE-2026-103594
Fireware OS Stack Buffer Overflow in WireGuard Configuration Allows Remote Code Execution
WatchGuard · Fireware OS
Critical9.5
CVE-2026-116581
Seroval: fromJSON deserializer trusts sequence doneAt (unauthenticated event-loop DoS)
lxsmnsyc · seroval
High7.5
CVE-2026-115906
zip: AES Entry HMAC Authentication Bypass on Premature EOF
zip-rs · zip2
Medium6.5