CWE-1285

68 published CVEs are weaknesses of this kind, as the records or NVD name it.

Critical 4High 36Medium 25Low 3Not scored 0

CVEs per yearBy the year they were published

CVE-2026-48175
Processing a malformed RRC message leads to an out-of-bounds read, resulting in a denial-of-service condition.
Samsung Semiconductor · Exynos 1280
Medium5.5
CVE-2026-89410
Out-of-bounds read in Z-Wave NCP SPI Handler
Silicon Labs · Z-Wave SDK
Medium5.1
CVE-2026-96582
Out-of-bounds Read via Check-after-use in the USBX HID Report Descriptor Parser
Eclipse Foundation · Eclipse ThreadX - USBX
Medium4.9
CVE-2026-111555
Luksmeta: missing slot-range validation permits out-of-gap device i/o
Red Hat · Red Hat Enterprise Linux 10
Medium6.0
CVE-2026-110736
Godot Engine through 4.7.2 has an out-of-bounds read in the optimized translation loader (core/string/optimized_translation.cpp,…
godotengine · Godot Engine
Low3.6
CVE-2026-107821
MariaDB: insufficient validation of binary frm data when opening a table
MariaDB · server
High8.0
CVE-2026-20524
In apu, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with no additional execution…
MediaTek, Inc. · MediaTek chipset
High8.4
CVE-2026-31912
OOBR in libpcap before 1.10.7
The Tcpdump Group · libpcap
Medium5.5
CVE-2026-53530
ratex-parser panics on `\verb` with a multibyte delimiter (UTF-8 byte-boundary slice)
erweixin · RaTeX
High8.7
CVE-2026-14479
Denial of Service in Autodesk Installer IPC Channel
Autodesk · Installer
Medium5.5