Skip to content
CVE Tracker

CWE-129

700 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 1 of them as exploited in the wild.

All 700 in the listAtom feed of new CVEsWhat CWE-129 is, at MITRE (opens in a new tab)
Published CVEs
700
Last 12 months
194
Critical
107
Known exploited
1

Critical 107High 418Medium 164Low 11Not scored 0

CVEs per yearBy the year they were published

  1. 20186
  2. 20187
  3. 201941
  4. 20202
  5. 20201
  6. 202433
  7. 202499
  8. 202550
  9. 2026172
  10. 202651
  11. 2026104
  12. 202670

Known exploitedNewest addition to KEV first

  • CVE-2022-48503

    The issue was addressed with improved bounds checks. This issue is fixed in tvOS 15.6, watchOS 8.7, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5, Safari 15.6.…

    Apple · macOS

    ExploitedHigh8.8

Newest CVEs

  • CVE-2026-65165

    NVIDIA Slurm contains a vulnerability where a user could deliberately alter the provided nodelist alongside the --distribution=arbitrary option to gain access…

    NVIDIA · Slurm

    Medium5.3
  • CVE-2026-120064

    psqlODBC does not validate column numbers and row indexes in binding and descriptor functions

    PostgreSQL · psqlODBC

    High7.5
  • CVE-2026-107457

    Memory corruption vulnerability in QMqttClient impacts Qt MQTT

    qt · Qt

    Low2.3
  • CVE-2026-119299

    gopacket: SCTP chunk sub-decoder out-of-bounds panics on crafted segments

    gopacket · gopacket

    Medium5.9
  • CVE-2026-119278

    MariaDB Connector/J: Rogue server can crash the client during caching_sha2_password authentication

    mariadb-corporation · mariadb-connector-j

    Medium5.9
  • CVE-2026-119143

    Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Panic via Zero-Length Stream Writes

    bytecodealliance · wasmtime

    Medium5.9
  • CVE-2026-93862

    Fireware OS Out-of-Bounds Read in FireCluster Sync Allows Denial of Service

    WatchGuard · Fireware OS

    High7.2
  • CVE-2026-113881

    Fireware OS Stack Buffer Overflow in VPN Network Access Enforcement Allows Unprivileged Code Execution

    WatchGuard · Fireware OS

    Medium6.1
  • CVE-2026-116816

    llama.cpp b5899 before b10261 Heap Out-of-Bounds Write via plamo2 Tokenizer

    ggml-org · llama.cpp

    High8.5
  • CVE-2024-58400

    llama.cpp before b3701 Out-of-Bounds Read in llama_decode via Token IDs

    ggml-org · llama.cpp

    High8.8

Vendors it comes up for most

  1. Linux156
  2. Qualcomm, Inc.140
  3. CGAL Project38
  4. NVIDIA15
  5. GeoVision Inc.11
  6. Huawei9
  7. vllm-project9
  8. Parallels7
  9. Unisoc (Shanghai) Technologies Co., Ltd.7
  10. AMD6