Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

CWE-196

10 published CVEs are weaknesses of this kind, as the records or NVD name it.

Published CVEs
10
Last 12 months
6
Critical
3
Known exploited
0

Critical 3High 3Medium 4Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20201
  2. 20211
  3. 20221
  4. 20231
  5. 20266

Newest CVEs

  • CVE-2026-120457

    libaec through 1.1.7 Out-of-Bounds Read via m_se_decode() Second Extension Decoder

    Deutsches Klimarechenzentrum · libaec

    Medium5.8
  • CVE-2026-106567

    ImageMagick: Infinite Loop in PSD decoder on 32-bit builds

    ImageMagick · ImageMagick

    Medium5.9
  • CVE-2026-93019

    Imager versions before 1.036 for Perl exit the process reading a TGA with a colour map length of 32768 or more in tga_palette_read

    Imager

    Critical9.1
  • CVE-2026-58317

    Unsigned to Signed Conversion Error (CWE-196) vulnerability exists in TTSSH2 plugin of Tera Term provided by TeraTerm Project. When Tera Term attempts to…

    TeraTerm Project · TTSSH2

    Medium5.1
  • CVE-2026-14454

    Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed

    TONYC · Imager

    Critical9.8
  • CVE-2026-34155

    RAUC: Improper Signing of Plain Bundles Exceeding 2 GiB

    rauc · rauc

    High7.2
  • CVE-2023-0185

    NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where sign conversion issuescasting an unsigned primitive to signed may…

    NVIDIA · vGPU software (Virtual GPU Manager - Citrix Hypervisor, VMware vSphere, Red Hat Enterprise Linux KVM), NVIDIA Cloud Gaming (Virtual GPU Manager - Red Hat Enterprise Linux KVM)

    Medium6.7
  • CVE-2022-36025

    Incorrect Conversion between Numeric Types in Besu Ethereum Client

    hyperledger · besu

    Critical9.1
  • CVE-2020-13545

    An exploitable signed conversion vulnerability exists in the TextMaker document parsing functionality of SoftMaker Office 2021’s TextMaker application. A…

    Softmaker

    High8.8
  • CVE-2020-7067

    OOB Read in urldecode()

    PHP Group · PHP

    High7.5

Vendors it comes up for most

  1. Deutsches Klimarechenzentrum1
  2. ImageMagick1
  3. NVIDIA1
  4. PHP Group1
  5. TONYC1
  6. TeraTerm Project1
  7. hyperledger1
  8. rauc1