CWE-197

100 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 1 of them as exploited in the wild.

Critical 7High 63Medium 24Low 6Not scored 0

CVEs per yearBy the year they were published

CVE-2022-42475
A heap-based buffer overflow vulnerability [CWE-122] in FortiOS SSL-VPN 7.2.0 through 7.2.2, 7.0.0 through 7.0.8, 6.4.0 through 6.4.10, 6.2.0 through 6.2.11,…
Fortinet · FortiProxy
ExploitedCritical9.3

CVE-2026-107479
Integer truncation vulnerability in QTextCodec conversion functions impacts Qt Framework
qt · Qt
Low1.7
CVE-2026-117069
An integer truncation vulnerability in the NAS decoder of OpenAirInterface (OAI) CN5G AMF v2.2.1 allows an unauthenticated remote attacker to cause a denial of…
Product not named
High7.5
CVE-2026-116742
HTSlib through 1.24 Heap Out-of-Bounds Write via Truncated .gzi Index Count
samtools · htslib
Medium4.8
CVE-2026-116012
Ghidra before 12.2 Integer Truncation in PackedDecode::skipAttribute Decompiler Parser
NationalSecurityAgency · ghidra
Low2.0
CVE-2026-115889
Wasmtime: Bit-packing in Cranelift compiler causes silent overflow and miscompilation
bytecodealliance · wasmtime
Critical9.9
CVE-2026-109588
Numeric truncation in the MPU buffer authorization check in FreeRTOS-Kernel
FreeRTOS · FreeRTOS-Kernel
Critical9.3
CVE-2026-108451
Microsoft Office Word Remote Code Execution Vulnerability
Microsoft · Microsoft 365 Apps for Enterprise
High8.8
CVE-2026-108450
Microsoft Office Word Remote Code Execution Vulnerability
Microsoft · Microsoft 365 Apps for Enterprise
High8.8
CVE-2026-111105
Telegram rlottie Numeric Truncation Remote Code Execution Vulnerability
Telegram · Telegram
High7.0
CVE-2026-33795
Junos OS and Junos OS Evolved: An attacker causes a routing-daemon crash when BGP Prefix-SID routes are re-advertised
Juniper Networks · Junos OS
High8.7