CWE-681

155 published CVEs are weaknesses of this kind, as the records or NVD name it.

Critical 9High 85Medium 56Low 5Not scored 0

CVEs per yearBy the year they were published

CVE-2026-119340
Tesseract: GENERIC_2D_ARRAY DeSerializeSize signed integer comparison bypass allows negative dimensions
tesseract-ocr · tesseract
Medium5.5
CVE-2026-118769
Botan: Integer overflow when reporting block size in FFI can cause memory corruption
randombit · botan
Critical9.2
CVE-2026-114654
BSON output corruption via out-of-range binary subtype bypassing UUID and OldBinary guards
MongoDB · C# Driver
Medium6.9
CVE-2026-114118
Vyper 0.3.4 through 0.5.0b1 create_from_blueprint Offset Validation Bypass via Unsigned Wraparound
vyperlang · vyper
Medium6.3
CVE-2026-12670
IBM MQ Denial of Service
IBM · MQ Operator
Medium5.3
CVE-2026-83872
Windows TCP/IP Local Elevation of Privilege Vulnerability
Microsoft · Windows 10 Version 1607
High7.8
CVE-2026-106432
Heap buffer overflow via 32-bit string-length truncation in MongoDB PHP Driver
MongoDB · PHP Driver
Low2.0
CVE-2026-107224
Excelize: A Zip64 uncompressed-size of 2^63 panics OpenFile/OpenReader
qax-os · excelize
Medium6.5
CVE-2026-47539
NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an incorrect numeric conversion. A…
NVIDIA · Virtual GPU Manager
Medium6.7
CVE-2026-47508
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause an incorrect conversion between…
NVIDIA · GeForce
High7.8