Skip to content
CVE Tracker

CWE-823

111 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 1 of them as exploited in the wild.

All 111 in the listAtom feed of new CVEsWhat CWE-823 is, at MITRE (opens in a new tab)
Published CVEs
111
Last 12 months
29
Critical
5
Known exploited
1

Critical 5High 66Medium 35Low 3Not scored 2

CVEs per yearBy the year they were published

  1. 20171
  2. 20216
  3. 20214
  4. 202319
  5. 202314
  6. 202531
  7. 20252
  8. 202626
  9. 20268

Known exploitedNewest addition to KEV first

  • CVE-2023-33106

    Use of Out-of-range Pointer Offset in Graphics

    Qualcomm, Inc. · Snapdragon

    ExploitedHigh8.4

Newest CVEs

  • CVE-2026-74915

    GPU DDK - OOB write in UntwiddlePOTSquare64bpp

    Imagination Technologies · Graphics DDK

    Not scored
  • CVE-2026-74912

    GPU DDK - Fix for CVE-2026-49746 prevents the mapping of graphics buffers > 4GB

    Imagination Technologies · Graphics DDK

    Not scored
  • CVE-2026-93862

    Fireware OS Out-of-Bounds Read in FireCluster Sync Allows Denial of Service

    WatchGuard · Fireware OS

    High7.2
  • CVE-2026-107570

    Use of Out-of-range Pointer Offset in mutt

    mutt · mutt

    Low2.5
  • CVE-2026-104944

    Unauthenticated TDP Function Pointer Dispatch Denial of Service in TP-Link Tapo C500

    TP-Link Systems Inc. · Tapo C500 v2.0

    High7.1
  • CVE-2026-102757

    An unprivileged, memory-protected ThreadX module can have the kernel read and write memory at addresses of its choosing, in privileged mode, and can use that…

    Eclipse Foundation · ThreadX

    High8.5
  • CVE-2026-48977

    OpenSlide: Arbitrary memory write with crafted Ventana BIF file

    openslide · openslide

    High7.7
  • CVE-2026-31912

    OOBR in libpcap before 1.10.7

    The Tcpdump Group · libpcap

    Medium5.5
  • CVE-2026-45199

    GPU DDK - rgxfw_to_ptr() does not reject FW private data pointers

    Imagination Technologies · Graphics DDK

    High7.8
  • CVE-2026-72642

    Use of Out-of-range Pointer Offset in the Elasticsearch Machine Learning Native Inference Process

    Elastic · Elasticsearch

    High8.8

Vendors it comes up for most

  1. Qualcomm, Inc.31
  2. Imagination Technologies22
  3. Cesanta7
  4. vim5
  5. Cisco3
  6. Google LLC3
  7. Mozilla3
  8. CODESYS2
  9. ESTsoft2
  10. NVIDIA2