CWE-839

8 published CVEs are weaknesses of this kind, as the records or NVD name it.

Critical 2High 3Medium 2Low 1Not scored 0

CVEs per yearBy the year they were published

CVE-2026-118384
GNU mtools before 4.0.50 has an out-of-bounds write in parse_vses in vfat.c.
GNU · mtools
Medium6.1
CVE-2026-57186
Asterisk: CVE-2022-37325 fix is absent from current chan_ooh323 Q.931 party-number parser
asterisk · asterisk
High7.5
CVE-2026-53176
IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN
Linux · Linux
Critical9.8
CVE-2026-56968
GNU SASL before 2.2.4 lacks sanitization of a short challenge in _gsasl_ntlm_client_step in the NTLM client, which could result in memory disclosure via a…
GNU · GNU SASL
Low3.7
CVE-2026-48840
Exim 4.88 before 4.99.4, in some proxy configurations, mishandles certain short payloads, leading to disclosure of uninitialized stack memory values to a…
Exim · Exim
Medium5.3
CVE-2023-0425
Buffer overflow in global memory region
ABB · Freelance controllers AC 700F
High8.6
CVE-2023-22854
The ccmweb component of Mitel MiContact Center Business server 9.2.2.0 through 9.4.1.0 could allow an unauthenticated attacker to download arbitrary files, due…
Product not named
Critical9.1
CVE-2019-20925
Denial of service via malformed network packet
MongoDB Inc. · MongoDB Server
High7.5