CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer (page 2)
Page 2 of 100 — CVEs classified under CWE-119, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-84567 | Medium | 5.5 | 2026-09-14 | The issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to… |
CVE-2026-84566 | High | 7.8 | 2026-09-14 | The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequo… |
CVE-2026-84537 | Medium | 6.6 | 2026-09-14 | The issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to… |
CVE-2026-64714 | Medium | 5.5 | 2026-09-14 | A memory corruption issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Golden Gate 27, macOS Sequo… |
CVE-2026-43702 | High | 7.8 | 2026-09-14 | The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, iOS 26.7 and iPadOS 26.7, macOS Sequoia 15.8, macOS Tah… |
CVE-2026-28935 | High | 7.5 | 2026-09-14 | The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, vi… |
CVE-2026-90815 | Medium | 6.3 | 2026-09-14 | A vulnerability has been found in FFmpeg up to 4.4.6/5.1.8/6.1.4/7.1.3/8.0.1. Affected by this issue is the function setup_3x3 of the file libavfilter/vf_convo… |
CVE-2026-54559 | | 2026-09-14 | PocketSphinx is a small speech recognizer. Prior to 5.1.1, the trie language-model loaders in src/lm/ngram_model_trie.c do not adequately validate boundary con… | |
CVE-2026-90804 | Medium | 4.8 | 2026-09-14 | A vulnerability was detected in GNU Binutils 2.47. Affected by this issue is the function _bfd_elf_write_section_eh_frame of the file bfd/elf-eh-frame.c of the… |
CVE-2026-90803 | Medium | 5.3 | 2026-09-14 | A security vulnerability has been detected in GNU Binutils 2.47. Affected by this vulnerability is the function elf_x86_64_relocate_section of the file bfd/elf… |
CVE-2026-90801 | Medium | 5.3 | 2026-09-14 | A security flaw has been discovered in GNU Binutils 2.47. This impacts the function cache_bwrite of the file bfd/cache.c of the component ld. The manipulation… |
CVE-2026-90794 | Medium | 6.3 | 2026-09-14 | A vulnerability was found in GPAC up to f1219cde. The affected element is the function gf_sg_script_load of the file scenegraph/vrml_tools.c of the component M… |
CVE-2026-90793 | Medium | 5.4 | 2026-09-14 | A vulnerability has been found in GPAC up to f1219cde. Impacted is the function gf_node_get_name of the file scenegraph/base_scenegraph.c of the component MP4B… |
CVE-2026-90791 | Medium | 6.3 | 2026-09-14 | A vulnerability was detected in GPAC up to f1219cde. This vulnerability affects the function gf_node_unregister of the file scenegraph/base_scenegraph.c of the… |
CVE-2026-90716 | Medium | 5.5 | 2026-09-14 | A vulnerability was detected in marcobambini Gravity up to 0.9.7. This impacts the function parse_number_expression of the file src/compiler/gravity_parser.c o… |
CVE-2026-90714 | Medium | 6.3 | 2026-09-14 | A weakness has been identified in marcobambini Gravity up to 0.9.7. The impacted element is an unknown function of the file src/utils/gravity_json.c of the com… |
CVE-2026-90707 | High | 8.3 | 2026-09-14 | A security flaw has been discovered in Open5GS up to 2.7.x. Affected is the function amf_nnrf_try_old_amf_discovery_fallback of the file src/amf/nnrf-handler.c… |
CVE-2026-90698 | Medium | 5.3 | 2026-09-14 | A security flaw has been discovered in memcached 1.6.41/1.6.42/1.6.43. This vulnerability affects the function try_read_command_asciiauth of the file proto_tex… |
CVE-2026-90693 | Critical | 9.9 | 2026-09-14 | A flaw has been found in D-Link DIR-878 120B05. This impacts the function SetWan3Settings of the component WAN Settings. This manipulation of the argument Prim… |
CVE-2026-90692 | Critical | 9.9 | 2026-09-14 | A vulnerability was detected in D-Link DIR-878 120B05. This affects the function SetDynamicDNSIPv6Settings of the component Dynamic DNS IPv6 Settings. The mani… |
CVE-2026-90689 | High | 8.8 | 2026-09-14 | A security flaw has been discovered in Tenda W20E 15.11.0.61068_1546_841_CN_TDC. Impacted is the function formDelWebAuthWhiteUser. Performing a manipulation of… |
CVE-2026-90688 | Medium | 6.5 | 2026-09-14 | A vulnerability was identified in Tenda W20E 15.11.0.61068_1546_841_CN_TDC. This issue affects the function formIPMacBindAdd of the component HTTP Handler. Suc… |
CVE-2026-90687 | Medium | 6.3 | 2026-09-14 | A vulnerability was determined in GPAC up to f1219cde. This vulnerability affects the function gf_node_changed_internal of the file scenegraph/base_scenegraph… |
CVE-2026-90686 | Medium | 5.3 | 2026-09-14 | A vulnerability was found in GPAC up to f1219cde. This affects the function gf_bt_report of the file scene_manager/loader_bt.c of the component MP4Box. The man… |
CVE-2026-90682 | Medium | 5.3 | 2026-09-14 | A security vulnerability has been detected in Matthias-Wandel jhead up to 3.3. This impacts the function ProcessGpsInfo of the file gpsinfo.c of the component… |
CVE-2026-90681 | Low | 3.3 | 2026-09-14 | A weakness has been identified in Matthias-Wandel jhead up to 3.3. This affects the function Get16u of the file exif.c of the component EXIF Parsing. This mani… |
CVE-2026-90680 | Critical | 9.9 | 2026-09-14 | A security flaw has been discovered in D-Link DIR-823G 1.0.2B05_20181207. The impacted element is the function strcpy of the file /HNAP1/SetStaticRouteSettings… |
CVE-2026-90610 | Low | 3.3 | 2026-09-14 | A vulnerability was found in GPAC up to f1219cde. This affects the function gf_svg_attributes_copy of the file scenegraph/svg_attributes.c of the component MP4… |
CVE-2026-90608 | Critical | 9.9 | 2026-09-14 | A flaw has been found in Totolink A3002MU Hh-B20211125.1046. The affected element is the function formPortFw of the file /boafrm/formPortFw of the component bo… |
CVE-2026-90607 | Critical | 9.9 | 2026-09-14 | A vulnerability was detected in Totolink A3002MU Hh-B20211125.1046. Impacted is the function formNewSchedule of the file /boafrm/formNewSchedule of the compone… |
CVE-2026-90606 | Critical | 9.9 | 2026-09-14 | A security vulnerability has been detected in Totolink A3002MU Hh-B20211125.1046. This issue affects the function formIpv6Setup of the file /boafrm/formIpv6Set… |
CVE-2026-90605 | Critical | 9.9 | 2026-09-14 | A weakness has been identified in Totolink A3002MU Hh-B20211125.1046. This vulnerability affects the function formFilter of the file /boafrm/formFilter of the… |
CVE-2026-90578 | Medium | 5.3 | 2026-09-13 | A flaw has been found in GPAC up to f1219cde. Affected by this issue is the function gf_list_count of the file utils/list.c of the component MP4Box. Executing… |
CVE-2026-90577 | Medium | 5.3 | 2026-09-13 | A vulnerability was detected in GPAC up to f1219cde. Affected by this vulnerability is the function gf_node_get_field of the file scenegraph/base_scenegraph.c… |
CVE-2026-90572 | Medium | 4.7 | 2026-09-13 | A vulnerability was determined in davenardella snap7 up to 1.4.3. The affected element is the function TSnap7MicroClient::opUpload of the file src/core/s7_micr… |
CVE-2026-87933 | High | 7.3 | 2026-09-10 | A vulnerability was found in DaveGamble cJSON up to 1.7.19. The affected element is the function cJSONUtils_MergePatch of the file cJSON_Utils.c. The manipulat… |
CVE-2026-87931 | Critical | 9.6 | 2026-09-10 | A vulnerability has been found in Behavioral Technology Group Pavlok Behavioral Conditioning Wearable up to 20260707. Impacted is an unknown function of the co… |
CVE-2026-87489 | High | 8.8 | 2026-09-09 | Memory corruption in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafte… |
CVE-2026-87444 | High | 8.8 | 2026-09-09 | Memory corruption in Codecs in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML p… |
CVE-2026-86716 | High | 7.3 | 2026-09-08 | A vulnerability was determined in Cesanta mJS up to 1.26. Affected is the function skip_spaces_and_comments of the file src/mjs_tok.c. Executing a manipulation… |
CVE-2026-79602 | High | 8.8 | 2026-09-08 | A guest with a PCI device assigned that has at least a BAR on the IO port space can trigger a BUG() in Xen. |
CVE-2026-86514 | Medium | 6.3 | 2026-09-08 | A weakness has been identified in vgmstream up to r2117. This issue affects the function sscanf of the file src/meta/txth.c of the component txth-txtp. This ma… |
CVE-2026-86510 | Critical | 9.9 | 2026-09-08 | A vulnerability has been found in D-Link DIR-822A A_101. Affected is the function tunnel_set_params of the component L2TP Control Message Parser. Such manipula… |
CVE-2026-86509 | Critical | 9.6 | 2026-09-08 | A flaw has been found in D-Link DIR-895L A1_102b07. This impacts the function sendOffer/sendACK of the file udhcpcd/serverpacket.c of the component udhcpcd. Th… |
CVE-2026-86318 | Medium | 5.3 | 2026-09-07 | A flaw has been found in java-json-tools json-patch up to 1.13. Affected is the function JsonMergePatch.fromJson of the file JsonMergePatchDeserializer.java. E… |
CVE-2026-86303 | High | 7.3 | 2026-09-07 | A vulnerability was determined in 92181 markdown up to 058cab0cb7fb245a0ccc6b8446963ff8d573558f. Affected by this issue is the function lds of the file md.c. E… |
CVE-2026-86296 | Critical | 10.0 | 2026-09-07 | A vulnerability was determined in D-Link DIR-822A A_101. This vulnerability affects the function strcpy of the file udhcpcd/serverpacket.c of the component udh… |
CVE-2026-86288 | Medium | 6.3 | 2026-09-07 | A vulnerability has been found in ModelCloud GPTQModel up to 7.2.0. This vulnerability affects unknown code of the file gptqmodel/nn_modules/qlinear/tritonv2.p… |
CVE-2026-86227 | Low | 3.1 | 2026-09-06 | A weakness has been identified in valkey-io valkey up to 9.0.5/9.1.1. This affects the function kvstoreGetHashtable of the file src/kvstore.c. This manipulatio… |
CVE-2026-86166 | High | 8.8 | 2026-09-06 | A vulnerability was determined in Tenda HG10 300001138. This issue affects the function formWanRedirect of the file /boaform/formWanRedirect of the component B… |
CVE-2026-86165 | Critical | 9.8 | 2026-09-06 | A vulnerability was found in Tenda HG10 300001138. This vulnerability affects the function formURL of the file /boaform/admin/formURL. Performing a manipulatio… |
CVE-2026-85522 | Medium | 5.3 | 2026-09-04 | A vulnerability was detected in valkey-io valkey up to 9.5.4/9.1.0. Affected by this vulnerability is the function createSlotImportJob of the file src/cluster_… |
CVE-2026-85110 | High | 8.8 | 2026-09-03 | A vulnerability was identified in Tenda HG10 300001138. Impacted is the function formWlanSetup of the file /boaform/formWlanSetup of the component Boa Web Serv… |
CVE-2026-85109 | Critical | 9.8 | 2026-09-03 | A vulnerability was determined in Tenda HG10 300001138. This issue affects the function formLogin of the file /boaform/formLogin of the component Boa Web Serve… |
CVE-2026-85031 | Critical | 9.9 | 2026-09-03 | A vulnerability was found in TOTOLINK CP450 4.1.0. The impacted element is an unknown function of the file /cgi-bin/cstecgi.cgi. Performing a manipulation of t… |
CVE-2026-76757 | Medium | 5.9 | 2026-09-02 | Vulnerability in Drupal Gammu SMS Daemon. This issue affects Gammu SMS Daemon versions: *.*. |
CVE-2026-76756 | Medium | 5.9 | 2026-09-02 | Vulnerability in Drupal Gammu SMS Daemon. This issue affects Gammu SMS Daemon versions: *.*. |
CVE-2026-76755 | Medium | 5.9 | 2026-09-02 | Vulnerability in Drupal Gammu SMS Daemon. This issue affects Gammu SMS Daemon versions: *.*. |
CVE-2026-9637 | | 2026-09-01 | A denial-of-service security issue exists in the affected Logix platforms listed in the table above. The security issue stems from improper validation of input… | |
CVE-2026-84145 | High | 7.5 | 2026-09-01 | Internally found bugs present in Thunderbird 154, Thunderbird ESR 153.1 and Thunderbird ESR 140.14. Some of these bugs showed evidence of memory corruption or… |
CVE-2026-84144 | High | 7.5 | 2026-09-01 | Internally found bugs present in Thunderbird 154 and Thunderbird ESR 153.1. Some of these bugs showed evidence of memory corruption or another security-relevan… |
CVE-2026-84143 | Critical | 9.8 | 2026-09-01 | Internally found bugs present in Thunderbird 154, Thunderbird ESR 153.1 and Thunderbird ESR 140.14. Some of these bugs showed evidence of memory corruption or… |
CVE-2026-84142 | Critical | 9.8 | 2026-09-01 | Internally found bugs present in Thunderbird 154. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume th… |
CVE-2026-82820 | Medium | 4.3 | 2026-08-31 | A vulnerability was found in FLVMeta up to 1.2.2. Affected is the function amf_string_new of the file src/amf.c of the component AMF String Processing. The man… |
CVE-2026-82680 | High | 8.8 | 2026-08-31 | A weakness has been identified in D-Link DSM-G600 1.01. This affects an unknown function of the file /load_file.cgi of the component Multipart Handler. Executi… |
CVE-2026-82677 | Low | 2.4 | 2026-08-31 | A vulnerability was determined in valkey-io valkey 9.1.0. Impacted is the function moduleTimerHandler of the file src/module.c of the component Module Timer Su… |
CVE-2026-82631 | Low | 2.2 | 2026-08-31 | A security flaw has been discovered in valkey-io valkey 9.1.0. The affected element is the function handleClientsBlockedOnKey of the file src/blocked.c of the… |
CVE-2026-82623 | Medium | 5.3 | 2026-08-31 | A vulnerability was detected in open62541 up to 1.5.5. Affected by this vulnerability is the function UA_DataValue_backend_copyRange of the file plugins/histor… |
CVE-2026-82619 | Medium | 4.3 | 2026-08-31 | A vulnerability was identified in Systerel S2OPC up to 1.7.3. The impacted element is the function monitored_item_event_filter_treatment_bs__init_event_filter_… |
CVE-2026-82618 | Medium | 4.3 | 2026-08-31 | A vulnerability was determined in Systerel S2OPC up to 1.7.3. The affected element is the function set_range_matrix_on_string_array of the file src/Common/opcu… |
CVE-2026-82616 | Critical | 9.9 | 2026-08-31 | A vulnerability was found in TOTOLINK NR1800X 9.1.0u.6681_B20230703. Impacted is the function setUploadSetting of the file /cgi-bin/cstecgi.cgi. The manipulati… |
CVE-2026-82608 | High | 7.4 | 2026-08-31 | A vulnerability was determined in Kamailio up to 5.5.0/6.0.7. This affects the function get_4bytes of the file src/modules/ims_registrar_scscf/cxdx_avp.c of th… |
CVE-2026-82596 | Low | 3.3 | 2026-08-31 | A vulnerability was determined in LatencyUtils up to 2.0.3. Affected by this issue is the function LatencyStats.recordDetectedPause of the file src/main/java/o… |
CVE-2026-82593 | Critical | 9.9 | 2026-08-31 | A flaw has been found in D-Link DIR-825M 1.1.8. This impacts the function sub_41802C of the file /boafrm/formLtefotaUpgradeFibocom of the component LTE Module… |
CVE-2026-82592 | Critical | 9.9 | 2026-08-30 | A vulnerability was detected in D-Link DIR-825M 1.1.8. This affects the function sub_46725C of the file /boafrm/formDiskFormat of the component Disk Formatting… |
CVE-2026-82591 | Medium | 5.3 | 2026-08-30 | A security vulnerability has been detected in Open Asset Import Library Assimp up to 6.0.2. The impacted element is the function MD5Importer::MakeDataUnique of… |
CVE-2026-82587 | Medium | 4.3 | 2026-08-30 | A vulnerability was determined in Open5GS up to 2.7.7. This vulnerability affects the function amf_namf_comm_decode_ue_mm_context_list of the file src/amf/namf… |
CVE-2026-82542 | Critical | 10.0 | 2026-08-30 | A weakness has been identified in Tenda HG10 300001138. Affected by this issue is the function formIPv6Routing of the file /boaform/admin/formIPv6Routing of th… |
CVE-2026-82539 | Critical | 9.1 | 2026-08-30 | A vulnerability was determined in TOTOLINK A720R 4.1.5cu.630_B20250509. This impacts the function setMacFilterRules of the file cstecgi.cgi of the component MA… |
CVE-2026-82479 | Medium | 6.3 | 2026-08-30 | A vulnerability was identified in NASA cFS up to 7.0.1. Impacted is the function OS_read of the file modules/protocol/tcp/fsw/src/sbn_tcp_if.c of the component… |
CVE-2026-82478 | High | 7.3 | 2026-08-30 | A vulnerability was determined in NASA Trick 19.6.0. This issue affects the function JSONVariableServerThread::parse_request of the file trick_source/sim_servi… |
CVE-2026-81581 | High | 8.8 | 2026-08-27 | Improper validation of memory boundaries in WibuKey64.sys of WibuKey up to 6.70 for Windows can be exploited by an attacker by setting the pointers outside the… |
CVE-2026-79911 | Critical | 10.0 | 2026-08-25 | A security vulnerability has been detected in TOTOLINK N600R 4.3.0cu.7647_B20210106. The affected element is the function setSystemConfig of the file /cgi-bin/… |
CVE-2026-79069 | High | 8.8 | 2026-08-25 | Memory corruption in Tint in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox… |
CVE-2026-78170 | High | 8.8 | 2026-08-24 | A flaw has been found in UTT HiPER 1200GW up to 2.5.3-170306. Affected is the function strcpy of the file /goform/formConfigFastDirectionW. Executing a manipul… |
CVE-2026-78169 | Critical | 9.9 | 2026-08-24 | A vulnerability was detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. This impacts the function strcpy of the file /goform/aspRemoteApConfTempSend of the… |
CVE-2026-78161 | High | 7.3 | 2026-08-24 | A vulnerability was found in warmcat libwebsockets 4.5.0. Impacted is the function report_raw_cbor of the file lib/misc/lecp.c of the component LECP CBOR Recor… |
CVE-2026-78157 | High | 7.4 | 2026-08-24 | A vulnerability was detected in Open5GS 2.8.0. This affects the function pcrf_rx_aar_cb of the file src/pcrf/pcrf-rx-path.c of the component Rx AA-Request Hand… |
CVE-2026-78156 | High | 7.4 | 2026-08-24 | A security vulnerability has been detected in Open5GS 2.8.0. Affected by this issue is the function hss_ogs_diam_s6a_air_cb of the file src/hss/hss-s6a-path.c… |
CVE-2026-78050 | Critical | 9.9 | 2026-08-23 | A vulnerability was found in Comfast CF-N1-S 2.6.0.1. The affected element is the function sub_41AD7C of the file /cgi-bin/mbox-config?method=SET§ion=ntp_t… |
CVE-2026-78049 | Low | 3.7 | 2026-08-22 | A vulnerability has been found in Systerel S2OPC up to 1.7.3. Impacted is the function SOPC_NodeMgtHelperInternal_AddVariableNodeAttributes of the file src/Cli… |
CVE-2026-77946 | Critical | 10.0 | 2026-08-22 | A vulnerability was determined in TRENDnet TEW-821DAP 2.2.01b05. Affected by this vulnerability is the function uci_safe_get of the file /cgi-bin/apply_time.cg… |
CVE-2026-77148 | Critical | 9.9 | 2026-08-20 | A vulnerability was found in Comfast CF-N1-S 2.6.0.1. This impacts the function sub_44B50C of the file /cgi-bin/mbox-config?method=SET§ion=ptest_channel of… |
CVE-2026-77022 | Critical | 9.9 | 2026-08-20 | A security flaw has been discovered in Comfast CF-N1-S 2.6.0.1. Affected by this issue is the function sub_44B438 of the file /cgi-bin/mbox-config?method=SET&s… |
CVE-2026-55586 | Medium | 6.6 | 2026-08-20 | SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, a crafted CHM file can supply malformed LZX Huffman code lengths to make_decode_table in… |
CVE-2026-18294 | High | 7.8 | 2026-08-20 | OriginLab Origin Viewer OGW File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary… |
CVE-2026-18292 | High | 7.8 | 2026-08-20 | OriginLab OriginPro OGG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary cod… |
CVE-2026-18291 | High | 7.8 | 2026-08-20 | OriginLab OriginPro OGW File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary cod… |
CVE-2026-76989 | Medium | 5.3 | 2026-08-20 | A security vulnerability has been detected in liftoff-sr CIPster 1802525be27d33e19a9a83c163e331a1d13b1892. This impacts an unknown function of the file source/… |
CVE-2026-76988 | Medium | 5.3 | 2026-08-20 | A weakness has been identified in liftoff-sr CIPster 1802525be27d33e19a9a83c163e331a1d13b1892. This affects the function CipConnMgrClass::forward_open of the f… |