CWE-1284.

Stack-based buffer overflow in SafeNet Authentication Client SIS token engine

• Thalesgroup Safenet Authentication Client SIS token engine
• Memory corruption
• CWE-1284

stable-diffusion.cpp: Heap out-of-bounds write in the imatrix loader (`load_imatrix`) via a duplicate tensor name

• leejet stable-diffusion.cpp
• Memory corruption
• CWE-1284

STMicroelectronics st-mems-android-linux-sensors-hal: STMicroelectronics st-mems-android-linux-sensors-hal before 7bdf334 does not check…

• STMicroelectronics st-mems-android-linux-sensors-hal
• CWE-1284

In the Exynos modem's IMS stack, Out of Bound access occurs due to improper validation.

• Samsung Semiconductor Exynos 1080
• Samsung Semiconductor Exynos 9110
• CWE-1284

A memory corruption vulnerability caused by improper validation of messages

• Samsung Semiconductor Exynos 1080
• Samsung Semiconductor Exynos 9110
• CWE-1284

GetPaid WordPress Plugin < 2.8.63 Negative Quantity Payment Bypass

• AyeCode Ltd Payment forms, Buy now buttons, and Invoicing System | GetPaid
• CWE-1284

In Modem, there is a possible out of bounds write due to a missing bounds check.

• MediaTek, Inc. MediaTek chipset
• CWE-1284

Forge: AES-GCM authentication bypass via unvalidated tagLength option

• CWE-354
• CWE-1284

<1.4.1 · fixed in 1.4.1

Forge: PKCS#12 MAC forgery and constant-key PBE via zero iteration count

• CWE-354
• CWE-1284

<1.4.1 · fixed in 1.4.1

Unbounded integer parsing in JSON.decode/1 enables CPU and memory exhaustion denial of service in Elixir

• elixir
• CWE-1284

Unbounded port parsing in URI.parse/1 enables CPU exhaustion denial of service in Elixir

• elixir
• Denial of service
• CWE-1284

zip: AES Entry HMAC Authentication Bypass on Premature EOF

• CWE-354
• CWE-1284

>=0.6.0, <9.0.0 · fixed in 9.0.0

Seroval: fromJSON deserializer trusts node-supplied array length and sequence doneAt (unauthenticated event-loop DoS)

• Denial of service
• CWE-1284

<1.6.8 · fixed in 1.6.8

Apache Kafka: Denial of service via unbounded memory allocation when decoding compressed record batches

• Apache Software Foundation Apache Kafka
• Denial of service
• CWE-1284

Fireware OS Stack Buffer Overflow in WireGuard Configuration Allows Remote Code Execution

• WatchGuard Fireware OS
• Memory corruption
• CWE-1284

dcmjs: DS/IS VALUE REPRESENTATION INPUT VALIDATION BYPASS

• CWE-20
• CWE-1284

<0.52.0 · fixed in 0.52.0

An issue in Systrome Validation & Certification 1.0 allows an attacker to cause a denial of service via the t URL parameter in the qrcode_auth.html component

• CWE-1284

server-set cookie aborts cookie jar load

• curl
• CWE-1284

Module Manager object lookup validates one byte of a module's search name

• Eclipse Foundation Eclipse ThreadX
• Memory corruption
• CWE-1284

Out-of-bounds Write via an Unbounded RSA Modulus in NetX Secure X.509

• Eclipse Foundation Eclipse ThreadX - NetX Duo
• Memory corruption
• CWE-1284

FileX fault-tolerant log replay writes past the destination sector when mounting a crafted FAT image

• Eclipse Foundation Eclipse ThreadX - FileX
• Memory corruption
• CWE-1284

WordPress Classified Listing plugin <= 6.1.5 - Direct static code injection vulnerability

• Mamunur Rashid Classified Listing
• CWE-1284

nic BIRD: An IPv6 FlowSpec validation bypass in the CZ.NIC BIRD Internet Routing Daemon allows an…

• nic BIRD
• CWE-1284

swoosh has email-derived URL path injection in Microsoft Graph endpoint

• Denial of service
• CWE-116

>=1.12.0, <1.26.3 · fixed in 1.26.3

WordPress Booking and Rental Manager plugin <= 2.8.0 - Other vulnerability Type vulnerability

• Magepeople inc. Booking and Rental Manager
• CWE-1284

Junos OS and Junos OS Evolved: A specific BGP ISO-VPN update causes an rpd crash when BMP or NSR is enabled

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• CWE-1284

Junos OS and Junos OS Evolved: A malformed EVPN SRv6 route causes an rpd crash

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• CWE-1284

Junos OS and Junos OS Evolved: If in a BGP EVPN scenario a malformed NLRI is received rpd crashes

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• CWE-1284

Junos OS and Junos OS Evolved: An attacker causes denial of service when MC-LAG MAC synchronization is enabled

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• CWE-1284

Junos OS and Junos OS Evolved: Malformed RIPv2 messages cause routing service disruption when RIP is enabled

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• CWE-1284

Junos OS and Junos OS Evolved: An attacker causes a routing outage when BGP MVPN signaling is enabled

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• CWE-1284

Junos OS and Junos OS Evolved: A specific IS-IS SRv6 packet causes an rpd crash when flexible algorithm is used

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• CWE-1284

Junos OS and Junos OS Evolved: Malformed RSVP packet causes a rpd crash when RSVP is enabled

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• CWE-1284

Junos OS and Junos OS Evolved: A malformed SRv6 service route causes an rpd crash when dynamic tunnels are enabled

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• CWE-1284

Junos OS and Junos OS Evolved: Malformed OSPF packets cause rpd memory disclosure or service disruption when link-local TE processing is used

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• CWE-1284

Junos OS and Junos OS Evolved: A specific RSVP packet causes an rpd crash when L2 LSP support is used

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• CWE-1284

Junos OS and Junos OS Evolved: Malformed ICCP packets cause l2ald memory disclosure and disruption

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• CWE-1284

Junos OS Evolved: PTX Series: An IS-IS peer causes an rpd crash when BIER over IS-IS is enabled

• Juniper Networks Junos OS Evolved
• CWE-1284

modern-tar 0.3.5 through 0.8.5 Memory Exhaustion via Malformed Octal Size Field

• ayuhito modern-tar
• CWE-1284

WordPress Paid Videochat Turnkey Site plugin <= 7.5.12 - Other vulnerability Type vulnerability

• VideoWhisper.com Paid Videochat Turnkey Site
• CWE-1284

WordPress Flexible Quantity – Measurement Price Calculator for WooCommerce plugin <= 2.3.22 - Other vulnerability Type vulnerability

• WP Desk Flexible Quantity – Measurement Price Calculator for WooCommerce
• CWE-1284

WordPress MicroPayments plugin <= 3.2.9 - Bypass Vulnerability vulnerability

• videowhisper MicroPayments
• CWE-1284

Apache DataSketches: datasketches-cpp: HLL CouponList Deserialization Buffer Overflow allows memory corruption via a crafted sketch

• Apache Software Foundation Apache DataSketches
• Memory corruption
• CWE-1284

Luksmeta: incomplete gap-boundary and overlap checks in luks1 metadata allocator allow data corruption

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• CWE-1284

vLLM: Scale-out disaggregated multimodal transport trusts caller-supplied features

• Denial of service
• Broken access control

<0.30.0 · fixed in 0.30.0

WordPress BuildKit – Product Builder for WooCommerce – Custom PC Builder plugin <= 1.0.28 - Bypass Vulnerability vulnerability

• VillaTheme BuildKit – Product Builder for WooCommerce – Custom PC Builder
• CWE-1284

WordPress Taxi Booking Manager for WooCommerce plugin <= 2.1.1 - Other vulnerability Type vulnerability

• Magepeople inc. Taxi Booking Manager for WooCommerce
• CWE-1284

WordPress Kirki plugin <= 6.3.1 - Arbitrary Code Execution vulnerability

• Themeum Kirki
• CWE-1284

Wasmtime wasi:http implementation panics with a zero timeout supplied

• CWE-1284

>=46.0.0, <48.0.4 || >=49.0.0, <49.0.2 · fixed in 48.0.4, 49.0.2

Apache Thrift: Node.js `server.js` ends the process on any per-connection error (+ two triggers)

• Apache Software Foundation Apache Thrift
• Prototype pollution
• CWE-248

Apache Thrift: Python `TZlibTransport` stops enforcing its decompressed-size limit once the limit is exactly used up

• Apache Software Foundation Apache Thrift
• CWE-409
• CWE-628

Apache Thrift: Node.js `TJSONProtocol` uses a peer-declared container size as an unbounded loop bound

• Apache Software Foundation Apache Thrift
• Denial of service
• CWE-1284

Apache Thrift: PHP `thrift_protocol` accelerator: zero-byte container elements

• Apache Software Foundation Apache Thrift
• Denial of service
• CWE-1284

Out-of-bounds write in PeaZip PEA extractor allows code execution via a crafted .pea archive

• PeaZip
• Memory corruption
• CWE-1284

pgvector buffer overflow in IVFFlat index build

• pgvector
• Memory corruption
• CWE-1284

Kiteworks Core Improper Validation of Specified Quantity in Input

• Kiteworks Core
• CWE-1284

WordPress Creator LMS plugin <= 1.2.19 - Other vulnerability Type vulnerability

• WPFunnels Creator LMS
• CWE-1284

Fireware OS Pre-Authentication Integer Underflow in iked Allows Remote Denial of Service

• WatchGuard Fireware OS
• Memory corruption
• CWE-1284

Out-of-bounds Write via NAND Metadata Parsing at Mount in LevelX

• Eclipse Foundation Eclipse ThreadX NetX Duo
• Memory corruption
• CWE-1284

Out-of-bounds Read and Unverified Entry Pointers in the ThreadX Module Loader

• Eclipse Foundation Eclipse ThreadX
• Memory corruption
• CWE-345