# CWE-1285.

Every Advisory and CVE whose sources give the weakness CWE-1285, newest first.

## Records, newest first

- [Processing a malformed RRC message leads to an out-of-bounds read, resulting in a denial-of-service condition.](https://agentprime.io/advisories/CVE-2026-48175.md)
  `CVE-2026-48175` · CVE record: Samsung Semiconductor Exynos 1280 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 5 Nov 2026 · Tags: CWE-1285
- [Out-of-bounds read in Z-Wave NCP SPI Handler](https://agentprime.io/advisories/CVE-2026-89410.md)
  `CVE-2026-89410` · CVE record: Silicon Labs Z-Wave SDK · CVSS 5.1 Medium · Not analysed yet · Published 22 Oct 2026 · Tags: CWE-1285
- [Out-of-bounds Read via Check-after-use in the USBX HID Report Descriptor Parser](https://agentprime.io/advisories/CVE-2026-96582.md)
  `CVE-2026-96582` · CVE record: Eclipse Foundation Eclipse ThreadX - USBX · CVSS 4.9 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Memory corruption, CWE-1285
- [Luksmeta: missing slot-range validation permits out-of-gap device i/o](https://agentprime.io/advisories/CVE-2026-111555.md)
  `CVE-2026-111555` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.0 Medium · Not analysed yet · Published 16 Oct 2026 · Tags: CWE-1285
- [godotengine Godot Engine: Godot Engine through 4.7.2 has an out-of-bounds read in the optimized translation loader…](https://agentprime.io/advisories/CVE-2026-110736.md)
  `CVE-2026-110736` · CVE record: godotengine Godot Engine · CVSS 3.6 Low · Not analysed yet · Published 14 Oct 2026 · Tags: CWE-1285
- [MariaDB: insufficient validation of binary frm data when opening a table](https://agentprime.io/advisories/CVE-2026-107821.md)
  `CVE-2026-107821` · CVE record: MariaDB server · CVSS 8.0 High · Not analysed yet · Published 9 Oct 2026 · Tags: CWE-1285
- [In apu, there is a possible memory corruption due to improper input validation.](https://agentprime.io/advisories/CVE-2026-20524.md)
  `CVE-2026-20524` · CVE record: MediaTek, Inc. MediaTek chipset · CVSS 8.4 High · Not analysed yet · Published 5 Oct 2026 · Tags: CWE-1285
- [OOBR in libpcap before 1.10.7](https://agentprime.io/advisories/CVE-2026-31912.md)
  `CVE-2026-31912` · CVE record: The Tcpdump Group libpcap · CVSS 5.5 Medium · Not analysed yet · Published 5 Sept 2026 · Tags: Memory corruption, CWE-823, CWE-1285
- [Denial of Service in Autodesk Installer IPC Channel](https://agentprime.io/advisories/CVE-2026-14479.md)
  `CVE-2026-14479` · CVE record: Autodesk Installer · CVSS 5.5 Medium · Not analysed yet · Published 12 Aug 2026 · Tags: CWE-1285
- [Local Privilege Escalation in NI-PAL](https://agentprime.io/advisories/CVE-2026-18485.md)
  `CVE-2026-18485` · CVE record: NI NI-PAL · CVSS 8.5 High · Not analysed yet · Published 5 Aug 2026 · Tags: CWE-1285
- [ratex-parser panics on \`\verb\` with a multibyte delimiter (UTF-8 byte-boundary slice)](https://agentprime.io/advisories/GHSA-4hgp-59h5-gvrj.md)
  `GHSA-4hgp-59h5-gvrj`, `CVE-2026-53530` · crates.io `ratex-parser`: affected `<0.1.11`, fixed in `0.1.11` · CVSS 8.7 High · Not analysed yet · Published 7 Jul 2026 · Tags: Denial of service, CWE-248, CWE-1285
- [Go-Attestation: Hash injection into trusted measurement list via unskipped SignatureHeaderSize vendor bytes in parseEfiSignatureList()](https://agentprime.io/advisories/GHSA-9r4w-jg96-92mv.md)
  `GHSA-9r4w-jg96-92mv`, `CVE-2026-12681`, `GO-2026-5298` · Go `github.com/google/go-attestation`: affected `<0.6.1`, fixed in `0.6.1` · CVSS 8.9 High · Not analysed yet · Published 12 Jun 2026 · Tags: CWE-20, CWE-1285
- [Local privilege escalation in NI-PAL](https://agentprime.io/advisories/CVE-2026-8036.md)
  `CVE-2026-8036` · CVE record: NI NI-PAL · CVSS 8.4 High · Not analysed yet · Published 2 Jun 2026 · Tags: CWE-1285
- [cpp-httplib DoS: Negative chunk-size in chunked Transfer-Encoding](https://agentprime.io/advisories/CVE-2026-45352.md)
  `CVE-2026-45352` · CVE record: yhirose cpp-httplib · CVSS 5.3 Medium · Not analysed yet · Published 29 May 2026 · Tags: Denial of service, CWE-20, CWE-1285
- [Heap memory out of bounds read and crash in C Driver legacy GridFS file reader](https://agentprime.io/advisories/CVE-2026-9100.md)
  `CVE-2026-9100` · CVE record: MongoDB, Inc. C Driver · CVSS 6.0 Medium · Not analysed yet · Published 20 May 2026 · Tags: CWE-1285
- [vm2 Sandbox Access to Host Buffer.alloc Allows timeout Bypass Resulting in Memory Exhaustion](https://agentprime.io/advisories/GHSA-6785-pvv7-mvg7.md)
  `GHSA-6785-pvv7-mvg7`, `CVE-2026-44004` · npm `vm2`: affected `<3.11.0`, fixed in `3.11.0` · CVSS 7.5 High · Not analysed yet · Published 7 May 2026 · Tags: Denial of service, CWE-1285
- [Apache Thrift has a Memory Allocation with Excessive Size Value Vulnerability](https://agentprime.io/advisories/GHSA-2f9f-gq7v-9h6m.md)
  `GHSA-2f9f-gq7v-9h6m`, `BIT-thrift-2026-43868`, `CVE-2026-43868`, `RUSTSEC-2026-0435` · crates.io `thrift`: affected `<0.23.0`, fixed in `0.23.0` · CVSS 5.3 Medium · Not analysed yet · Published 5 May 2026 · Tags: Denial of service, CWE-1285
- [Argo Workflows: Unchecked annotation parsing in pod informer crashes Argo Workflows Controller](https://agentprime.io/advisories/GHSA-5jv8-h7qh-rf5p.md)
  `GHSA-5jv8-h7qh-rf5p`, `BIT-argo-workflows-2026-40886`, `CVE-2026-40886`, `GO-2026-5148` · Go `github.com/argoproj/argo-workflows/v3` and 1 more: affected `>=3.6.5, <=3.6.19 || >=3.7.0, <3.7.14`, fixed in `3.7.14` · CVSS 7.7 High · Not analysed yet · Published 23 Apr 2026 · Tags: CWE-129, CWE-1285
- [uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided](https://agentprime.io/advisories/GHSA-w5hq-g745-h8pq.md)
  `GHSA-w5hq-g745-h8pq`, `CVE-2026-41907`, `CVE-2026-41988` · npm `uuid`: affected `<11.1.1 || >=12.0.0, <12.0.1 || >=13.0.0, <13.0.1`, fixed in `11.1.1`, `12.0.1`, `13.0.1` · CVSS 8.1 High · Not analysed yet · Published 22 Apr 2026 · Tags: Memory corruption, CWE-670, CWE-823, CWE-1285
- [Apache Kafka does not validate JWT tokens in its OAUTHBEARER authentication implementation](https://agentprime.io/advisories/GHSA-28jg-cgg7-j4wc.md)
  `GHSA-28jg-cgg7-j4wc`, `BIT-kafka-2026-33557`, `CVE-2026-33557` · Maven `org.apache.kafka:kafka-clients`: affected `>=4.1.0, <4.1.2`, fixed in `4.1.2` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Apr 2026 · Tags: Authentication bypass, CWE-1285
- [Softros LAN Messenger 9.2 Denial of Service via Log Files Location](https://agentprime.io/advisories/CVE-2018-25232.md)
  `CVE-2018-25232` · CVE record: Messenger Softros LAN Messenger · CVSS 6.8 Medium · Not analysed yet · Published 30 Mar 2026 · Tags: CWE-1285
- [libcrux: Panic in Signature Hint Decoding During Verification](https://agentprime.io/advisories/GHSA-xrf2-5r3p-5wgj.md)
  `GHSA-xrf2-5r3p-5wgj`, `RUSTSEC-2026-0076` · crates.io `libcrux-ml-dsa`: affected `<0.0.8`, fixed in `0.0.8` · CVSS 4.0, no score published · Not analysed yet · Published 26 Mar 2026 · Tags: Memory corruption, CWE-1285
- [Blob Studio 2.17 Denial of Service via Malformed Input](https://agentprime.io/advisories/CVE-2019-25625.md)
  `CVE-2019-25625` · CVE record: Pixarra Blob Studio · CVSS 6.9 Medium · Not analysed yet · Published 23 Mar 2026 · Tags: CWE-1285
- [Paint Studio 2.17 Denial of Service via Malformed Input](https://agentprime.io/advisories/CVE-2019-25622.md)
  `CVE-2019-25622` · CVE record: Pixarra Paint Studio · CVSS 6.9 Medium · Not analysed yet · Published 23 Mar 2026 · Tags: CWE-1285
- [jetCast Server 2.0 Denial of Service via Log Directory](https://agentprime.io/advisories/CVE-2019-25593.md)
  `CVE-2019-25593` · CVE record: Jetaudio jetCast Server · CVSS 6.8 Medium · Not analysed yet · Published 22 Mar 2026 · Tags: CWE-1285
- [Denial of service in github.com/jackc/pgproto3/v2](https://agentprime.io/advisories/GHSA-jqcq-xjh3-6g23.md)
  `GHSA-jqcq-xjh3-6g23`, `CVE-2026-32286`, `GO-2026-4518` · Go `github.com/jackc/pgproto3/v2`: affected `>=2.0.0, <=2.3.3`, no fixed version yet · CVSS 7.5 High · Not analysed yet · Published 18 Mar 2026 · Tags: CWE-129, CWE-1285
- [github.com/buger/jsonparser has a denial of service vulnerability](https://agentprime.io/advisories/GHSA-6g7g-w4f8-9c9x.md)
  `GHSA-6g7g-w4f8-9c9x`, `CVE-2026-32285`, `GO-2026-4514` · Go `github.com/buger/jsonparser`: affected `<1.1.2`, fixed in `1.1.2` · CVSS 7.5 High · Not analysed yet · Published 18 Mar 2026 · Tags: Memory corruption, CWE-129, CWE-1285
- [Denial of Service (DoS) Vulnerability in Mitsubishi Electric CNC Series](https://agentprime.io/advisories/CVE-2025-2399.md)
  `CVE-2025-2399` · CVE record: Mitsubishi Electric Corporation Mitsubishi Electric CNC M800V Series M800VW and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 10 Mar 2026 · Tags: CWE-1285
- [In MAE, there is a possible out of bounds write due to a missing bounds check.](https://agentprime.io/advisories/CVE-2026-20440.md)
  `CVE-2026-20440` · CVE record: MediaTek, Inc. MediaTek chipset · CVSS 6.7 Medium · Not analysed yet · Published 2 Mar 2026 · Tags: CWE-1285
- [PostgreSQL missing validation of multibyte character length executes arbitrary code](https://agentprime.io/advisories/CVE-2026-2006.md)
  `CVE-2026-2006` · CVE record: PostgreSQL · CVSS 8.8 High · Not analysed yet · Published 12 Feb 2026 · Tags: CWE-129, CWE-1285
- [In imgsys, there is a possible out of bounds write due to a missing bounds check.](https://agentprime.io/advisories/CVE-2026-20413.md)
  `CVE-2026-20413` · CVE record: MediaTek, Inc. MediaTek chipset · CVSS 6.7 Medium · Not analysed yet · Published 2 Feb 2026 · Tags: CWE-1285
- [In imgsys, there is a possible out of bounds write due to improper input validation.](https://agentprime.io/advisories/CVE-2025-20796.md)
  `CVE-2025-20796` · CVE record: MediaTek, Inc. MediaTek chipset · CVSS 7.8 High · Not analysed yet · Published 6 Jan 2026 · Tags: CWE-1285
- [gpsd before commit dc966aa contains a heap-based out-of-bounds write vulnerability in the drivers/driver_nmea2000.c file.](https://agentprime.io/advisories/CVE-2025-67268.md)
  `CVE-2025-67268` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Jan 2026 · Tags: Memory corruption, CWE-1285
- [Improper input validation within AMD uprof can allow a local attacker to write to an arbitrary physical address, potentially resulting in crash or denial of service.](https://agentprime.io/advisories/CVE-2025-48511.md)
  `CVE-2025-48511` · CVE record: AMD AMD μProf · CVSS 5.5 Medium · Not analysed yet · Published 24 Nov 2025 · Tags: CWE-1285
- [Improper input validation within AMD uprof can allow a local attacker to overwrite MSR registers, potentially resulting in crash or denial of service.](https://agentprime.io/advisories/CVE-2025-48502.md)
  `CVE-2025-48502` · CVE record: AMD AMD μProf · CVSS 5.5 Medium · Not analysed yet · Published 21 Nov 2025 · Tags: CWE-1285
- [Out-of-bounds read in Eclipse Foundation NextX Duo](https://agentprime.io/advisories/CVE-2025-55086.md)
  `CVE-2025-55086` · CVE record: Eclipse Foundation NextX Duo · CVSS 6.3 Medium · Not analysed yet · Published 20 Oct 2025 · Tags: Memory corruption, CWE-1285
- [Out-of-bounds read in Eclipse Foundation NextX Duo](https://agentprime.io/advisories/CVE-2025-55087.md)
  `CVE-2025-55087` · CVE record: Eclipse Foundation NextX Duo · CVSS 6.3 Medium · Not analysed yet · Published 17 Oct 2025 · Tags: Memory corruption, CWE-1285
- [ZIP64 End of Central Directory (EOCD) Locator record offset not checked](https://agentprime.io/advisories/CVE-2025-8291.md)
  `CVE-2025-8291` · CVE record: Python Software Foundation CPython · CVSS 4.3 Medium · Not analysed yet · Published 7 Oct 2025 · Tags: CWE-1285
- [Improper input validation in the GPU driver could allow an attacker to exploit a heap overflow potentially resulting in arbitrary code execution.](https://agentprime.io/advisories/CVE-2024-36342.md)
  `CVE-2024-36342` · CVE record: AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics and 4 more · CVSS 8.8 High · Not analysed yet · Published 6 Sept 2025 · Tags: CWE-1285
- [Out Of Bounds Write in displ2.dll when parsing a DSB file with Digilent DASYLab](https://agentprime.io/advisories/CVE-2025-57777.md)
  `CVE-2025-57777` · CVE record: Digilent DASYLab · CVSS 8.5 High · Not analysed yet · Published 2 Sept 2025 · Tags: CWE-1285
- [Heap-based Buffer Overflow when parsing a DSB file with Digilent DASYLab](https://agentprime.io/advisories/CVE-2025-57775.md)
  `CVE-2025-57775` · CVE record: Digilent DASYLab · CVSS 8.5 High · Not analysed yet · Published 2 Sept 2025 · Tags: CWE-1285
- [Out Of Bounds Write to invalid source address when parsing a DSB file with Digilent DASYLab](https://agentprime.io/advisories/CVE-2025-57778.md)
  `CVE-2025-57778` · CVE record: Digilent DASYLab · CVSS 8.5 High · Not analysed yet · Published 2 Sept 2025 · Tags: CWE-1285
- [Out Of Bounds Write to invalid address when parsing a DSB file with Digilent DASYLab](https://agentprime.io/advisories/CVE-2025-57776.md)
  `CVE-2025-57776` · CVE record: Digilent DASYLab · CVSS 8.5 High · Not analysed yet · Published 2 Sept 2025 · Tags: CWE-1285
- [Out Of Bounds Write of invalid data when parsing a DSB file with Digilent DASYLab](https://agentprime.io/advisories/CVE-2025-57774.md)
  `CVE-2025-57774` · CVE record: Digilent DASYLab · CVSS 8.5 High · Not analysed yet · Published 2 Sept 2025 · Tags: CWE-1285
- [Out Of Bounds Write when parsing a DSB file with Digilent DASYLab](https://agentprime.io/advisories/CVE-2025-9189.md)
  `CVE-2025-9189` · CVE record: Digilent DASYLab and 1 more · CVSS 8.5 High · Not analysed yet · Published 2 Sept 2025 · Tags: CWE-1285
- [Memory Corruption Issue in NI LabVIEW due to improper error handling](https://agentprime.io/advisories/CVE-2025-7849.md)
  `CVE-2025-7849` · CVE record: NI LabVIEW · CVSS 8.5 High · Not analysed yet · Published 29 Jul 2025 · Tags: CWE-1285
- [Missing input check in lvpict.cpp used in NI LabVIEW](https://agentprime.io/advisories/CVE-2025-7848.md)
  `CVE-2025-7848` · CVE record: NI LabVIEW · CVSS 8.5 High · Not analysed yet · Published 29 Jul 2025 · Tags: CWE-1285
- [Out of Bounds Read Vulnerability in NI LabVIEW when building font map](https://agentprime.io/advisories/CVE-2025-2634.md)
  `CVE-2025-2634` · CVE record: NI LabVIEW · CVSS 7.3 High · Not analysed yet · Published 23 Jul 2025 · Tags: CWE-1285
- [Out of Bounds Read Vulnerability in NI LabVIEW when loading fonts](https://agentprime.io/advisories/CVE-2025-2633.md)
  `CVE-2025-2633` · CVE record: NI LabVIEW · CVSS 7.3 High · Not analysed yet · Published 23 Jul 2025 · Tags: CWE-1285
- [Information Disclosure and Denial-of-Service(DoS) Vulnerability in MELSEC iQ-F Series CPU module](https://agentprime.io/advisories/CVE-2025-3755.md)
  `CVE-2025-3755` · CVE record: Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-32MT/ES and 4 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 May 2025 · Tags: CWE-1285
- [IBM Tivoli Monitoring code execution](https://agentprime.io/advisories/CVE-2025-3357.md)
  `CVE-2025-3357` · CVE record: IBM Tivoli Monitoring · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 May 2025 · Tags: CWE-1285
- [Formwork improperly validates input of User role preventing site and panel availability](https://agentprime.io/advisories/GHSA-c85w-x26q-ch87.md)
  `GHSA-c85w-x26q-ch87`, `PKSA-f12j-yzp4-332f` · Packagist `getformwork/formwork`: affected `>=2.0.0-beta.1, <2.0.0-beta.4`, fixed in `2.0.0-beta.4` · CVSS 8.2 High · Not analysed yet · Published 1 Mar 2025 · Tags: CWE-248, CWE-1285
- [Out of bounds read in BuildFontMap in fontmgr.cpp in NI LabVIEW](https://agentprime.io/advisories/CVE-2024-10496.md)
  `CVE-2024-10496` · CVE record: NI LabVIEW · CVSS 8.4 High · Not analysed yet · Published 10 Dec 2024 · Tags: CWE-1285
- [Out of bounds read when loading the font table in fontmgr.cpp in NI LabVIEW](https://agentprime.io/advisories/CVE-2024-10495.md)
  `CVE-2024-10495` · CVE record: NI LabVIEW · CVSS 8.4 High · Not analysed yet · Published 10 Dec 2024 · Tags: CWE-1285
- [Out of bounds read in HeapObjMapImpl.cpp in NI LabVIEW](https://agentprime.io/advisories/CVE-2024-10494.md)
  `CVE-2024-10494` · CVE record: NI LabVIEW · CVSS 8.4 High · Not analysed yet · Published 10 Dec 2024 · Tags: CWE-1285
- [bhyve(8) NVMe driver to guest-induced infinite loops.](https://agentprime.io/advisories/CVE-2024-51566.md)
  `CVE-2024-51566` · CVE record: FreeBSD FreeBSD · CVSS 6.5 Medium · Not analysed yet · Published 12 Nov 2024 · Tags: CWE-1285
- [bhyve(8) infinite loop in the hda audio driver](https://agentprime.io/advisories/CVE-2024-51564.md)
  `CVE-2024-51564` · CVE record: FreeBSD FreeBSD · CVSS 7.5 High · Not analysed yet · Published 12 Nov 2024 · Tags: CWE-1285
- [NVIDIA CUDA Toolkit: NVIDIA CUDA toolkit for Windows and Linux contains a vulnerability in the nvdisasm…](https://agentprime.io/advisories/CVE-2024-0123.md)
  `CVE-2024-0123` · CVE record: NVIDIA CUDA Toolkit · CVSS 3.3 Low · Not analysed yet · Published 3 Oct 2024 · Tags: CWE-1285
- [bhyve(8) privileged guest escape via TPM device passthrough](https://agentprime.io/advisories/CVE-2024-41928.md)
  `CVE-2024-41928` · CVE record: FreeBSD FreeBSD · CVSS 8.4 High · Not analysed yet · Published 5 Sept 2024 · Tags: Memory corruption, CWE-1285
- [Improper Error Handling Issue in LabVIEW](https://agentprime.io/advisories/CVE-2024-23612.md)
  `CVE-2024-23612` · CVE record: NI LabVIEW · CVSS 7.8 High · Not analysed yet · Published 11 Mar 2024 · Tags: CWE-1285

Older: <https://agentprime.io/advisories/tag/cwe-1285.md?cursor=WyIyMDI0LTAzLTExVDE1OjE5OjM0Ljc4ODAwMFoiLCJDVkUtMjAyNC0yMzYxMiJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-1285>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-1285/>. Everything for agents: <https://agentprime.io/llms.txt>.