agentprime: CWE-1285

CVE-2026-48175: Processing a malformed RRC message leads to an out-of-bounds read, resulting in a denial-of-service condition.

Thu, 05 Nov 2026 02:43:09 GMT

CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-89410: Out-of-bounds read in Z-Wave NCP SPI Handler

Thu, 22 Oct 2026 13:50:41 GMT

CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-96582: Out-of-bounds Read via Check-after-use in the USBX HID Report Descriptor Parser

Tue, 20 Oct 2026 13:13:39 GMT

CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-111555: Luksmeta: missing slot-range validation permits out-of-gap device i/o

Fri, 16 Oct 2026 12:19:44 GMT

CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-110736: godotengine Godot Engine: Godot Engine through 4.7.2 has an out-of-bounds read in the optimized translation loader…

Wed, 14 Oct 2026 15:53:29 GMT

CVSS 3.6 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-107821: MariaDB: insufficient validation of binary frm data when opening a table

Fri, 09 Oct 2026 17:27:16 GMT

CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-20524: In apu, there is a possible memory corruption due to improper input validation.

Mon, 05 Oct 2026 01:39:52 GMT

CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-31912: OOBR in libpcap before 1.10.7

Sat, 05 Sep 2026 18:49:41 GMT

CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-14479: Denial of Service in Autodesk Installer IPC Channel

Wed, 12 Aug 2026 14:54:58 GMT

CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-18485: Local Privilege Escalation in NI-PAL

Wed, 05 Aug 2026 18:39:36 GMT

CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

ratex-parser panics on `\verb` with a multibyte delimiter (UTF-8 byte-boundary slice)

Tue, 07 Jul 2026 23:39:12 GMT

ratex-parser <0.1.11, fixed in 0.1.11. CVSS 8.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Go-Attestation: Hash injection into trusted measurement list via unskipped SignatureHeaderSize vendor bytes in parseEfiSignatureList()

Fri, 12 Jun 2026 15:04:43 GMT

github.com/google/go-attestation <0.6.1, fixed in 0.6.1. CVSS 8.9 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-8036: Local privilege escalation in NI-PAL

Tue, 02 Jun 2026 17:26:18 GMT

CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-45352: cpp-httplib DoS: Negative chunk-size in chunked Transfer-Encoding

Fri, 29 May 2026 19:14:08 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-9100: Heap memory out of bounds read and crash in C Driver legacy GridFS file reader

Wed, 20 May 2026 15:55:13 GMT

CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

vm2 Sandbox Access to Host Buffer.alloc Allows timeout Bypass Resulting in Memory Exhaustion

Thu, 07 May 2026 04:26:39 GMT

vm2 <3.11.0, fixed in 3.11.0. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Apache Thrift has a Memory Allocation with Excessive Size Value Vulnerability

Tue, 05 May 2026 09:31:55 GMT

thrift <0.23.0, fixed in 0.23.0. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Argo Workflows: Unchecked annotation parsing in pod informer crashes Argo Workflows Controller

Thu, 23 Apr 2026 21:39:21 GMT

github.com/argoproj/argo-workflows/v3 >=3.6.5, <=3.6.19 || >=3.7.0, <3.7.14, fixed in 3.7.14. CVSS 7.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided

Wed, 22 Apr 2026 20:53:24 GMT

uuid <11.1.1 || >=12.0.0, <12.0.1 || >=13.0.0, <13.0.1, fixed in 11.1.1, 12.0.1, 13.0.1. CVSS 8.1 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Apache Kafka does not validate JWT tokens in its OAUTHBEARER authentication implementation

Mon, 20 Apr 2026 15:31:52 GMT

org.apache.kafka:kafka-clients >=4.1.0, <4.1.2, fixed in 4.1.2. CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2018-25232: Softros LAN Messenger 9.2 Denial of Service via Log Files Location

Mon, 30 Mar 2026 11:02:23 GMT

CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

libcrux: Panic in Signature Hint Decoding During Verification

Thu, 26 Mar 2026 17:58:16 GMT

libcrux-ml-dsa <0.0.8, fixed in 0.0.8. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2019-25625: Blob Studio 2.17 Denial of Service via Malformed Input

Mon, 23 Mar 2026 13:48:40 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2019-25622: Paint Studio 2.17 Denial of Service via Malformed Input

Mon, 23 Mar 2026 13:48:38 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2019-25593: jetCast Server 2.0 Denial of Service via Log Directory

Sun, 22 Mar 2026 13:38:31 GMT

CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Denial of service in github.com/jackc/pgproto3/v2

Wed, 18 Mar 2026 13:00:31 GMT

github.com/jackc/pgproto3/v2 >=2.0.0, <=2.3.3, no fixed version yet. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

github.com/buger/jsonparser has a denial of service vulnerability

Wed, 18 Mar 2026 13:00:19 GMT

github.com/buger/jsonparser <1.1.2, fixed in 1.1.2. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2025-2399: Denial of Service (DoS) Vulnerability in Mitsubishi Electric CNC Series

Tue, 10 Mar 2026 04:40:00 GMT

CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-20440: In MAE, there is a possible out of bounds write due to a missing bounds check.

Mon, 02 Mar 2026 08:39:21 GMT

CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code

Thu, 12 Feb 2026 13:00:10 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-20413: In imgsys, there is a possible out of bounds write due to a missing bounds check.

Mon, 02 Feb 2026 08:15:07 GMT

CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-20796: In imgsys, there is a possible out of bounds write due to improper input validation.

Tue, 06 Jan 2026 01:46:40 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-67268: gpsd before commit dc966aa contains a heap-based out-of-bounds write vulnerability in the drivers/driver_nmea2000.c file.

Fri, 02 Jan 2026 00:00:00 GMT

CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-48511: Improper input validation within AMD uprof can allow a local attacker to write to an arbitrary physical address, potentially resulting in crash or denial of service.

Mon, 24 Nov 2025 21:00:32 GMT

CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-48502: Improper input validation within AMD uprof can allow a local attacker to overwrite MSR registers, potentially resulting in crash or denial of service.

Fri, 21 Nov 2025 19:07:34 GMT

CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-55086: Out-of-bounds read in Eclipse Foundation NextX Duo

Mon, 20 Oct 2025 17:49:29 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-55087: Out-of-bounds read in Eclipse Foundation NextX Duo

Fri, 17 Oct 2025 06:03:14 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-8291: ZIP64 End of Central Directory (EOCD) Locator record offset not checked

Tue, 07 Oct 2025 18:10:05 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-36342: Improper input validation in the GPU driver could allow an attacker to exploit a heap overflow potentially resulting in arbitrary code execution.

Sat, 06 Sep 2025 17:42:00 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-57777: Out Of Bounds Write in displ2.dll when parsing a DSB file with Digilent DASYLab

Tue, 02 Sep 2025 18:22:00 GMT

CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-57775: Heap-based Buffer Overflow when parsing a DSB file with Digilent DASYLab

Tue, 02 Sep 2025 18:21:16 GMT

CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-57778: Out Of Bounds Write to invalid source address when parsing a DSB file with Digilent DASYLab

Tue, 02 Sep 2025 18:16:54 GMT

CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-57776: Out Of Bounds Write to invalid address when parsing a DSB file with Digilent DASYLab

Tue, 02 Sep 2025 18:16:01 GMT

CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-57774: Out Of Bounds Write of invalid data when parsing a DSB file with Digilent DASYLab

Tue, 02 Sep 2025 18:15:10 GMT

CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-9189: Out Of Bounds Write when parsing a DSB file with Digilent DASYLab

Tue, 02 Sep 2025 18:12:43 GMT

CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-7849: Memory Corruption Issue in NI LabVIEW due to improper error handling

Tue, 29 Jul 2025 21:27:20 GMT

CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-7848: Missing input check in lvpict.cpp used in NI LabVIEW

Tue, 29 Jul 2025 21:24:32 GMT

CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-2634: Out of Bounds Read Vulnerability in NI LabVIEW when building font map

Wed, 23 Jul 2025 15:53:25 GMT

CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-2633: Out of Bounds Read Vulnerability in NI LabVIEW when loading fonts

Wed, 23 Jul 2025 15:49:06 GMT

CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-3755: Information Disclosure and Denial-of-Service(DoS) Vulnerability in MELSEC iQ-F Series CPU module

Thu, 29 May 2025 04:47:52 GMT

CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.