agentprime: CWE-129

CVE-2026-116783: FreeSWITCH mod_spandsp: out-of-bounds write parsing UDPTL error-recovery data

Thu, 05 Nov 2026 19:41:44 GMT

CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-123200: VRPN through 07.36 Out-of-bounds Write via SENDER_DESCRIPTION/TYPE_DESCRIPTION length index

Thu, 05 Nov 2026 18:16:37 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-75615: ASN1SCC: Out-of-bounds read via unvalidated character index in ASN.1 string decoders

Thu, 05 Nov 2026 16:49:20 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-75614: ASN1SCC: Out-of-bounds write in BitStream_DecodeConstraintWholeNumber (uPER/ACN)

Thu, 05 Nov 2026 16:47:56 GMT

CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-66366: Improper array index validation in Samsung Semiconductor Exynos 1280 and others

Thu, 05 Nov 2026 02:38:04 GMT

Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-121968: Netrek-client-cow through 3.3.3 Out-of-Bounds Read via SP_S_MESSAGE Packets

Wed, 04 Nov 2026 20:36:46 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-65165: Improper array index validation in NVIDIA Slurm

Tue, 03 Nov 2026 15:37:29 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-120064: psqlODBC does not validate column numbers and row indexes in binding and descriptor functions

Mon, 02 Nov 2026 19:09:13 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-107457: Memory corruption vulnerability in QMqttClient impacts Qt MQTT

Mon, 02 Nov 2026 08:38:12 GMT

CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-119299: gopacket: SCTP chunk sub-decoder out-of-bounds panics on crafted segments

Fri, 30 Oct 2026 16:23:51 GMT

CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-119278: MariaDB Connector/J: Rogue server can crash the client during caching_sha2_password authentication

Thu, 29 Oct 2026 20:50:35 GMT

CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

vLLM: Out-of-vocabulary prompt token id passes input validation and triggers a CUDA device-side assert (engine crash / DoS)

Wed, 28 Oct 2026 21:15:08 GMT

vllm <0.32.0, fixed in 0.32.0. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Go JOSE: Panic during CBC-HMAC processing

Wed, 28 Oct 2026 21:14:00 GMT

github.com/go-jose/go-jose/v3 <=3.0.5, no fixed version yet. CVSS 6.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-93862: Fireware OS Out-of-Bounds Read in FireCluster Sync Allows Denial of Service

Tue, 27 Oct 2026 15:52:28 GMT

CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-113881: Fireware OS Stack Buffer Overflow in VPN Network Access Enforcement Allows Unprivileged Code Execution

Tue, 27 Oct 2026 15:52:28 GMT

CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

snappy-java: JVM crash from unchecked ranges in Snappy.arrayCopy and SnappyOutputStream.rawWrite

Tue, 27 Oct 2026 15:33:30 GMT

org.xerial.snappy:snappy-java <1.1.10.9, fixed in 1.1.10.9. CVSS 5.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-116816: llama.cpp b5899 before b10261 Heap Out-of-Bounds Write via plamo2 Tokenizer

Tue, 27 Oct 2026 00:33:58 GMT

CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-58400: llama.cpp before b3701 Out-of-Bounds Read in llama_decode via Token IDs

Tue, 27 Oct 2026 00:33:57 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-116731: Furnace through 0.6.8.3 Out-of-Bounds Write via FamiTracker GROOVES Block Import

Mon, 26 Oct 2026 21:52:32 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-82947: Multiple Out-of-Bounds Reads in Frame Processing

Mon, 26 Oct 2026 08:59:09 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-82945: Memory Corruption via FMMU Configuration Table Overflow

Mon, 26 Oct 2026 08:51:32 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-116181: vLLM 0.20.1 before 0.29.0 DoS and GPU Out-of-Bounds Write via stop_token_ids

Sun, 25 Oct 2026 13:20:19 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-115722: RPly through 1.1.4 Out-of-Bounds Function Pointer Index via PLY Header

Fri, 23 Oct 2026 11:36:46 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-89319: JweDirectDecryptorBlock.Decrypt: unchecked _thales_aad length header reachable with forged tag → index-out-of-range / slice-bounds panic and unbounded allocation

Fri, 23 Oct 2026 08:54:37 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-114405: Denial of Service via Malformed VATP Packet in Velneo vServer

Wed, 21 Oct 2026 12:27:00 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-103672: HMS Networks PEAK-System PCAN Windows drivers Improper Validation of Array Index

Tue, 20 Oct 2026 20:23:18 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-92449: Binary resource loader: unbounded map_id from a theme file causes a heap out-of-bounds write in the GUIX-allocated arena

Tue, 20 Oct 2026 14:51:24 GMT

CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-48741: libIEC61850: Remote NULL dereference in MMS Read alternate-access sub-array path leads to server-side DoS

Fri, 16 Oct 2026 15:45:32 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

SFTPGo: Denial of service via malformed SSH channel request

Thu, 15 Oct 2026 20:14:20 GMT

github.com/drakkan/sftpgo/v2 <2.7.5, fixed in 2.7.5. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-110934: Improper array index validation in Samsung Open Source Vyond

Thu, 15 Oct 2026 06:51:21 GMT

CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-92152: F´: Unvalidated Port Index in GenericHub

Wed, 14 Oct 2026 17:08:25 GMT

CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

Out-of-bounds zero-length stream writes can panic

Wed, 14 Oct 2026 12:00:00 GMT

wasmtime >=46.0.0, <48.0.6 || >=49.0.0, <49.0.3, fixed in 48.0.6, 49.0.3. CVSS 5.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-109251: FreeRDP before 3.32.0 Out-of-Bounds Write via MS-RDPEGT Video Geometry

Mon, 12 Oct 2026 16:04:24 GMT

CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-109250: FreeRDP 3.0.0 before 3.32.0 Heap Buffer Overflow via PKCS#11 collect_keys()

Mon, 12 Oct 2026 16:04:23 GMT

CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-103220: Improper array index validation in canva affinity

Fri, 09 Oct 2026 12:47:21 GMT

CVSS 4.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-107737: SumatraPDF CHM `its://` signed index causes an out-of-bounds object lookup

Thu, 08 Oct 2026 22:34:16 GMT

CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-107325: Application denial of service via missing BSON array length validation in MongoDB Go Driver

Thu, 08 Oct 2026 19:01:01 GMT

CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.

Excelize: Unchecked pivot-cache field index in extractPivotTableFields causes unrecoverable panic

Thu, 08 Oct 2026 17:52:17 GMT

github.com/xuri/excelize/v2 >=2.8.1, <2.11.1-0.20261003002531-6258dcebc4e2, fixed in 2.11.1-0.20261003002531-6258dcebc4e2. CVSS 8.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Excelize ColumnNameToNumber: int64 overflow yields an out-of-domain coordinate with nil error, causing negative slice index panic on r="0" rows

Wed, 07 Oct 2026 20:23:31 GMT

github.com/xuri/excelize >=1.1.0, <=1.4.1, no fixed version yet. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Excelize: RIGHT() on supplementary-plane text slices with a negative index and panics

Wed, 07 Oct 2026 20:23:26 GMT

github.com/xuri/excelize/v2 >=2.10.1, <2.11.1-0.20260908032718-ecd99d761fe0, fixed in 2.11.1-0.20260908032718-ecd99d761fe0. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Excelize: Panic in cellInRange on a worksheet with an empty mergeCell ref

Wed, 07 Oct 2026 20:23:17 GMT

github.com/xuri/excelize/v2 >=2.7.1, <2.11.1-0.20260820023833-99903a3240e5, fixed in 2.11.1-0.20260820023833-99903a3240e5. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Excelize: GetConditionalFormats indexes conditional-formatting rule sub-elements with no length or nil check

Wed, 07 Oct 2026 20:22:54 GMT

github.com/xuri/excelize/v2 >=2.7.0, <2.11.1-0.20260812075026-be7a16390fa6, fixed in 2.11.1-0.20260812075026-be7a16390fa6. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Excelize: GetStyle panics on a negative fillId, borderId or fontId in styles.xml

Wed, 07 Oct 2026 20:22:39 GMT

github.com/xuri/excelize/v2 >=2.8.0, <2.11.1-0.20260731010303-ae2113b410e5, fixed in 2.11.1-0.20260731010303-ae2113b410e5. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Vyper: Memory corruption using function calls within tuples / nested calls

Tue, 06 Oct 2026 15:22:29 GMT

vyper <0.2.6, fixed in 0.2.6. CVSS 8.3 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-93321: Malformed LLB file operation can crash buildkitd

Mon, 05 Oct 2026 22:00:54 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-93322: Malformed MergeOp can crash the BuildKit daemon

Mon, 05 Oct 2026 17:53:50 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-20527: Improper array index validation in MediaTek, Inc. MediaTek chipset

Mon, 05 Oct 2026 01:39:57 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

russh: negotiating a MAC-requiring block cipher (CTR/CBC) with mac=none causes a slice-index-out-of-range panic

Wed, 30 Sep 2026 23:27:30 GMT

russh <0.63.1, fixed in 0.63.1. CVSS 3.7 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-47533: Improper array index validation in NVIDIA GeForce and others

Wed, 30 Sep 2026 15:52:46 GMT

CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-47525: Improper array index validation in NVIDIA GeForce and others

Wed, 30 Sep 2026 15:52:41 GMT

CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.