# CWE-189.

Every Advisory and CVE whose sources give the weakness CWE-189, newest first.

## Records, newest first

- [Netcore NBR100V2 auto_ac msg_aes_dec integer overflow](https://agentprime.io/advisories/CVE-2026-121382.md)
  `CVE-2026-121382` · CVE record: Netcore NBR100V2 · CVSS 8.7 High · Not analysed yet · Published 3 Nov 2026 · Tags: Memory corruption, CWE-189
- [MikroTik RouterOS ipt_SAME.ko same_check integer overflow](https://agentprime.io/advisories/CVE-2026-112158.md)
  `CVE-2026-112158` · CVE record: MikroTik RouterOS · CVSS 7.1 High · Not analysed yet · Published 19 Oct 2026 · Tags: Memory corruption, CWE-189
- [Tencent ncnn Conversion API mat_pixel.cpp yuv420sp2rgb integer overflow](https://agentprime.io/advisories/CVE-2026-112074.md)
  `CVE-2026-112074` · CVE record: Tencent ncnn · CVSS 5.3 Medium · Not analysed yet · Published 19 Oct 2026 · Tags: Memory corruption, CWE-189
- [Blosc C-Blosc2 blosclz Decompression blosclz.c blosclz_decompress integer overflow](https://agentprime.io/advisories/CVE-2026-103222.md)
  `CVE-2026-103222` · CVE record: Blosc C-Blosc2 · CVSS 6.3 Medium · Not analysed yet · Published 30 Sept 2026 · Tags: Memory corruption, CWE-189
- [Nothings stb Image Encoding stb_image_write.h stbi_write_tga_core integer overflow](https://agentprime.io/advisories/CVE-2026-102805.md)
  `CVE-2026-102805` · CVE record: Nothings stb · CVSS 6.9 Medium · Not analysed yet · Published 30 Sept 2026 · Tags: Memory corruption, CWE-189
- [Nothings stb stb_hexwave.h hexwave_init integer overflow](https://agentprime.io/advisories/CVE-2026-102804.md)
  `CVE-2026-102804` · CVE record: Nothings stb · CVSS 6.9 Medium · Not analysed yet · Published 30 Sept 2026 · Tags: Memory corruption, CWE-189
- [Freedesktop Poppler SplashClip.cc clipToPath integer overflow](https://agentprime.io/advisories/CVE-2026-102621.md)
  `CVE-2026-102621` · CVE record: Freedesktop Poppler · CVSS 4.8 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: Memory corruption, CWE-189
- [Freedesktop Poppler FoFiTrueType.cc cvtSfnts integer overflow](https://agentprime.io/advisories/CVE-2026-102620.md)
  `CVE-2026-102620` · CVE record: Freedesktop Poppler · CVSS 4.8 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: Memory corruption, CWE-189
- [Trusted Domain Project OpenDMARC opendmarc_policy.c integer overflow](https://agentprime.io/advisories/CVE-2026-101279.md)
  `CVE-2026-101279` · CVE record: Trusted Domain Project OpenDMARC · CVSS 6.9 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: Memory corruption, CWE-189
- [Trusted Domain Project OpenDMARC DMARC Record opendmarc_util.c opendmarc_util_cleanup off-by-one](https://agentprime.io/advisories/CVE-2026-101014.md)
  `CVE-2026-101014` · CVE record: Trusted Domain Project OpenDMARC · CVSS 6.9 Medium · Not analysed yet · Published 28 Sept 2026 · Tags: CWE-189, CWE-193
- [Trusted Domain Project OpenDKIM Decoder util.c dkim_qp_decode off-by-one](https://agentprime.io/advisories/CVE-2026-100889.md)
  `CVE-2026-100889` · CVE record: Trusted Domain Project OpenDKIM · CVSS 6.9 Medium · Not analysed yet · Published 27 Sept 2026 · Tags: CWE-189, CWE-193
- [JusticeRage Manalyze PE Parser pe.cpp \_parse_relocations integer underflow](https://agentprime.io/advisories/CVE-2026-95958.md)
  `CVE-2026-95958` · CVE record: JusticeRage Manalyze · CVSS 4.8 Medium · Not analysed yet · Published 23 Sept 2026 · Tags: Memory corruption, CWE-189
- [JusticeRage Manalyze PE Parser pe.cpp \_parse_debug integer underflow](https://agentprime.io/advisories/CVE-2026-94090.md)
  `CVE-2026-94090` · CVE record: JusticeRage Manalyze · CVSS 5.3 Medium · Not analysed yet · Published 20 Sept 2026 · Tags: Memory corruption, CWE-189
- [SerenityOS LibGfx BMPLoader.cpp decode_bmp_pixel_data integer overflow](https://agentprime.io/advisories/CVE-2026-94030.md)
  `CVE-2026-94030` · CVE record: SerenityOS · CVSS 2.3 Low · Not analysed yet · Published 20 Sept 2026 · Tags: Memory corruption, CWE-189
- [Freedesktop Poppler FoFiTrueType.cc mapCodeToGID integer overflow](https://agentprime.io/advisories/CVE-2026-93314.md)
  `CVE-2026-93314` · CVE record: Freedesktop Poppler · CVSS 5.3 Medium · Not analysed yet · Published 18 Sept 2026 · Tags: Memory corruption, CWE-189
- [Freedesktop Poppler JBIG2Stream.cc readCodeTableSeg integer overflow](https://agentprime.io/advisories/CVE-2026-93313.md)
  `CVE-2026-93313` · CVE record: Freedesktop Poppler · CVSS 5.3 Medium · Not analysed yet · Published 18 Sept 2026 · Tags: Memory corruption, CWE-189
- [Freedesktop Poppler SampledFunction Function.cc integer overflow](https://agentprime.io/advisories/CVE-2026-93311.md)
  `CVE-2026-93311` · CVE record: Freedesktop Poppler · CVSS 5.3 Medium · Not analysed yet · Published 18 Sept 2026 · Tags: Memory corruption, CWE-189
- [marcobambini Gravity udp json-parser gravity_json.c integer overflow](https://agentprime.io/advisories/CVE-2026-90715.md)
  `CVE-2026-90715` · CVE record: marcobambini Gravity · CVSS 6.9 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: Memory corruption, CWE-189
- [embedded-graphics image_raw.rs new/bytes_per_row integer overflow](https://agentprime.io/advisories/CVE-2026-90596.md)
  `CVE-2026-90596` · CVE record: embedded-graphics · CVSS 6.9 Medium · Not analysed yet · Published 13 Sept 2026 · Tags: Memory corruption, CWE-189
- [embedded-graphics image_raw.rs draw_sub_image integer overflow](https://agentprime.io/advisories/CVE-2026-90593.md)
  `CVE-2026-90593` · CVE record: embedded-graphics · CVSS 6.9 Medium · Not analysed yet · Published 13 Sept 2026 · Tags: Memory corruption, CWE-189
- [D-Link DIR-605 L2TP Control Message tunnel.c tunnel_set_params off-by-one](https://agentprime.io/advisories/CVE-2026-86297.md)
  `CVE-2026-86297` · CVE record: D-Link DIR-605 · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 Sept 2026 · Tags: CWE-189, CWE-193
- [Ollama GGUF Decoder gguf.go readGGUFV1String integer overflow](https://agentprime.io/advisories/CVE-2026-86289.md)
  `CVE-2026-86289` · CVE record: Ollama · CVSS 5.3 Medium · Not analysed yet · Published 7 Sept 2026 · Tags: Memory corruption, CWE-189
- [MSI Dragon Center MMIO Write Path NTIOLib_X64.sys MmioWritePath integer overflow](https://agentprime.io/advisories/CVE-2026-82908.md)
  `CVE-2026-82908` · CVE record: MSI Dragon Center · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Memory corruption, CWE-189
- [NASA cFS cFE Software Bus cfe_sb_util.c CFE_SB_GetUserDataLength integer underflow](https://agentprime.io/advisories/CVE-2026-82480.md)
  `CVE-2026-82480` · CVE record: NASA cFS · CVSS 5.3 Medium · Not analysed yet · Published 30 Aug 2026 · Tags: Memory corruption, CWE-189
- [radareorg radare2 pb Print cmd_print.inc cmd_print integer overflow](https://agentprime.io/advisories/CVE-2026-14787.md)
  `CVE-2026-14787` · CVE record: radareorg radare2 · CVSS 4.8 Medium · Not analysed yet · Published 6 Jul 2026 · Tags: Memory corruption, CWE-189
- [radareorg radare2 str.c r_str_word_get0set integer overflow](https://agentprime.io/advisories/CVE-2026-14786.md)
  `CVE-2026-14786` · CVE record: radareorg radare2 · CVSS 4.8 Medium · Not analysed yet · Published 6 Jul 2026 · Tags: Memory corruption, CWE-189
- [radareorg radare2 str.c r_str_append integer overflow](https://agentprime.io/advisories/CVE-2026-14761.md)
  `CVE-2026-14761` · CVE record: radareorg radare2 · CVSS 4.8 Medium · Not analysed yet · Published 5 Jul 2026 · Tags: Memory corruption, CWE-189
- [radareorg radare2 hexpairs cmd_anal.inc.c cmd_anal_opcode integer overflow](https://agentprime.io/advisories/CVE-2026-14758.md)
  `CVE-2026-14758` · CVE record: radareorg radare2 · CVSS 4.8 Medium · Not analysed yet · Published 5 Jul 2026 · Tags: Memory corruption, CWE-189
- [radareorg radare2 cmd_anal.inc core_anal_bytes integer overflow](https://agentprime.io/advisories/CVE-2026-14757.md)
  `CVE-2026-14757` · CVE record: radareorg radare2 · CVSS 4.8 Medium · Not analysed yet · Published 5 Jul 2026 · Tags: Memory corruption, CWE-189
- [ebpf-go is vulnerable to integer overflow via LoadCollectionSpecFromReader](https://agentprime.io/advisories/GHSA-xhgw-qwwf-pg32.md)
  `GHSA-xhgw-qwwf-pg32`, `CVE-2026-10722`, `GO-2026-6238` · Go `github.com/cilium/ebpf`: affected `<0.22.0`, fixed in `0.22.0` · CVSS 4.8 Medium · Not analysed yet · Published 3 Jun 2026 · Tags: Memory corruption, CWE-189
- [janet-lang janet marsh.c unmarshal_one_fiber integer overflow](https://agentprime.io/advisories/CVE-2026-10268.md)
  `CVE-2026-10268` · CVE record: janet-lang janet · CVSS 4.8 Medium · Not analysed yet · Published 1 Jun 2026 · Tags: Memory corruption, CWE-189
- [bettercap Has an Integer Coercion Error in modules/mysql_server/mysql_server.go](https://agentprime.io/advisories/GHSA-jcqv-2g3v-gm88.md)
  `GHSA-jcqv-2g3v-gm88`, `CVE-2026-8276`, `GO-2026-5463` · Go `github.com/bettercap/bettercap/v2`: affected `<2.41.7`, fixed in `2.41.7` · CVSS 6.3 Medium · Not analysed yet · Published 11 May 2026 · Tags: CWE-189, CWE-192
- [bettercap Has an Integer Coercion Error in the ippReadChunkedBody Function](https://agentprime.io/advisories/GHSA-322p-rrj6-j44g.md)
  `GHSA-322p-rrj6-j44g`, `CVE-2026-8275`, `GO-2026-5003` · Go `github.com/bettercap/bettercap/v2`: affected `<2.41.7`, fixed in `2.41.7` · CVSS 6.3 Medium · Not analysed yet · Published 11 May 2026 · Tags: Memory corruption, CWE-189, CWE-192
- [GoBGP has an Integer Underflow Issue](https://agentprime.io/advisories/GHSA-hj4w-qr9j-c4cf.md)
  `GHSA-hj4w-qr9j-c4cf`, `CVE-2026-7736`, `GO-2026-5427` · Go `github.com/osrg/gobgp/v4`: affected `<4.4.0`, fixed in `4.4.0` · CVSS 6.9 Medium · Not analysed yet · Published 4 May 2026 · Tags: Memory corruption, CWE-189
- [libssh2 userauth.c userauth_password integer overflow](https://agentprime.io/advisories/CVE-2026-7598.md)
  `CVE-2026-7598` · CVE record: libssh2 · CVSS 6.9 Medium · Not analysed yet · Published 1 May 2026 · Tags: Memory corruption, CWE-189
- [uclouvain openjpeg pi.c opj_pi_initialise_encode integer overflow](https://agentprime.io/advisories/CVE-2026-6192.md)
  `CVE-2026-6192` · CVE record: uclouvain openjpeg · CVSS 4.8 Medium · Not analysed yet · Published 13 Apr 2026 · Tags: Memory corruption, CWE-189
- [NASA cFS cfe_tbl_passthru_codec.c CFE_TBL_ValidateCodecLoadSize integer overflow](https://agentprime.io/advisories/CVE-2026-5476.md)
  `CVE-2026-5476` · CVE record: NASA cFS · CVSS 2.1 Low · Not analysed yet · Published 3 Apr 2026 · Tags: Memory corruption, CWE-189
- [osrg GoBGP bgp.go DecodeFromBytes off-by-one](https://agentprime.io/advisories/CVE-2026-5123.md)
  `CVE-2026-5123` · CVE record: osrg GoBGP · CVSS 6.3 Medium · Not analysed yet · Published 30 Mar 2026 · Tags: CWE-189, CWE-193
- [dloebl CGIF GIF Image cgif.c cgif_addframe integer overflow](https://agentprime.io/advisories/CVE-2026-4985.md)
  `CVE-2026-4985` · CVE record: dloebl CGIF · CVSS 5.3 Medium · Not analysed yet · Published 27 Mar 2026 · Tags: Memory corruption, CWE-189
- [MrNanko webp4j gif_decoder.c DecodeGifFromMemory integer overflow](https://agentprime.io/advisories/CVE-2026-3707.md)
  `CVE-2026-3707` · CVE record: MrNanko webp4j · CVSS 4.8 Medium · Not analysed yet · Published 8 Mar 2026 · Tags: Memory corruption, CWE-189
- [libvips extract.c vips_extract_area_build integer overflow](https://agentprime.io/advisories/CVE-2026-3284.md)
  `CVE-2026-3284` · CVE record: libvips · CVSS 4.8 Medium · Not analysed yet · Published 27 Feb 2026 · Tags: Memory corruption, CWE-189
- [xlnt-community xlnt Encrypted XLSX File base64.cpp decode_base64 off-by-one](https://agentprime.io/advisories/CVE-2026-2703.md)
  `CVE-2026-2703` · CVE record: xlnt-community xlnt · CVSS 4.8 Medium · Not analysed yet · Published 19 Feb 2026 · Tags: CWE-189, CWE-193
- [raysan5 raylib rtext.c LoadFontData integer overflow](https://agentprime.io/advisories/CVE-2025-15534.md)
  `CVE-2025-15534` · CVE record: raysan5 raylib · CVSS 4.8 Medium · Not analysed yet · Published 18 Jan 2026 · Tags: Memory corruption, CWE-189
- [Mupen64Plus is_viewer.c write_is_viewer integer overflow](https://agentprime.io/advisories/CVE-2025-9688.md)
  `CVE-2025-9688` · CVE record: Mupen64Plus · CVSS 2.3 Low · Not analysed yet · Published 30 Aug 2025 · Tags: Memory corruption, CWE-189
- [coldfunction qCUDA qcow.c qcow_make_empty integer overflow](https://agentprime.io/advisories/CVE-2025-6603.md)
  `CVE-2025-6603` · CVE record: coldfunction qCUDA · CVSS 4.8 Medium · Not analysed yet · Published 25 Jun 2025 · Tags: Memory corruption, CWE-189
- [GNU PSPP pspp-convert.c calloc integer overflow](https://agentprime.io/advisories/CVE-2025-5001.md)
  `CVE-2025-5001` · CVE record: GNU PSPP · CVSS 4.8 Medium · Not analysed yet · Published 20 May 2025 · Tags: Memory corruption, CWE-189
- [Nothings stb stb_dupreplace integer overflow](https://agentprime.io/advisories/CVE-2025-3408.md)
  `CVE-2025-3408` · CVE record: Nothings stb · CVSS 5.3 Medium · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption, CWE-189
- [xmedcon DICOM File malloc integer underflow](https://agentprime.io/advisories/CVE-2025-2581.md)
  `CVE-2025-2581` · CVE record: xmedcon · CVSS 5.3 Medium · Not analysed yet · Published 21 Mar 2025 · Tags: Memory corruption, CWE-189
- [libzvbi search.c vbi_search_new integer overflow](https://agentprime.io/advisories/CVE-2025-2177.md)
  `CVE-2025-2177` · CVE record: libzvbi · CVSS 6.9 Medium · Not analysed yet · Published 11 Mar 2025 · Tags: Memory corruption, CWE-189
- [libzvbi io-sim.c vbi_capture_sim_load_caption integer overflow](https://agentprime.io/advisories/CVE-2025-2176.md)
  `CVE-2025-2176` · CVE record: libzvbi · CVSS 6.9 Medium · Not analysed yet · Published 11 Mar 2025 · Tags: Memory corruption, CWE-189
- [libzvbi \_vbi_strndup_iconv integer overflow](https://agentprime.io/advisories/CVE-2025-2175.md)
  `CVE-2025-2175` · CVE record: libzvbi · CVSS 5.3 Medium · Not analysed yet · Published 11 Mar 2025 · Tags: Memory corruption, CWE-189
- [libzvbi conv.c vbi_strndup_iconv_ucs2 integer overflow](https://agentprime.io/advisories/CVE-2025-2174.md)
  `CVE-2025-2174` · CVE record: libzvbi · CVSS 6.9 Medium · Not analysed yet · Published 11 Mar 2025 · Tags: Memory corruption, CWE-189
- [Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-21801.md)
  `CVE-2023-21801` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Feb 2023 · Tags: CWE-189
- [GPAC lsr_dec.c lsr_translate_coords integer overflow](https://agentprime.io/advisories/CVE-2022-4202.md)
  `CVE-2022-4202` · CVE record: unspecified GPAC · CVSS 6.3 Medium · Not analysed yet · Published 29 Nov 2022 · Tags: CWE-189
- [LibTIFF tif_getimage.c TIFFReadRGBATileExt integer overflow](https://agentprime.io/advisories/CVE-2022-3970.md)
  `CVE-2022-3970` · CVE record: unspecified LibTIFF · CVSS 6.3 Medium · Not analysed yet · Published 13 Nov 2022 · Tags: CWE-189
- [Allen-Bradley: An exploitable denial-of-service vulnerability exists in the IPv4 functionality of…](https://agentprime.io/advisories/CVE-2020-6111.md)
  `CVE-2020-6111` · CVE record: Allen-Bradley · CVSS 7.5 High · Not analysed yet · Published 3 Dec 2020 · Tags: CWE-189

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-189>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-189/>. Everything for agents: <https://agentprime.io/llms.txt>.