Advisories · Weakness

CWE-189.

Every Advisory and CVE whose sources give the weakness CWE-189, newest first.

CVE-2026-121382 CVE record

CVSS 8.7 High

Netcore NBR100V2 auto_ac msg_aes_dec integer overflow
- Netcore NBR100V2
- Memory corruption
- CWE-189
Not analysed yet 3 Nov 2026
CVE-2026-112158 CVE record

CVSS 7.1 High

MikroTik RouterOS ipt_SAME.ko same_check integer overflow
- MikroTik RouterOS
- Memory corruption
- CWE-189
Not analysed yet 19 Oct 2026
CVE-2026-112074 CVE record

CVSS 5.3 Medium

Tencent ncnn Conversion API mat_pixel.cpp yuv420sp2rgb integer overflow
- Tencent ncnn
- Memory corruption
- CWE-189
Not analysed yet 19 Oct 2026
CVE-2026-103222 CVE record

CVSS 6.3 Medium

Blosc C-Blosc2 blosclz Decompression blosclz.c blosclz_decompress integer overflow
- C-Blosc2
- Memory corruption
- CWE-189
Not analysed yet 30 Sept 2026
CVE-2026-102805 CVE record

CVSS 6.9 Medium

Nothings stb Image Encoding stb_image_write.h stbi_write_tga_core integer overflow
- Nothings stb
- Memory corruption
- CWE-189
Not analysed yet 30 Sept 2026
CVE-2026-102804 CVE record

CVSS 6.9 Medium

Nothings stb stb_hexwave.h hexwave_init integer overflow
- Nothings stb
- Memory corruption
- CWE-189
Not analysed yet 30 Sept 2026
CVE-2026-102621 CVE record

CVSS 4.8 Medium

Freedesktop Poppler SplashClip.cc clipToPath integer overflow
- Freedesktop Poppler
- Memory corruption
- CWE-189
Not analysed yet 29 Sept 2026
CVE-2026-102620 CVE record

CVSS 4.8 Medium

Freedesktop Poppler FoFiTrueType.cc cvtSfnts integer overflow
- Freedesktop Poppler
- Memory corruption
- CWE-189
Not analysed yet 29 Sept 2026
CVE-2026-101279 CVE record

CVSS 6.9 Medium

Trusted Domain Project OpenDMARC opendmarc_policy.c integer overflow
- Trusted Domain Project OpenDMARC
- Memory corruption
- CWE-189
Not analysed yet 29 Sept 2026
CVE-2026-101014 CVE record

CVSS 6.9 Medium

Trusted Domain Project OpenDMARC DMARC Record opendmarc_util.c opendmarc_util_cleanup off-by-one
- Trusted Domain Project OpenDMARC
- CWE-189
- CWE-193
Not analysed yet 28 Sept 2026
CVE-2026-100889 CVE record

CVSS 6.9 Medium

Trusted Domain Project OpenDKIM Decoder util.c dkim_qp_decode off-by-one
- Trusted Domain Project OpenDKIM
- CWE-189
- CWE-193
Not analysed yet 27 Sept 2026
CVE-2026-95958 CVE record

CVSS 4.8 Medium

JusticeRage Manalyze PE Parser pe.cpp _parse_relocations integer underflow
- JusticeRage Manalyze
- Memory corruption
- CWE-189
Not analysed yet 23 Sept 2026
CVE-2026-94090 CVE record

CVSS 5.3 Medium

JusticeRage Manalyze PE Parser pe.cpp _parse_debug integer underflow
- JusticeRage Manalyze
- Memory corruption
- CWE-189
Not analysed yet 20 Sept 2026
CVE-2026-94030 CVE record

CVSS 2.3 Low

SerenityOS LibGfx BMPLoader.cpp decode_bmp_pixel_data integer overflow
- SerenityOS
- Memory corruption
- CWE-189
Not analysed yet 20 Sept 2026
CVE-2026-93314 CVE record

CVSS 5.3 Medium

Freedesktop Poppler FoFiTrueType.cc mapCodeToGID integer overflow
- Freedesktop Poppler
- Memory corruption
- CWE-189
Not analysed yet 18 Sept 2026
CVE-2026-93313 CVE record

CVSS 5.3 Medium

Freedesktop Poppler JBIG2Stream.cc readCodeTableSeg integer overflow
- Freedesktop Poppler
- Memory corruption
- CWE-189
Not analysed yet 18 Sept 2026
CVE-2026-93311 CVE record

CVSS 5.3 Medium

Freedesktop Poppler SampledFunction Function.cc integer overflow
- Freedesktop Poppler
- Memory corruption
- CWE-189
Not analysed yet 18 Sept 2026
CVE-2026-90715 CVE record

CVSS 6.9 Medium

marcobambini Gravity udp json-parser gravity_json.c integer overflow
- marcobambini Gravity
- Memory corruption
- CWE-189
Not analysed yet 14 Sept 2026
CVE-2026-90596 CVE record

CVSS 6.9 Medium

embedded-graphics image_raw.rs new/bytes_per_row integer overflow
- embedded-graphics
- Memory corruption
- CWE-189
Not analysed yet 13 Sept 2026
CVE-2026-90593 CVE record

CVSS 6.9 Medium

embedded-graphics image_raw.rs draw_sub_image integer overflow
- embedded-graphics
- Memory corruption
- CWE-189
Not analysed yet 13 Sept 2026
CVE-2026-86297 CVE record

CVSS 9.2 CriticalCritical · CVSS 9+

D-Link DIR-605 L2TP Control Message tunnel.c tunnel_set_params off-by-one
- D-Link DIR-605
- CWE-189
- CWE-193
Not analysed yet 7 Sept 2026
CVE-2026-86289 CVE record

CVSS 5.3 Medium

Ollama GGUF Decoder gguf.go readGGUFV1String integer overflow
- Ollama
- Memory corruption
- CWE-189
Not analysed yet 7 Sept 2026
CVE-2026-82908 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

MSI Dragon Center MMIO Write Path NTIOLib_X64.sys MmioWritePath integer overflow
- MSI Dragon Center
- Memory corruption
- CWE-189
Not analysed yet 31 Aug 2026
CVE-2026-82480 CVE record

CVSS 5.3 Medium

NASA cFS cFE Software Bus cfe_sb_util.c CFE_SB_GetUserDataLength integer underflow
- NASA cFS
- Memory corruption
- CWE-189
Not analysed yet 30 Aug 2026
CVE-2026-14787 CVE record

CVSS 4.8 Medium

radareorg radare2 pb Print cmd_print.inc cmd_print integer overflow
- radareorg radare2
- Memory corruption
- CWE-189
Not analysed yet 6 Jul 2026
CVE-2026-14786 CVE record

CVSS 4.8 Medium

radareorg radare2 str.c r_str_word_get0set integer overflow
- radareorg radare2
- Memory corruption
- CWE-189
Not analysed yet 6 Jul 2026
CVE-2026-14761 CVE record

CVSS 4.8 Medium

radareorg radare2 str.c r_str_append integer overflow
- radareorg radare2
- Memory corruption
- CWE-189
Not analysed yet 5 Jul 2026
CVE-2026-14758 CVE record

CVSS 4.8 Medium

radareorg radare2 hexpairs cmd_anal.inc.c cmd_anal_opcode integer overflow
- radareorg radare2
- Memory corruption
- CWE-189
Not analysed yet 5 Jul 2026
CVE-2026-14757 CVE record

CVSS 4.8 Medium

radareorg radare2 cmd_anal.inc core_anal_bytes integer overflow
- radareorg radare2
- Memory corruption
- CWE-189
Not analysed yet 5 Jul 2026
github.com/cilium/ebpf Go

CVSS 4.8 Medium

ebpf-go is vulnerable to integer overflow via LoadCollectionSpecFromReader
- Memory corruption
- CWE-189
<0.22.0 · fixed in 0.22.0

GHSA-xhgw-qwwf-pg32 · CVE-2026-10722 Not analysed yet 3 Jun 2026
CVE-2026-10268 CVE record

CVSS 4.8 Medium

janet-lang janet marsh.c unmarshal_one_fiber integer overflow
- janet
- Memory corruption
- CWE-189
Not analysed yet 1 Jun 2026
github.com/bettercap/bettercap/v2 Go

CVSS 6.3 Medium

bettercap Has an Integer Coercion Error in modules/mysql_server/mysql_server.go
- CWE-189
- CWE-192
<2.41.7 · fixed in 2.41.7

GHSA-jcqv-2g3v-gm88 · CVE-2026-8276 Not analysed yet 11 May 2026
github.com/bettercap/bettercap/v2 Go

CVSS 6.3 Medium

bettercap Has an Integer Coercion Error in the ippReadChunkedBody Function
- Memory corruption
- CWE-189
<2.41.7 · fixed in 2.41.7

GHSA-322p-rrj6-j44g · CVE-2026-8275 Not analysed yet 11 May 2026
github.com/osrg/gobgp/v4 Go

CVSS 6.9 Medium

GoBGP has an Integer Underflow Issue
- Memory corruption
- CWE-189
<4.4.0 · fixed in 4.4.0

GHSA-hj4w-qr9j-c4cf · CVE-2026-7736 Not analysed yet 4 May 2026
CVE-2026-7598 CVE record

CVSS 6.9 Medium

libssh2 userauth.c userauth_password integer overflow
- libssh2
- Memory corruption
- CWE-189
Not analysed yet 1 May 2026
CVE-2026-6192 CVE record

CVSS 4.8 Medium

uclouvain openjpeg pi.c opj_pi_initialise_encode integer overflow
- uclouvain openjpeg
- Memory corruption
- CWE-189
Not analysed yet 13 Apr 2026
CVE-2026-5476 CVE record

CVSS 2.1 Low

NASA cFS cfe_tbl_passthru_codec.c CFE_TBL_ValidateCodecLoadSize integer overflow
- NASA cFS
- Memory corruption
- CWE-189
Not analysed yet 3 Apr 2026
CVE-2026-5123 CVE record

CVSS 6.3 Medium

osrg GoBGP bgp.go DecodeFromBytes off-by-one
- osrg GoBGP
- CWE-189
- CWE-193
Not analysed yet 30 Mar 2026
CVE-2026-4985 CVE record

CVSS 5.3 Medium

dloebl CGIF GIF Image cgif.c cgif_addframe integer overflow
- dloebl CGIF
- Memory corruption
- CWE-189
Not analysed yet 27 Mar 2026
CVE-2026-3707 CVE record

CVSS 4.8 Medium

MrNanko webp4j gif_decoder.c DecodeGifFromMemory integer overflow
- MrNanko webp4j
- Memory corruption
- CWE-189
Not analysed yet 8 Mar 2026
CVE-2026-3284 CVE record

CVSS 4.8 Medium

libvips extract.c vips_extract_area_build integer overflow
- libvips
- Memory corruption
- CWE-189
Not analysed yet 27 Feb 2026
CVE-2026-2703 CVE record

CVSS 4.8 Medium

xlnt-community xlnt Encrypted XLSX File base64.cpp decode_base64 off-by-one
- xlnt
- CWE-189
- CWE-193
Not analysed yet 19 Feb 2026
CVE-2025-15534 CVE record

CVSS 4.8 Medium

raysan5 raylib rtext.c LoadFontData integer overflow
- raysan5 raylib
- Memory corruption
- CWE-189
Not analysed yet 18 Jan 2026
CVE-2025-9688 CVE record

CVSS 2.3 Low

Mupen64Plus is_viewer.c write_is_viewer integer overflow
- Mupen64Plus
- Memory corruption
- CWE-189
Not analysed yet 30 Aug 2025
CVE-2025-6603 CVE record

CVSS 4.8 Medium

coldfunction qCUDA qcow.c qcow_make_empty integer overflow
- coldfunction qCUDA
- Memory corruption
- CWE-189
Not analysed yet 25 Jun 2025
CVE-2025-5001 CVE record

CVSS 4.8 Medium

GNU PSPP pspp-convert.c calloc integer overflow
- GNU PSPP
- Memory corruption
- CWE-189
Not analysed yet 20 May 2025
CVE-2025-3408 CVE record

CVSS 5.3 Medium

Nothings stb stb_dupreplace integer overflow
- Nothings stb
- Memory corruption
- CWE-189
Not analysed yet 8 Apr 2025
CVE-2025-2581 CVE record

CVSS 5.3 Medium

xmedcon DICOM File malloc integer underflow
- xmedcon
- Memory corruption
- CWE-189
Not analysed yet 21 Mar 2025
CVE-2025-2177 CVE record

CVSS 6.9 Medium

libzvbi search.c vbi_search_new integer overflow
- libzvbi
- Memory corruption
- CWE-189
Not analysed yet 11 Mar 2025
CVE-2025-2176 CVE record

CVSS 6.9 Medium

libzvbi io-sim.c vbi_capture_sim_load_caption integer overflow
- libzvbi
- Memory corruption
- CWE-189
Not analysed yet 11 Mar 2025
CVE-2025-2175 CVE record

CVSS 5.3 Medium

libzvbi _vbi_strndup_iconv integer overflow
- libzvbi
- Memory corruption
- CWE-189
Not analysed yet 11 Mar 2025
CVE-2025-2174 CVE record

CVSS 6.9 Medium

libzvbi conv.c vbi_strndup_iconv_ucs2 integer overflow
- libzvbi
- Memory corruption
- CWE-189
Not analysed yet 11 Mar 2025
CVE-2023-21801 CVE record

CVSS 7.8 High

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-189
Not analysed yet 14 Feb 2023
CVE-2022-4202 CVE record

CVSS 6.3 Medium

GPAC lsr_dec.c lsr_translate_coords integer overflow
- GPAC
- CWE-189
Not analysed yet 29 Nov 2022
CVE-2022-3970 CVE record

CVSS 6.3 Medium

LibTIFF tif_getimage.c TIFFReadRGBATileExt integer overflow
- LibTIFF
- CWE-189
Not analysed yet 13 Nov 2022
CVE-2020-6111 CVE record

CVSS 7.5 High

Allen-Bradley: An exploitable denial-of-service vulnerability exists in the IPv4 functionality of…
- Allen-Bradley
- CWE-189
Not analysed yet 3 Dec 2020