# CWE-196.

Every Advisory and CVE whose sources give the weakness CWE-196, newest first.

## Records, newest first

- [libaec through 1.1.7 Out-of-Bounds Read via m_se_decode() Second Extension Decoder](https://agentprime.io/advisories/CVE-2026-120457.md)
  `CVE-2026-120457` · CVE record: Deutsches Klimarechenzentrum libaec · CVSS 5.8 Medium · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-196
- [ImageMagick: Infinite Loop in PSD decoder on 32-bit builds](https://agentprime.io/advisories/CVE-2026-106567.md)
  `CVE-2026-106567` · CVE record: ImageMagick ImageMagick · CVSS 5.9 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Denial of service, CWE-196
- [Imager versions before 1.036 for Perl exit the process reading a TGA with a colour map length of 32768 or more in tga_palette_read](https://agentprime.io/advisories/CVE-2026-93019.md)
  `CVE-2026-93019` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Sept 2026 · Tags: Denial of service, CWE-196
- [TeraTerm Project TTSSH2: Unsigned to Signed Conversion Error (CWE-196) vulnerability exists in TTSSH2 plugin of…](https://agentprime.io/advisories/CVE-2026-58317.md)
  `CVE-2026-58317` · CVE record: TeraTerm Project TTSSH2 · CVSS 5.1 Medium · Not analysed yet · Published 17 Jul 2026 · Tags: CWE-196
- [Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed](https://agentprime.io/advisories/CVE-2026-14454.md)
  `CVE-2026-14454` · CVE record: TONYC Imager · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Jul 2026 · Tags: Denial of service, CWE-196
- [RAUC: Improper Signing of Plain Bundles Exceeding 2 GiB](https://agentprime.io/advisories/CVE-2026-34155.md)
  `CVE-2026-34155` · CVE record: rauc rauc · CVSS 7.2 High · Not analysed yet · Published 31 Mar 2026 · Tags: Weak cryptography or TLS, CWE-196
- [NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where sign conversion issuescasting an unsigned primitive to signed may lead to denial of service or information…](https://agentprime.io/advisories/CVE-2023-0185.md)
  `CVE-2023-0185` · CVE record: NVIDIA vGPU software (Virtual GPU Manager - Citrix Hypervisor, VMware vSphere, Red Hat Enterprise Linux KVM), NVIDIA Cloud Gaming (Virtual GPU Manager - Red Hat Enterprise Linux KVM) · CVSS 6.7 Medium · Not analysed yet · Published 1 Apr 2023 · Tags: CWE-196
- [Besu VM vulnerable to gas allocation error in CALL operations](https://agentprime.io/advisories/GHSA-4456-w38r-m53x.md)
  `GHSA-4456-w38r-m53x`, `CVE-2022-36025` · Maven `org.hyperledger.besu:evm`: affected `>=22.4.0-RC1, <22.7.1`, fixed in `22.7.1` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 23 Sept 2022 · Tags: CWE-196, CWE-681
- [Softmaker: An exploitable signed conversion vulnerability exists in the TextMaker document parsing…](https://agentprime.io/advisories/CVE-2020-13545.md)
  `CVE-2020-13545` · CVE record: Softmaker · CVSS 8.8 High · Not analysed yet · Published 6 Jan 2021 · Tags: CWE-196
- [OOB Read in urldecode()](https://agentprime.io/advisories/CVE-2020-7067.md)
  `CVE-2020-7067` · CVE record: PHP Group PHP · CVSS 7.5 High · Not analysed yet · Published 27 Apr 2020 · Tags: Memory corruption, CWE-196

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-196>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-196/>. Everything for agents: <https://agentprime.io/llms.txt>.