Advisories · Weakness
CWE-196.
Every Advisory and CVE whose sources give the weakness CWE-196, newest first.
- CVSS 5.8 Medium
libaec through 1.1.7 Out-of-Bounds Read via m_se_decode() Second Extension Decoder
- Deutsches Klimarechenzentrum libaec
- CWE-196
- CVSS 5.9 Medium
ImageMagick: Infinite Loop in PSD decoder on 32-bit builds
- ImageMagick
- Denial of service
- CWE-196
- CVSS 9.1 CriticalCritical · CVSS 9+
Imager versions before 1.036 for Perl exit the process reading a TGA with a colour map length of 32768 or more in tga_palette_read
- Denial of service
- CWE-196
- CVSS 5.1 Medium
TeraTerm Project TTSSH2: Unsigned to Signed Conversion Error (CWE-196) vulnerability exists in TTSSH2 plugin of…
- TeraTerm Project TTSSH2
- CWE-196
- CVSS 9.8 CriticalCritical · CVSS 9+
Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed
- TONYC Imager
- Denial of service
- CWE-196
- CVSS 7.2 High
RAUC: Improper Signing of Plain Bundles Exceeding 2 GiB
- rauc
- Weak cryptography or TLS
- CWE-196
- CVSS 6.7 Medium
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where sign conversion issuescasting an unsigned primitive to signed may lead to denial of service or information…
- vGPU software (Virtual GPU Manager - Citrix Hypervisor, VMware vSphere, Red Hat Enterprise Linux KVM), NVIDIA Cloud Gaming (Virtual GPU Manager - Red Hat Enterprise Linux KVM)
- CWE-196
- CVSS 9.1 CriticalCritical · CVSS 9+
Besu VM vulnerable to gas allocation error in CALL operations
- CWE-196
- CWE-681
>=22.4.0-RC1, <22.7.1 · fixed in 22.7.1
GHSA-4456-w38r-m53x · CVE-2022-36025 - CVSS 8.8 High
Softmaker: An exploitable signed conversion vulnerability exists in the TextMaker document parsing…
- Softmaker
- CWE-196
- CVSS 7.5 High
OOB Read in urldecode()
- PHP
- Memory corruption
- CWE-196