# CWE-197. Every Advisory and CVE whose sources give the weakness CWE-197, newest first. ## Records, newest first - [Integer truncation vulnerability in QTextCodec conversion functions impacts Qt Framework](https://agentprime.io/advisories/CVE-2026-107479.md) `CVE-2026-107479` · CVE record: qt Qt · CVSS 1.7 Low · Not analysed yet · Published 4 Nov 2026 · Tags: CWE-197 - [An integer truncation vulnerability in the NAS decoder of OpenAirInterface (OAI) CN5G AMF v2.2.1 allows an unauthenticated remote attacker to cause a denial of service (DoS) via crafted NAS Registrat…](https://agentprime.io/advisories/CVE-2026-117069.md) `CVE-2026-117069` · CVE record · CVSS 7.5 High · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-197 - [HTSlib through 1.24 Heap Out-of-Bounds Write via Truncated .gzi Index Count](https://agentprime.io/advisories/CVE-2026-116742.md) `CVE-2026-116742` · CVE record: samtools htslib · CVSS 4.8 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: CWE-197 - [Ghidra before 12.2 Integer Truncation in PackedDecode::skipAttribute Decompiler Parser](https://agentprime.io/advisories/CVE-2026-116012.md) `CVE-2026-116012` · CVE record: NationalSecurityAgency ghidra · CVSS 2.0 Low · Not analysed yet · Published 24 Oct 2026 · Tags: CWE-197 - [Bit-packing in Cranelift compiler causes silent overflow and miscompilation](https://agentprime.io/advisories/GHSA-897f-g5gm-fmxm.md) `GHSA-897f-g5gm-fmxm`, `CVE-2026-115889`, `RUSTSEC-2026-0380` · crates.io `wasmtime`: affected `>=0.0.0-0, <36.0.19 || >=37.0.0, <43.0.0`, fixed in `36.0.19`, `43.0.0` · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Oct 2026 · Tags: Memory corruption, CWE-197 - [Numeric truncation in the MPU buffer authorization check in FreeRTOS-Kernel](https://agentprime.io/advisories/CVE-2026-109588.md) `CVE-2026-109588` · CVE record: FreeRTOS FreeRTOS-Kernel · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Oct 2026 · Tags: Memory corruption, CWE-197 - [Microsoft Office Word Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-108451.md) `CVE-2026-108451` · CVE record: Microsoft Microsoft 365 Apps for Enterprise and 2 more · CVSS 8.8 High · Not analysed yet · Published 15 Oct 2026 · Tags: Memory corruption, CWE-197 - [Microsoft Office Word Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-108450.md) `CVE-2026-108450` · CVE record: Microsoft Microsoft 365 Apps for Enterprise and 2 more · CVSS 8.8 High · Not analysed yet · Published 15 Oct 2026 · Tags: Memory corruption, CWE-197 - [Telegram rlottie Numeric Truncation Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-111105.md) `CVE-2026-111105` · CVE record: Telegram Telegram · CVSS 7.0 High · Not analysed yet · Published 15 Oct 2026 · Tags: CWE-197 - [Junos OS and Junos OS Evolved: An attacker causes a routing-daemon crash when BGP Prefix-SID routes are re-advertised](https://agentprime.io/advisories/CVE-2026-33795.md) `CVE-2026-33795` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 14 Oct 2026 · Tags: CWE-197 - [Junos OS and Junos OS Evolved: An attacker causes a routing-process crash when MPLS-TE fast reroute is enabled](https://agentprime.io/advisories/CVE-2026-102043.md) `CVE-2026-102043` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 14 Oct 2026 · Tags: CWE-197 - [Windows Domain Name Service Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-96113.md) `CVE-2026-96113` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption, CWE-197 - [Windows Text Shaping Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-102225.md) `CVE-2026-102225` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption, CWE-197 - [Windows Client License Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-100201.md) `CVE-2026-100201` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption, CWE-197 - [Microsoft Office Word Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-96995.md) `CVE-2026-96995` · CVE record: Microsoft Microsoft 365 Apps for Enterprise and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption, CWE-197 - [Windows Installer Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-85796.md) `CVE-2026-85796` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption, CWE-197 - [Microsoft Windows Search Component Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-70177.md) `CVE-2026-70177` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-20, CWE-197 - [Microsoft Graphics Component Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-70123.md) `CVE-2026-70123` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption, CWE-197 - [apko /etc/passwd and /etc/group UID/GID truncation writes package-supplied entries as root](https://agentprime.io/advisories/CVE-2026-105768.md) `CVE-2026-105768` · CVE record: chainguard-dev apko · CVSS 6.3 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: CWE-197 - [Nezha before 2.3.8 Denial of Service via Alert Rule](https://agentprime.io/advisories/CVE-2026-101085.md) `CVE-2026-101085` · CVE record: nezhahq nezha · CVSS 7.1 High · Not analysed yet · Published 27 Sept 2026 · Tags: CWE-197 - [Flatpak: flatpak: buffer overflow in oci delta stream path names on 32-bit systems](https://agentprime.io/advisories/CVE-2026-96280.md) `CVE-2026-96280` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 27 Sept 2026 · Tags: CWE-197 - [Suricata sip: large SIP message bodies can evade detection with frame keyword](https://agentprime.io/advisories/CVE-2026-63449.md) `CVE-2026-63449` · CVE record: OISF suricata · CVSS 3.7 Low · Not analysed yet · Published 18 Sept 2026 · Tags: CWE-197 - [Remote assertion failure via 16-bit length truncation in \`dns_ncache_add()\`](https://agentprime.io/advisories/CVE-2026-19667.md) `CVE-2026-19667` · CVE record: ISC BIND 9 · CVSS 7.5 High · Not analysed yet · Published 16 Sept 2026 · Tags: CWE-197 - [Out-of-bounds read (buffer over-read) vulnerability in HTTP Cache-Control response header parsing impacts Qt Framework (QtNetwork module)](https://agentprime.io/advisories/CVE-2026-76151.md) `CVE-2026-76151` · CVE record: qt qt · CVSS 4.6 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Memory corruption, CWE-197 - [Google Chrome: Numeric truncation error in Media in Google Chrome prior to 153.0.8010.36 allowed a…](https://agentprime.io/advisories/CVE-2026-87529.md) `CVE-2026-87529` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-197 - [Microsoft Office Word Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-78512.md) `CVE-2026-78512` · CVE record: Microsoft Microsoft 365 Apps for Enterprise and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption, CWE-197 - [Windows Spaceport.sys Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-69535.md) `CVE-2026-69535` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption, CWE-197 - [Windows Spaceport.sys Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-69512.md) `CVE-2026-69512` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.0 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption, CWE-197 - [Windows Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-69578.md) `CVE-2026-69578` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption, CWE-197 - [Internet Storage Name Service Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-68895.md) `CVE-2026-68895` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-197 - [Windows Win32k Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-68880.md) `CVE-2026-68880` · CVE record: Microsoft Microsoft Office 365 for Mac and 3 more · CVSS 8.0 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption, CWE-197 - [Windows Kerberos Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-69822.md) `CVE-2026-69822` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption, CWE-197 - [Samsung Opensource Escargot: An out-of-bounds write caused by numeric truncation Samsung Open Source Escargot on Linux…](https://agentprime.io/advisories/CVE-2026-86315.md) `CVE-2026-86315` · CVE record: Samsung Opensource Escargot · CVSS 6.2 Medium · Not analysed yet · Published 7 Sept 2026 · Tags: CWE-197 - [An issue was discovered in the resolv gem before 0.7.2 for Ruby.](https://agentprime.io/advisories/CVE-2026-80213.md) `CVE-2026-80213` · CVE record: Ruby resolv · CVSS 4.0 Medium · Not analysed yet · Published 27 Aug 2026 · Tags: CWE-197 - [Libsoup: libsoup: integer truncation in sort_ranges() comparator causes silent omission of http range responses](https://agentprime.io/advisories/CVE-2026-77014.md) `CVE-2026-77014` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 20 Aug 2026 · Tags: CWE-197 - [Numeric Truncation Error in nnn](https://agentprime.io/advisories/CVE-2026-65610.md) `CVE-2026-65610` · CVE record: nnn nnn · CVSS 2.4 Low · Not analysed yet · Published 19 Aug 2026 · Tags: CWE-197 - [COVESA Open1722 0.9.2 Stack Memory Disclosure via acf-can-listener.c Integer Truncation](https://agentprime.io/advisories/CVE-2026-73523.md) `CVE-2026-73523` · CVE record: COVESA Open1722 · CVSS 8.7 High · Not analysed yet · Published 17 Aug 2026 · Tags: CWE-197 - [Capstone WASM \`br_table\` instruction-size truncation can cause no-progress disassembly and parser desynchronization](https://agentprime.io/advisories/CVE-2026-49263.md) `CVE-2026-49263` · CVE record: capstone-engine capstone · CVSS 2.0 Low · Not analysed yet · Published 14 Aug 2026 · Tags: CWE-197 - [Microsoft Excel Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-68804.md) `CVE-2026-68804` · CVE record: Microsoft Microsoft 365 Apps for Enterprise and 4 more · CVSS 7.8 High · Not analysed yet · Published 11 Aug 2026 · Tags: Memory corruption, CWE-197 - [Windows DNS Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-65798.md) `CVE-2026-65798` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: CWE-197 - [Windows DNS Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-65797.md) `CVE-2026-65797` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: Memory corruption, CWE-197 - [Windows DNS Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-65795.md) `CVE-2026-65795` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: CWE-197 - [Microsoft Office Word Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-63525.md) `CVE-2026-63525` · CVE record: Microsoft Microsoft 365 Apps for Enterprise and 4 more · CVSS 7.8 High · Not analysed yet · Published 11 Aug 2026 · Tags: CWE-197 - [Windows DNS Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-62883.md) `CVE-2026-62883` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: Memory corruption, CWE-197 - [Windows DNS Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-62881.md) `CVE-2026-62881` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: Memory corruption, CWE-197 - [Windows DNS Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-62769.md) `CVE-2026-62769` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: Memory corruption, CWE-197 - [Microsoft Digest Authentication Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-62698.md) `CVE-2026-62698` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 11 Aug 2026 · Tags: CWE-197 - [Windows HTTP.sys Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-62739.md) `CVE-2026-62739` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 11 Aug 2026 · Tags: Memory corruption, CWE-197 - [Windows Network File System Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-56650.md) `CVE-2026-56650` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption, CWE-197 - [Microsoft Word Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-55142.md) `CVE-2026-55142` · CVE record: Microsoft Microsoft 365 Apps for Enterprise and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: CWE-197 - [Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-50357.md) `CVE-2026-50357` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: CWE-197 - [Windows Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-50332.md) `CVE-2026-50332` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption, CWE-197 - [Windows Resilient File System (ReFS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-49792.md) `CVE-2026-49792` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: CWE-197 - [DTLS 1.3 ACK serialization heap buffer overflow via integer truncation](https://agentprime.io/advisories/CVE-2026-6679.md) `CVE-2026-6679` · CVE record: wolfSSL wolfSSL · CVSS 8.8 High · Not analysed yet · Published 25 Jun 2026 · Tags: Memory corruption, CWE-197 - [Heap buffer overflow in DXF polyline import](https://agentprime.io/advisories/CVE-2026-6039.md) `CVE-2026-6039` · CVE record: The Document Foundation LibreOffice · CVSS 5.4 Medium · Not analysed yet · Published 15 Jun 2026 · Tags: Memory corruption, CWE-197 - [Microsoft Excel Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-44823.md) `CVE-2026-44823` · CVE record: Microsoft Microsoft 365 Apps for Enterprise and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption, CWE-197 - [Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-40404.md) `CVE-2026-40404` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption, CWE-197 - [Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-40409.md) `CVE-2026-40409` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-197 - [Heap overflow with multiple NSID, COOKIE, PADDING EDNS options](https://agentprime.io/advisories/CVE-2026-42944.md) `CVE-2026-42944` · CVE record: NLnet Labs Unbound · CVSS 8.7 High · Not analysed yet · Published 20 May 2026 · Tags: Memory corruption, CWE-197 - [Windows Volume Manager Extension Driver Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-40380.md) `CVE-2026-40380` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption, CWE-197 Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .