# CWE-197.

Every Advisory and CVE whose sources give the weakness CWE-197, newest first.

## Records, newest first (an older page)

- [In uriparser before 1.0.2, there is pointer difference truncation to int in various places.](https://agentprime.io/advisories/CVE-2026-44927.md)
  `CVE-2026-44927` · CVE record: uriparser uriparser · CVSS 2.9 Low · Not analysed yet · Published 8 May 2026 · Tags: CWE-197
- [uriparser: uriparser before 1.0.1 has numeric truncation in text range comparison…](https://agentprime.io/advisories/CVE-2026-42371.md)
  `CVE-2026-42371` · CVE record: uriparser uriparser · CVSS 5.1 Medium · Not analysed yet · Published 27 Apr 2026 · Tags: CWE-197
- [Cap'n Proto: Integer overflow in KJ-HTTP chunk size](https://agentprime.io/advisories/CVE-2026-32240.md)
  `CVE-2026-32240` · CVE record: capnproto capnproto · CVSS 6.3 Medium · Not analysed yet · Published 12 Mar 2026 · Tags: HTTP request smuggling, CWE-197
- [Eclipse Paho Go MQTT may incorrectly encode strings if length exceeds 65535 bytes](https://agentprime.io/advisories/GHSA-32fw-gq77-f2f2.md)
  `GHSA-32fw-gq77-f2f2`, `CVE-2025-10543`, `GO-2025-4173` · Go `github.com/eclipse/paho.mqtt.golang`: affected `<1.5.1`, fixed in `1.5.1` · CVSS 6.3 Medium · Not analysed yet · Published 2 Dec 2025 · Tags: CWE-197, CWE-681
- [Windows Hyper-V Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-53723.md)
  `CVE-2025-53723` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 Aug 2025 · Tags: Memory corruption, CWE-197
- [SQLitePCLRaw.lib.e_sqlite3 has a vulnerable dependency on SQLite](https://agentprime.io/advisories/GHSA-2m69-gcr7-jv3q.md)
  `GHSA-2m69-gcr7-jv3q`, `BIT-sqlite-2025-6965`, `CVE-2025-6965` · NuGet `SQLitePCLRaw.lib.e_sqlite3` and 2 more: affected `<=2.1.11`, no fixed version yet · CVSS 7.2 High · Critical (CVSS 7+ and EPSS) · EPSS 0.73 · Not analysed yet · Published 15 Jul 2025 · Tags: CWE-197
- [Windows Shell Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-49679.md)
  `CVE-2025-49679` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Jul 2025 · Tags: CWE-197
- [SQL Server Native Client Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-49018.md)
  `CVE-2024-49018` · CVE record: Microsoft Microsoft SQL Server 2017 (GDR) and 4 more · CVSS 8.8 High · Not analysed yet · Published 12 Nov 2024 · Tags: CWE-197
- [Windows KDC Proxy Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-43639.md)
  `CVE-2024-43639` · CVE record: Microsoft Windows Server 2025 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Nov 2024 · Tags: CWE-197
- [Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-43519.md)
  `CVE-2024-43519` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Oct 2024 · Tags: CWE-197
- [Microsoft SQL Server Native Scoring Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2024-37337.md)
  `CVE-2024-37337` · CVE record: Microsoft Microsoft SQL Server 2017 (CU 31) and 4 more · CVSS 7.1 High · Not analysed yet · Published 10 Sept 2024 · Tags: CWE-197
- [Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-38125.md)
  `CVE-2024-38125` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Aug 2024 · Tags: CWE-197
- [DHCP Server Service Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-38044.md)
  `CVE-2024-38044` · CVE record: Microsoft Windows Server 2019 and 4 more · CVSS 7.2 High · Not analysed yet · Published 9 Jul 2024 · Tags: CWE-197
- [Azure Kinect SDK Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-38086.md)
  `CVE-2024-38086` · CVE record: Microsoft Azure Kinect SDK · CVSS 6.4 Medium · Not analysed yet · Published 9 Jul 2024 · Tags: CWE-197
- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-30029.md)
  `CVE-2024-30029` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.5 High · Not analysed yet · Published 14 May 2024 · Tags: CWE-197
- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-30024.md)
  `CVE-2024-30024` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.5 High · Not analysed yet · Published 14 May 2024 · Tags: CWE-197
- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-30023.md)
  `CVE-2024-30023` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.5 High · Not analysed yet · Published 14 May 2024 · Tags: CWE-197
- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-30022.md)
  `CVE-2024-30022` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.5 High · Not analysed yet · Published 14 May 2024 · Tags: CWE-197
- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-30015.md)
  `CVE-2024-30015` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.5 High · Not analysed yet · Published 14 May 2024 · Tags: CWE-197
- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-30014.md)
  `CVE-2024-30014` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.5 High · Not analysed yet · Published 14 May 2024 · Tags: CWE-197
- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-30009.md)
  `CVE-2024-30009` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 14 May 2024 · Tags: CWE-197
- [D-Link DAP-1360 webupg UPGCGI_CheckAuth Numeric Truncation Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-32143.md)
  `CVE-2023-32143` · CVE record: D-Link DAP-1360 · CVSS 8.8 High · Not analysed yet · Published 3 May 2024 · Tags: CWE-197
- [Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-28944.md)
  `CVE-2024-28944` · CVE record: Microsoft Microsoft SQL Server 2019 (GDR) and 4 more · CVSS 8.8 High · Not analysed yet · Published 9 Apr 2024 · Tags: CWE-197
- [Windows Cryptographic Services Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-29050.md)
  `CVE-2024-29050` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.4 High · Not analysed yet · Published 9 Apr 2024 · Tags: CWE-197
- [Microsoft ODBC Driver Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-21440.md)
  `CVE-2024-21440` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 12 Mar 2024 · Tags: CWE-197
- [Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-21434.md)
  `CVE-2024-21434` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 Mar 2024 · Tags: CWE-197
- [Microsoft ODBC Driver Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-21451.md)
  `CVE-2024-21451` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 12 Mar 2024 · Tags: CWE-197
- [Windows USB Hub Driver Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-21429.md)
  `CVE-2024-21429` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 12 Mar 2024 · Tags: CWE-197
- [Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-21391.md)
  `CVE-2024-21391` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 Feb 2024 · Tags: CWE-197
- [Windows DNS Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2024-21377.md)
  `CVE-2024-21377` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Feb 2024 · Tags: CWE-197
- [Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-21352.md)
  `CVE-2024-21352` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 Feb 2024 · Tags: CWE-197
- [Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-21310.md)
  `CVE-2024-21310` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Critical (CVSS 7+ and EPSS) · EPSS 0.12 · Not analysed yet · Published 9 Jan 2024 · Tags: CWE-197
- [Fortinet FortiOS: A numeric truncation error vulnerability in Fortinet FortiOS 7.4.0…](https://agentprime.io/advisories/CVE-2023-36641.md)
  `CVE-2023-36641` · CVE record: Fortinet FortiOS and 1 more · CVSS 6.2 Medium · Not analysed yet · Published 14 Nov 2023 · Tags: CWE-197
- [Windows Media Foundation Core Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-36710.md)
  `CVE-2023-36710` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 10 Oct 2023 · Tags: CWE-197
- [Windows Transaction Manager Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2023-35328.md)
  `CVE-2023-35328` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 11 Jul 2023 · Tags: CWE-197
- [Fortinet FortiProxy: A heap-based buffer overflow vulnerability \[CWE-122\] in FortiOS SSL-VPN 7.2.0 through…](https://agentprime.io/advisories/CVE-2022-42475.md)
  `CVE-2022-42475` · CVE record: Fortinet FortiProxy and 1 more · CVSS 9.3 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV, ransomware · EPSS 0.99 · Not analysed yet · Published 2 Jan 2023 · Tags: CWE-197
- [NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an integer truncation can lead to an out-of-bounds read, which may lead to denial of service.](https://agentprime.io/advisories/CVE-2022-34680.md)
  `CVE-2022-34680` · CVE record: NVIDIA vGPU software (guest driver) - Linux, vGPU software (Virtual GPU Manager), NVIDIA Cloud Gaming (guest driver), NVIDIA Cloud Gaming (Virtual GPU Manager) · CVSS 5.5 Medium · Not analysed yet · Published 30 Dec 2022 · Tags: CWE-197
- [NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an out-of-bounds read may lead to denial of service, information disclosure, or data tampering.](https://agentprime.io/advisories/CVE-2022-34676.md)
  `CVE-2022-34676` · CVE record: NVIDIA vGPU software (guest driver) - Linux, vGPU software (Virtual GPU Manager), NVIDIA Cloud Gaming (guest driver), NVIDIA Cloud Gaming (Virtual GPU Manager) · CVSS 7.1 High · Not analysed yet · Published 30 Dec 2022 · Tags: CWE-197
- [NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an unprivileged regular user can cause truncation errors when casting a primitive to a primitive o…](https://agentprime.io/advisories/CVE-2022-34670.md)
  `CVE-2022-34670` · CVE record: NVIDIA vGPU software (guest driver) - Linux, vGPU software (Virtual GPU Manager), NVIDIA Cloud Gaming (guest driver), NVIDIA Cloud Gaming (Virtual GPU Manager) · CVSS 7.8 High · Not analysed yet · Published 30 Dec 2022 · Tags: CWE-197
- [Integer truncation in Shard API usage](https://agentprime.io/advisories/GHSA-h6fg-mjxg-hqq4.md)
  `GHSA-h6fg-mjxg-hqq4`, `BIT-tensorflow-2020-15202`, `CVE-2020-15202`, `PYSEC-2020-125`, `PYSEC-2020-282`, `PYSEC-2020-317` · PyPI `tensorflow` and 2 more: affected `<1.15.4 || >=2.0.0, <2.0.3 || >=2.1.0, <2.1.2 || >=2.2.0, <2.2.1 || >=2.3.0, <2.3.1`, fixed in `1.15.4`, `2.0.3`, `2.1.2`, `2.2.1`, `2.3.1` · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Sept 2020 · Tags: CWE-197, CWE-754

Newest: <https://agentprime.io/advisories/tag/cwe-197.md>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-197&cursor=WyIyMDI2LTA1LTEyVDE2OjU4OjQxLjEwNjAwMFoiLCJDVkUtMjAyNi00MDM4MCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-197/?cursor=WyIyMDI2LTA1LTEyVDE2OjU4OjQxLjEwNjAwMFoiLCJDVkUtMjAyNi00MDM4MCJd>. Everything for agents: <https://agentprime.io/llms.txt>.