Advisories · Weakness

CWE-197.

Every Advisory and CVE whose sources give the weakness CWE-197, newest first.

CVE-2026-107479 CVE record

CVSS 1.7 Low

Integer truncation vulnerability in QTextCodec conversion functions impacts Qt Framework
- Qt
- CWE-197
Not analysed yet 4 Nov 2026
CVE-2026-117069 CVE record

CVSS 7.5 High

An integer truncation vulnerability in the NAS decoder of OpenAirInterface (OAI) CN5G AMF v2.2.1 allows an unauthenticated remote attacker to cause a denial of service (DoS) via crafted NAS Registrat…
- CWE-197
Not analysed yet 2 Nov 2026
CVE-2026-116742 CVE record

CVSS 4.8 Medium

HTSlib through 1.24 Heap Out-of-Bounds Write via Truncated .gzi Index Count
- samtools htslib
- CWE-197
Not analysed yet 26 Oct 2026
CVE-2026-116012 CVE record

CVSS 2.0 Low

Ghidra before 12.2 Integer Truncation in PackedDecode::skipAttribute Decompiler Parser
- NationalSecurityAgency ghidra
- CWE-197
Not analysed yet 24 Oct 2026
wasmtime crates.io

CVSS 9.9 CriticalCritical · CVSS 9+

Bit-packing in Cranelift compiler causes silent overflow and miscompilation
- Memory corruption
- CWE-197
>=0.0.0-0, <36.0.19 || >=37.0.0, <43.0.0 · fixed in 36.0.19, 43.0.0

GHSA-897f-g5gm-fmxm · CVE-2026-115889 Not analysed yet 19 Oct 2026
CVE-2026-109588 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Numeric truncation in the MPU buffer authorization check in FreeRTOS-Kernel
- FreeRTOS-Kernel
- Memory corruption
- CWE-197
Not analysed yet 16 Oct 2026
CVE-2026-108451 CVE record

CVSS 8.8 High

Microsoft Office Word Remote Code Execution Vulnerability
- Microsoft 365 Apps for Enterprise
- Microsoft Office LTSC 2021
- Memory corruption
- CWE-197
Not analysed yet 15 Oct 2026
CVE-2026-108450 CVE record

CVSS 8.8 High

Microsoft Office Word Remote Code Execution Vulnerability
- Microsoft 365 Apps for Enterprise
- Microsoft Office LTSC 2021
- Memory corruption
- CWE-197
Not analysed yet 15 Oct 2026
CVE-2026-111105 CVE record

CVSS 7.0 High

Telegram rlottie Numeric Truncation Remote Code Execution Vulnerability
- Telegram
- CWE-197
Not analysed yet 15 Oct 2026
CVE-2026-33795 CVE record

CVSS 8.7 High

Junos OS and Junos OS Evolved: An attacker causes a routing-daemon crash when BGP Prefix-SID routes are re-advertised
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-197
Not analysed yet 14 Oct 2026
CVE-2026-102043 CVE record

CVSS 7.1 High

Junos OS and Junos OS Evolved: An attacker causes a routing-process crash when MPLS-TE fast reroute is enabled
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-197
Not analysed yet 14 Oct 2026
CVE-2026-96113 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Windows Domain Name Service Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CWE-197
Not analysed yet 13 Oct 2026
CVE-2026-102225 CVE record

CVSS 8.8 High

Windows Text Shaping Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CWE-197
Not analysed yet 13 Oct 2026
CVE-2026-100201 CVE record

CVSS 7.0 High

Windows Client License Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
- CWE-197
Not analysed yet 13 Oct 2026
CVE-2026-96995 CVE record

CVSS 7.8 High

Microsoft Office Word Elevation of Privilege Vulnerability
- Microsoft 365 Apps for Enterprise
- Microsoft Office 365 for Mac
- Memory corruption
- CWE-197
Not analysed yet 13 Oct 2026
CVE-2026-85796 CVE record

CVSS 7.8 High

Windows Installer Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CWE-197
Not analysed yet 13 Oct 2026
CVE-2026-70177 CVE record

CVSS 7.8 High

Microsoft Windows Search Component Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- CWE-20
- CWE-197
Not analysed yet 13 Oct 2026
CVE-2026-70123 CVE record

CVSS 7.8 High

Microsoft Graphics Component Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CWE-197
Not analysed yet 13 Oct 2026
CVE-2026-105768 CVE record

CVSS 6.3 Medium

apko /etc/passwd and /etc/group UID/GID truncation writes package-supplied entries as root
- chainguard-dev apko
- CWE-197
Not analysed yet 5 Oct 2026
CVE-2026-101085 CVE record

CVSS 7.1 High

Nezha before 2.3.8 Denial of Service via Alert Rule
- nezha
- CWE-197
Not analysed yet 27 Sept 2026
CVE-2026-96280 CVE record

CVSS 7.5 High

Flatpak: flatpak: buffer overflow in oci delta stream path names on 32-bit systems
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- CWE-197
Not analysed yet 27 Sept 2026
CVE-2026-63449 CVE record

CVSS 3.7 Low

Suricata sip: large SIP message bodies can evade detection with frame keyword
- OISF suricata
- CWE-197
Not analysed yet 18 Sept 2026
CVE-2026-19667 CVE record

CVSS 7.5 High

Remote assertion failure via 16-bit length truncation in `dns_ncache_add()`
- ISC BIND 9
- CWE-197
Not analysed yet 16 Sept 2026
CVE-2026-76151 CVE record

CVSS 4.6 Medium

Out-of-bounds read (buffer over-read) vulnerability in HTTP Cache-Control response header parsing impacts Qt Framework (QtNetwork module)
- qt
- Memory corruption
- CWE-197
Not analysed yet 16 Sept 2026
CVE-2026-87529 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Google Chrome: Numeric truncation error in Media in Google Chrome prior to 153.0.8010.36 allowed a…
- Google Chrome
- CWE-197
Not analysed yet 9 Sept 2026
CVE-2026-78512 CVE record

CVSS 8.8 High

Microsoft Office Word Remote Code Execution Vulnerability
- Microsoft 365 Apps for Enterprise
- Microsoft Office 2016
- Memory corruption
- CWE-197
Not analysed yet 8 Sept 2026
CVE-2026-69535 CVE record

CVSS 7.8 High

Windows Spaceport.sys Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Memory corruption
- CWE-197
Not analysed yet 8 Sept 2026
CVE-2026-69512 CVE record

CVSS 8.0 High

Windows Spaceport.sys Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CWE-197
Not analysed yet 8 Sept 2026
CVE-2026-69578 CVE record

CVSS 7.0 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CWE-197
Not analysed yet 8 Sept 2026
CVE-2026-68895 CVE record

CVSS 5.5 Medium

Internet Storage Name Service Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- CWE-197
Not analysed yet 8 Sept 2026
CVE-2026-68880 CVE record

CVSS 8.0 High

Windows Win32k Elevation of Privilege Vulnerability
- Microsoft Office 365 for Mac
- Microsoft Office for Android
- Memory corruption
- CWE-197
Not analysed yet 8 Sept 2026
CVE-2026-69822 CVE record

CVSS 7.8 High

Windows Kerberos Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
- CWE-197
Not analysed yet 8 Sept 2026
CVE-2026-86315 CVE record

CVSS 6.2 Medium

Samsung Opensource Escargot: An out-of-bounds write caused by numeric truncation Samsung Open Source Escargot on Linux…
- Samsung Opensource Escargot
- CWE-197
Not analysed yet 7 Sept 2026
CVE-2026-80213 CVE record

CVSS 4.0 Medium

An issue was discovered in the resolv gem before 0.7.2 for Ruby.
- Ruby resolv
- CWE-197
Not analysed yet 27 Aug 2026
CVE-2026-77014 CVE record

CVSS 5.3 Medium

Libsoup: libsoup: integer truncation in sort_ranges() comparator causes silent omission of http range responses
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6
- CWE-197
Not analysed yet 20 Aug 2026
CVE-2026-65610 CVE record

CVSS 2.4 Low

Numeric Truncation Error in nnn
- nnn
- CWE-197
Not analysed yet 19 Aug 2026
CVE-2026-73523 CVE record

CVSS 8.7 High

COVESA Open1722 0.9.2 Stack Memory Disclosure via acf-can-listener.c Integer Truncation
- COVESA Open1722
- CWE-197
Not analysed yet 17 Aug 2026
CVE-2026-49263 CVE record

CVSS 2.0 Low

Capstone WASM `br_table` instruction-size truncation can cause no-progress disassembly and parser desynchronization
- capstone
- CWE-197
Not analysed yet 14 Aug 2026
CVE-2026-68804 CVE record

CVSS 7.8 High

Microsoft Excel Remote Code Execution Vulnerability
- Microsoft 365 Apps for Enterprise
- Microsoft Excel 2016
- Memory corruption
- CWE-197
Not analysed yet 11 Aug 2026
CVE-2026-65798 CVE record

CVSS 6.7 Medium

Windows DNS Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- CWE-197
Not analysed yet 11 Aug 2026
CVE-2026-65797 CVE record

CVSS 6.7 Medium

Windows DNS Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CWE-197
Not analysed yet 11 Aug 2026
CVE-2026-65795 CVE record

CVSS 6.7 Medium

Windows DNS Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- CWE-197
Not analysed yet 11 Aug 2026
CVE-2026-63525 CVE record

CVSS 7.8 High

Microsoft Office Word Remote Code Execution Vulnerability
- Microsoft 365 Apps for Enterprise
- Microsoft Office 2019
- CWE-197
Not analysed yet 11 Aug 2026
CVE-2026-62883 CVE record

CVSS 6.7 Medium

Windows DNS Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CWE-197
Not analysed yet 11 Aug 2026
CVE-2026-62881 CVE record

CVSS 6.7 Medium

Windows DNS Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CWE-197
Not analysed yet 11 Aug 2026
CVE-2026-62769 CVE record

CVSS 6.7 Medium

Windows DNS Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CWE-197
Not analysed yet 11 Aug 2026
CVE-2026-62698 CVE record

CVSS 7.8 High

Microsoft Digest Authentication Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- CWE-197
Not analysed yet 11 Aug 2026
CVE-2026-62739 CVE record

CVSS 7.8 High

Windows HTTP.sys Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
- CWE-197
Not analysed yet 11 Aug 2026
CVE-2026-56650 CVE record

CVSS 7.8 High

Windows Network File System Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CWE-197
Not analysed yet 14 Jul 2026
CVE-2026-55142 CVE record

CVSS 5.5 Medium

Microsoft Word Information Disclosure Vulnerability
- Microsoft 365 Apps for Enterprise
- Microsoft Office 2019
- CWE-197
Not analysed yet 14 Jul 2026
CVE-2026-50357 CVE record

CVSS 7.8 High

Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- CWE-197
Not analysed yet 14 Jul 2026
CVE-2026-50332 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CWE-197
Not analysed yet 14 Jul 2026
CVE-2026-49792 CVE record

CVSS 7.8 High

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- CWE-197
Not analysed yet 14 Jul 2026
CVE-2026-6679 CVE record

CVSS 8.8 High

DTLS 1.3 ACK serialization heap buffer overflow via integer truncation
- wolfSSL
- Memory corruption
- CWE-197
Not analysed yet 25 Jun 2026
CVE-2026-6039 CVE record

CVSS 5.4 Medium

Heap buffer overflow in DXF polyline import
- The Document Foundation LibreOffice
- Memory corruption
- CWE-197
Not analysed yet 15 Jun 2026
CVE-2026-44823 CVE record

CVSS 7.8 High

Microsoft Excel Remote Code Execution Vulnerability
- Microsoft 365 Apps for Enterprise
- Microsoft Excel 2016
- Memory corruption
- CWE-197
Not analysed yet 9 Jun 2026
CVE-2026-40404 CVE record

CVSS 7.8 High

Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CWE-197
Not analysed yet 9 Jun 2026
CVE-2026-40409 CVE record

CVSS 7.8 High

Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- CWE-197
Not analysed yet 9 Jun 2026
CVE-2026-42944 CVE record

CVSS 8.7 High

Heap overflow with multiple NSID, COOKIE, PADDING EDNS options
- NLnet Labs Unbound
- Memory corruption
- CWE-197
Not analysed yet 20 May 2026
CVE-2026-40380 CVE record

CVSS 6.2 Medium

Windows Volume Manager Extension Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CWE-197
Not analysed yet 12 May 2026