Advisories · Weakness

CWE-197.

Every Advisory and CVE whose sources give the weakness CWE-197, newest first.

CVE-2026-44927 CVE record

CVSS 2.9 Low

In uriparser before 1.0.2, there is pointer difference truncation to int in various places.
- uriparser
- CWE-197
Not analysed yet 8 May 2026
CVE-2026-42371 CVE record

CVSS 5.1 Medium

uriparser: uriparser before 1.0.1 has numeric truncation in text range comparison…
- uriparser
- CWE-197
Not analysed yet 27 Apr 2026
CVE-2026-32240 CVE record

CVSS 6.3 Medium

Cap'n Proto: Integer overflow in KJ-HTTP chunk size
- capnproto
- HTTP request smuggling
- CWE-197
Not analysed yet 12 Mar 2026
github.com/eclipse/paho.mqtt.golang Go

CVSS 6.3 Medium

Eclipse Paho Go MQTT may incorrectly encode strings if length exceeds 65535 bytes
- CWE-197
- CWE-681
<1.5.1 · fixed in 1.5.1

GHSA-32fw-gq77-f2f2 · CVE-2025-10543 Not analysed yet 2 Dec 2025
CVE-2025-53723 CVE record

CVSS 7.8 High

Windows Hyper-V Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
- CWE-197
Not analysed yet 12 Aug 2025
SQLitePCLRaw.lib.e_sqlite3 +2 NuGet

CVSS 7.2 HighCritical · CVSS 7+ and EPSS

SQLitePCLRaw.lib.e_sqlite3 has a vulnerable dependency on SQLite
- CWE-197
<=2.1.11 · no fixed version yet

GHSA-2m69-gcr7-jv3q · CVE-2025-6965 Not analysed yet 15 Jul 2025
CVE-2025-49679 CVE record

CVSS 7.8 High

Windows Shell Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-197
Not analysed yet 8 Jul 2025
CVE-2024-49018 CVE record

CVSS 8.8 High

SQL Server Native Client Remote Code Execution Vulnerability
- Microsoft SQL Server 2017 (GDR)
- Microsoft SQL Server 2019 (GDR)
- CWE-197
Not analysed yet 12 Nov 2024
CVE-2024-43639 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Windows KDC Proxy Remote Code Execution Vulnerability
- Microsoft Windows Server 2025
- Microsoft Windows Server 2025 (Server Core installation)
- CWE-197
Not analysed yet 12 Nov 2024
CVE-2024-43519 CVE record

CVSS 8.8 High

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-197
Not analysed yet 8 Oct 2024
CVE-2024-37337 CVE record

CVSS 7.1 High

Microsoft SQL Server Native Scoring Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- CWE-197
Not analysed yet 10 Sept 2024
CVE-2024-38125 CVE record

CVSS 7.8 High

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-197
Not analysed yet 13 Aug 2024
CVE-2024-38044 CVE record

CVSS 7.2 High

DHCP Server Service Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- CWE-197
Not analysed yet 9 Jul 2024
CVE-2024-38086 CVE record

CVSS 6.4 Medium

Azure Kinect SDK Remote Code Execution Vulnerability
- Microsoft Azure Kinect SDK
- CWE-197
Not analysed yet 9 Jul 2024
CVE-2024-30029 CVE record

CVSS 7.5 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-197
Not analysed yet 14 May 2024
CVE-2024-30024 CVE record

CVSS 7.5 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-197
Not analysed yet 14 May 2024
CVE-2024-30023 CVE record

CVSS 7.5 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-197
Not analysed yet 14 May 2024
CVE-2024-30022 CVE record

CVSS 7.5 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-197
Not analysed yet 14 May 2024
CVE-2024-30015 CVE record

CVSS 7.5 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-197
Not analysed yet 14 May 2024
CVE-2024-30014 CVE record

CVSS 7.5 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-197
Not analysed yet 14 May 2024
CVE-2024-30009 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-197
Not analysed yet 14 May 2024
CVE-2023-32143 CVE record

CVSS 8.8 High

D-Link DAP-1360 webupg UPGCGI_CheckAuth Numeric Truncation Remote Code Execution Vulnerability
- D-Link DAP-1360
- CWE-197
Not analysed yet 3 May 2024
CVE-2024-28944 CVE record

CVSS 8.8 High

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
- Microsoft SQL Server 2019 (GDR)
- Microsoft SQL Server 2022 (GDR)
- CWE-197
Not analysed yet 9 Apr 2024
CVE-2024-29050 CVE record

CVSS 8.4 High

Windows Cryptographic Services Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-197
Not analysed yet 9 Apr 2024
CVE-2024-21440 CVE record

CVSS 8.8 High

Microsoft ODBC Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-197
Not analysed yet 12 Mar 2024
CVE-2024-21434 CVE record

CVSS 7.8 High

Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-197
Not analysed yet 12 Mar 2024
CVE-2024-21451 CVE record

CVSS 8.8 High

Microsoft ODBC Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-197
Not analysed yet 12 Mar 2024
CVE-2024-21429 CVE record

CVSS 6.8 Medium

Windows USB Hub Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-197
Not analysed yet 12 Mar 2024
CVE-2024-21391 CVE record

CVSS 8.8 High

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-197
Not analysed yet 13 Feb 2024
CVE-2024-21377 CVE record

CVSS 5.5 Medium

Windows DNS Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-197
Not analysed yet 13 Feb 2024
CVE-2024-21352 CVE record

CVSS 8.8 High

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-197
Not analysed yet 13 Feb 2024
CVE-2024-21310 CVE record

CVSS 7.8 HighCritical · CVSS 7+ and EPSS

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-197
Not analysed yet 9 Jan 2024
CVE-2023-36641 CVE record

CVSS 6.2 Medium

Fortinet FortiOS: A numeric truncation error vulnerability in Fortinet FortiOS 7.4.0…
- Fortinet FortiOS
- Fortinet FortiProxy
- CWE-197
Not analysed yet 14 Nov 2023
CVE-2023-36710 CVE record

CVSS 7.8 High

Windows Media Foundation Core Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-197
Not analysed yet 10 Oct 2023
CVE-2023-35328 CVE record

CVSS 7.8 High

Windows Transaction Manager Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-197
Not analysed yet 11 Jul 2023
CVE-2022-42475 CVE record

CVSS 9.3 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV · ransomware

Fortinet FortiProxy: A heap-based buffer overflow vulnerability [CWE-122] in FortiOS SSL-VPN 7.2.0 through…
- Fortinet FortiProxy
- Fortinet FortiOS
- CWE-197
Not analysed yet 2 Jan 2023
CVE-2022-34680 CVE record

CVSS 5.5 Medium

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an integer truncation can lead to an out-of-bounds read, which may lead to denial of service.
- vGPU software (guest driver) - Linux, vGPU software (Virtual GPU Manager), NVIDIA Cloud Gaming (guest driver), NVIDIA Cloud Gaming (Virtual GPU Manager)
- CWE-197
Not analysed yet 30 Dec 2022
CVE-2022-34676 CVE record

CVSS 7.1 High

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an out-of-bounds read may lead to denial of service, information disclosure, or data tampering.
- vGPU software (guest driver) - Linux, vGPU software (Virtual GPU Manager), NVIDIA Cloud Gaming (guest driver), NVIDIA Cloud Gaming (Virtual GPU Manager)
- CWE-197
Not analysed yet 30 Dec 2022
CVE-2022-34670 CVE record

CVSS 7.8 High

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an unprivileged regular user can cause truncation errors when casting a primitive to a primitive o…
- vGPU software (guest driver) - Linux, vGPU software (Virtual GPU Manager), NVIDIA Cloud Gaming (guest driver), NVIDIA Cloud Gaming (Virtual GPU Manager)
- CWE-197
Not analysed yet 30 Dec 2022
tensorflow +2 PyPI

CVSS 9.0 CriticalCritical · CVSS 9+

Integer truncation in Shard API usage
- CWE-197
- CWE-754
<1.15.4 || >=2.0.0, <2.0.3 || >=2.1.0, <2.1.2 || >=2.2.0, <2.2.1 || >=2.3.0, <2.3.1 · fixed in 1.15.4, 2.0.3, 2.1.2, 2.2.1, 2.3.1

GHSA-h6fg-mjxg-hqq4 · CVE-2020-15202 Not analysed yet 25 Sept 2020