# CWE-665.

Every Advisory and CVE whose sources give the weakness CWE-665, newest first.

## Records, newest first

- [Session Smart Router: An incomplete operator causes the use of incorrect encryption keys during security policy updates.](https://agentprime.io/advisories/CVE-2026-103394.md)
  `CVE-2026-103394` · CVE record: Juniper Networks Session Smart Router · CVSS 3.7 Low · Not analysed yet · Published 28 Oct 2026 · Tags: CWE-665
- [Yoosee GM8135S Camera WiFi Configuration wpa_supplicantX.conf initialization](https://agentprime.io/advisories/CVE-2026-116115.md)
  `CVE-2026-116115` · CVE record: Yoosee GM8135S Camera · CVSS 2.3 Low · Not analysed yet · Published 26 Oct 2026 · Tags: CWE-665
- [Junos OS and Junos OS Evolved: A remote BGP peer causes an rpd crash when long-lived graceful restart (LLGR) is used](https://agentprime.io/advisories/CVE-2026-101957.md)
  `CVE-2026-101957` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 14 Oct 2026 · Tags: CWE-665
- [Memory corruption (double free / use-after-free) vulnerability in core string handling impacts Qt for MCUs](https://agentprime.io/advisories/CVE-2026-94370.md)
  `CVE-2026-94370` · CVE record: qt Qt_for_MCUs · CVSS 6.5 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption, CWE-590, CWE-665
- [MISP Correlation Engine Fails to Refresh When Event Distribution or Sharing Group Changes](https://agentprime.io/advisories/CVE-2026-107175.md)
  `CVE-2026-107175` · CVE record: MISP MISP · CVSS 5.3 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Broken access control, CWE-665
- [Improper initialization in an ASUS certain motherboard allows an physically proximate user to read or write arbitrary memory by inserting a specially crafted device.](https://agentprime.io/advisories/CVE-2026-93495.md)
  `CVE-2026-93495` · CVE record: ASUS Motherboard(PRIME Z390-A ) and 4 more · CVSS 7.0 High · Not analysed yet · Published 1 Oct 2026 · Tags: CWE-665
- [Suricata smtp/mime: incomplete state reset allows detection bypass](https://agentprime.io/advisories/CVE-2026-57229.md)
  `CVE-2026-57229` · CVE record: OISF suricata · CVSS 5.3 Medium · Not analysed yet · Published 18 Sept 2026 · Tags: CWE-665
- [Google Chrome: Improper initialization in Views in Google Chrome on on Windows prior to 153.0.8010.36…](https://agentprime.io/advisories/CVE-2026-87616.md)
  `CVE-2026-87616` · CVE record: Google Chrome · CVSS 8.3 High · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-665
- [Google Chrome: Improper initialization in Network in Google Chrome prior to 152.0.7977.65 allowed a…](https://agentprime.io/advisories/CVE-2026-78940.md)
  `CVE-2026-78940` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: CWE-665
- [device property: initialize the remaining fields of fwnode_handle in fwnode_init()](https://agentprime.io/advisories/CVE-2026-68461.md)
  `CVE-2026-68461` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 15 Aug 2026 · Tags: CWE-665
- [Uninitialized mutex in TLS trusted-credential backend causes kernel NULL-deref DoS under contention](https://agentprime.io/advisories/CVE-2026-12233.md)
  `CVE-2026-12233` · CVE record: zephyrproject zephyr · CVSS 5.9 Medium · Not analysed yet · Published 12 Aug 2026 · Tags: CWE-665
- [Intel(R) Active Management Technology (Intel(R) AMT)…: Improper initialization in some firmware for some Intel(R) Active Management Technology…](https://agentprime.io/advisories/CVE-2026-20734.md)
  `CVE-2026-20734` · CVE record: Intel(R) Active Management Technology (Intel(R) AMT), and some Intel(R) Standard Manageability may allow an information disclosure. System software adversary with a privileged user combined with a low complexity attack may enable data exposure. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts. · CVSS 5.6 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: CWE-665
- [correct buffer checks for DM_OP hypercalls](https://agentprime.io/advisories/CVE-2026-62433.md)
  `CVE-2026-62433` · CVE record: Xen Xen · CVSS 7.3 High · Not analysed yet · Published 28 Jul 2026 · Tags: CWE-665
- [A memory initialization issue was addressed with improved memory handling.](https://agentprime.io/advisories/CVE-2026-64775.md)
  `CVE-2026-64775` · CVE record: Apple iOS and iPadOS and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Jul 2026 · Tags: CWE-665
- [mm/slab: do not limit zeroing to orig_size when only red zoning is enabled](https://agentprime.io/advisories/CVE-2026-64368.md)
  `CVE-2026-64368` · CVE record: Linux Linux · CVSS 8.1 High · Not analysed yet · Published 25 Jul 2026 · Tags: CWE-665
- [igc: set tx buffer type for SMD frames](https://agentprime.io/advisories/CVE-2026-64035.md)
  `CVE-2026-64035` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Jul 2026 · Tags: CWE-665
- [NFSD: Fix SECINFO_NO_NAME decode error cleanup](https://agentprime.io/advisories/CVE-2026-53398.md)
  `CVE-2026-53398` · CVE record: Linux Linux · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Jul 2026 · Tags: CWE-665
- [Quicly is vulnerable to stateless reset injection](https://agentprime.io/advisories/CVE-2026-44434.md)
  `CVE-2026-44434` · CVE record: h2o quicly · CVSS 5.3 Medium · Not analysed yet · Published 16 Jul 2026 · Tags: CWE-345, CWE-665
- [Ubiquiti Inc UniFi Protect Application: A malicious actor with access to the network and under certain conditions could exploit…](https://agentprime.io/advisories/CVE-2026-54409.md)
  `CVE-2026-54409` · CVE record: Ubiquiti Inc UniFi Protect Application · CVSS 7.5 High · Not analysed yet · Published 2 Jul 2026 · Tags: CWE-665
- [CoreWCF NetNamedPipe transport accepts attach to a pre-existing named pipe instance](https://agentprime.io/advisories/GHSA-6jj2-4q5c-x8g6.md)
  `GHSA-6jj2-4q5c-x8g6`, `CVE-2026-54777` · NuGet `CoreWCF.NetNamedPipe`: affected `<1.8.1 || >=1.9.0, <1.9.1`, fixed in `1.8.1`, `1.9.1` · CVSS 6.5 Medium · Not analysed yet · Published 19 Jun 2026 · Tags: Race condition, CWE-665
- [DOMPurify: Permanent \`ALLOWED_ATTR\` pollution via \`setConfig()\` bypassing the hook clone-guard (incomplete fix of the 3.4.7 hook-pollution patch)](https://agentprime.io/advisories/GHSA-cmwh-pvxp-8882.md)
  `GHSA-cmwh-pvxp-8882`, `CVE-2026-65898` · npm `dompurify`: affected `<3.4.11`, fixed in `3.4.11` · CVSS 5.1 Medium · Not analysed yet · Published 18 Jun 2026 · Tags: Cross-site scripting (XSS), CWE-471, CWE-665
- [Docker Sandboxes ICMP egress restriction bypass after daemon restart](https://agentprime.io/advisories/CVE-2026-12539.md)
  `CVE-2026-12539` · CVE record: Docker Docker Sandboxes · CVSS 5.1 Medium · Not analysed yet · Published 18 Jun 2026 · Tags: CWE-665, CWE-923
- [aiohttp: Host-Only Cookies Become Domain Cookies After CookieJar Persistence](https://agentprime.io/advisories/GHSA-2fqr-mr3j-6wp8.md)
  `GHSA-2fqr-mr3j-6wp8`, `CVE-2026-54279`, `PYSEC-2026-2112` · PyPI `aiohttp`: affected `<3.14.1`, fixed in `3.14.1` · CVSS 1.3 Low · Not analysed yet · Published 15 Jun 2026 · Tags: CWE-665
- [Intel platforms: Improper initialization in the UEFI firmware for some Intel platforms within Ring 0: Bare…](https://agentprime.io/advisories/CVE-2025-35991.md)
  `CVE-2025-35991` · CVE record: Intel platforms · CVSS 5.6 Medium · Not analysed yet · Published 12 May 2026 · Tags: CWE-665
- [cifs: some missing initializations on replay](https://agentprime.io/advisories/CVE-2026-31693.md)
  `CVE-2026-31693` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 30 Apr 2026 · Tags: CWE-665
- [Meridian: Multiple defense-in-depth gaps (collection/depth caps, telemetry, retry, fan-out)](https://agentprime.io/advisories/GHSA-f5v8-v6q3-q4h6.md)
  `GHSA-f5v8-v6q3-q4h6` · NuGet `Meridian.Mapping` and 1 more: affected `>=2.0.0, <2.1.1`, fixed in `2.1.1` · CVSS 7.5 High · Not analysed yet · Published 16 Apr 2026 · Tags: Information disclosure, Denial of service, CWE-665, CWE-1325
- [iccDEV: DoS in CIccCLUT::Iterate() & CIccMBB::Describe()](https://agentprime.io/advisories/CVE-2026-34553.md)
  `CVE-2026-34553` · CVE record: InternationalColorConsortium iccDEV · CVSS 4.0 Medium · Not analysed yet · Published 31 Mar 2026 · Tags: CWE-562, CWE-665
- [media: dvb-core: fix wrong reinitialization of ringbuffer on reopen](https://agentprime.io/advisories/CVE-2026-23253.md)
  `CVE-2026-23253` · CVE record: Linux Linux · CVSS 7.8 High · Not analysed yet · Published 18 Mar 2026 · Tags: CWE-665
- [A potential improper initialization vulnerability was reported in the BIOS of some ThinkPads that could allow a local privileged user to modify data and execute arbitrary code.](https://agentprime.io/advisories/CVE-2026-0940.md)
  `CVE-2026-0940` · CVE record: Lenovo ThinkPad T14 Gen 5 BIOS and 4 more · CVSS 8.4 High · Not analysed yet · Published 11 Mar 2026 · Tags: CWE-665
- [An issue was discovered in LBS in Samsung Mobile Processor Exynos 2200.](https://agentprime.io/advisories/CVE-2025-66363.md)
  `CVE-2025-66363` · CVE record · CVSS 7.5 High · Not analysed yet · Published 3 Mar 2026 · Tags: CWE-665
- [filippo.io/edwards25519 MultiScalarMult produces invalid results or undefined behavior if receiver is not the identity](https://agentprime.io/advisories/GHSA-fw7p-63qq-7hpr.md)
  `GHSA-fw7p-63qq-7hpr`, `CVE-2026-26958`, `GO-2026-4503` · Go `filippo.io/edwards25519`: affected `<1.1.1`, fixed in `1.1.1` · CVSS 1.7 Low · Not analysed yet · Published 18 Feb 2026 · Tags: CWE-665
- [Missing Checks in certain functions related to RMP initialization can allow a local admin privileged attacker to cause misidentification of I/O memory, potentially resulting in a loss of guest memory…](https://agentprime.io/advisories/CVE-2025-48509.md)
  `CVE-2025-48509` · CVE record: AMD AMD EPYC™ 9004 Series Processors and 4 more · CVSS 1.8 Low · Not analysed yet · Published 10 Feb 2026 · Tags: CWE-665
- [Intel(R) Ethernet 800-Series: Improper initialization for some ESXi kernel mode driver for the Intel(R) Ethernet…](https://agentprime.io/advisories/CVE-2025-25058.md)
  `CVE-2025-25058` · CVE record: Intel(R) Ethernet 800-Series · CVSS 2.0 Low · Not analysed yet · Published 10 Feb 2026 · Tags: CWE-665
- [x86: incomplete IBPB for vCPU isolation](https://agentprime.io/advisories/CVE-2026-23553.md)
  `CVE-2026-23553` · CVE record: Xen Xen · CVSS 2.9 Low · Not analysed yet · Published 28 Jan 2026 · Tags: CWE-665, CWE-693
- [erspan: Initialize options_len before referencing options.](https://agentprime.io/advisories/CVE-2025-71128.md)
  `CVE-2025-71128` · CVE record: Linux Linux · CVSS 7.5 High · Not analysed yet · Published 14 Jan 2026 · Tags: CWE-665
- [Open5GS PFCP handler.c ogs_pfcp_handle_create_pdr initialization](https://agentprime.io/advisories/CVE-2025-14955.md)
  `CVE-2025-14955` · CVE record: Open5GS · CVSS 6.3 Medium · Not analysed yet · Published 19 Dec 2025 · Tags: CWE-665
- [Improper resource management in firmware of some Solidigm DC Products may allow an attacker with local or physical access to gain un-authorized access to a locked Storage Device or create a Denial of…](https://agentprime.io/advisories/CVE-2025-12902.md)
  `CVE-2025-12902` · CVE record: Solidigm™ D5-P5316, D5-P5430, D7-P5520/D7-P5620, D5-P5336 · CVSS 4.4 Medium · Not analysed yet · Published 7 Nov 2025 · Tags: CWE-665
- [BMC Control-M/Agent memory corruption in SSL/TLS communication](https://agentprime.io/advisories/CVE-2025-55118.md)
  `CVE-2025-55118` · CVE record: BMC Control-M/Agent · CVSS 8.4 High · Not analysed yet · Published 16 Sept 2025 · Tags: Memory corruption, Denial of service, CWE-665
- [Improper initialization of CPU cache memory could allow a privileged attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity.](https://agentprime.io/advisories/CVE-2024-36331.md)
  `CVE-2024-36331` · CVE record: AMD AMD EPYC™ 9004 Series Processors and 2 more · CVSS 3.2 Low · Not analysed yet · Published 6 Sept 2025 · Tags: CWE-665
- [ArrayQueue's push_front is not panic-safe](https://agentprime.io/advisories/GHSA-xqjr-wfx3-gmxv.md)
  `GHSA-xqjr-wfx3-gmxv`, `RUSTSEC-2025-0054` · crates.io `array-queue`: affected `>=0.3.0, <0.4.0`, fixed in `0.4.0` · CVSS 4.0, no score published · Not analysed yet · Published 2 Sept 2025 · Tags: CWE-665
- [IdMap from_iter may lead to uninitialized memory being freed on drop](https://agentprime.io/advisories/GHSA-qq4c-hm99-979m.md)
  `GHSA-qq4c-hm99-979m`, `RUSTSEC-2025-0050` · crates.io `id-map`: affected `>=0.1.6, <0.2.2`, fixed in `0.2.2` · CVSS 4.0, no score published · Not analysed yet · Published 18 Aug 2025 · Tags: CWE-665
- [Intel(R) I350 Series Ethernet: Improper initialization in the Linux kernel-mode driver for some Intel(R) I350 Series…](https://agentprime.io/advisories/CVE-2025-24511.md)
  `CVE-2025-24511` · CVE record: Intel(R) I350 Series Ethernet · CVSS 2.0 Low · Not analysed yet · Published 12 Aug 2025 · Tags: CWE-665
- [ThirdPartyVideo SetVariable Vulnerability](https://agentprime.io/advisories/CVE-2025-22834.md)
  `CVE-2025-22834` · CVE record: AMI AptioV · CVSS 4.2 Medium · Not analysed yet · Published 12 Aug 2025 · Tags: CWE-665
- [The strncmp implementation optimized for the Power10 processor in the GNU C Library version 2.40 and later writes to vector registers v20 to v31 without saving contents from the caller (those registe…](https://agentprime.io/advisories/CVE-2025-5745.md)
  `CVE-2025-5745` · CVE record: The GNU C Library glibc · CVSS 5.6 Medium · Not analysed yet · Published 5 Jun 2025 · Tags: CWE-665
- [The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those register…](https://agentprime.io/advisories/CVE-2025-5702.md)
  `CVE-2025-5702` · CVE record: The GNU C Library glibc · CVSS 5.6 Medium · Not analysed yet · Published 5 Jun 2025 · Tags: CWE-665
- [Intel(R) Server D50DNP and M50FCP boards: Improper initialization in the UEFI firmware for the Intel(R) Server D50DNP and M50FCP…](https://agentprime.io/advisories/CVE-2025-21100.md)
  `CVE-2025-21100` · CVE record: Intel(R) Server D50DNP and M50FCP boards · CVSS 5.6 Medium · Not analysed yet · Published 13 May 2025 · Tags: CWE-665
- [@misskey-dev/summaly Redirect Filter Bypass](https://agentprime.io/advisories/GHSA-7899-w6c4-vqc4.md)
  `GHSA-7899-w6c4-vqc4`, `CVE-2025-46553` · npm `@misskey-dev/summaly`: affected `>=3.0.1, <5.2.1`, fixed in `5.2.1` · CVSS 2.1 Low · Not analysed yet · Published 5 May 2025 · Tags: Open redirect, CWE-665, CWE-669, CWE-693
- [A vulnerability was found in PyTorch 2.6.0+cu124. It has been rated as problematic. Affected by this issue is the function nnq_Sigmoid of the component Quantized Sigmoid Module. The manipulation of...](https://agentprime.io/advisories/GHSA-x3gm-94wq-g975.md)
  `GHSA-x3gm-94wq-g975`, `BIT-pytorch-2025-2149`, `CVE-2025-2149`, `PYSEC-2025-190` · PyPI `torch`: affected , no fixed version yet · CVSS 2.0 Low · Not analysed yet · Published 10 Mar 2025 · Tags: CWE-665
- [An issue in Bento4 v1.6.0-641 allows an attacker to trigger a segmentation fault via Ap4Atom.cpp, specifically in AP4_AtomParent::RemoveChild, during the execution of mp4encrypt with a specially craf…](https://agentprime.io/advisories/CVE-2025-25947.md)
  `CVE-2025-25947` · CVE record · CVSS 5.5 Medium · Not analysed yet · Published 19 Feb 2025 · Tags: CWE-665
- [Intel(R) Processors: Improper initialization in UEFI firmware OutOfBandXML module in some Intel(R) Processors…](https://agentprime.io/advisories/CVE-2024-31157.md)
  `CVE-2024-31157` · CVE record: Intel(R) Processors · CVSS 6.8 Medium · Not analysed yet · Published 12 Feb 2025 · Tags: CWE-665
- [Intel(R) AMT and Intel(R) Standard Manageability: Improper initialization in the firmware for some Intel(R) AMT and Intel(R) Standard…](https://agentprime.io/advisories/CVE-2024-26021.md)
  `CVE-2024-26021` · CVE record: Intel(R) AMT and Intel(R) Standard Manageability · CVSS 4.6 Medium · Not analysed yet · Published 12 Feb 2025 · Tags: CWE-665
- [Rockwell Automation Arena® Uninitialized Vulnerability](https://agentprime.io/advisories/CVE-2024-11158.md)
  `CVE-2024-11158` · CVE record: Rockwell Automation Arena® · CVSS 8.5 High · Not analysed yet · Published 5 Dec 2024 · Tags: CWE-665
- [Improper Initialization of \`imc\` Scheme Leading to \`SIGABRT\` in ION-DTN BPv7](https://agentprime.io/advisories/CVE-2024-54129.md)
  `CVE-2024-54129` · CVE record: nasa-jpl ION-DTN · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Dec 2024 · Tags: CWE-665
- [Intel(R) PROSet/Wireless Software and Intel(R) Killer(TM)…: Improper initialization in firmware for some Intel(R) PROSet/Wireless Software and…](https://agentprime.io/advisories/CVE-2024-25563.md)
  `CVE-2024-25563` · CVE record: Intel(R) PROSet/Wireless Software and Intel(R) Killer(TM) Wi-Fi · CVSS 4.6 Medium · Not analysed yet · Published 13 Nov 2024 · Tags: CWE-665
- [Unbounded allocation in ctl(4) CAM Target Layer](https://agentprime.io/advisories/CVE-2024-45289.md)
  `CVE-2024-45289` · CVE record: FreeBSD FreeBSD · CVSS 7.5 High · Not analysed yet · Published 12 Nov 2024 · Tags: CWE-665
- [Elrond-go has improper initialization in github.com/ElrondNetwork/elrond-go](https://agentprime.io/advisories/GHSA-mv8x-668m-53fg.md)
  `GHSA-mv8x-668m-53fg`, `CVE-2022-36061`, `GO-2022-0971` · Go `github.com/ElrondNetwork/elrond-go`: affected `<1.3.35`, fixed in `1.3.35` · CVSS 6.5 Medium · Not analysed yet · Published 21 Aug 2024 · Tags: CWE-665
- [Improper privilege management in Intel(R) Ethernet Network Controllers and Adapters](https://agentprime.io/advisories/CVE-2024-21807.md)
  `CVE-2024-21807` · CVE record: Intel(R) Ethernet Network Controllers and Adapters · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Aug 2024 · Tags: Privilege escalation, CWE-665
- [Intel(R) CSME: Improper initialization in firmware for some Intel(R) CSME may allow a privileged user to…](https://agentprime.io/advisories/CVE-2023-48361.md)
  `CVE-2023-48361` · CVE record: Intel(R) CSME · CVSS 4.6 Medium · Not analysed yet · Published 14 Aug 2024 · Tags: CWE-665
- [Improper re-initialization of IOMMU during the DRTM event may permit an untrusted platform configuration to persist, allowing an attacker to read or modify hypervisor memory, potentially resulting in…](https://agentprime.io/advisories/CVE-2023-20591.md)
  `CVE-2023-20591` · CVE record: AMD AMD EPYC™ 7003 Series Processors and 3 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Aug 2024 · Tags: CWE-665
- [Diebold Nixdorf Vynamic Security Suite (VSS) before 3.3.0 SR17, 4.0.0 SR07, 4.1.0 SR04, 4.2.0 SR04, and 4.3.0 SR02 fails to validate file attributes during the Pre-Boot Authorization (PBA) process.](https://agentprime.io/advisories/CVE-2023-40261.md)
  `CVE-2023-40261` · CVE record · CVSS 4.6 Medium · Not analysed yet · Published 8 Aug 2024 · Tags: CWE-665

Older: <https://agentprime.io/advisories/tag/cwe-665.md?cursor=WyIyMDI0LTA4LTA4VDAwOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAyMy00MDI2MSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-665>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-665/>. Everything for agents: <https://agentprime.io/llms.txt>.