# CWE-681.

Every Advisory and CVE whose sources give the weakness CWE-681, newest first.

## Records, newest first

- [FreeSWITCH: Pre-authentication heap out-of-bounds write in mod_xml_rpc WebSocket frame length handling](https://agentprime.io/advisories/CVE-2026-116785.md)
  `CVE-2026-116785` · CVE record: signalwire freeswitch · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Nov 2026 · Tags: Memory corruption, CWE-681
- [Incorrect numeric conversion in Samsung Semiconductor Exynos 1480 and others](https://agentprime.io/advisories/CVE-2026-68990.md)
  `CVE-2026-68990` · CVE record: Samsung Semiconductor Exynos 1480 and 4 more · No CVSS score · Not analysed yet · Published 5 Nov 2026 · Tags: CWE-681
- [Tesseract: GENERIC_2D_ARRAY DeSerializeSize signed integer comparison bypass allows negative dimensions](https://agentprime.io/advisories/CVE-2026-119340.md)
  `CVE-2026-119340` · CVE record: tesseract-ocr tesseract · CVSS 5.5 Medium · Not analysed yet · Published 30 Oct 2026 · Tags: Memory corruption, CWE-681
- [Botan: Integer overflow when reporting block size in FFI can cause memory corruption](https://agentprime.io/advisories/CVE-2026-118769.md)
  `CVE-2026-118769` · CVE record: randombit botan · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Oct 2026 · Tags: Memory corruption, CWE-681
- [BSON output corruption via out-of-range binary subtype bypassing UUID and OldBinary guards](https://agentprime.io/advisories/CVE-2026-114654.md)
  `CVE-2026-114654` · CVE record: MongoDB C# Driver · CVSS 6.9 Medium · Not analysed yet · Published 22 Oct 2026 · Tags: CWE-681
- [Vyper 0.3.4 through 0.5.0b1 create_from_blueprint Offset Validation Bypass via Unsigned Wraparound](https://agentprime.io/advisories/CVE-2026-114118.md)
  `CVE-2026-114118` · CVE record: vyperlang vyper · CVSS 6.3 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: CWE-681
- [IBM MQ Denial of Service](https://agentprime.io/advisories/CVE-2026-12670.md)
  `CVE-2026-12670` · CVE record: IBM MQ Operator and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 19 Oct 2026 · Tags: CWE-681
- [Windows TCP/IP Local Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-83872.md)
  `CVE-2026-83872` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-681
- [Heap buffer overflow via 32-bit string-length truncation in MongoDB PHP Driver](https://agentprime.io/advisories/CVE-2026-106432.md)
  `CVE-2026-106432` · CVE record: MongoDB PHP Driver · CVSS 2.0 Low · Not analysed yet · Published 8 Oct 2026 · Tags: CWE-681
- [Excelize: A Zip64 uncompressed-size of 2^63 panics OpenFile/OpenReader](https://agentprime.io/advisories/GHSA-fw94-4wwp-w8pw.md)
  `GHSA-fw94-4wwp-w8pw`, `CVE-2026-107224`, `GO-2026-6679` · Go `github.com/xuri/excelize/v2`: affected `>=2.1.0, <2.11.1-0.20260805032953-db93f8d89de7`, fixed in `2.11.1-0.20260805032953-db93f8d89de7` · CVSS 6.5 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Memory corruption, CWE-681
- [Incorrect numeric conversion in NVIDIA Virtual GPU Manager](https://agentprime.io/advisories/CVE-2026-47539.md)
  `CVE-2026-47539` · CVE record: NVIDIA Virtual GPU Manager · CVSS 6.7 Medium · Not analysed yet · Published 30 Sept 2026 · Tags: CWE-681
- [Incorrect numeric conversion in NVIDIA GeForce and others](https://agentprime.io/advisories/CVE-2026-47508.md)
  `CVE-2026-47508` · CVE record: NVIDIA GeForce and 3 more · CVSS 7.8 High · Not analysed yet · Published 30 Sept 2026 · Tags: CWE-681
- [LibRaw 0.22.0 contains an incorrect numeric conversion vulnerability in LibRaw::parse_tiff_ifd() when processing TIFF tag 0x00fe (NewSubfileType).](https://agentprime.io/advisories/CVE-2026-88387.md)
  `CVE-2026-88387` · CVE record · CVSS 5.5 Medium · Not analysed yet · Published 24 Sept 2026 · Tags: CWE-681
- [NanoSVG commit 239e102ec contains an incorrect numeric conversion vulnerability in the rasterizer's nsvg\_\_addActive() function.](https://agentprime.io/advisories/CVE-2026-88368.md)
  `CVE-2026-88368` · CVE record · CVSS 7.5 High · Not analysed yet · Published 24 Sept 2026 · Tags: CWE-681
- [NanoSVG 239e102ec contains an incorrect numeric conversion vulnerability in nsvg\_\_curveDivs() during SVG stroke rasterization.](https://agentprime.io/advisories/CVE-2026-88367.md)
  `CVE-2026-88367` · CVE record · CVSS 6.5 Medium · Not analysed yet · Published 24 Sept 2026 · Tags: CWE-681
- [NanoSVG commit 239e102ec contains an incorrect numeric conversion vulnerability in nsvg\_\_pathArcTo() when parsing SVG arc commands.](https://agentprime.io/advisories/CVE-2026-88366.md)
  `CVE-2026-88366` · CVE record · CVSS 7.5 High · Not analysed yet · Published 24 Sept 2026 · Tags: CWE-681
- [MuJS e892c9fdb contains an incorrect numeric conversion vulnerability in jsR_isindex() in jsrun.c.](https://agentprime.io/advisories/CVE-2026-88362.md)
  `CVE-2026-88362` · CVE record · CVSS 7.5 High · Not analysed yet · Published 24 Sept 2026 · Tags: CWE-681
- [RabbitMQ amqp091-go: Denial of Service via Malicious Field Length in AMQP Client](https://agentprime.io/advisories/GHSA-4v58-74mf-rjx3.md)
  `GHSA-4v58-74mf-rjx3`, `CVE-2026-77412`, `GO-2026-6494` · Go `github.com/rabbitmq/amqp091-go`: affected `<1.13.0`, fixed in `1.13.0` · CVSS 8.9 High · Not analysed yet · Published 17 Sept 2026 · Tags: CWE-681
- [Microsoft JScript Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-69438.md)
  `CVE-2026-69438` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.1 High · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-681
- [Silent field truncation via unchecked int cast of huge JSON string values in JSON-to-BSON parser](https://agentprime.io/advisories/CVE-2026-84963.md)
  `CVE-2026-84963` · CVE record: MongoDB C Driver · CVSS 6.3 Medium · Not analysed yet · Published 3 Sept 2026 · Tags: CWE-681
- [BSON element injection via NUL-embedded document keys in builder append](https://agentprime.io/advisories/CVE-2026-84966.md)
  `CVE-2026-84966` · CVE record: MongoDB C++ Driver · CVSS 5.9 Medium · Not analysed yet · Published 3 Sept 2026 · Tags: CWE-681
- [Heap over-read or silent misparse via 32-bit truncation of JSON length in BSON JSON parser](https://agentprime.io/advisories/CVE-2026-84970.md)
  `CVE-2026-84970` · CVE record: MongoDB C++ Driver · CVSS 5.9 Medium · Not analysed yet · Published 3 Sept 2026 · Tags: CWE-681
- [libjxl < 0.12.0 Container Box Parser Integer Underflow via 32-bit Size Truncation](https://agentprime.io/advisories/CVE-2026-82522.md)
  `CVE-2026-82522` · CVE record: libjxl libjxl · CVSS 5.3 Medium · Not analysed yet · Published 2 Sept 2026 · Tags: CWE-681
- [su-exec through 0.3 Privilege Escalation via Numeric User ID](https://agentprime.io/advisories/CVE-2026-82457.md)
  `CVE-2026-82457` · CVE record: ncopa su-exec · CVSS 8.5 High · Not analysed yet · Published 29 Aug 2026 · Tags: CWE-681
- [netty-incubator-codec-ohttp: Binary HTTP parser unchecked varint length overflow causes decoder crash](https://agentprime.io/advisories/GHSA-pgrf-4654-3gq8.md)
  `GHSA-pgrf-4654-3gq8`, `CVE-2026-61799` · Maven `io.netty.incubator:netty-incubator-codec-bhttp`: affected `<0.0.23.Final`, fixed in `0.0.23.Final` · CVSS 5.3 Medium · Not analysed yet · Published 20 Aug 2026 · Tags: Memory corruption, CWE-248, CWE-681
- [FFmpeg Integer Narrowing Conversion OOB Memory Access in AV1 RTP Packetizer](https://agentprime.io/advisories/CVE-2026-75145.md)
  `CVE-2026-75145` · CVE record: FFmpeg FFmpeg · CVSS 5.8 Medium · Not analysed yet · Published 19 Aug 2026 · Tags: CWE-681
- [Io.undertow/undertow: undertow: http response header integrity issue due to character truncation](https://agentprime.io/advisories/CVE-2026-19879.md)
  `CVE-2026-19879` · CVE record: Red Hat Red Hat build of Apache Camel for Spring Boot 4 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 14 Aug 2026 · Tags: CWE-681
- [Qemu-kvm: vhost inflight migration vmstate integer type mismatch causes out-of-bounds access](https://agentprime.io/advisories/CVE-2026-6426.md)
  `CVE-2026-6426` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.4 Medium · Not analysed yet · Published 10 Aug 2026 · Tags: CWE-681
- [Incorrect numeric conversion in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2026-21069.md)
  `CVE-2026-21069` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.1 Medium · Not analysed yet · Published 10 Aug 2026 · Tags: CWE-681
- [ImageMagick: Heap Buffer Over-Read in XCF decoder due to integer conversion overflow](https://agentprime.io/advisories/GHSA-pjxj-pchx-4c3m.md)
  `GHSA-pjxj-pchx-4c3m`, `CVE-2026-53466` · NuGet `Magick.NET-Q16-AnyCPU` and 16 more: affected `<14.15.0`, fixed in `14.15.0` · CVSS 6.5 Medium · Not analysed yet · Published 31 Jul 2026 · Tags: Memory corruption, CWE-681
- [GoAccess WebSocket Server: Signed 32 bit truncation of the 64 bit frame length causes a remote pre-authentication denial of service](https://agentprime.io/advisories/CVE-2026-55768.md)
  `CVE-2026-55768` · CVE record: allinurl goaccess · CVSS 8.7 High · Not analysed yet · Published 30 Jul 2026 · Tags: Denial of service, CWE-681
- [Microsoft PowerPoint Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-55123.md)
  `CVE-2026-55123` · CVE record: Microsoft Microsoft 365 Apps for Enterprise and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption, CWE-681
- [NTFS Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-50402.md)
  `CVE-2026-50402` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: CWE-126, CWE-681
- [Multiple vulnerabilities in the sound(4) mmap path](https://agentprime.io/advisories/CVE-2026-45258.md)
  `CVE-2026-45258` · CVE record: FreeBSD FreeBSD · CVSS 7.8 High · Not analysed yet · Published 27 Jun 2026 · Tags: Memory corruption, CWE-681
- [iommu/amd: Fix clone_alias() to use the original device's devid](https://agentprime.io/advisories/CVE-2026-53053.md)
  `CVE-2026-53053` · CVE record: Linux Linux · CVSS 8.8 High · Not analysed yet · Published 24 Jun 2026 · Tags: CWE-681
- [Incorrect Conversion between Numeric Types in NI grpc-device due to missing range checks in CodeGen](https://agentprime.io/advisories/CVE-2026-9143.md)
  `CVE-2026-9143` · CVE record: NI grpc-device and 1 more · CVSS 6.3 Medium · Not analysed yet · Published 19 Jun 2026 · Tags: CWE-681
- [vLLM: GGUF dequantize kernel int truncation exposes uninitialized GPU memory in multi-tenant serving](https://agentprime.io/advisories/GHSA-5jv2-g5wq-cmr4.md)
  `GHSA-5jv2-g5wq-cmr4`, `CVE-2026-53923`, `PYSEC-2026-3403` · PyPI `vllm`: affected `>=0.5.5, <0.24.0`, fixed in `0.24.0` · CVSS 5.3 Medium · Not analysed yet · Published 17 Jun 2026 · Tags: Information disclosure, CWE-681
- [Incorrect numeric conversion in NVIDIA GeForce and others](https://agentprime.io/advisories/CVE-2026-24192.md)
  `CVE-2026-24192` · CVE record: NVIDIA GeForce and 3 more · CVSS 7.8 High · Not analysed yet · Published 26 May 2026 · Tags: CWE-681
- [iskorotkov/avro: Integer Overflow in Decoder](https://agentprime.io/advisories/GHSA-mc57-h6j3-3hmv.md)
  `GHSA-mc57-h6j3-3hmv`, `CVE-2026-46384`, `GO-2026-5047` · Go `github.com/iskorotkov/avro/v2`: affected `<2.33.0`, fixed in `2.33.0` · CVSS 8.7 High · Not analysed yet · Published 18 May 2026 · Tags: Memory corruption, CWE-681, CWE-1284
- [Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-26178.md)
  `CVE-2026-26178` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 14 Apr 2026 · Tags: Memory corruption, CWE-681
- [Host data leakage with 64-bit tables and Winch](https://agentprime.io/advisories/GHSA-m9w2-8782-2946.md)
  `GHSA-m9w2-8782-2946`, `CVE-2026-34945`, `RUSTSEC-2026-0086` · crates.io `wasmtime`: affected `>=0.0.0-0, <36.0.7 || >=37.0.0, <42.0.2 || >=43.0.0, <43.0.1`, fixed in `36.0.7`, `42.0.2`, `43.0.1` · CVSS 2.3 Low · Not analysed yet · Published 9 Apr 2026 · Tags: CWE-681
- [Incorrect numeric conversion in NVIDIA Triton Inference Server](https://agentprime.io/advisories/CVE-2026-24174.md)
  `CVE-2026-24174` · CVE record: NVIDIA Triton Inference Server · CVSS 7.5 High · Not analysed yet · Published 7 Apr 2026 · Tags: CWE-681
- [CVE-2026-4931](https://agentprime.io/advisories/CVE-2026-4931.md)
  `CVE-2026-4931` · CVE record: Marginal Marginal Smart Contract · CVSS 6.8 Medium · Not analysed yet · Published 7 Apr 2026 · Tags: CWE-681
- [leancrypto: Integer truncation in X.509 name parser enables certificate identity impersonation](https://agentprime.io/advisories/CVE-2026-34610.md)
  `CVE-2026-34610` · CVE record: smuellerDD leancrypto · CVSS 5.9 Medium · Not analysed yet · Published 2 Apr 2026 · Tags: CWE-681
- [iccDEV: UB at IccIO.cpp](https://agentprime.io/advisories/CVE-2026-34550.md)
  `CVE-2026-34550` · CVE record: InternationalColorConsortium iccDEV · CVSS 6.2 Medium · Not analysed yet · Published 31 Mar 2026 · Tags: CWE-681
- [iccDEV: UB at IccUtilXml.cpp](https://agentprime.io/advisories/CVE-2026-34548.md)
  `CVE-2026-34548` · CVE record: InternationalColorConsortium iccDEV · CVSS 6.2 Medium · Not analysed yet · Published 31 Mar 2026 · Tags: CWE-681
- [jsrsasign: Negative Exponent Handling Leads to Signature Verification Bypass](https://agentprime.io/advisories/GHSA-8qwj-4jxw-m8jw.md)
  `GHSA-8qwj-4jxw-m8jw`, `CVE-2026-4602` · npm `jsrsasign`: affected `<11.1.1`, fixed in `11.1.1` · CVSS 8.7 High · Not analysed yet · Published 23 Mar 2026 · Tags: CWE-681
- [Soroban: Muxed address<->ScVal conversions may break after a conversion failure](https://agentprime.io/advisories/GHSA-pm4j-7r4q-ccg8.md)
  `GHSA-pm4j-7r4q-ccg8` · crates.io `soroban-env-host`: affected `<26.0.0`, fixed in `26.0.0` · CVSS 4.0, no score published · Not analysed yet · Published 7 Mar 2026 · Tags: CWE-681
- [iccDEV has SIO in parse3DTable() at iccFromCube.cpp Line 218](https://agentprime.io/advisories/CVE-2026-27691.md)
  `CVE-2026-27691` · CVE record: InternationalColorConsortium iccDEV · CVSS 6.2 Medium · Not analysed yet · Published 25 Feb 2026 · Tags: Memory corruption, CWE-681
- [ImageMagick: Integer overflow or wraparound and incorrect conversion between numeric types in the internal SVG decoder](https://agentprime.io/advisories/GHSA-7355-pwx2-pm84.md)
  `GHSA-7355-pwx2-pm84`, `CVE-2026-25989` · NuGet `Magick.NET-Q16-AnyCPU` and 18 more: affected `<14.10.3`, fixed in `14.10.3` · CVSS 7.5 High · Not analysed yet · Published 24 Feb 2026 · Tags: Memory corruption, CWE-681
- [iccDEV has UB runtime error in \<icTagTypeSignature>](https://agentprime.io/advisories/CVE-2026-24856.md)
  `CVE-2026-24856` · CVE record: InternationalColorConsortium iccDEV · CVSS 7.8 High · Not analysed yet · Published 28 Jan 2026 · Tags: CWE-20, CWE-681, CWE-704
- [A floating-point exception (FPE) in the flow.column_stack component of OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) via a crafted input.](https://agentprime.io/advisories/CVE-2025-71002.md)
  `CVE-2025-71002` · CVE record · CVSS 6.5 Medium · Not analysed yet · Published 28 Jan 2026 · Tags: Denial of service, CWE-681, CWE-704
- [iccDEV has Type Confusion in CIccSegmentedCurveXml::ToXml() at IccXML/IccLibXML/IccMpeXml.cpp](https://agentprime.io/advisories/CVE-2026-21693.md)
  `CVE-2026-21693` · CVE record: InternationalColorConsortium iccDEV · CVSS 8.8 High · Not analysed yet · Published 7 Jan 2026 · Tags: Memory corruption, CWE-20, CWE-681, CWE-754
- [iccDEV has Type Confusion in SIccCalcOp::ArgsPushed() at IccProfLib/IccMpeCalc.cpp](https://agentprime.io/advisories/CVE-2026-21688.md)
  `CVE-2026-21688` · CVE record: InternationalColorConsortium iccDEV · CVSS 8.8 High · Not analysed yet · Published 7 Jan 2026 · Tags: Memory corruption, CWE-20, CWE-681
- [iccDEV has Integer Overflow/Underflow in CIccXmlArrayType::ParseTextCountNum()](https://agentprime.io/advisories/CVE-2026-21673.md)
  `CVE-2026-21673` · CVE record: InternationalColorConsortium iccDEV · CVSS 7.8 High · Not analysed yet · Published 6 Jan 2026 · Tags: Memory corruption, CWE-681, CWE-704
- [Eclipse Paho Go MQTT may incorrectly encode strings if length exceeds 65535 bytes](https://agentprime.io/advisories/GHSA-32fw-gq77-f2f2.md)
  `GHSA-32fw-gq77-f2f2`, `CVE-2025-10543`, `GO-2025-4173` · Go `github.com/eclipse/paho.mqtt.golang`: affected `<1.5.1`, fixed in `1.5.1` · CVSS 6.3 Medium · Not analysed yet · Published 2 Dec 2025 · Tags: CWE-197, CWE-681
- [CoreDNS: DNS Cache Pinning via etcd Lease ID Confusion](https://agentprime.io/advisories/GHSA-93mf-426m-g6x9.md)
  `GHSA-93mf-426m-g6x9`, `CVE-2025-58063`, `GO-2025-3942` · Go `github.com/coredns/coredns`: affected `>=1.2.0, <1.12.4`, fixed in `1.12.4` · CVSS 7.1 High · Not analysed yet · Published 9 Sept 2025 · Tags: CWE-681
- [Microsoft Word Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-53733.md)
  `CVE-2025-53733` · CVE record: Microsoft Microsoft 365 Apps for Enterprise and 4 more · CVSS 8.4 High · Not analysed yet · Published 12 Aug 2025 · Tags: CWE-681
- [Windows Common Log File System Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-24059.md)
  `CVE-2025-24059` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 11 Mar 2025 · Tags: Memory corruption, CWE-681
- [Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-49093.md)
  `CVE-2024-49093` · CVE record: Microsoft Windows 11 Version 24H2 and 2 more · CVSS 8.8 High · Not analysed yet · Published 10 Dec 2024 · Tags: CWE-681

Older: <https://agentprime.io/advisories/tag/cwe-681.md?cursor=WyIyMDI0LTEyLTEwVDE3OjQ5OjEzLjM1ODAwMFoiLCJDVkUtMjAyNC00OTA5MyJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-681>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-681/>. Everything for agents: <https://agentprime.io/llms.txt>.