agentprime: CWE-681

CVE-2026-116785: FreeSWITCH: Pre-authentication heap out-of-bounds write in mod_xml_rpc WebSocket frame length handling

Thu, 05 Nov 2026 19:26:13 GMT

CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-68990: Incorrect numeric conversion in Samsung Semiconductor Exynos 1480 and others

Thu, 05 Nov 2026 02:40:38 GMT

Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-119340: Tesseract: GENERIC_2D_ARRAY DeSerializeSize signed integer comparison bypass allows negative dimensions

Fri, 30 Oct 2026 20:22:46 GMT

CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-118769: Botan: Integer overflow when reporting block size in FFI can cause memory corruption

Thu, 29 Oct 2026 17:22:07 GMT

CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-114654: BSON output corruption via out-of-range binary subtype bypassing UUID and OldBinary guards

Thu, 22 Oct 2026 19:13:59 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-114118: Vyper 0.3.4 through 0.5.0b1 create_from_blueprint Offset Validation Bypass via Unsigned Wraparound

Wed, 21 Oct 2026 00:37:15 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-12670: IBM MQ Denial of Service

Mon, 19 Oct 2026 16:39:30 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-83872: Windows TCP/IP Local Elevation of Privilege Vulnerability

Tue, 13 Oct 2026 18:59:54 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-106432: Heap buffer overflow via 32-bit string-length truncation in MongoDB PHP Driver

Thu, 08 Oct 2026 19:02:25 GMT

CVSS 2.0 (Low). Published by the CVE Program. Not analysed by agentprime yet.

Excelize: A Zip64 uncompressed-size of 2^63 panics OpenFile/OpenReader

Wed, 07 Oct 2026 20:22:45 GMT

github.com/xuri/excelize/v2 >=2.1.0, <2.11.1-0.20260805032953-db93f8d89de7, fixed in 2.11.1-0.20260805032953-db93f8d89de7. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-47539: Incorrect numeric conversion in NVIDIA Virtual GPU Manager

Wed, 30 Sep 2026 15:54:59 GMT

CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-47508: Incorrect numeric conversion in NVIDIA GeForce and others

Wed, 30 Sep 2026 15:49:44 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-88387: LibRaw 0.22.0 contains an incorrect numeric conversion vulnerability in LibRaw::parse_tiff_ifd() when processing TIFF tag 0x00fe (NewSubfileType).

Thu, 24 Sep 2026 00:00:00 GMT

CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-88368: NanoSVG commit 239e102ec contains an incorrect numeric conversion vulnerability in the rasterizer's nsvg__addActive() function.

Thu, 24 Sep 2026 00:00:00 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-88367: NanoSVG 239e102ec contains an incorrect numeric conversion vulnerability in nsvg__curveDivs() during SVG stroke rasterization.

Thu, 24 Sep 2026 00:00:00 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-88366: NanoSVG commit 239e102ec contains an incorrect numeric conversion vulnerability in nsvg__pathArcTo() when parsing SVG arc commands.

Thu, 24 Sep 2026 00:00:00 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-88362: MuJS e892c9fdb contains an incorrect numeric conversion vulnerability in jsR_isindex() in jsrun.c.

Thu, 24 Sep 2026 00:00:00 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

RabbitMQ amqp091-go: Denial of Service via Malicious Field Length in AMQP Client

Thu, 17 Sep 2026 17:04:29 GMT

github.com/rabbitmq/amqp091-go <1.13.0, fixed in 1.13.0. CVSS 8.9 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-69438: Microsoft JScript Remote Code Execution Vulnerability

Tue, 08 Sep 2026 17:15:32 GMT

CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-84963: Silent field truncation via unchecked int cast of huge JSON string values in JSON-to-BSON parser

Thu, 03 Sep 2026 15:03:13 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-84966: BSON element injection via NUL-embedded document keys in builder append

Thu, 03 Sep 2026 15:00:15 GMT

CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-84970: Heap over-read or silent misparse via 32-bit truncation of JSON length in BSON JSON parser

Thu, 03 Sep 2026 14:56:14 GMT

CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-82522: libjxl < 0.12.0 Container Box Parser Integer Underflow via 32-bit Size Truncation

Wed, 02 Sep 2026 17:37:47 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-82457: su-exec through 0.3 Privilege Escalation via Numeric User ID

Sat, 29 Aug 2026 13:47:58 GMT

CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

netty-incubator-codec-ohttp: Binary HTTP parser unchecked varint length overflow causes decoder crash

Thu, 20 Aug 2026 18:43:21 GMT

io.netty.incubator:netty-incubator-codec-bhttp <0.0.23.Final, fixed in 0.0.23.Final. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-75145: FFmpeg Integer Narrowing Conversion OOB Memory Access in AV1 RTP Packetizer

Wed, 19 Aug 2026 16:27:33 GMT

CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-19879: Io.undertow/undertow: undertow: http response header integrity issue due to character truncation

Fri, 14 Aug 2026 14:51:36 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-6426: Qemu-kvm: vhost inflight migration vmstate integer type mismatch causes out-of-bounds access

Mon, 10 Aug 2026 21:22:29 GMT

CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-21069: Incorrect numeric conversion in Samsung Mobile Devices

Mon, 10 Aug 2026 07:41:35 GMT

CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

ImageMagick: Heap Buffer Over-Read in XCF decoder due to integer conversion overflow

Fri, 31 Jul 2026 19:40:08 GMT

Magick.NET-Q16-AnyCPU <14.15.0, fixed in 14.15.0. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-55768: GoAccess WebSocket Server: Signed 32 bit truncation of the 64 bit frame length causes a remote pre-authentication denial of service

Thu, 30 Jul 2026 20:34:32 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-55123: Microsoft PowerPoint Remote Code Execution Vulnerability

Tue, 14 Jul 2026 17:09:05 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-50402: NTFS Elevation of Privilege Vulnerability

Tue, 14 Jul 2026 17:07:22 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-45258: Multiple vulnerabilities in the sound(4) mmap path

Sat, 27 Jun 2026 08:50:56 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-53053: iommu/amd: Fix clone_alias() to use the original device's devid

Wed, 24 Jun 2026 16:29:59 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-9143: Incorrect Conversion between Numeric Types in NI grpc-device due to missing range checks in CodeGen

Fri, 19 Jun 2026 13:48:44 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

vLLM: GGUF dequantize kernel int truncation exposes uninitialized GPU memory in multi-tenant serving

Wed, 17 Jun 2026 14:03:11 GMT

vllm >=0.5.5, <0.24.0, fixed in 0.24.0. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-24192: Incorrect numeric conversion in NVIDIA GeForce and others

Tue, 26 May 2026 17:14:31 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

iskorotkov/avro: Integer Overflow in Decoder

Mon, 18 May 2026 16:22:27 GMT

github.com/iskorotkov/avro/v2 <2.33.0, fixed in 2.33.0. CVSS 8.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-26178: Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability

Tue, 14 Apr 2026 16:58:03 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

Host data leakage with 64-bit tables and Winch

Thu, 09 Apr 2026 12:00:00 GMT

wasmtime >=0.0.0-0, <36.0.7 || >=37.0.0, <42.0.2 || >=43.0.0, <43.0.1, fixed in 36.0.7, 42.0.2, 43.0.1. CVSS 2.3 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-24174: Incorrect numeric conversion in NVIDIA Triton Inference Server

Tue, 07 Apr 2026 17:12:42 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-4931: CVE-2026-4931

Tue, 07 Apr 2026 15:22:36 GMT

CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-34610: leancrypto: Integer truncation in X.509 name parser enables certificate identity impersonation

Thu, 02 Apr 2026 17:54:53 GMT

CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-34550: iccDEV: UB at IccIO.cpp

Tue, 31 Mar 2026 22:12:29 GMT

CVSS 6.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-34548: iccDEV: UB at IccUtilXml.cpp

Tue, 31 Mar 2026 22:09:49 GMT

CVSS 6.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

jsrsasign: Negative Exponent Handling Leads to Signature Verification Bypass

Mon, 23 Mar 2026 06:30:29 GMT

jsrsasign <11.1.1, fixed in 11.1.1. CVSS 8.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Soroban: Muxed address<->ScVal conversions may break after a conversion failure

Sat, 07 Mar 2026 02:39:44 GMT

soroban-env-host <26.0.0, fixed in 26.0.0. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-27691: iccDEV has SIO in parse3DTable() at iccFromCube.cpp Line 218

Wed, 25 Feb 2026 14:36:16 GMT

CVSS 6.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

ImageMagick: Integer overflow or wraparound and incorrect conversion between numeric types in the internal SVG decoder

Tue, 24 Feb 2026 15:45:35 GMT

Magick.NET-Q16-AnyCPU <14.10.3, fixed in 14.10.3. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.