CWE-682.

MONAILabel Server Crash and Silent Inference Corruption via Crafted DICOM (pydicom DS/IS Validation Bypass)

• CWE-20
• CWE-682

<1.6.1 · fixed in 1.6.1

netty-tcnative before 2.0.84.Final Denial of Service via BIO Write Overcount

• netty-tcnative
• netty-tcnative-boringssl-static
• CWE-682

Zimbra Collaboration Suite Shared-File Mailbox Quota Accounting Error Enables Quota Exhaustion

• Zimbra Collaboration Suite
• CWE-682

Multiple Cisco Products Snort 3 Software Hardening Release: October 2026

• Cisco Cyber Vision
• Cisco Open Source Snort3
• CWE-682

Vyper 0.3.8 through 0.5.0b1 Optimizer Miscompilation of msg.value | K in Ternary Branches

• vyper
• CWE-682

Incorrect calculation in Google Chrome

• Google Chrome
• CWE-682

Junos OS and Junos OS Evolved: A BGP EVPN neighbor causes an rpd crash when SRv6 multihoming is used

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• CWE-682

macrozheng mall mall-admin/mall-portal moneyInfo OmsOrderServiceImpl.updateMoneyInfo calculation

• macrozheng mall
• CWE-682

fast-jwt clockTolerance: Infinity silently bypasses both exp and nbf validation (and persists in the verifier cache)

• Authentication bypass
• CWE-682

<6.3.0 · fixed in 6.3.0

Silent Decimal128 value corruption via incorrect exactness check in MongoDB C Driver

• MongoDB C Driver
• CWE-682

Cisco Meraki Hardening Release - Incorrect Calculation Vulnerabilities

• Cisco Campus Gateway Software
• Cisco Meraki MR Wireless Access Points Software
• CWE-682

Incorrect calculation in Google Chrome

• Google Chrome
• CWE-682

Vyper: Call stack corruption when passing complex type containing non-base type members as argument

• Memory corruption
• CWE-682

<0.2.6 · fixed in 0.2.6

WordPress CURCY plugin <= 2.2.17 - Broken Access Control vulnerability

• VillaTheme CURCY
• CWE-682

ZBar commit 2ea2ca58 contains an undefined-behavior vulnerability in the Code 128 decode6() function.

• CWE-682

Incorrect Calculation vulnerability in RTI Connext Professional (Core Libraries) allows Abuse Existing Functionality.

• RTI Connext Professional
• CWE-682

Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Incorrect Calculation Vulnerabilities

• Cisco Secure Firewall Adaptive Security Appliance (ASA) Software
• Cisco Secure Firewall Management Center (FMC)
• CWE-682

snipe-it before 8.7.0 Checkout Request Counter Integrity Failure

• grokability snipe-it
• CWE-682

PREVAIL: ALU32 pointer arithmetic accepted without is64 gate — verifier emits false PASS for pointer-corrupting programs

• vbpf prevail
• CWE-682

PREVAIL: Non-singleton typeset in add() skips offset update, allowing OOB access to pass eBPF verification

• vbpf prevail
• CWE-682

PREVAIL: Context-write no-op in do_mem_store allows unsafe eBPF programs to pass verification

• vbpf prevail
• CWE-682

Cisco IOS XR Software Security Hardening Release: September 2026

• Cisco IOS XR Software
• CWE-682

Klever: Marketplace settlement mints KLV when referral % + royalty % exceed the bid (negative seller share silently skipped)

• Memory corruption
• Race condition

<1.7.19 · fixed in 1.7.19

Incorrect calculation in Google Chrome

• Google Chrome
• CWE-682

New API: Integer overflow in quota billing yields negative charges (self-crediting)

• Memory corruption
• CWE-682

<1.0.0-rc.18 · fixed in 1.0.0-rc.18

dm-integrity: don't increment hash_offset twice

• Linux kernel
• CWE-682

Incorrect calculation in Intel(R) TDX Guest software

• Intel(R) TDX Guest software
• CWE-682

Cisco IOS XE Software Security Hardening Release

• Cisco IOS XE Software
• CWE-682

Out-of-bounds read in DHCPv4 client message-type name lookup (net_dhcpv4_msg_type_name)

• zephyr
• Memory corruption
• CWE-682

smb/client: fix chown/chgrp with SMB3 POSIX Extensions

• Linux kernel
• CWE-682

AWS CDK CodeBuild S3 Log Encryption Boolean Inversion

• Weak cryptography or TLS
• CWE-682

>=1.175.0-devpreview, <=1.204.0-devpreview · no fixed version yet

ImageMagick: Heap Buffer Over-Write in JP2 encoder when due to incorrect handling of arguments

• Memory corruption
• CWE-682

<14.15.0 · fixed in 14.15.0

libheif Vulnerable to Heap Information Disclosure via Grid Image Gap + Uninitialized Pixel Plane Allocation

• strukturag libheif
• Information disclosure
• Memory corruption

JIT miscompilation in the JavaScript: WebAssembly component

• Mozilla Firefox
• Mozilla Thunderbird
• Memory corruption
• CWE-682

wifi: iwlwifi: mvm: fix driver-set TX rates on old devices

• Linux kernel
• CWE-682

X25519 x86_64 assembly final reduction leaves non-canonical field element

• wolfSSL
• CWE-682

net: mvpp2: sync RX data at the hardware packet offset

• Linux kernel
• CWE-682

io_uring/net: inherit IORING_CQE_F_BUF_MORE across bundle recv retries

• Linux kernel
• CWE-682

netfilter: xt_policy: fix strict mode inbound policy matching

• Linux kernel
• CWE-682

netfilter: nft_inner: Fix IPv6 inner_thoff desync

• Linux kernel
• CWE-682
• CWE-823

rxrpc: Fix re-decryption of RESPONSE packets

• Linux kernel
• CWE-682

bpf: Preserve id of register in sync_linked_regs()

• Linux kernel
• CWE-682

Bitwise OR of errno values

• Netatalk
• CWE-682

hextoint macro uppercase bug

• Netatalk
• CWE-682

Ledger Bitcoin App 2.1.0 Address Derivation Error via Miniscript

• Ledger Bitcoin app
• CWE-682

bpf: Properly mark live registers for indirect jumps

• Linux kernel
• CWE-682

Zebra's Block Validator Undercounts Coinbase and P2SH Sigops

• CWE-682

<4.4.0 · fixed in 4.4.0

crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption

• Linux kernel
• CWE-682

bpf: Fix regsafe() for pointers to packet

• Linux kernel
• CWE-682

bpf: Fix incorrect pruning due to atomic fetch precision tracking

• Linux kernel
• CWE-682

libcrux-sha3: Incorrect output from SHAKE squeeze functions

• CWE-682

<0.0.8 · fixed in 0.0.8

validateSignature Loop Variable Capture Signature Bypass in goxmldsig

• Weak cryptography or TLS
• CWE-682

<1.6.0 · fixed in 1.6.0

The Graph: Revocable vesting contracts allows early access to locked tokens

• graphprotocol contracts
• Broken access control
• CWE-682

CIRCL has an incorrect calculation in secp384r1 CombinedMult

• CWE-682

<1.6.3 · fixed in 1.6.3

iccDEV memcpy-param-overlap in CIccTagMultiProcessElement::Apply()

• InternationalColorConsortium iccDEV
• Memory corruption
• CWE-123

ml-dsa's UseHint function has off by two error when r0 equals zero

• CWE-193
• CWE-682

<0.1.0-rc.5 · fixed in 0.1.0-rc.5

soroban-fixed-point-math has Incorrect Rounding and Overflow Handling in Signed Fixed-Point Math with Negatives

• CWE-682

>=1.3.0, <1.3.1 || >=1.4.0, <1.4.1 · fixed in 1.3.1, 1.4.1

Junos OS Evolved: Flapping management interface causes MAC learning on label-switched interfaces to stop

• Juniper Networks Junos OS Evolved
• CWE-682

Vercel’s AI SDK's filetype whitelists can be bypassed when uploading files

• CWE-20
• CWE-682

<5.0.52 || >=5.1.0-beta.0, <5.1.0-beta.9 · fixed in 5.0.52, 5.1.0-beta.9

pytorch v2.8.0 was discovered to display unexpected behavior when the components torch.rot90 and torch.randn_like are used together.

• CWE-682

<2.9.0 · fixed in 2.9.0