Advisories · Weakness
CWE-686.
Every Advisory and CVE whose sources give the weakness CWE-686, newest first.
- CVSS 8.3 High
Pillow: Memory disclosure and segfault in libtiff encoder via crafted TIFF tags
- CWE-686
<13.0.0 · fixed in 13.0.0
GHSA-xvh5-g6gv-559v · CVE-2026-112902 - CVSS 7.3 High
`zbus_polkit`: authorization bypass via PID reuse
- Race condition
- CWE-686
>=0.0.0-0, <5.1.0 · fixed in 5.1.0
RUSTSEC-2026-0278 · CVE-2026-78422 - CVSS 8.8 High
JIT miscompilation in the JavaScript Engine: JIT component
- Mozilla Firefox
- Memory corruption
- CWE-686
- CVSS 7.1 High
Junos OS Evolved: PTX Series: If SRTE tunnels provisioned via PCEP are present and specific gRPC queries are received evo-aftmand crashes
- Juniper Networks Junos OS Evolved
- CWE-686
- CVSS 9.8 CriticalCritical · CVSS 9+
JIT miscompilation in the JavaScript Engine: JIT component
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
- CWE-686
- CVSS 6.6 Medium
Printf arg type mismatch in ATCMD
- ASR Falcon/Crane
- CWE-686
- CVSS 4.3 Medium
Postgresql: memory disclosure in aggregate function calls
- Red Hat Advanced Cluster Security 4.2
- Red Hat Enterprise Linux 8
- CWE-686