Advisories · Weakness
CWE-758.
Every Advisory and CVE whose sources give the weakness CWE-758, newest first.
- CVSS 2.1 Low
Exception tags can cause host data structures to be unaligned
- CWE-758
>=47.0.0, <48.0.6 || >=49.0.0, <49.0.3 · fixed in 48.0.6, 49.0.3
GHSA-p79w-pv2r-29qp · CVE-2026-119133 - CVSS 8.1 High
Undefined behavior in the DOM: Streams component
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-758
- CVSS 5.3 Medium
OpenSlide: openslide_read_region() returns uninitialized memory with libtiff 4.7.1
- openslide
- Memory corruption
- CWE-758
- CVSS 6.9 Medium
Eclipse OpenJ9 : Method resolution default method precedence failure
- Eclipse Foundation OpenJ9
- CWE-758
- CVSS 2.0 Low
Cmov/CmovEq on aarch64 can produce wrong results if high-bits of registers are set
- CWE-758
>=0.1.1, <0.5.4 · fixed in 0.5.4
GHSA-3rjw-m598-pq24 · CVE-2026-50185 - CVSS 2.1 Low
Ghidra < 11.2 - Use After Free in Sleigh Backend via Static Initialization Order
- nationalsecurityagency ghidra
- CWE-758
- CVSS 9.8 CriticalCritical · CVSS 9+
dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc()
- Linux kernel
- CWE-758
- CVSS 3.7 Low
BACnet Stack: Undefined-behavior signed left shift in `decode_signed32()`
- bacnet-stack
- CWE-758
- CVSS 6.2 Medium
iccDEV: UB at IccUtil.cpp
- InternationalColorConsortium iccDEV
- CWE-758
- CVSS 6.2 Medium
iccDEV: UB at IccUtil.cpp
- InternationalColorConsortium iccDEV
- CWE-758
- CVSS 6.2 Medium
iccDEV: UB in CIccOpDefEnvVar::Exec()
- InternationalColorConsortium iccDEV
- CWE-758
- CVSS 6.2 Medium
iccDEV: UB in CIccCalculatorFunc::ApplySequence()
- InternationalColorConsortium iccDEV
- CWE-758
- CVSS 2.1 Low
BlueKitchen BTstack < 1.8.1 AVRCP Browsing Target GET_FOLDER_ITEMS Handler OOB Read / Undefined Behavior
- BlueKitchen GmbH BTstack
- Memory corruption
- CWE-758
- CVSS 8.1 High
Undefined behavior in the WebRTC: Signaling component
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-758
- CVSS 9.8 CriticalCritical · CVSS 9+
Undefined behavior in the WebRTC: Signaling component
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-758
- CVSS 9.1 CriticalCritical · CVSS 9+
Undefined behavior in the Audio/Video component
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-758
- CVSS 7.8 High
netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels
- Linux kernel
- CWE-758
- CVSS 4.0, no score published
Unsoundness in opt-in ARMv8 assembly backend for `keccak`
- CWE-758
<0.1.6 · fixed in 0.1.6
GHSA-3288-p39f-rqpv - CVSS 4.0, no score published
Cap'n Proto has Undefined Behavior in constant::Reader and StructSchema
- CWE-758
<0.24.0 · fixed in 0.24.0
GHSA-5w5r-mf82-595p - CVSS 7.1 High
iccDEV has Undefined Behavior and Null Pointer Deference in CIccTagXmlSegmentedCurve::ToXml()
- InternationalColorConsortium iccDEV
- Memory corruption
- CWE-20
- CVSS 7.1 High
iccDEV has Undefined Behavior and Null Pointer Deference in CIccProfileXml::ParseBasic()
- InternationalColorConsortium iccDEV
- Memory corruption
- CWE-20
- CVSS 7.1 High
iccDEV has Undefined Behavior and Null Pointer Deference in CIccTagXmlFloatNum<>::ParseXml()
- InternationalColorConsortium iccDEV
- Memory corruption
- CWE-20
- CVSS 7.1 High
iccDEV has Undefined Behavior in icSigCalcOp()
- InternationalColorConsortium iccDEV
- CWE-20
- CWE-758
- CVSS 7.1 High
iccDEV has Null Pointer Deference and Undefined Behavior in CIccXmlArrayType()
- InternationalColorConsortium iccDEV
- Memory corruption
- CWE-20
- CVSS 5.6 Medium
FreeRDP has a global-buffer-overflow in crypto_base64_decode
- FreeRDP
- Memory corruption
- CWE-758
- CVSS 7.1 High
iccDEV has Undefined Behavior in CIccTagCurve::CIccTagCurve()
- InternationalColorConsortium iccDEV
- CWE-20
- CWE-758
- CVSS 7.1 High
iccDEV has Undefined Behavior in CIccTagLutAtoB::Validate()
- InternationalColorConsortium iccDEV
- CWE-20
- CWE-758
- CVSS 7.1 High
iccDEV has Undefined Behavior in CIccTagLut16::Read()
- InternationalColorConsortium iccDEV
- CWE-20
- CWE-758
- CVSS 7.1 High
iccDEV has Undefined Behavior in CIccTagSpectralViewingConditions()
- InternationalColorConsortium iccDEV
- CWE-20
- CWE-758
- CVSS 8.8 High
iccDEV has Undefined Behavior in CIccCLUT::Init()
- InternationalColorConsortium iccDEV
- CWE-20
- CWE-758
- CVSS 6.1 Medium
OpenPLC_V3
- OpenPLC_V3
- CWE-758
- CVSS 4.0, no score published
LibYML: `libyml::string::yaml_string_extend` is unsound and unmaintained
- CWE-758
>=0.0.4, <=0.0.5 · no fixed version yet
GHSA-gfxp-f68g-8x78 - CVSS 6.1 Medium
ImageMagick has Undefined Behavior (function-type-mismatch) in CloneSplayTree
- CWE-758
<14.8.0 · fixed in 14.8.0
GHSA-6hgw-6x87-578x · CVE-2025-55160 - CVSS 6.5 Medium
Mozilla Firefox: The `ShmemCharMapHashEntry()` code was susceptible to potentially undefined behavior by…
- Mozilla Firefox
- CWE-758
- CVSS 3.9 Low
Undefined Behavior in Rust runtime functions
- CWE-758
>=0.0.0-0, <6.0.2 || >=7.0.0, <7.0.1 || >=8.0.0, <8.0.1 · fixed in 6.0.2, 7.0.1, 8.0.1
GHSA-ch89-5g45-qwc7 · CVE-2023-30624 - CVSS 7.5 High
Unaligned memory allocation in chunky
- CWE-758
<=0.3.7 · no fixed version yet
GHSA-qg24-8xj4-gj2h · CVE-2020-36433