# Memory corruption.

Buffer overflows, out-of-bounds reads and writes, use after free. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first

- [libyal libvmdk Descriptor File libvmdk_descriptor_file.c libvmdk_descriptor_file_read_header out-of-bounds](https://agentprime.io/advisories/CVE-2026-123269.md)
  `CVE-2026-123269` · CVE record: libyal libvmdk · CVSS 4.8 Medium · Not analysed yet · Published 6 Nov 2026 · Tags: Memory corruption
- [libyal libvmdk Extent Data File libvmdk_extent_table.c libvmdk_extent_table_get_extent_data_file_path memory corruption](https://agentprime.io/advisories/CVE-2026-123268.md)
  `CVE-2026-123268` · CVE record: libyal libvmdk · CVSS 5.1 Medium · Not analysed yet · Published 5 Nov 2026 · Tags: Memory corruption
- [NUT blazer_usb ippon_command stack info-leak via unzeroed char tmp\[64\] in OUT-direction usb_control_msg](https://agentprime.io/advisories/CVE-2026-85068.md)
  `CVE-2026-85068` · CVE record: networkupstools nut · CVSS 2.4 Low · Not analysed yet · Published 5 Nov 2026 · Tags: Memory corruption
- [Excessive memory allocation when decompressing crafted streams in github.com/andybalholm/brotli](https://agentprime.io/advisories/GHSA-9v8h-qqgm-4m35.md)
  `GHSA-9v8h-qqgm-4m35`, `BIT-brotli-2026-111497`, `BIT-dotnet-2026-111497`, `BIT-dotnet-sdk-2026-111497`, `BIT-node-2026-111497`, `BIT-node-min-2026-111497`, `BIT-powershell-2026-111497`, `CVE-2026-111497`, `GHSA-c9gr-gmg4-2vqv`, `GO-2026-6888`, `PYSEC-2026-4322`, `PYSEC-2026-4323` · Go `github.com/andybalholm/brotli`: affected `<1.2.7`, fixed in `1.2.7` · CVSS 9.2 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.83 · Not analysed yet · Published 5 Nov 2026 · Tags: Memory corruption, CWE-252
- [FastNetMon: sFlow header_size field trusted as parser capture length causes remote out-of-bounds read](https://agentprime.io/advisories/CVE-2026-92698.md)
  `CVE-2026-92698` · CVE record: pavel-odintsov fastnetmon · CVSS 8.2 High · Not analysed yet · Published 5 Nov 2026 · Tags: Memory corruption
- [FastNetMon: NetFlow v9 unbounded strlen() on interface-description field causes remote out-of-bounds read](https://agentprime.io/advisories/CVE-2026-92697.md)
  `CVE-2026-92697` · CVE record: pavel-odintsov fastnetmon · CVSS 7.5 High · Not analysed yet · Published 5 Nov 2026 · Tags: Memory corruption
- [FastNetMon: IPv6 Fragment header dereferenced without bounds check in shared packet parser](https://agentprime.io/advisories/CVE-2026-92693.md)
  `CVE-2026-92693` · CVE record: pavel-odintsov fastnetmon · CVSS 8.2 High · Not analysed yet · Published 5 Nov 2026 · Tags: Memory corruption
- [FastNetMon: NetFlow/IPFIX template cache returns unlocked pointers, causing heap-use-after-free on multi-port deployments](https://agentprime.io/advisories/CVE-2026-93424.md)
  `CVE-2026-93424` · CVE record: pavel-odintsov fastnetmon · CVSS 7.5 High · Not analysed yet · Published 5 Nov 2026 · Tags: Memory corruption
- [FastNetMon: Legacy pcap parse_packet() has no bounds checking, causing out-of-bounds read on truncated frames](https://agentprime.io/advisories/CVE-2026-92695.md)
  `CVE-2026-92695` · CVE record: pavel-odintsov fastnetmon · CVSS 8.2 High · Not analysed yet · Published 5 Nov 2026 · Tags: Memory corruption
- [Heap buffer overflow in dBASE index import](https://agentprime.io/advisories/CVE-2026-76181.md)
  `CVE-2026-76181` · CVE record: The Document Foundation LibreOffice · CVSS 5.4 Medium · Not analysed yet · Published 5 Nov 2026 · Tags: Denial of service, Memory corruption
- [FreeSWITCH: Pre-authentication invalid pointer dereference in mod_rtmp connect command handling](https://agentprime.io/advisories/CVE-2026-116782.md)
  `CVE-2026-116782` · CVE record: signalwire freeswitch · CVSS 7.5 High · Not analysed yet · Published 5 Nov 2026 · Tags: Memory corruption
- [FreeSWITCH mod_spandsp: out-of-bounds write parsing UDPTL error-recovery data](https://agentprime.io/advisories/CVE-2026-116783.md)
  `CVE-2026-116783` · CVE record: signalwire freeswitch · CVSS 8.2 High · Not analysed yet · Published 5 Nov 2026 · Tags: Memory corruption, CWE-129
- [FreeSWITCH: Pre-authentication heap buffer overflow in core XML empty-entity decoding](https://agentprime.io/advisories/CVE-2026-116788.md)
  `CVE-2026-116788` · CVE record: signalwire freeswitch · CVSS 8.2 High · Not analysed yet · Published 5 Nov 2026 · Tags: Memory corruption
- [FreeSWITCH: Heap out-of-bounds read in FreeSWITCH core variable expansion via \`${variable:offset}\` slicing](https://agentprime.io/advisories/CVE-2026-116780.md)
  `CVE-2026-116780` · CVE record: signalwire freeswitch · CVSS 2.7 Low · Not analysed yet · Published 5 Nov 2026 · Tags: Memory corruption, Information disclosure
- [FreeSWITCH: Out-of-bounds read in RTCP NACK feedback parsing](https://agentprime.io/advisories/CVE-2026-116784.md)
  `CVE-2026-116784` · CVE record: signalwire freeswitch · CVSS 7.5 High · Not analysed yet · Published 5 Nov 2026 · Tags: Memory corruption
- [FreeSWITCH: Pre-authentication out-of-bounds writes in mod_xml_rpc WebSocket frame parsing](https://agentprime.io/advisories/CVE-2026-116781.md)
  `CVE-2026-116781` · CVE record: signalwire freeswitch · CVSS 5.3 Medium · Not analysed yet · Published 5 Nov 2026 · Tags: Memory corruption, CWE-193
- [FreeSWITCH: Pre-authentication heap out-of-bounds write in mod_xml_rpc WebSocket frame length handling](https://agentprime.io/advisories/CVE-2026-116785.md)
  `CVE-2026-116785` · CVE record: signalwire freeswitch · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Nov 2026 · Tags: Memory corruption, CWE-681
- [FreeSWITCH: Pre-authentication process termination in the Event Socket via an unbounded Content-Length](https://agentprime.io/advisories/CVE-2026-116787.md)
  `CVE-2026-116787` · CVE record: signalwire freeswitch · CVSS 7.5 High · Not analysed yet · Published 5 Nov 2026 · Tags: Memory corruption, Denial of service
- [FreeSWITCH: Pre-authentication stack buffer overflow in mod_rtmp control-message handling](https://agentprime.io/advisories/CVE-2026-116567.md)
  `CVE-2026-116567` · CVE record: signalwire freeswitch · CVSS 7.5 High · Not analysed yet · Published 5 Nov 2026 · Tags: Memory corruption
- [FreeSWITCH: Stack buffer overflow in mod_rtmp AVC sequence-header construction](https://agentprime.io/advisories/CVE-2026-116571.md)
  `CVE-2026-116571` · CVE record: signalwire freeswitch · CVSS 5.9 Medium · Not analysed yet · Published 5 Nov 2026 · Tags: Memory corruption
- [FreeSWITCH: Pre-authentication stack buffer overflow in mod_xml_rpc HTTP directory authentication](https://agentprime.io/advisories/CVE-2026-116570.md)
  `CVE-2026-116570` · CVE record: signalwire freeswitch · CVSS 7.5 High · Not analysed yet · Published 5 Nov 2026 · Tags: Memory corruption
- [FreeSWITCH: Pre-authentication out-of-bounds write in MSRP message body parsing](https://agentprime.io/advisories/CVE-2026-116569.md)
  `CVE-2026-116569` · CVE record: signalwire freeswitch · CVSS 7.5 High · Not analysed yet · Published 5 Nov 2026 · Tags: Memory corruption
- [FreeSWITCH: Out-of-bounds read in mod_rtmp H.264 video message parsing](https://agentprime.io/advisories/CVE-2026-116568.md)
  `CVE-2026-116568` · CVE record: signalwire freeswitch · CVSS 7.5 High · Not analysed yet · Published 5 Nov 2026 · Tags: Memory corruption
- [FreeSWITCH mod_sofia: stack buffer overflow from an over-long SIP Contact display-name](https://agentprime.io/advisories/CVE-2026-116572.md)
  `CVE-2026-116572` · CVE record: signalwire freeswitch · CVSS 6.5 Medium · Not analysed yet · Published 5 Nov 2026 · Tags: Memory corruption
- [FreeSWITCH: Stack buffer overflow parsing the SDP a=crypto key material on inbound calls](https://agentprime.io/advisories/CVE-2026-115928.md)
  `CVE-2026-115928` · CVE record: signalwire freeswitch · CVSS 7.5 High · Not analysed yet · Published 5 Nov 2026 · Tags: Memory corruption
- [FreeSWITCH: Off-by-one heap write in core XML serialization of four-byte UTF-8 sequences](https://agentprime.io/advisories/CVE-2026-116574.md)
  `CVE-2026-116574` · CVE record: signalwire freeswitch · CVSS 5.9 Medium · Not analysed yet · Published 5 Nov 2026 · Tags: Memory corruption, CWE-193
- [FreeSWITCH mod_sofia: stack buffer overflow from an over-long SIP To-header user](https://agentprime.io/advisories/CVE-2026-116573.md)
  `CVE-2026-116573` · CVE record: signalwire freeswitch · CVSS 6.5 Medium · Not analysed yet · Published 5 Nov 2026 · Tags: Memory corruption
- [accel-ppp before 1.15.0 Heap-based Buffer Overflow via oversized log lines in log_tcp/log_syslog/log_pgsql](https://agentprime.io/advisories/CVE-2026-123205.md)
  `CVE-2026-123205` · CVE record: accel-ppp accel-ppp · CVSS 8.3 High · Not analysed yet · Published 5 Nov 2026 · Tags: Memory corruption
- [NEURON through 9.0.2 Stack-based Buffer Overflow via CoreNEURON dataset tokens](https://agentprime.io/advisories/CVE-2026-123203.md)
  `CVE-2026-123203` · CVE record: neuronsimulator NEURON · CVSS 6.9 Medium · Not analysed yet · Published 5 Nov 2026 · Tags: Memory corruption
- [libnxml before 0.18.6 Stack-based Buffer Overflow via long multi-byte XML name](https://agentprime.io/advisories/CVE-2026-123202.md)
  `CVE-2026-123202` · CVE record: bakulf libnxml · CVSS 8.7 High · Not analysed yet · Published 5 Nov 2026 · Tags: Memory corruption
- [eBook-speaker through 6.2.0 Stack-based Buffer Overflow via element name attribute](https://agentprime.io/advisories/CVE-2026-123199.md)
  `CVE-2026-123199` · CVE record: book-readers eBook-speaker · CVSS 6.8 Medium · Not analysed yet · Published 5 Nov 2026 · Tags: Memory corruption
- [Stack-based buffer overflow in SafeNet Authentication Client SIS token engine](https://agentprime.io/advisories/CVE-2026-94395.md)
  `CVE-2026-94395` · CVE record: Thalesgroup Safenet Authentication Client SIS token engine · CVSS 7.0 High · Not analysed yet · Published 5 Nov 2026 · Tags: Memory corruption, CWE-1284
- [WAMR fast interpreter loader heap buffer overflow via constant deduplication mismatch](https://agentprime.io/advisories/CVE-2026-54912.md)
  `CVE-2026-54912` · CVE record: bytecodealliance wasm-micro-runtime · CVSS 8.8 High · Not analysed yet · Published 5 Nov 2026 · Tags: Memory corruption
- [WebAssembly Micro Runtime: Missing \`ref.null\` heap-type validation in \`load_init_expr\` leaks host stack memory to the WebAssembly guest](https://agentprime.io/advisories/CVE-2026-54913.md)
  `CVE-2026-54913` · CVE record: bytecodealliance wasm-micro-runtime · CVSS 6.9 Medium · Not analysed yet · Published 5 Nov 2026 · Tags: Memory corruption
- [WebAssembly Micro Runtime: Heap Buffer Overflow in WAMR WASI poll_oneoff Output Buffer](https://agentprime.io/advisories/CVE-2026-54914.md)
  `CVE-2026-54914` · CVE record: bytecodealliance wasm-micro-runtime · CVSS 8.3 High · Not analysed yet · Published 5 Nov 2026 · Tags: Memory corruption
- [Local privilege escalation in SafeNet Authentication Client SACSrv](https://agentprime.io/advisories/CVE-2026-112109.md)
  `CVE-2026-112109` · CVE record: Thalesgroup Safenet Authentication Client Service · CVSS 7.3 High · Not analysed yet · Published 5 Nov 2026 · Tags: Memory corruption
- [ASN1SCC: Stack buffer overflow and out-of-bounds read in XER tokenizer NT()](https://agentprime.io/advisories/CVE-2026-76077.md)
  `CVE-2026-76077` · CVE record: esa asn1scc · CVSS 8.1 High · Not analysed yet · Published 5 Nov 2026 · Tags: Memory corruption
- [ASN1SCC: Out-of-bounds read via unvalidated character index in ASN.1 string decoders](https://agentprime.io/advisories/CVE-2026-75615.md)
  `CVE-2026-75615` · CVE record: esa asn1scc · CVSS 5.3 Medium · Not analysed yet · Published 5 Nov 2026 · Tags: Memory corruption, CWE-129
- [ASN1SCC: Out-of-bounds write in BitStream_DecodeConstraintWholeNumber (uPER/ACN)](https://agentprime.io/advisories/CVE-2026-75614.md)
  `CVE-2026-75614` · CVE record: esa asn1scc · CVSS 8.1 High · Not analysed yet · Published 5 Nov 2026 · Tags: Memory corruption, CWE-129
- [Gdb: gdb: stack buffer overflow in parse_tsv_definition via stale rs->buf tail](https://agentprime.io/advisories/CVE-2026-123151.md)
  `CVE-2026-123151` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 5 Nov 2026 · Tags: Memory corruption
- [Gdb: gdbserver: heap buffer overflow in cmd_qtdpsrc via qtdpsrc declared/actual length mismatch](https://agentprime.io/advisories/CVE-2026-121997.md)
  `CVE-2026-121997` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.1 High · Not analysed yet · Published 5 Nov 2026 · Tags: Memory corruption
- [Gdb: gdbserver: heap disclosure and wild pointer in gdb_parse_agent_expr via untrusted agent-expression length](https://agentprime.io/advisories/CVE-2026-121996.md)
  `CVE-2026-121996` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.2 High · Not analysed yet · Published 5 Nov 2026 · Tags: Memory corruption
- [Gdb: gdb: stack buffer overflow in parse_tracepoint_definition via stale rs->buf tail](https://agentprime.io/advisories/CVE-2026-121995.md)
  `CVE-2026-121995` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 5 Nov 2026 · Tags: Memory corruption
- [Gdb: gdb: stack buffer overflow in fetch_register_using_p via unchecked p-reply length](https://agentprime.io/advisories/CVE-2026-121994.md)
  `CVE-2026-121994` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.8 High · Not analysed yet · Published 5 Nov 2026 · Tags: Memory corruption
- [ntopng: Stack buffer overflow (write) in nDPI custom category detection allows remote code execution via crafted network packets](https://agentprime.io/advisories/CVE-2026-97371.md)
  `CVE-2026-97371` · CVE record: ntop ntopng · CVSS 5.3 Medium · Not analysed yet · Published 5 Nov 2026 · Tags: Memory corruption
- [stable-diffusion.cpp: Out-of-bounds read in safetensors loader: unvalidated data_offsets allow a tensor's byte range to extend past the end of the file](https://agentprime.io/advisories/CVE-2026-70660.md)
  `CVE-2026-70660` · CVE record: leejet stable-diffusion.cpp · CVSS 6.9 Medium · Not analysed yet · Published 5 Nov 2026 · Tags: Memory corruption
- [stable-diffusion.cpp: Heap out-of-bounds write in the imatrix loader (\`load_imatrix\`) via a duplicate tensor name](https://agentprime.io/advisories/CVE-2026-70659.md)
  `CVE-2026-70659` · CVE record: leejet stable-diffusion.cpp · CVSS 7.8 High · Not analysed yet · Published 5 Nov 2026 · Tags: Memory corruption, CWE-1284
- [Integer overflow in musl](https://agentprime.io/advisories/CVE-2026-107891.md)
  `CVE-2026-107891` · CVE record: musl -libc musl · CVSS 8.1 High · Not analysed yet · Published 5 Nov 2026 · Tags: Memory corruption
- [SDL_mixer 3.1.2 through 3.2.4 Stack-based Buffer Overflow via FetchXLaw() in AIFF Decoder](https://agentprime.io/advisories/CVE-2026-122329.md)
  `CVE-2026-122329` · CVE record: libsdl-org SDL_mixer · CVSS 8.5 High · Not analysed yet · Published 5 Nov 2026 · Tags: Memory corruption
- [SDL_mixer 3.1.2 through 3.2.4 Stack-based Buffer Overflow via FetchXLaw() in WAV Decoder](https://agentprime.io/advisories/CVE-2026-122328.md)
  `CVE-2026-122328` · CVE record: libsdl-org SDL_mixer · CVSS 8.5 High · Not analysed yet · Published 5 Nov 2026 · Tags: Memory corruption
- [OpenPPL ppl.nn CUDA Optimizer opt_graph.cc InitQuantization out-of-bounds](https://agentprime.io/advisories/CVE-2026-122189.md)
  `CVE-2026-122189` · CVE record: OpenPPL ppl.nn · CVSS 5.3 Medium · Not analysed yet · Published 5 Nov 2026 · Tags: Memory corruption
- [Buffer overflow in Samsung Semiconductor Exynos 850 and others](https://agentprime.io/advisories/CVE-2026-48173.md)
  `CVE-2026-48173` · CVE record: Samsung Semiconductor Exynos 850 and 4 more · No CVSS score · Not analysed yet · Published 5 Nov 2026 · Tags: Memory corruption
- [NULL pointer dereference in Samsung Semiconductor Exynos 1280 and others](https://agentprime.io/advisories/CVE-2026-48174.md)
  `CVE-2026-48174` · CVE record: Samsung Semiconductor Exynos 1280 and 4 more · No CVSS score · Not analysed yet · Published 5 Nov 2026 · Tags: Memory corruption
- [Out-of-bounds write in Samsung Semiconductor Exynos 1280 and others](https://agentprime.io/advisories/CVE-2026-35494.md)
  `CVE-2026-35494` · CVE record: Samsung Semiconductor Exynos 1280 and 4 more · No CVSS score · Not analysed yet · Published 5 Nov 2026 · Tags: Memory corruption
- [Double free in Samsung Semiconductor Exynos 1480 and others](https://agentprime.io/advisories/CVE-2026-68993.md)
  `CVE-2026-68993` · CVE record: Samsung Semiconductor Exynos 1480 and 1 more · No CVSS score · Not analysed yet · Published 5 Nov 2026 · Tags: Memory corruption
- [Double free in Samsung Semiconductor Exynos 1480 and others](https://agentprime.io/advisories/CVE-2026-68994.md)
  `CVE-2026-68994` · CVE record: Samsung Semiconductor Exynos 1480 and 3 more · No CVSS score · Not analysed yet · Published 5 Nov 2026 · Tags: Memory corruption
- [Integer overflow in Samsung Semiconductor Exynos 2100 and others](https://agentprime.io/advisories/CVE-2026-68984.md)
  `CVE-2026-68984` · CVE record: Samsung Semiconductor Exynos 2100 and 4 more · No CVSS score · Not analysed yet · Published 5 Nov 2026 · Tags: Memory corruption
- [Integer overflow in Samsung Semiconductor Exynos 1480 and others](https://agentprime.io/advisories/CVE-2026-69005.md)
  `CVE-2026-69005` · CVE record: Samsung Semiconductor Exynos 1480 and 4 more · No CVSS score · Not analysed yet · Published 5 Nov 2026 · Tags: Memory corruption
- [Out-of-bounds write in Samsung Semiconductor Exynos 1280 and others](https://agentprime.io/advisories/CVE-2026-68985.md)
  `CVE-2026-68985` · CVE record: Samsung Semiconductor Exynos 1280 and 2 more · No CVSS score · Not analysed yet · Published 5 Nov 2026 · Tags: Memory corruption
- [Out-of-bounds write in Samsung Semiconductor Exynos Modem 5300 and others](https://agentprime.io/advisories/CVE-2026-69068.md)
  `CVE-2026-69068` · CVE record: Samsung Semiconductor Exynos Modem 5300 and 1 more · No CVSS score · Not analysed yet · Published 5 Nov 2026 · Tags: Memory corruption

Older: <https://agentprime.io/advisories/tag/memory-corruption.md?cursor=WyIyMDI2LTExLTA1VDAyOjQwOjUzLjA5ODAwMFoiLCJDVkUtMjAyNi02OTA2OCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=memory-corruption>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/memory-corruption/>. Everything for agents: <https://agentprime.io/llms.txt>.