CWE-131: CWE-131
Yearly Trend
Top Affected Vendors
All CWE-131 CVEs (37)
A critical buffer overflow vulnerability in IBM Merge Healthcare eFilm Workstation license server allows remote, unauthenticated attackers to execute ...
Jan 26, 2024CVE-2026-1188 is a buffer overflow vulnerability in Eclipse OMR's port library component where an API function fails to properly account for separator...
Jan 29, 2026A heap buffer overflow vulnerability in AIS-catcher allows attackers to write approximately 1KB of arbitrary data into a 128-byte buffer, potentially ...
Nov 29, 2025This CVE describes a buffer size limitation vulnerability in PHP's HTTP redirect parsing. When PHP processes HTTP redirect responses, it truncates loc...
Mar 30, 2025This vulnerability allows arbitrary code execution via an out-of-bounds write in libbiosig's FAMOS file parser. Attackers can exploit it by providing ...
Feb 20, 2024A heap buffer overflow vulnerability in FreeBSD's libc stdio function __sflush() allows attackers to corrupt data or execute arbitrary code when write...
Nov 8, 2023CVE-2023-24819 is a critical buffer overflow vulnerability in RIOT-OS's 6LoWPAN network stack that allows remote attackers to execute arbitrary code o...
Apr 24, 2023This vulnerability allows an attacker to execute arbitrary code by exploiting an out-of-bounds write in Accusoft ImageGear's JPG processing. Attackers...
Jun 11, 2021This is a critical buffer overflow vulnerability in Juniper Junos OS overlayd service that handles VXLAN overlay OAM packets. Unauthenticated remote a...
Apr 22, 2021This vulnerability in the rand_core Rust crate allows attackers to seed random number generators with insufficient data, potentially compromising cryp...
Feb 18, 2021A memory corruption vulnerability in the PostScript interpreter of Lexmark devices allows attackers to execute arbitrary code. This affects various Le...
Feb 28, 2024This vulnerability involves memory corruption while processing a GP command response in Qualcomm components, potentially allowing attackers to execute...
Nov 4, 2025This vulnerability allows remote code execution through memory corruption when processing malicious JPG files in Accusoft ImageGear. Attackers can exp...
Jul 8, 2021This vulnerability allows memory corruption in Qualcomm's PlayReady APP implementation when processing TA commands, potentially enabling arbitrary cod...
Oct 9, 2025CVE-2017-13315 is an Android privilege escalation vulnerability in the DcParamObject.java component where a write size mismatch allows attackers to by...
Nov 19, 2024This CVE-2024-46729 is a buffer overrun vulnerability in the AMD display driver component of the Linux kernel. It allows attackers to potentially exec...
Sep 18, 2024A vulnerability in the Linux kernel's Intel IPU3 media driver allows attackers to cause a denial-of-service (system crash) or potentially execute arbi...
Feb 27, 2024This vulnerability allows authenticated remote attackers to cause denial of service on Cisco ASA and FTD firewalls by sending specially crafted GCM-en...
Mar 4, 2026An unauthenticated attacker can send a specially crafted HTTPS packet to the webserver, causing a buffer size calculation error that leads to a denial...
Jan 17, 2025A vulnerability in SiWx91x devices causes the SHA2/224 algorithm to return an incorrect 256-bit hash instead of the expected 224-bit hash, triggering ...
Jan 7, 2025An unauthenticated remote attacker can send a malicious OPC UA request to CODESYS products, causing a denial-of-service (DoS) due to incorrect buffer ...
Jun 4, 2024This vulnerability in OpenBSD's npppd (Point-to-Point Protocol daemon) allows remote attackers to cause a denial of service by sending specially craft...
Mar 1, 2024This vulnerability allows undisclosed requests to cause the Traffic Management Microkernel (TMM) to terminate, leading to denial of service. It affect...
Feb 14, 2024A buffer overflow vulnerability exists in the Intel IGB Ethernet driver in Linux kernels before 6.5.3. When processing frames larger than the configur...
Oct 15, 2023A buffer overflow vulnerability in PHP's path resolution function allows writing a null byte beyond allocated memory when processing paths near system...
Feb 16, 2023CVE-2021-44510 is a buffer overflow vulnerability in FIS GT.M (and related YottaDB) where crafted input causes an extremely large memset calculation, ...
Apr 15, 2022This vulnerability in Huawei smartphones involves an incorrect buffer size calculation that could allow attackers to trigger a system reset. It affect...
Aug 2, 2021openCryptoki versions 3.25.0 and 3.26.0 contain a heap buffer overflow vulnerability in the CKM_ECDH_AES_KEY_WRAP implementation. An attacker with loc...
Jan 13, 2026IBM DB2 Merge Backup contains an incorrect buffer size calculation vulnerability that allows authenticated users to crash the program. This affects IB...
Feb 17, 2026This CVE describes an incorrect buffer size calculation vulnerability in IBM DB2 High Performance Unload that could allow authenticated users to cause...
Oct 28, 2025A vulnerability in OpenBSD's wg(4) WireGuard implementation allows specially crafted network traffic to cause a kernel crash (denial of service). This...
Mar 20, 2025A negative-size-param vulnerability in tsMuxer allows attackers to cause Denial of Service (DoS) by processing a specially crafted TS video file. This...
Nov 14, 2024A buffer overflow vulnerability exists in the GNU C Library's assert() function when assertion failures occur with specific message sizes. This could ...
Jan 22, 2025This vulnerability is a heap-based buffer overflow in QuickJS and quickjs-ng JavaScript engines due to incorrect size calculation in JS_ReadBigInt for...
Apr 27, 2025This CVE describes a buffer overflow vulnerability in the Linux kernel's ASoC Intel sof-nau8825 driver where module alias names exceed the 20-characte...
Aug 21, 2024CVE-2024-28052 is a buffer overflow vulnerability in the WBR-6012 wireless SOHO router's web interface. Attackers can exploit this by sending speciall...
Oct 30, 2024A vulnerability in GRUB bootloader allows local attackers to cause denial of service by connecting malicious USB devices during boot. The flaw involve...
Nov 18, 2025About CWE-131 (CWE-131)
Our database tracks 37 CVEs classified as CWE-131, with 11 rated critical and 16 rated high severity. The average CVSS score for CWE-131 vulnerabilities is 7.9.
External reference: View CWE-131 on MITRE CWE →
Monitor CWE-131 Vulnerabilities
Get alerted when new CWE-131 CVEs affect your infrastructure.
Start Monitoring Free