Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CWE-125 (跨界内存读) — Vulnerability Class 2871

2871 vulnerabilities classified as CWE-125 (跨界内存读). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2025-58427 Canva Affinity 安全漏洞 — Affinity 6.1 Medium2026-03-17
CVE-2025-66617 Canva Affinity 安全漏洞 — Affinity 6.1 Medium2026-03-17
CVE-2025-47873 Canva Affinity 安全漏洞 — Affinity 6.1 Medium2026-03-17
CVE-2025-61952 Canva Affinity 安全漏洞 — Affinity 6.1 Medium2026-03-17
CVE-2025-66503 Canva Affinity 安全漏洞 — Affinity 6.1 Medium2026-03-17
CVE-2025-66042 Canva Affinity 安全漏洞 — Affinity 6.1 Medium2026-03-17
CVE-2025-65119 Canva Affinity 安全漏洞 — Affinity 6.1 Medium2026-03-17
CVE-2025-62403 Canva Affinity 安全漏洞 — Affinity 6.1 Medium2026-03-17
CVE-2026-20726 Canva Affinity 安全漏洞 — Affinity 6.1 Medium2026-03-17
CVE-2026-22882 Canva Affinity 安全漏洞 — Affinity 6.1 Medium2026-03-17
CVE-2026-0708 Libucl: libucl: denial of service via embedded null byte in ucl input — libucl 8.3 High2026-03-17
CVE-2025-71264 Mumble 缓冲区错误漏洞 — Mumble 3.7 Low2026-03-16
CVE-2026-28521 arduino-TuyaOpen TuyaIoT Out-of-Bounds Memory Read Information Disclosure — arduino-TuyaOpen 7.7 High2026-03-15
CVE-2026-3441 Binutils: gnu binutils: information disclosure via specially crafted xcoff object file — Red Hat Enterprise Linux 10 6.1 Medium2026-03-15
CVE-2026-3442 Binutils: gnu binutils: information disclosure or denial of service via out-of-bounds read in bfd linker — Red Hat Enterprise Linux 10 6.1 Medium2026-03-15
CVE-2026-31897 FreeRDP has an out-of-bounds read in `freerdp_bitmap_decompress_planar` — FreeRDP--2026-03-13
CVE-2026-31885 FreeRDP has an out-of-bounds read in ADPCM decoders due to missing predictor/step_index bounds checks — FreeRDP 6.5 Medium2026-03-13
CVE-2026-0956 Out-Of-Bounds Read in Digilent DASYLab — DASYLab 7.8 High2026-03-13
CVE-2026-0955 Out-Of-Bounds Read When Opening a Corrupt File in Digilent DASYLab — DASYLab 7.8 High2026-03-13
CVE-2026-32320 Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings — core 6.5 Medium2026-03-12
CVE-2026-32319 Ella Core: Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload — core 7.5 High2026-03-12
CVE-2026-4012 rxi fe fe.c read_ out-of-bounds — fe 3.3 Low2026-03-12
CVE-2026-4009 jarikomppa soloud WAV File dr_wav.h drwav_read_pcm_frames_s16__msadpcm out-of-bounds — soloud 3.3 Low2026-03-12
CVE-2025-15038 ASUS Business System Control Interface 安全漏洞 — ASUS Business System Control Interface 7.1AIHighAI2026-03-12
CVE-2026-3926 Google Chrome 缓冲区错误漏洞 — Chrome 8.1AIHighAI2026-03-11
CVE-2026-3916 Google Chrome 缓冲区错误漏洞 — Chrome 9.3AICriticalAI2026-03-11
CVE-2026-3950 strukturag libheif stsz/stts track.cc load out-of-bounds — libheif 3.3 Low2026-03-11
CVE-2026-3949 strukturag libheif HEIF File decoder_vvdec.cc vvdec_push_data2 out-of-bounds — libheif 3.3 Low2026-03-11
CVE-2026-21888 MQTT v5 Variable Byte Integer parsing out-of-bounds: get_var_integer() — nanomq 7.5 High2026-03-11
CVE-2026-27270 Illustrator | Out-of-bounds Read (CWE-125) — Illustrator 5.5 Medium2026-03-10

Vulnerabilities classified as CWE-125 (跨界内存读) represent 2871 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.