CWE-129 vulnerabilities

A vulnerability in libIEC61850 prior to version 1.6.2 allows remote attackers to cause a denial of service via a NULL pointer dereference. The issue arises from improper validation of an alternate-access sub-array range in the MMS Read service, leading to a crash when handling out-of-range array indices in data models containing arrays.

CVE-2026-110934 is an improper validation of array index vulnerability in Samsung Open Source Vyond. It allows input data manipulation that can lead to denial of service. The vulnerability affects version 0 of Vyond. The CVSS score is 4.4 (medium severity), indicating limited impact on confidentiality and integrity but high impact on availability. No patch or remediation information is currently provided.

CVE-2026-92152 is a critical vulnerability in NASA's F Prime (fprime) framework versions 4.1.0 up to but not including 4.2.0. It involves improper validation of an array index in the Svc::GenericHub output-port dispatch, where a deserialized port field is used without range checking. This flaw can cause out-of-bounds access to output-port arrays, leading to heap corruption and potentially enabling remote code execution. The issue is fixed in version 4.2.0.

### Summary A flaw in the SSH service allows an authenticated client to crash the server by sending a malformed protocol message while opening a channel. ### Impact Any user able to authenticate over SSH can trigger an unhandled error condition that aborts the server process. This results in a denial of service affecting all connected users until the service is restarted. No confidentiality or integrity impact has been identified; the issue is limited to availability.

CVE-2026-109251 is a vulnerability in FreeRDP before version 3.32.0 where improper validation of a server-supplied signed geometry origin value leads to an out-of-bounds write or client crash. A malicious RDP server can exploit this by sending a negative coordinate in the video surface geometry, causing the client to skip a critical clamp operation and potentially corrupt memory or abort.

FreeRDP versions 3.0.0 before 3.32.0 have a heap buffer overflow vulnerability in the collect_keys() function. This flaw allows local attackers controlling smartcard tokens to write beyond a fixed 64-entry keys array during PKCS#11 key enumeration, potentially corrupting heap memory with attacker-controlled data during smartcard logon.

The Affinity by Canva application before 3.3.1 (October 2026 release) did not perform adequate bounds checking when parsing raster image data in Affinity document files, leading to an out-of-bounds read and the dereference of an untrusted pointer. A threat actor could craft an Affinity document that, when opened by a user in Affinity, could result in memory corruption or an application crash.

CVE-2026-107737 is a medium severity vulnerability in SumatraPDF versions 3.6.1 and earlier, and in certain pre-release 3.7.0 builds without WebView2 support. It involves improper validation of an array index in the handling of its:// URLs, leading to an out-of-bounds pointer read and process termination when opening crafted CHM files via the IE fallback backend. No fixed version is currently available.

CVE-2026-107325 is a high-severity vulnerability in the MongoDB Go Driver involving improper validation of BSON array lengths. This flaw can cause an out-of-bounds index and runtime panic when bson.RawArray.Validate or bsoncore.Array.Validate is called on a malformed four-byte array. An unauthenticated attacker able to supply raw BSON array data to the affected application may cause the application process to terminate, resulting in a denial of service. There is no identified impact on confidentiality or integrity.

CVE-2026-107225 is an improper input validation vulnerability in the Go library excelize versions 2.8.0 through 2.11.0. The vulnerability arises because the GetStyle function's predicates only check upper bounds for style-table indices, allowing negative indices to be used. When a crafted styles.xml file contains negative fillId, borderId, or fontId values, these negative values bypass the upper-bound checks and cause negative slice indexing, leading to a panic during cell styling reads. No fix is currently available for this issue.

CVE-2026-107222 is a medium severity vulnerability in the qax-os excelize Go library versions 2.7.0 through 2.11.0. It involves improper validation of array indexes during conditional-format extraction, which can cause out-of-range indexing or nil dereferences when processing malformed worksheet rules. This can lead to a panic that terminates an unprotected process. No fixed version is currently available.

CVE-2026-107220 is an out-of-bounds read vulnerability in the qax-os excelize Go library versions 2.7.1 through 2.11.0. The issue occurs when processing a crafted worksheet containing an empty mergeCell ref, leading to an empty cached rectangle slice being passed without length checks. This causes an out-of-bounds slice access in cellInRange, resulting in a panic during cell operations. No fix is currently available.

CVE-2026-107218 is a medium severity vulnerability in the Go library excelize (versions 2.10.1 through 2.11.0) used for reading and writing Microsoft Excel spreadsheets. The issue arises from improper validation of array indices in the RIGHT function, which inconsistently uses UTF-16 code-unit counts and Unicode code-point counts when slicing strings. This mismatch can cause a negative index panic during formula evaluation when processing supplementary-plane Unicode characters. No fix is currently available for this vulnerability.

CVE-2026-107217 is an integer overflow vulnerability in the Excelize Go library used for reading and writing Microsoft Excel spreadsheets. The function ColumnNameToNumber does not detect overflow when converting long column names to numeric indices, causing a wraparound to zero. This leads to a negative slice index during worksheet normalization, which can cause the application to panic and terminate unexpectedly. No fixed version is currently available.

CVE-2026-107211 is a high-severity vulnerability in the qax-os excelize library involving improper validation of array indices when processing pivot tables in .xlsx files. The vulnerability arises because the library indexes arrays with attacker-controlled integers from pivot table XML parts without bounds checking, leading to runtime panics (index out of range errors). This can cause the host process to crash when opening crafted malicious Excel files containing pivot tables. The issue affects versions from 2.8.1 through 2.11.0. No official patch or fix is currently documented.

CVE-2026-93321 is a medium severity vulnerability in moby BuildKit where improper validation of array indexes can cause the buildkitd daemon to panic and terminate. This occurs when a malicious frontend submits a crafted LLB definition, interrupting all builds running on that daemon.

CVE-2026-93322 is a medium severity vulnerability in moby BuildKit where improper validation of an array index can cause the buildkitd daemon to panic and terminate. This results in interruption of all builds running on the affected daemon. The vulnerability affects versions from 0 up to and including 0.33.0. There is no information about available patches or exploits in the wild.

In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01864925 / MOLY01210562; Issue ID: MSV-8303.

CVE-2026-47533 is a vulnerability in the NVIDIA GeForce GPU Display Driver for Windows and Linux. It involves improper validation of an array index in the kernel mode layer. Exploitation could lead to code execution, denial of service, privilege escalation, information disclosure, and data tampering. The vulnerability has a CVSS score of 6.7, indicating medium severity. No specific affected versions or patch information are provided.

CVE-2026-47525 is a vulnerability in the NVIDIA GeForce GPU Display Driver for Windows and Linux involving improper validation of an array index in the kernel mode layer. Exploitation could lead to code execution, denial of service, privilege escalation, information disclosure, and data tampering. The vulnerability has a CVSS score of 6.7, indicating a medium severity level. No specific affected versions or patch information are provided. There are no known exploits in the wild at this time.