Threats Tagged 'cwe-197'

Numeric truncation of the buffer length in the MPU buffer authorization check in FreeRTOS-Kernel V11.3.0 and V11.3.1 on the Arm Cortex-R82 (Armv8-R AArch64) MPU port might allow, under certain conditions, an unprivileged task on MPU-enabled builds to read or write privileged kernel memory beyond the validated buffer window, via a stream buffer system call. To remediate this issue, users should upgrade to version V11.3.2 or later.

Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVE-2026-33795 is a numeric truncation error vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved. It allows an unauthenticated network-based attacker to cause a denial of service by sending a BGP Prefix-SID route advertisement that is then re-advertised. The vulnerability affects multiple versions starting from 20.4R1 and later, including various specific release ranges for both Junos OS and Junos OS Evolved.

CVE-2026-102043 is a numeric truncation error vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved. An adjacent attacker can exploit this flaw via MPLS-TE fast-reroute signaling to crash the routing process, causing a denial of service. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved as specified. The CVSS score is 6.5 (medium severity), indicating a significant impact on availability but no confidentiality or integrity loss. No known exploits are reported in the wild, and no official patch information is provided in the input data.

Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network.

Out-of-bounds read in Windows Text Shaping allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows Client License Service allows an authorized attacker to elevate privileges locally.

Stack-based buffer overflow in Microsoft Office Word allows an authorized attacker to elevate privileges locally.

Numeric truncation error in Windows Installer allows an authorized attacker to elevate privileges locally.