CWE-1285
CWE-1285 · 6 records · 4 with a public proof-of-concept
Records the NVD classes under CWE-1285, highest CVSS first.
- HIGH 8.4CVE-2026-20524
In apu, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249004; Issue ID: …
mt6899 firmware · mt6899 · mt6993 firmware · mt6993 · mt8668 firmware · mt8668
- HIGH 8CVE-2026-107821public PoC
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB insufficiently validated counts, offsets, lengths, and field boundaries in FRM metadata while opening binary FRM fil…
mariadb
- MEDIUM 6CVE-2026-111555
A flaw was found in luksmeta. Improper boundary validation of metadata slots allows an attacker capable of supplying or modifying a disk header to redirect wipe or load operations outside the intended metadata area. An attacker could exploit this vulnerability…
- MEDIUM 4.9CVE-2026-96582public PoC
A HID report descriptor is a sequence of items, each declaring in its header how many data bytes follow. The USBX host walks that sequence by advancing over each header and parsing the data behind it. The walk checked that an item fitted in the descriptor o…
- LOW 3.6CVE-2026-110736public PoC
Godot Engine through 4.7.2 has an out-of-bounds read in the optimized translation loader (core/string/optimized_translation.cpp, OptimizedTranslation::get_message). Offsets read from the hash table of a crafted .translation resource are used as indices into th…
- UNSCOREDCVE-2026-89410public PoC
In Z-Wave SDK 8.1.1 and earlier, a malformed NCP SPI command can trigger out-of-bounds reads that leak sensitive information.