CWE-129 관련 취약점
같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.
CWE-129 — 주요 취약점
악용이 확인된 것을 먼저 보여줍니다.
● 실제 악용이 확인됨CVE-2022-48503The issue was addressed with improved bounds checks. This issue is fixed in tvOS 15.6, watchOS 8.7, …3.2%높음8.8CVE-2026-91101HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The find…1.0%보통5.1CVE-2026-65653github.com/temporalio/tchannel-go did not reject TChannel call fragments containing checksum metadat…0.7%높음8.7CVE-2026-65652github.com/temporalio/tchannel-go did not validate the one-byte checksum-type field in inbound TChan…0.7%높음8.7CVE-2026-92152F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedde…0.7%심각9.3CVE-2026-84445gRPC-Go is the Go language implementation of gRPC. Prior to 1.82.2 and 1.83.2, servers created with …0.7%높음8.7CVE-2026-61695Wire provides gRPC and protocol buffers for Android, Kotlin, Swift, and Java. Prior to 6.4.1 and 7.0…0.6%높음7.5CVE-2026-93592vLLM versions before 0.28.0 fail to validate the lower bound of token IDs in the /v1/embeddings and …0.5%높음8.7
전체 목록
72건
CVE-2026-119299gopacket provides packet processing capabilities for Go. Prior to 1.7.2, the SCTP chunk chain in layers/sctp.g…0.5%보통5.9
CVE-2024-58400llama.cpp before b3701 contains an out-of-bounds read vulnerability in llama_decode_internal and llama_encode_…0.4%높음8.8
CVE-2026-48741libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sa…0.4%높음7.5
CVE-2026-55209resdata is software for reading and writing result files from the Eclipse reservoir simulator. Prior to 6.2.9,…0.4%심각9.8
CVE-2026-116590snappy-java is a Java port of the snappy, a fast C++ compresser/decompresser developed by Google. Prior to 1.1…0.4%보통5.9
CVE-2026-93840vLLM before 0.29.0 validates allowed_token_ids against tokenizer length instead of model output logits width i…0.4%보통6.3
CVE-2023-54396PocketMine-MP versions before 4.8.1 fail to validate dye color IDs in banner NBT data during deserialization. …0.4%높음7.1
CVE-2026-93841vLLM through 0.29.0 contains a memory corruption vulnerability in the Triton _bincount_kernel where prompt tok…0.4%보통6.3
CVE-2026-16651temporalio/sqlparser can panic when Parse, ParseStrictDDL, or ParseNext processes a MySQL version comment whos…0.4%높음8.7
CVE-2026-119278MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0…0.4%보통5.9
CVE-2026-116181vLLM from 0.20.1 before 0.29.0 contains an improper input validation vulnerability that allows remote attacker…0.4%높음7.1
CVE-2026-113881A stack-based buffer overflow vulnerability in Fireware OS's VPN Network Access Enforcement process allows an …0.4%보통6.1
CVE-2026-120064Several psqlODBC entry points use an application-supplied column number or row index as an array index without…0.3%높음7.5
CVE-2026-114405Improper validation of array index vulnerability in Velneo vServer. This issue affects vServer: from 36.0 befo…0.3%높음8.7
CVE-2026-87500Improper validation of array index in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker …0.3%심각9.6
CVE-2026-49838GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming Language. Prior to …0.3%보통5.9
CVE-2026-107217Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.0.0 to 2.11.0 i…0.3%높음7.5
CVE-2026-57159PJSIP is a free and open source multimedia communication library written in C. Prior to commit 673b978, a remo…0.3%높음8.4
CVE-2026-115916vLLM is an inference and serving engine for large language models. Prior to 0.32.0, vllm/tokenizers/hf.py comp…0.3%보통6.5
CVE-2026-102510Integer Overflow, Improper Validation of Array Index, Uncontrolled Recursion and Memory Allocation with Excess…0.3%높음8.7
CVE-2026-102822Russh is a Rust SSH client and server library. Prior to 0.63.1, a connection configured to permit mac=none can…0.3%낮음3.7
CVE-2026-93989vLLM through 0.29.0 fails to properly validate bad_words token indices against the model's generation output w…0.3%낮음2.3
CVE-2026-77375SFTPGo is an open source, event-driven file transfer solution. Prior to 2.7.5, an authenticated SSH user can s…0.3%보통6.5
CVE-2026-100654vLLM before 0.29.0 accepts user-controlled stop_token_ids on the OpenAI-compatible POST /v1/completions and PO…0.3%높음7.1
CVE-2026-107218Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.10.1 to 2.11.0,…0.3%보통5.3
CVE-2026-107211Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.8.1 to 2.11.0, …0.3%높음8.7
CVE-2026-116585Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, inc…0.3%보통6.9
CVE-2026-107457A memory corruption vulnerability in the QMqttClient class of the Qt MQTT module. Under certain MQTT 5 connect…0.3%낮음2.3
CVE-2026-107225Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.8.0 to 2.11.0, …0.2%보통6.5
CVE-2026-107222Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.7.0 to 2.11.0, …0.2%보통6.5
CVE-2026-107220Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.7.1 to 2.11.0, …0.2%보통6.5
CVE-2026-109251FreeRDP before 3.32.0 stores the server-supplied signed MS-RDPEGT geometry origin unchecked in an unsigned vid…0.2%보통6.0
CVE-2026-107325Improper validation of a BSON array length in the MongoDB Go Driver can cause an out-of-bounds index and runti…0.2%높음8.2
CVE-2026-119143Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service vulnerability that allows …0.2%보통5.9
CVE-2026-89319`JweDirectDecryptorBlock.Decrypt` read a 64-bit plaintext length from the `_thales_aad` protected-header field…0.2%보통6.3
CVE-2026-20527In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of …0.2%보통5.3
CVE-2026-63635OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant …0.2%보통5.5
CVE-2026-62866Dasel is a command-line tool and library for querying, modifying, and transforming data structures. From 3.0.0…0.2%보통6.2
CVE-2026-102511Improper Verification of Source of a Communication Channel in the ADS discovery of the Go implementation of Ap…0.2%높음8.5
CVE-2026-82947SOEM version 2.0.0 and earlier contains multiple vulnerabilities in frame processing where a malicious device …0.2%높음7.1
CVE-2026-82945SOEM version 2.0.0 and earlier contains a vulnerability during device configuration where a malicious device c…0.2%보통6.5
CVE-2026-109250FreeRDP 3.0.0 before 3.32.0 contains a heap buffer overflow vulnerability in collect_keys() that allows local …0.2%높음7.0
CVE-2026-63420OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant …0.2%보통5.5
CVE-2026-93862An out-of-bounds read vulnerability in the FireCluster Sync processing allows an attacker positioned on the cl…0.2%높음7.2
CVE-2026-92449`_gx_binres_pixelmap_table_load()` in the GUIX binary resource (theme) loader indexes the pixelmap table with …0.2%보통6.8
CVE-2026-93321A malicious frontend can submit an LLB definition that causes buildkitd to panic and terminate, interrupting a…0.2%보통6.9
CVE-2026-100836Contrast through 1.20.0 contains a panic vulnerability in the transit-engine endpoint's ciphertextContainer.Un…0.1%보통5.3
CVE-2026-85084Out-of-bounds Write and Improper Validation of Array Index vulnerability in Samsung Open Source TizenFX Samsun…0.1%보통6.3
CVE-2026-47507NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a use…0.1%높음7.8
CVE-2026-116731Furnace through 0.6.8.3 contains an out-of-bounds write vulnerability in DivEngine::loadFTM() that allows atta…0.1%보통6.9
CVE-2026-47533NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an att…0.1%보통6.7
CVE-2026-47525NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an att…0.1%보통6.7
CVE-2026-116816llama.cpp b5899 before b10261 contains a heap out-of-bounds write vulnerability in llm_tokenizer_plamo2::build…0.1%높음8.5
CVE-2026-115722RPly through 1.1.4 contains an improper array index validation vulnerability in ply_read_header_property() tha…0.1%보통6.9
CVE-2026-103672The PEAK-System PCAN parser indexes a length table using attacker-controlled DLC without enforcing DLC <= 0x0f…0.1%보통6.9
CVE-2026-93322A malicious frontend can submit an LLB definition that causes buildkitd to panic and terminate, interrupting a…0.1%보통6.9
CVE-2026-88052Tesseract is an open source OCR engine. In version 5.5.3 and earlier, UNICHARSET::load_via_fgets in src/ccutil…0.1%높음7.8
CVE-2026-103220The Affinity by Canva application before 3.3.1 (October 2026 release) did not perform adequate bounds checking…0.1%보통4.5
CVE-2026-107737SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, and in pre-release 3.7.0.20369 when Web…0.1%보통5.7
CVE-2026-0799In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigne…0.1%높음8.7
CVE-2026-96675alsa-lib through 1.2.16.1 contains a denial of service vulnerability in the multi PCM plugin that fails to val…0.1%보통4.8
CVE-2026-110934Improper validation of array index vulnerability in Samsung Open Source Vyond allows Input Data Manipulation. …0.1%보통4.4
CVE-2026-17413IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, …0.1%보통5.1
CVE-2026-65165NVIDIA Slurm contains a vulnerability where a user could deliberately alter the provided nodelist alongside th…보통5.3
이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.