CWE-131 관련 취약점
같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.
CWE-131 — 주요 취약점
악용이 확인된 것을 먼저 보여줍니다.
● 실제 악용이 확인됨CVE-2020-17087Windows Kernel Local Elevation of Privilege Vulnerability5.4%높음7.8CVE-2026-69598Incorrect calculation of buffer size in Windows iSCSI allows an unauthorized attacker to execute cod…0.8%높음8.8CVE-2026-57192Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1,…0.7%보통6.0CVE-2026-92156F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedde…0.5%보통6.5CVE-2026-102027An Incorrect Calculation of Buffer Size vulnerability in the routing protocol daemon (rpd) of Junipe…0.5%높음8.7CVE-2026-97631EDK2 contains a vulnerability in BIOS where a user may cause “Out-of-bounds Write”, Classic Buffer O…0.4%심각9.5CVE-2026-112710A heap-based buffer overflow vulnerability exists in the Fireware OS authentication service allows a…0.4%심각9.2CVE-2026-112709A heap-based buffer overflow vulnerability in the Fireware OS authentication service allows an attac…0.4%심각9.2
전체 목록
30건
CVE-2026-22590eprosima Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object M…0.4%심각9.1
CVE-2026-67549OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant …0.4%높음7.6
CVE-2026-88830A unit confusion in BusyBox TLS Montgomery reduction buffer allocation causes a pre-authentication heap buffer…0.4%높음7.5
CVE-2026-95509Strings optimized for Latin-1 displaying Latin-1 characters cause incorrect String.arg() formatting by an inco…0.3%높음8.8
CVE-2026-104424Zebra before 6.1.0 contains an incorrect calculation vulnerability in its ZIP-317 block template selector that…0.3%보통6.3
CVE-2020-37287Vyper before 0.2.6 contains a call stack corruption vulnerability that causes incorrect function outputs when …0.3%높음8.2
CVE-2026-91962FreeRDP before 3.31.0 contains an integer overflow in the audin Apple backends when processing FramesPerPacket…0.2%보통5.3
CVE-2026-102505Imager versions before 1.037 for Perl overflow a heap buffer fetching float samples from a paletted image in i…0.2%보통6.3
CVE-2026-82944SOEM version 2.0.0 and earlier contains a vulnerability in multi-segment data transfers where a malicious devi…0.2%높음8.8
CVE-2026-106574ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-…0.2%보통5.3
CVE-2026-54692SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC p…0.2%높음7.8
CVE-2026-86563A flaw was found in DPDK lib/vhost. A double-offset bug in vhost log mapping calculation can lead to incorrect…0.2%높음7.8
CVE-2026-84448libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.23.2, the public heif_region_item_add_r…0.2%보통4.0
CVE-2026-112008libmng through 2.0.3 contains a heap-based buffer overflow vulnerability in mng_read_ordr() that allows attack…0.1%보통6.9
CVE-2026-95111A memory-protected ThreadX module's queue request reaches the Module Manager's dispatch layer, which decides h…0.1%보통4.8
CVE-2026-47578NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer where an attacker coul…0.1%높음7.8
CVE-2026-116737libphdi through 20260902 contains a heap out-of-bounds read vulnerability in libphdi_data_files_get_extent_dat…0.1%보통6.9
CVE-2026-107590An out-of-bounds write vulnerability in the Qt QTextCodec iconv-based encoding of the Qt 5 Compatibility APIs …0.1%낮음1.9
CVE-2026-78221An incorrect buffer size calculation in the Windows Interactive Service in OpenVPN 2.7_alpha1 through 2.7.6 al…0.1%보통5.9
CVE-2026-102729`gx_binres_theme_load()` sizes its theme buffer for the theme it was asked for, and allocates it even when the…0.1%보통5.9
CVE-2026-13466Incorrect calculation of buffer size vulnerability in Altera Trusted Firmware on HPS allows Overflow Buffers. …0.1%높음8.3
CVE-2026-47773ArduinoBLE enables Bluetooth Low Energy connectivity on certain Arduino models. Versions prior to 2.0.2 contai…0.1%높음7.2
이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.