By weakness (CWE)

CWE-190: related vulnerabilities

CVEs classified under CWE-190. Understanding the weakness class helps prioritize systemic fixes over one-off patches.

106 published vulnerabilities · page 2 of 2

• CVE-2026-10722LOW 3.3

  A local integer overflow vulnerability exists in Cilium eBPF's BTF (BPF Type Format) loading functionality. An attacker with local system access can manipulate offset parameters during eBPF collection loading, causing the application to miscalculate memory boundaries. While the impact is limited to denial of service on the affected system, the public disclosure means exploitation tools may become available. This is a localized threat requiring prior system access but warrants patching to maintain system stability.

• CVE-2026-14758LOW 3.3

  A bug in radare2 (an open-source reverse-engineering framework) allows a local user with basic privileges to trigger an integer overflow when the hexpairs parser processes specially crafted input in the opcode analysis command. This causes the application to crash. An attacker would need direct access to a system running radare2 and the ability to execute commands locally.

• CVE-2026-14761LOW 3.3

  A flaw in radare2's string handling functions (r_str_ndup and r_str_append) allows an attacker with local access to cause the application to crash by triggering an integer overflow. The vulnerability affects radare2 up to version 6.1.6. While an exploit has been publicly disclosed, the impact is limited to denial of service—no data theft or privilege escalation is possible from this flaw alone.

• CVE-2026-14786LOW 3.3

  A flaw in radare2, a popular reverse engineering framework, allows an authenticated local attacker to trigger an integer overflow through the string handling function. While the vulnerability requires local access and legitimate user privileges, the public release of exploit code means the risk of opportunistic abuse increases. The impact is denial of service—the affected process can crash—but not data theft or privilege escalation.

• CVE-2026-14787LOW 3.3

  Radare2, a popular open-source reverse-engineering framework, contains an integer overflow vulnerability in its print command handler that can be triggered by a local user. The flaw affects versions up to 6.1.6 and can cause the application to crash or become unstable. While a public exploit exists, the attack requires local system access and does not enable privilege escalation or data theft. The vendor has released a patch that should be applied to restore stability.

• CVE-2026-56363LOW 3.3

  ImageMagick versions prior to 7.1.2-22 contain a vulnerability in how they process binomial kernel values used in image filtering operations. When an attacker supplies an unusually large binomial kernel value, the application performs an integer overflow that leads to division by zero, crashing the ImageMagick process. This is a local denial-of-service condition—the attacker needs local access and user interaction to trigger the crash, but the impact is straightforward: service disruption rather than data theft or system compromise.