By weakness (CWE)

CWE-682: related vulnerabilities

CVEs classified under CWE-682. Understanding the weakness class helps prioritize systemic fixes over one-off patches.

2 published vulnerabilities

• CVE-2026-10512HIGH 7.5

  A cryptographic error in WolfSSL's X25519 implementation can produce incorrect encryption keys. The vulnerability stems from incomplete mathematical reduction in the elliptic curve algorithm's final step, potentially leaving computed values in an invalid state. This could result in Diffie-Hellman key exchanges that don't match expectations, though the impact depends on how applications use the affected library and whether they validate results.

• CVE-2026-55597MEDIUM 5.5

  ImageMagick, widely used for image processing tasks, contains a heap buffer overflow vulnerability in its JP2 (JPEG 2000) encoder. When processing specially crafted image files, the software can write data beyond allocated memory boundaries due to improper argument handling. While the vulnerability requires user interaction—someone must open a malicious image—the outcome is a denial of service. The issue affects ImageMagick versions prior to 7.1.2-26 and has been patched in that release.