| Out-of-bounds Write | |
| Use of a Broken or Risky Cryptographic Algorithm | |
| Cleartext Transmission of Sensitive Information | |
| Use of a Broken or Risky Cryptographic Algorithm | |
| Uncontrolled Recursion | |
| Out-of-bounds Read | |
| XML External Entity (XXE) Injection | |
| Integer Overflow or Wraparound | |
| Expired Pointer Dereference | |
| Expired Pointer Dereference | |
| Buffer Underflow | |
| Out-of-bounds Write | |
| Incorrect Calculation of Buffer Size | |
| Out-of-bounds Read | |
| Loop with Unreachable Exit Condition ('Infinite Loop') | |
| CVE-2026-23865 | |
| Buffer Overflow | |
| Improper Certificate Validation | |
| CRLF Injection | |
| Key Exchange without Entity Authentication | |
| Out-of-bounds Read | |
| Out-of-bounds Read | |
| Buffer Overflow | |
| Out-of-bounds Read | |
| Out-of-bounds Read | |
| Out-of-bounds Read | |
| Out-of-bounds Write | |
| Out-of-bounds Read | |
| CVE-2025-53066 | |
| Inappropriate Encoding for Output Context | |
| Heap-based Buffer Overflow | |
| Heap-based Buffer Overflow | |
| Missing Required Cryptographic Step | |
| CVE-2025-30761 | |
| Heap-based Buffer Overflow | |
| Buffer Overflow | |
| Information Exposure | |
| Signed to Unsigned Conversion Error | |
| Uncontrolled Memory Allocation | |
| Integer Overflow or Wraparound | |
| Improper Handling of Length Parameter Inconsistency | |
| Signed to Unsigned Conversion Error | |
| CVE-2024-21140 | |
| Improper Validation of Specified Quantity in Input | |
| CVE-2024-21147 | |
| CVE-2024-21131 | |
| Out-of-bounds Write | |
| Loop with Unreachable Exit Condition ('Infinite Loop') | |
| Improper Output Neutralization for Logs | |
| Integer Overflow or Wraparound | |
| Out-of-bounds Write | |
| Uncontrolled Memory Allocation | |
| Improper Input Validation | |
| Improper Input Validation | |
| Improper Input Validation | |
| Information Exposure Through Log Files | |
| Covert Timing Channel | |
| Out-of-bounds Write | |
| Out-of-Bounds | |
| Improper Certificate Validation | |
| Deserialization of Untrusted Data | |
| Out-of-bounds Read | |
| Directory Traversal | |
| Improper Input Validation | |
| Improperly Implemented Security Check for Standard | |
| Improper Input Validation | |
| Improper Neutralization of Null Byte or NUL Character | |
| Information Exposure | |
| Improper Neutralization of Null Byte or NUL Character | |
| Improper Enforcement of Message Integrity During Transmission in a Communication Channel | |
| Reliance on File Name or Extension of Externally-Supplied File | |
| Deserialization of Untrusted Data | |
| Allocation of Resources Without Limits or Throttling | |
| Resource Exhaustion | |
| Use of Insufficiently Random Values | |
| Integer Coercion Error | |
| Integer Coercion Error | |
| Improper Access Control | |
| Resource Leak | |
| Improper Use of Validation Framework | |
| Incorrect Behavior Order: Early Validation | |
| Integer Underflow | |
| Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') | |
| Allocation of Resources Without Limits or Throttling | |
