| Exposure of Resource to Wrong Sphere | |
| Uncontrolled Memory Allocation | |
| Loop with Unreachable Exit Condition ('Infinite Loop') | |
| Heap-based Buffer Overflow | |
| Heap-based Buffer Overflow | |
| Buffer Over-read | |
| Heap-based Buffer Overflow | |
| Use After Free | |
| Buffer Underflow | |
| Improper Privilege Management | |
| Out-of-bounds Read | |
| Cross-site Scripting (XSS) | |
| Use After Free | |
| Buffer Over-read | |
| NULL Pointer Dereference | |
| CVE-2026-33523 | |
| Heap-based Buffer Overflow | |
| Out-of-bounds Read | |
| Information Exposure | |
| NULL Pointer Dereference | |
| Allocation of Resources Without Limits or Throttling | |
| Out-of-bounds Read | |
| Double Free | |
| Improper Privilege Management | |
| Buffer Over-read | |
| Information Exposure | |
| Out-of-bounds Read | |
| Heap-based Buffer Overflow | |
| NULL Pointer Dereference | |
| CVE-2026-33523 | |
| Out-of-bounds Read | |
| Double Free | |
| Improper Privilege Management | |
| NULL Pointer Dereference | |
| Allocation of Resources Without Limits or Throttling | |
| Information Exposure | |
| Integer Overflow or Wraparound | |
| Server-Side Request Forgery (SSRF) | |
| Improper Neutralization | |
| Reachable Assertion | |
| Improper Access Control | |
| Improper Neutralization | |
| Memory Leak | |
| Improper Authentication | |
| Improper Input Validation | |
| CVE-2025-66200 | |
| Server-Side Request Forgery (SSRF) | |
| Integer Overflow or Wraparound | |
| Information Exposure | |
| Improper Neutralization | |
| CVE-2025-66200 | |
