Skip to content

GNU · weakness class

Memory Corruption

580 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

likely to be exploited
17

Every one of the 580 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU…CVE-2011-4862Gnu · 95% likely

    CWE-120

  2. Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary cod…CVE-2015-0235Gnu · 95% likely

    CWE-787

  3. Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C Library (aka glibc or libc6) before 2.23 allow remote atta…CVE-2015-7547Gnu · 92% likely

    CWE-119

  4. GNU Wget: stack overflow in HTTP protocol handlingCVE-2017-13089GNU Project · CVSS 8.8 · 80% likely

    CWE-1211 bounty report

  5. The redirection implementation in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash…CVE-2014-7186Gnu · 64% likely

    CWE-119

  6. Off-by-one error in the read_token_word function in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and…CVE-2014-7187Gnu · 58% likely

    CWE-119

  7. telnetd in GNU inetutils through 2.7 allows an out-of-bounds write in the LINEMODE SLC (Set Local Characters) suboption handler because add_slc does not check whether the buffer i…CVE-2026-32746GNU · CVSS 9.8 · 45% likelycovered by CyberSIXT

    CWE-120

  8. GNU Wget: heap overflow in HTTP protocol handlingCVE-2017-13090GNU Project · CVSS 8.8 · 37% likely

    CWE-1221 bounty report

  9. The _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.5 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted cert…CVE-2015-3622Gnu · 33% likely

    CWE-119

  10. Double free vulnerability in the gnutls_x509_ext_import_proxy function in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allows remote attackers to have unspecified impact via crafte…CVE-2017-5334Gnu · 33% likely

    CWE-415

  11. Stack-based buffer overflow in the ps_gettext function in ps.c for GNU gv 3.6.2, and possibly earlier versions, allows user-assisted attackers to execute arbitrary code via a Post…CVE-2006-5864Gnu · 16% likely

    CWE-119

  12. Buffer overflow in the safer_name_suffix function in GNU tar has unspecified attack vectors and impact, resulting in a "crashing stack."CVE-2007-4476Gnu · 15% likely

    CWE-119

  13. Buffer overflow in getsym in tekhex.c in libbfd in Free Software Foundation GNU Binutils before 20060423, as used by GNU strings, allows context-dependent attackers to cause a den…CVE-2006-2362Gnu · CVSS 7.3 · 14% likely

    CWE-787

  14. In glibc 2.26 and earlier there is confusion in the usage of getcwd() by realpath() which can be used to write before the destination buffer leading to a buffer underflow and pote…CVE-2018-1000001Gnu · 13% likely

    CWE-7871 bounty report

  15. Stack-based buffer overflow in the print_iso9660_recurse function in iso-info (src/iso-info.c) in GNU Compact Disc Input and Control Library (libcdio) 0.79 and earlier allows cont…CVE-2007-6613Gnu · 13% likely

    CWE-119

  16. Stack-based buffer overflow in the as_bad function in messages.c in the GNU as (gas) assembler in Free Software Foundation GNU Binutils before 20050721 allows attackers to execute…CVE-2005-4807Gnu · 12% likely

    CWE-119

  17. Buffer overflow in the read_server_hello function in lib/gnutls_handshake.c in GnuTLS before 3.1.25, 3.2.x before 3.2.15, and 3.3.x before 3.3.4 allows remote servers to cause a d…CVE-2014-3466Gnu · 11% likely

    CWE-119

  18. A flaw was found in libmicrohttpd. A missing bounds check in the post_process_urlencoded function leads to a buffer overflow, allowing a remote attacker to write arbitrary data in…CVE-2021-3466Gnu · 8.7% likely

    CWE-120

  19. The *regs* macros in opcodes/bfin-dis.c in GNU Binutils 2.28 allow remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecifi…CVE-2017-9749Gnu · 8.5% likely

    CWE-119

  20. The disassemble_bytes function in objdump.c in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unsp…CVE-2017-9746Gnu · 8.5% likely

    CWE-119

  21. An issue was discovered in GNU patch through 2.7.6. There is a segmentation fault, associated with a NULL pointer dereference, leading to a denial of service in the intuit_diff_ty…CVE-2018-6951Gnu · 8.4% likely

    CWE-476

  22. Stack-based buffer overflow in the read_special_escape function in src/psgen.c in GNU Enscript 1.6.1 and 1.6.4 beta, when the -e (aka special escapes processing) option is enabled…CVE-2008-3863Gnu · 8.4% likely

    CWE-119

  23. A double free exists in the another_hunk function in pch.c in GNU patch through 2.7.6.CVE-2018-6952Gnu · 8.2% likely

    CWE-415

  24. The aarch64_ext_ldst_reglist function in opcodes/aarch64-dis.c in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or…CVE-2017-9756Gnu · 8.1% likely

    CWE-119

  25. opcodes/rx-decode.opc in GNU Binutils 2.28 lacks bounds checks for certain scale arrays, which allows remote attackers to cause a denial of service (buffer overflow and applicatio…CVE-2017-9750Gnu · 8.1% likely

    CWE-119

  26. The score_opcodes function in opcodes/score7-dis.c in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly ha…CVE-2017-9742Gnu · 8.1% likely

    CWE-119

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.