CWE-131 Incorrect Calculation of Buffer Size

Ruby json: JSON generator heap buffer overflow when streaming to an IO

jxl-grid on 32-bit platforms has an out-of-bounds writes due to integer overflow

jxl-oxide: `FrameBuffer::new` creates out-of-bounds slices on overflow

ImageMagick: Heap Buffer Over-Write in MIFF encoder when using LZMA compression

vLLM: extract_hidden_states speculative decoding crashes server on any request with penalty parameters

rust-openssl: Potential out-of-bounds write in `CipherCtxRef::cipher_update_inplace` for AES-KW-PAD ciphers

rust-openssl: Deriver::derive and PkeyCtxRef::derive can overflow short buffers on OpenSSL 1.1.1

Brillig: Heap corruption in foreign call results with nested tuple arrays

ImageMagick BlobStream Forward-Seek Under-Allocation

OpenVM allows the byte decomposition of pc in AUIPC chip to overflow

Heap OOB and null pointer dereference in `RaggedTensorToTensor`

Heap buffer overflow in `StringNGrams`

Heap buffer overflow in `QuantizedResizeBilinear`

Heap buffer overflow in `QuantizedMul`

Heap buffer overflow caused by rounding

Heap buffer overflow in `SparseTensorToCSRSparseMatrix`

Segfault in SparseCountSparseOutput

Apache Hadoop heap overflow before v2.10.2, v3.2.3, v3.3.2

Incorrect buffer size in crossbeam-channel

Overflow in `ResizeNearestNeighborGrad`

Overflow in `tf.keras.losses.poisson`

Overflow in `ImageProjectiveTransformV2`

Overflow in `FusedResizeAndPadConv2D`

Unexpected panics in num-bigint

Incorrect buffer size calculation in iced-x86