Analysis

Common Weaknesses

The most common CWE weakness classes across Erlang ecosystem CVEs

The chart below shows the most common weaknesses found in vulnerabilities across the Erlang ecosystem. Understanding which weakness types recur most often helps library authors and application developers focus their security efforts where they matter most.

Each CVE is mapped to its CWE (Common Weakness Enumeration) using the MITRE CWE hierarchy. A slice's count includes every CVE reachable anywhere below it in the hierarchy, not just CVEs assigned that exact CWE — click a slice or legend row to drill into its direct children and see the same breakdown one level down.

Access of Memory Location After End of Buffer CWE-788 CWE-788 at MITRE

The product reads or writes to a buffer using an index or pointer that references a memory location after the end of the buffer.

Stack-based Buffer Overflow: 2 CVEs (100.0%) — click to drill down Heap-based Buffer Overflow: 0 CVEs (0.0%) — click to drill down Buffer Over-read: 0 CVEs (0.0%) — click to drill down Total 2
Stack-based Buffer Overflow CWE-121 2 (100.0%) Heap-based Buffer Overflow CWE-122 0 (0.0%) Buffer Over-read CWE-126 0 (0.0%)

CVEs

CVEs for Access of Memory Location After End of Buffer CWE-788

Summary Publication CVE ID Published
Stack buffer overflow in SCTP error cause parsing in inet_drv allows remote VM crash
pkg:otp/erts
pkg:github/erlang/otp
CVE-2026-49759 2026-06-10
Stack Buffer Overflow in ei_s_print_term at Very Large Integer
pkg:otp/erl_interface
pkg:github/erlang/otp
CVE-2026-49760 2026-06-10
2 CVEs