今日共收录 1598 条安全情报，包含 728 个 CVE，467 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-102757
An unprivileged, memory-protected ThreadX module can have the kernel read and write memory at addresses of its choosing,
CVE-2026-102730
Mounting an attacker-controlled NAND flash image (`lx_nand_flash_open()`) triggers an unbounded out-of-bounds heap **wri
CVE-2026-102729
`gx_binres_theme_load()` sizes its theme buffer for the theme it was asked for, and allocates it even when the resource
CVE-2026-102728
Two client-side TLS/DTLS handshake parsers in NetX Secure read fields from a server-supplied message before validating t
CVE-2026-102727
FTP Passive Data Connection Not Bound to the Authenticated Control Peer
CVE-2026-102726
Unbounded PPP IPCP Option Parsing Causes a Worker Stall and Out-of-bounds Read
CVE-2026-102725
Out-of-bounds Read from Unvalidated MSRP Attribute List Length
CVE-2026-102724
NULL Pointer Dereference When Evicting the Sole MSRP Attribute
CVE-2026-102723
NULL Pointer Dereference on MSRP Attribute Table Exhaustion
CVE-2026-102722
In the IPv4 PASV path, the FTP Client accepts whatever address was sent in the server's `227` reply. Validation only cov
CVE-2026-102721
A TFTP server that answers with a short ERROR packet makes the client read up to 64 bytes past the received datagram.
CVE-2026-102720
A DHCP server, or anyone on the LAN who answers a DISCOVER first, can make the client read about a kilobyte past the
CVE-2026-102719
Predictable DTLS HelloVerifyRequest Cookie in NetX Secure
CVE-2026-102718
hey, `_nx_snmp_utility_object_id_get` in the NetX Duo SNMP addon does not validate the claimed OID data length agains
CVE-2026-102716
An unauthenticated client can drain the RTSP server's packet pool with a couple of dozen requests that carry a Sessio
CVE-2026-102715
Any host on the LAN can send two mDNS records and make the responder write past the end of its transmit packet. Th
CVE-2026-102712
On the first DTLS ClientHello, the parser copies a device-claimed session_id length and validates the ciphersuite-lis
CVE-2026-102711
Two issues in the ThreadX loadable-module loader, reached when a device loads an attacker-controlled module object via `
CVE-2026-102710
Attacker model / Preconditions: a loaded `TXM_MODULE_USER_MODE | TXM_MODULE_MEMORY_PROTECTION` module issuing kernel dis
CVE-2026-102709
Improper validation of non-secure (NS) pointers in multiple TrustZone-M non-secure callable (NSC) entry functions allows