#advisory

共收录 23421 条相关情报。

安全公告2026-09-18 发布INFO

Mojolicious pure-Perl Mojo::JSON decoder allows memory exhaustion via deeply nested data

CVE-2026-68914

Mojolicious is a real-time web framework for Perl. Prior to 9.47, the pure-Perl implementation of Mojo::JSON does not li

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-400 #cwe-674

安全公告2026-09-18 发布INFO

libheif: `clap` + oversized `ispe` aborts on an assert in `Fraction::Fraction` (incomplete fix for CVE-2026-62289)

CVE-2026-84450

libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.3, a crafted image item containing a

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-617

安全公告2026-09-18 发布INFO

Azkaban through 4.0.0 Authorization Bypass via ScheduleServlet

CVE-2026-93737

Azkaban through 4.0.0 omits project permission checks in the ScheduleServlet fetchSchedule action, allowing authenticate

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-862

安全公告2026-09-18 发布INFO

Mealie before 3.21.0 Information Disclosure via Ratings Endpoint

CVE-2026-93736

Mealie before 3.21.0 fails to validate user ownership in the ratings and favorites endpoints, allowing authenticated att

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-639

安全公告2026-09-18 发布INFO

libheif hOp_RGB24_32_to_YCbCr Memory Access Error / SEGV

CVE-2026-84449

libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.19.6, Op_RGB24_32_to_YCbCr::convert_colorspace()

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-125 #cwe-190

安全公告2026-09-18 发布INFO

libheif: Incomplete fix for CVE-2026-62292 leaves libheif vulnerable to an out-of-bounds read

CVE-2026-84451

libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.3, the no-icef full-item branch of un

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-125

安全公告2026-09-18 发布INFO

libheif: Derived-image indirect reference chains and tiled offsets bypass decode caching and MemoryHandle limits, causing CPU/memory amplification DoS

CVE-2026-84447

libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.1 and earlier, crafted grid, iovl, and iden referenc

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-770

安全公告2026-09-18 发布INFO

libheif: brotli/zlib decompression paths lack output-size limits, allowing decompression-bomb OOM/DoS

CVE-2026-84384

libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.2, crafted HEIF or AVIF mime metadata

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-409

安全公告2026-09-18 发布INFO

libheif uncompressed tiled image encoding allows out-of-bounds write

CVE-2026-84444

libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.23.2, when WITH_UNCOMPRESSED_CODEC is enabled, he

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-787

安全公告2026-09-18 发布INFO

libheif: Heap buffer overflow in `scale_nearest_neighbor()` via duplicate Alpha planes from nested `iden`/`auxl` items

CVE-2026-84383

libheif is a HEIF and AVIF file format decoder and encoder. From 1.22.0 until 1.23.2, a crafted HEIF, HEIC, or AVIF item

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-787

安全公告2026-09-18 发布INFO

libheif: Sequence decode timing-table initialization allows non-terminating loops and unbounded memory, bypassing max_sequence_frames

CVE-2026-84446

libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.23.2, crafted HEIF sequence timing and edit-list

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-835

安全公告2026-09-18 发布INFO

libheif: Heap out-of-bounds read in libheif inline-mask region API (heif_region_item_add_region_inline_mask_data / heif_region_get_mask_image)

CVE-2026-84448

libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.23.2, the public heif_region_item_add_region_inli

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-125 #cwe-131

安全公告2026-09-18 发布INFO