#CVE

共收录 63078 条相关情报。

漏洞预警2026-10-26 发布MEDIUM

libcss through 0.9.2 contains a NULL pointer dereference vulnerability in mq_parse_media_query() that allows remote attackers to crash consumers by supplying media lists ending ...

CVE-2026-116740

libcss through 0.9.2 contains a NULL pointer dereference vulnerability in mq_parse_media_query() that allows remote atta

来源摘录 · NVD

#cve #cwe-476

漏洞预警2026-10-26 发布MEDIUM

VMime through 0.9.2 contains an information disclosure vulnerability in the uuEncoder::decode function that writes uninitialized stack memory into decoded output for over-long l...

CVE-2026-116739

VMime through 0.9.2 contains an information disclosure vulnerability in the uuEncoder::decode function that writes unini

来源摘录 · NVD

#cve #cwe-908

漏洞预警2026-10-26 发布INFO

VMime through 0.9.2 contains an integer underflow in the uuEncoder::decode function that allows remote attackers to trigger a stack-based buffer overflow via crafted uuencoded M...

CVE-2026-116738

VMime through 0.9.2 contains an integer underflow in the uuEncoder::decode function that allows remote attackers to trig

历史摘要 · 未重新核验 · NVD

#cve #cwe-121

漏洞预警2026-10-26 发布MEDIUM

libphdi through 20260902 contains a heap out-of-bounds read vulnerability in libphdi_data_files_get_extent_data_file_path that uses the directory prefix length instead of the ba...

CVE-2026-116737

libphdi through 20260902 contains a heap out-of-bounds read vulnerability in libphdi_data_files_get_extent_data_file_pat

来源摘录 · NVD

#cve #cwe-131

漏洞预警2026-10-26 发布MEDIUM

Libpff through 20260926 contains a heap out-of-bounds read vulnerability in libpff_table_read_values_array because a 7c column definition's values_array_size is not checked agai...

CVE-2026-116736

Libpff through 20260926 contains a heap out-of-bounds read vulnerability in libpff_table_read_values_array because a 7c

来源摘录 · NVD

#cve #cwe-125

漏洞预警2026-10-26 发布MEDIUM

libpff through 20260926 contains an off-by-one bounds check in libpff_table_read_6c_record_entries that allows attackers to trigger a heap out-of-bounds read via crafted 6c tabl...

CVE-2026-116735

libpff through 20260926 contains an off-by-one bounds check in libpff_table_read_6c_record_entries that allows attackers

来源摘录 · NVD

#cve #cwe-193

漏洞预警2026-10-26 发布INFO

flatcc through 0.6.4 contains an integer overflow vulnerability in the check_header function of the FlatBuffers verifier because its overflow guard is dead code. On 32-bit build...

CVE-2026-116734

flatcc through 0.6.4 contains an integer overflow vulnerability in the check_header function of the FlatBuffers verifier

历史摘要 · 未重新核验 · NVD

#cve #cwe-190

漏洞预警2026-10-26 发布LOW

flatcc through 0.6.4 contains an out-of-bounds read vulnerability in __flatcc_json_parser_number that allows attackers to read past the input buffer via numbers ending in a deci...

CVE-2026-116733

flatcc through 0.6.4 contains an out-of-bounds read vulnerability in __flatcc_json_parser_number that allows attackers t

来源摘录 · NVD

#cve #cwe-125

漏洞预警2026-10-26 发布MEDIUM

libdwarf through 2.3.3 contains a heap out-of-bounds read vulnerability in dwarf_debug_addr_table() that omits the table starting offset when validating .debug_addr unit length....

CVE-2026-116732

libdwarf through 2.3.3 contains a heap out-of-bounds read vulnerability in dwarf_debug_addr_table() that omits the table

来源摘录 · NVD

#cve #cwe-125

漏洞预警2026-10-26 发布MEDIUM

Furnace through 0.6.8.3 contains an out-of-bounds write vulnerability in DivEngine::loadFTM() that allows attackers to corrupt heap memory via an unchecked subsong index in the ...

CVE-2026-116731

Furnace through 0.6.8.3 contains an out-of-bounds write vulnerability in DivEngine::loadFTM() that allows attackers to c

来源摘录 · NVD

#cve #cwe-129

漏洞预警2026-10-26 发布INFO

Furnace through 0.6.8.3 contains an out-of-bounds heap read vulnerability in DivEngine::loadFTM() in src/engine/fileOps/ftm.cpp, triggered by an unbounded DPCM note count during...

CVE-2026-116730

Furnace through 0.6.8.3 contains an out-of-bounds heap read vulnerability in DivEngine::loadFTM() in src/engine/fileOps/

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-10-26 发布LOW

libfvde through 20260923 contains a heap out-of-bounds read vulnerability in libfvde_encrypted_metadata_read_type_0x001a() caused by an unbounded strlen on embedded XML plist da...

CVE-2026-116729

libfvde through 20260923 contains a heap out-of-bounds read vulnerability in libfvde_encrypted_metadata_read_type_0x001a

来源摘录 · NVD

#cve #cwe-125

漏洞预警2026-10-26 发布MEDIUM

libfvde through 20260923 contains a heap out-of-bounds read vulnerability in libfvde_encrypted_metadata_read_type_0x0024() because xml_plist_data_size is not checked against the...

CVE-2026-116728

libfvde through 20260923 contains a heap out-of-bounds read vulnerability in libfvde_encrypted_metadata_read_type_0x0024

来源摘录 · NVD

#cve #cwe-125

漏洞预警2026-10-26 发布LOW

gbsplay through 0.0.103 contains a heap out-of-bounds read vulnerability in vgm_open() in gbs.c that walks the VGM command stream without bounds checks. Attackers can supply a c...

CVE-2026-116727

gbsplay through 0.0.103 contains a heap out-of-bounds read vulnerability in vgm_open() in gbs.c that walks the VGM comma

来源摘录 · NVD

#cve #cwe-125

漏洞预警2026-10-26 发布INFO

Gbsplay through 0.0.103 contains a heap out-of-bounds read vulnerability in gbr_open() in gbs.c that fails to verify file length before scanning the GBR ROM title field. Attacke...

CVE-2026-116726

Gbsplay through 0.0.103 contains a heap out-of-bounds read vulnerability in gbr_open() in gbs.c that fails to verify fil

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-10-26 发布MEDIUM

gbsplay through 0.0.103 contains an out-of-bounds read vulnerability in mapper_map() in mapper.c that fails to reject ROM bank indexes beyond the ROM size, causing an underflowe...

CVE-2026-116725

gbsplay through 0.0.103 contains an out-of-bounds read vulnerability in mapper_map() in mapper.c that fails to reject RO

来源摘录 · NVD

#cve #cwe-125

漏洞预警2026-10-26 发布HIGH

FLTK through 1.4.5 contains an integer overflow vulnerability in Fl_BMP_Image::load_bmp_() that causes undersized pixel buffer allocation from file-supplied width and height. At...

CVE-2026-116724

FLTK through 1.4.5 contains an integer overflow vulnerability in Fl_BMP_Image::load_bmp_() that causes undersized pixel

来源摘录 · NVD

#cve #cwe-190

漏洞预警2026-10-26 发布HIGH

FLTK through 1.4.5 contains a stack-based buffer overflow vulnerability in Fl_BMP_Image::load_bmp_() that allows attackers to corrupt stack memory by supplying an oversized BMP ...

CVE-2026-116723

FLTK through 1.4.5 contains a stack-based buffer overflow vulnerability in Fl_BMP_Image::load_bmp_() that allows attacke

来源摘录 · NVD

#cve #cwe-121

漏洞预警2026-10-26 发布INFO

compress provides various compression algorithms. Prior to 1.20.2, the zstd DecodeAll and streaming decoder paths can panic when a crafted two-block frame reaches huff0.ReadTabl...

CVE-2026-116591

compress provides various compression algorithms. Prior to 1.20.2, the zstd DecodeAll and streaming decoder paths can pa

历史摘要 · 未重新核验 · NVD

#cve #cwe-190

漏洞预警2026-10-26 发布MEDIUM

snappy-java is a Java port of the snappy, a fast C++ compresser/decompresser developed by Google. Prior to 1.1.10.9, Snappy.arrayCopy(Object src, int offset, int byteLength, Obj...

CVE-2026-116590

snappy-java is a Java port of the snappy, a fast C++ compresser/decompresser developed by Google. Prior to 1.1.10.9, Sna

来源摘录 · NVD

#cve #cwe-129 #cwe-787