#cwe-121

共收录 773 条相关情报。

← 返回所有主题
漏洞预警2026-09-15 发布INFO

BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installati...

CVE-2026-19774

BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5....

CVE-2026-12150

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Stack-based buffer overflow vulnerability in Samsung Opensource rLottie allows attackers to overflow buffers, leading to memory corruption when rendering crafted vector animatio...

CVE-2026-91826

Stack-based buffer overflow vulnerability in Samsung Opensource rLottie allows attackers to overflow buffers, leading to

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

A vulnerability was determined in GPAC up to f1219cde. The affected element is the function gf_node_activate_ex of the file scenegraph/base_scenegraph.c. This manipulation cause...

CVE-2026-91090

A vulnerability was determined in GPAC up to f1219cde. The affected element is the function gf_node_activate_ex of the f

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

A flaw has been found in D-Link DI-8300 16.07. The affected element is the function rzgl_asp of the file /rzgl.asp of the component CGI Service. This manipulation of the argumen...

CVE-2026-91003

A flaw has been found in D-Link DI-8300 16.07. The affected element is the function rzgl_asp of the file /rzgl.asp of th

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

A security flaw has been discovered in D-Link DI-8400 16.07. This affects the function ddns_asp of the file /ddns.asp of the component DDNS Configuration. Performing a manipulat...

CVE-2026-91001

A security flaw has been discovered in D-Link DI-8400 16.07. This affects the function ddns_asp of the file /ddns.asp of

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-14 发布INFO

A vulnerability has been found in GPAC 26.07.0. Affected is the function gf_sg_dom_event_bubble of the file src/scenegraph/dom_events.c of the component MP4Box. The manipulation...

CVE-2026-90824

A vulnerability has been found in GPAC 26.07.0. Affected is the function gf_sg_dom_event_bubble of the file src/scenegra

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-14 发布INFO

PocketSphinx is a small speech recognizer. Prior to 5.1.1, the trie language-model loaders in src/lm/ngram_model_trie.c do not adequately validate boundary conditions in ARPA, D...

CVE-2026-54559

PocketSphinx is a small speech recognizer. Prior to 5.1.1, the trie language-model loaders in src/lm/ngram_model_trie.c

历史摘要 · 未重新核验 · NVD

安全公告2026-09-11 发布INFO

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow an attacker with the ability...

CVE-2026-86093

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow an attacker with the ability to control or imperson

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-10 发布INFO

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow an attacker with the ability to control or impersonate a DRDA server endpoint to execute arbitrary commands ...

CVE-2026-86093

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow an attacker with the ability to control or imperson

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

In the silabser.sys driver for CP210x devices v11.5.0 and earlier, a local unprivileged user with a malicious device can use malformed packets to corrupt kernel pool memory, res...

CVE-2026-15419

In the silabser.sys driver for CP210x devices v11.5.0 and earlier, a local unprivileged user with a malicious device can

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Classify::ReadNormProtos in src/classify/normmatch.cpp parses the NORMPROTO component of a .traineddata fil...

CVE-2026-88047

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Classify::ReadNormProtos in src/classify/normmatch

历史摘要 · 未重新核验 · NVD

安全公告2026-09-10 发布INFO

Tesseract: ReadNormProtos stack buffer overflow

CVE-2026-88047

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Classify::ReadNormProtos in src/classify/normmatch

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-10 发布INFO

GeoVision GV-LPC2211 V1.14 (260903) fails to validate attacker-controlled variable-length fields before copying them into fixed-size stack buffers in multiple VLSVR request hand...

CVE-2026-88289

GeoVision GV-LPC2211 V1.14 (260903) fails to validate attacker-controlled variable-length fields before copying them int

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

GeoVision GV-LPC2211 V1.13 fails to bound the number of Scopes tokens in unauthenticated ONVIF WS-Discovery Probe requests, allowing a remote attacker to corrupt stack control s...

CVE-2026-88287

GeoVision GV-LPC2211 V1.13 fails to bound the number of Scopes tokens in unauthenticated ONVIF WS-Discovery Probe reques

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

GeoVision GV-LPC2211 V1.13 fails to limit repeated User elements in ONVIF SetUser requests, allowing an authenticated administrator to overwrite stack control state and crash th...

CVE-2026-88284

GeoVision GV-LPC2211 V1.13 fails to limit repeated User elements in ONVIF SetUser requests, allowing an authenticated ad

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

GeoVision GV-LPC2211 V1.13 fails to limit repeated User elements in ONVIF CreateUsers requests, allowing an authenticated administrator to overwrite stack control state and cras...

CVE-2026-88283

GeoVision GV-LPC2211 V1.13 fails to limit repeated User elements in ONVIF CreateUsers requests, allowing an authenticate

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

GeoVision GV-LPC2211 V1.13 fails to limit repeated Username elements in ONVIF DeleteUsers requests, allowing an authenticated administrator to overflow a stack array and crash t...

CVE-2026-88281

GeoVision GV-LPC2211 V1.13 fails to limit repeated Username elements in ONVIF DeleteUsers requests, allowing an authenti

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

GeoVision GV-LPC2211 V1.13 copies an oversized ONVIF SetUser password into a fixed stack field, allowing an authenticated administrator to crash the ONVIF worker.

CVE-2026-88280

GeoVision GV-LPC2211 V1.13 copies an oversized ONVIF SetUser password into a fixed stack field, allowing an authenticate

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

GeoVision GV-LPC2211 V1.13 copies oversized ONVIF CreateUsers username or password values into fixed stack fields, allowing an authenticated administrator to crash the ONVIF wor...

CVE-2026-88279

GeoVision GV-LPC2211 V1.13 copies oversized ONVIF CreateUsers username or password values into fixed stack fields, allow

历史摘要 · 未重新核验 · NVD