#cwe-122

共收录 1197 条相关情报。

← 返回所有主题
漏洞预警2026-09-16 发布INFO

In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in that can progressively corrupt heap memory and under certain systems and compilation options could...

CVE-2026-82717

In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in that can progressively corrupt heap memor

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in the DNSSEC validator that enables denial of service and possible remote code execution as a result...

CVE-2026-81642

In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in the DNSSEC validator that enables denial

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

In NLnet Labs Unbound up to and including 1.26.0, a 255 length query name with a large TCP response can lead to a heap buffer overflow during the RRSet canonicalisation routine....

CVE-2026-81634

In NLnet Labs Unbound up to and including 1.26.0, a 255 length query name with a large TCP response can lead to a heap b

历史摘要 · 未重新核验 · NVD

安全公告2026-09-16 发布INFO

Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to...

CVE-2026-69486

Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a net

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-15 发布INFO

Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

CVE-2026-69486

Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a net

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

In gf_ta_test_set_config of gf_ta_test.c, there is a possible heap buffer overflow due to a logic error in the code. This could lead to local escalation of privilege with no add...

CVE-2026-58679

In gf_ta_test_set_config of gf_ta_test.c, there is a possible heap buffer overflow due to a logic error in the code. Thi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

In Cellular Modem, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote (proximal/adjacent) code execution with no additional executi...

CVE-2026-56967

In Cellular Modem, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote (pro

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

In gf_base_update_finger_base of gf_base.c, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no addit...

CVE-2026-55323

In gf_base_update_finger_base of gf_base.c, there is a possible out-of-bounds write due to a heap buffer overflow. This

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Ashlar-Vellum Cobalt VS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affe...

CVE-2026-19781

Ashlar-Vellum Cobalt VS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

In Cellular Modem, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote escalation of privilege with no additional execution privileg...

CVE-2026-0200

In Cellular Modem, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote esca

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

FreeRDP versions before 3.31.0 contain a heap-based buffer overflow in nego_send_negotiation_request when processing Server Redirection PDU messages with attacker-controlled Loa...

CVE-2026-91964

FreeRDP versions before 3.31.0 contain a heap-based buffer overflow in nego_send_negotiation_request when processing Ser

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_v3_module module. When using HTTP/3 with OpenSSL versions <= OpenSSL 3.5.0 under certain configurations, a ...

CVE-2026-90439

NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_v3_module module. When using HTTP/3 with OpenSSL v

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Ghostscript before 10.08.0 contains a heap-based buffer overflow vulnerability in the JPEG 2000 output adapter (base/sjpx_openjpeg.c) that allows attackers to cause memory corru...

CVE-2026-39919

Ghostscript before 10.08.0 contains a heap-based buffer overflow vulnerability in the JPEG 2000 output adapter (base/sjp

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

A vulnerability has been found in GPAC up to f1219cde. This issue affects the function gf_url_concatenate_ex of the file utils/url.c of the component URL Handler. The manipulati...

CVE-2026-91088

A vulnerability has been found in GPAC up to f1219cde. This issue affects the function gf_url_concatenate_ex of the file

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

A security vulnerability has been detected in GPAC up to f1219cde. Affected by this issue is the function mpgviddmx_process of the file filters/reframe_mpgvid.c of the component...

CVE-2026-91086

A security vulnerability has been detected in GPAC up to f1219cde. Affected by this issue is the function mpgviddmx_proc

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-14 发布INFO

PocketSphinx is a small speech recognizer. Prior to 5.1.1, the trie language-model loaders in src/lm/ngram_model_trie.c do not adequately validate boundary conditions in ARPA, D...

CVE-2026-54559

PocketSphinx is a small speech recognizer. Prior to 5.1.1, the trie language-model loaders in src/lm/ngram_model_trie.c

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-11 发布INFO

libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.1.1 use signed 32-bit arithmetic to calculate the sample adaptive offset input-buffer siz...

CVE-2026-54241

libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.1.1 use signed 32-bit arithmetic

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-11 发布INFO

A heap-based buffer overflow vulnerability in the WS-Addressing Action transformation function in the Sofia IPC daemon in Xiongmai IP Camera XM530 firmware HMT.CM2005-v220608.18...

CVE-2026-79393

A heap-based buffer overflow vulnerability in the WS-Addressing Action transformation function in the Sofia IPC daemon i

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-11 发布INFO

A flaw was found in libtiff. A heap-buffer overflow vulnerability exists in the `tiff2pdf` utility due to an integer truncation error when processing crafted BigTIFF files. An a...

CVE-2026-18495

A flaw was found in libtiff. A heap-buffer overflow vulnerability exists in the `tiff2pdf` utility due to an integer tru

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, a crafted rule using mi...

CVE-2026-45761

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Pr

历史摘要 · 未重新核验 · NVD