#cwe-122

共收录 1197 条相关情报。

← 返回所有主题
漏洞预警2026-10-27 发布INFO

A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in airMAX M, LTU, SolarPoint, and SolarSwitch devices to exe...

CVE-2026-116837

A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-26 发布MEDIUM

NXP MCUXpresso SDK USB middleware (mcuxsdk-middleware-usb) before 2.13.0 contains a heap buffer overflow in host audio, video and CDC class drivers that trust device-supplied bN...

CVE-2026-116488

NXP MCUXpresso SDK USB middleware (mcuxsdk-middleware-usb) before 2.13.0 contains a heap buffer overflow in host audio,

来源摘录 · NVD

漏洞预警2026-10-26 发布MEDIUM

A security vulnerability has been detected in GNOME libgsf up to 1.14.60. The impacted element is the function ole_info_read_metabat of the file gsf/gsf-infile-msole.c of the co...

CVE-2026-116124

A security vulnerability has been detected in GNOME libgsf up to 1.14.60. The impacted element is the function ole_info_

来源摘录 · NVD

安全公告2026-10-25 发布INFO

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a heap-based buffer overflow in the...

CVE-2026-116160

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a heap-based buffer overflow in the X11 animate operation

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-23 发布INFO

Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution

CVE-2026-112398

### Credits **Researcher**: Alex Bouffard (mixbo@pebwalker.com) ### Summary A heap buffer overflow in Pillow's FlashP

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-21 发布INFO

Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO

CVE-2026-112393

``` ============================================================================ Heap buffer overflow in _tiffWriteProc

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-21 发布INFO

NoMachine mDNS Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected install...

CVE-2026-92208

NoMachine mDNS Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacen

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-21 发布INFO

GStreamer rtpL16depay Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installati...

CVE-2026-111183

GStreamer rtpL16depay Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-21 发布MEDIUM

Heap-based buffer overflow in the JJY refclock driver in NTPsec ntpd before 1.2.6 allows an attacker who controls the Telephone JJY time source to corrupt memory or crash ntpd v...

CVE-2026-102484

Heap-based buffer overflow in the JJY refclock driver in NTPsec ntpd before 1.2.6 allows an attacker who controls the Te

来源摘录 · NVD

安全公告2026-10-21 发布INFO

Sharp before 0.35.4 bundles a vulnerable libheif dependency that allows attackers to achieve...

CVE-2026-114112

Sharp before 0.35.4 bundles a vulnerable libheif dependency that allows attackers to achieve possible remote code execut

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-21 发布INFO

FreeRDP before 3.32.1 contains a heap-based buffer overflow in the server-side rdpsnd channel...

CVE-2026-114045

FreeRDP before 3.32.1 contains a heap-based buffer overflow in the server-side rdpsnd channel because an integer wraparo

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-21 发布INFO

FreeRDP before 3.32.1 contains a heap-based buffer overflow in the server-side rdpsnd channel because an integer wraparound in rdpsnd_server_select_format() DVI_ADPCM block-alig...

CVE-2026-114045

FreeRDP before 3.32.1 contains a heap-based buffer overflow in the server-side rdpsnd channel because an integer wraparo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

A heap-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTT...

CVE-2026-10136

A heap-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-

历史摘要 · 未重新核验 · NVD

安全公告2026-10-20 发布INFO

Pillow tiled-TIFF decoder reads past tile buffer in copy4 (Unpack.c:1290)

CVE-2026-112395

### Summary Pillow's libImaging `_decodeTile` decoder, used to decode tiled TIFF images, allocates a per-tile buffer us

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-20 发布INFO

Pillow: Heap buffer overflow in ImagingJpegDecode

CVE-2026-112403

## Summary `JpegImageFile.draft()` — which `Image.thumbnail()` calls automatically — requests 1/2, 1/4 or 1/8 scaled JP

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-20 发布INFO

Raptor RDF Syntax Library from 2.0.15 through 2.0.16 contains a heap-based buffer overflow vulnerability in raptor_new_term_from_counted_literal() caused by truncating language ...

CVE-2025-71436

Raptor RDF Syntax Library from 2.0.15 through 2.0.16 contains a heap-based buffer overflow vulnerability in raptor_new_t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

A heap-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution.

CVE-2026-43855

A heap-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code executi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-19 发布INFO

Pillow is a Python imaging library. Prior to 13.0.0, Pillow's JPEG decoder can write a full-width scanline into a buffer sized for a requested draft scale. ImagingJpegDecode doe...

CVE-2026-112403

Pillow is a Python imaging library. Prior to 13.0.0, Pillow's JPEG decoder can write a full-width scanline into a buffer

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-19 发布INFO

Pillow is a Python imaging library. Prior to 13.0.0, Pillow's FlashPix JPEG-tile decoder can write decoded scanlines beyond the allocated tile buffer. FlashPix (FPX) JPEG decodi...

CVE-2026-112398

Pillow is a Python imaging library. Prior to 13.0.0, Pillow's FlashPix JPEG-tile decoder can write decoded scanlines bey

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-19 发布HIGH

Pillow is a Python imaging library. From 8.2.0 until 13.0.0, Pillow's tiled-TIFF decoder can read past the tile buffer while copying four-byte pixels. In _decodeTile, libtiff ca...

CVE-2026-112395

Pillow is a Python imaging library. From 8.2.0 until 13.0.0, Pillow's tiled-TIFF decoder can read past the tile buffer w

来源摘录 · NVD