#cwe-122

共收录 1219 条相关情报。

← 返回所有主题
漏洞预警2026-07-24 发布INFO

libssh2 through 1.11.1, fixed in commit 42e33d8, contains a pre-authentication heap buffer overflow vulnerability that allows a malicious SSH server to corrupt heap metadata in ...

CVE-2026-66035

libssh2 through 1.11.1, fixed in commit 42e33d8, contains a pre-authentication heap buffer overflow vulnerability that a

历史摘要 · 未重新核验 · NVD

安全公告2026-07-24 发布INFO

libssh2 Heap Buffer Overflow via ETM Cipher Negotiation

CVE-2026-66035

libssh2 through 1.11.1, fixed in commit 42e33d8, contains a pre-authentication heap buffer overflow vulnerability that a

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-24 发布INFO

Heap-based buffer overflow in Microsoft Account allows an unauthorized attacker to execute code...

CVE-2026-56165

Heap-based buffer overflow in Microsoft Account allows an unauthorized attacker to execute code over a network.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-23 发布INFO

The affected product is vulnerable to a heap-based buffer overflow via a crafted MMS Initiate...

CVE-2026-49035

The affected product is vulnerable to a heap-based buffer overflow via a crafted MMS Initiate request. Remote code execu

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-23 发布INFO

Ruby json: JSON generator heap buffer overflow when streaming to an IO

CVE-2026-54696

### Summary `JSON.dump(obj, io)` and `JSON::State#generate(obj, io)` can write past the internal JSON generator buffer

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-22 发布INFO

When compute mode is enabled on a standalone mongod instance, insufficient validation of externally sourced BSON data during aggregation pipeline processing can result in memory...

CVE-2026-13072

When compute mode is enabled on a standalone mongod instance, insufficient validation of externally sourced BSON data du

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-22 发布INFO

FFmpeg versions 2.1 through 8.1.2 contains a heap buffer overflow vulnerability in the VobSub subtitle demuxer that allows attackers to corrupt adjacent heap memory by supplying...

CVE-2026-64830

FFmpeg versions 2.1 through 8.1.2 contains a heap buffer overflow vulnerability in the VobSub subtitle demuxer that allo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-22 发布INFO

In Unbound 1.9.0 up to and including 1.25.1, when a DNSCrypt query is received over TCP, the routine that encrypts the reply in place fails to bound the reply length against the...

CVE-2026-40691

In Unbound 1.9.0 up to and including 1.25.1, when a DNSCrypt query is received over TCP, the routine that encrypts the r

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-22 发布INFO

There is a heap buffer overflow vulnerability in some Hikvision cameras, which may allow unauthenticated attackers to cause device malfunction by sending specially crafted packets.

CVE-2026-61390

There is a heap buffer overflow vulnerability in some Hikvision cameras, which may allow unauthenticated attackers to ca

历史摘要 · 未重新核验 · NVD

安全公告2026-07-22 发布INFO

Autel Maxi Charger Single firmware through V1.03.51 contains a heap-based buffer overflow in the...

CVE-2026-8987

Autel Maxi Charger Single firmware through V1.03.51 contains a heap-based buffer overflow in the set_ap_param command ha

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-21 发布INFO

Autel Maxi Charger Single firmware through V1.03.51 contains a heap-based buffer overflow in the set_ap_param command handled by the /localcfg endpoint. An authenticated attacke...

CVE-2026-8987

Autel Maxi Charger Single firmware through V1.03.51 contains a heap-based buffer overflow in the set_ap_param command ha

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-20 发布INFO

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a heap-based buffer overflow vulnerability within the virtual channel forwarding mechanism. When forwarding ...

CVE-2026-44178

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a heap-based buffer overflow vulnerability within t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-20 发布INFO

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a missing bounds check in xrdp, which allows a heap-based buffer overflow when operating in vnc-any mode. Th...

CVE-2026-41252

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a missing bounds check in xrdp, which allows a heap

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-20 发布INFO

libvips is a fast image processing library with low memory needs. The `tiffload` operation in libvips versions before and including 8.18.1 could incorrectly determine the number...

CVE-2026-35591

libvips is a fast image processing library with low memory needs. The `tiffload` operation in libvips versions before an

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-20 发布INFO

libvips is a fast image processing library with low memory needs. The EXIF decoder within libvips versions before and including 8.18.1 was not verifying the range of EXIF tag gr...

CVE-2026-35590

libvips is a fast image processing library with low memory needs. The EXIF decoder within libvips versions before and in

历史摘要 · 未重新核验 · NVD

安全公告2026-07-20 发布INFO

xrdp: Channel Data Forwarding Fixed-Size Buffer Overflow

CVE-2026-44178

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a heap-based buffer overflow vulnerability within t

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-20 发布INFO

xrdp: lib_palette_update Heap Buffer Overflow & RCE

CVE-2026-41252

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a missing bounds check in xrdp, which allows a heap

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-20 发布INFO

Possible heap-based buffer overflow when decoding TIFF image containing well-crafted tile

CVE-2026-35591

libvips is a fast image processing library with low memory needs. The `tiffload` operation in libvips versions before an

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-20 发布INFO

Possible out-of-bounds read leading to crash when decoding well-crafted EXIF metadata

CVE-2026-35590

libvips is a fast image processing library with low memory needs. The EXIF decoder within libvips versions before and in

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-07-20 发布INFO

ProFTPD before 1.3.9c and 1.3.10rc3 contains a heap-based buffer overflow vulnerability in the mod_sftp module that allows authenticated low-privilege attackers to achieve arbit...

CVE-2026-63090

ProFTPD before 1.3.9c and 1.3.10rc3 contains a heap-based buffer overflow vulnerability in the mod_sftp module that allo

历史摘要 · 未重新核验 · NVD