#cwe-124

共收录 17 条相关情报。

← 返回所有主题
漏洞预警2026-10-13 发布INFO

ImageMagick before 7.1.2-33 and 6.9.13-58 contains a heap buffer underwrite vulnerability in DecodeImage() in coders/pict.c on 32-bit builds due to pointer arithmetic overflow. ...

CVE-2026-109964

ImageMagick before 7.1.2-33 and 6.9.13-58 contains a heap buffer underwrite vulnerability in DecodeImage() in coders/pic

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

Integer wraparound in psqlODBC SQLBindParameter allows an application, or an attacker who controls how many parameters the application binds on one statement, to corrupt heap me...

CVE-2026-109448

Integer wraparound in psqlODBC SQLBindParameter allows an application, or an attacker who controls how many parameters t

历史摘要 · 未重新核验 · NVD

安全公告2026-10-12 发布INFO

psqlODBC SQLBindParameter heap memory corruption when binding more than 32767 parameters

CVE-2026-109448

Integer wraparound in psqlODBC SQLBindParameter allows an application, or an attacker who controls how many parameters t

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-08-28 发布INFO

An attacker that has valid credentials can submit a Sieve script containing an extreme numeric literal, which causes an out-of-bounds write when the ManageSieve service compiles...

CVE-2026-40013

An attacker that has valid credentials can submit a Sieve script containing an extreme numeric literal, which causes an

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Vim is an open source, command line text editor. From 9.2.0469 until 9.2.0843, popup_mark_opacity_zindex() in src/popupwin.c can use a negative w_winrow for a text-property-anch...

CVE-2026-73075

Vim is an open source, command line text editor. From 9.2.0469 until 9.2.0843, popup_mark_opacity_zindex() in src/popupw

历史摘要 · 未重新核验 · NVD

安全公告2026-08-10 发布INFO

OP-TEE OS through 4.10.0, fixed in commit 7b8b494, contains a buffer underwrite vulnerability in...

CVE-2026-71969

OP-TEE OS through 4.10.0, fixed in commit 7b8b494, contains a buffer underwrite vulnerability in the RSA NOPAD encrypt a

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-10 发布INFO

OP-TEE OS through 4.10.0, fixed in commit 7b8b494, contains a buffer underwrite vulnerability in the RSA NOPAD encrypt and decrypt operations within the mbedTLS software backend...

CVE-2026-71969

OP-TEE OS through 4.10.0, fixed in commit 7b8b494, contains a buffer underwrite vulnerability in the RSA NOPAD encrypt a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

In Eclipse OpenJ9 versions up to 0.60, using -Xtrace to trace method arguments can lead to buffer underflow.

CVE-2026-16439

In Eclipse OpenJ9 versions up to 0.60, using -Xtrace to trace method arguments can lead to buffer underflow.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-20 发布INFO

HDF5 is a high-performance library and a file format specification that implements the HDF5 data model. If `H5Iget_name` is invoked on a group id with `0` for the size parameter...

CVE-2026-26199

HDF5 is a high-performance library and a file format specification that implements the HDF5 data model. If `H5Iget_name`

历史摘要 · 未重新核验 · NVD

安全公告2026-07-20 发布INFO

Buffer underflow in `H5Iget_name `/`H5G_get_name` if size is zero

CVE-2026-26199

HDF5 is a high-performance library and a file format specification that implements the HDF5 data model. If `H5Iget_name`

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-06-08 发布INFO

Buffer Underwrite vulnerability in Apache HTTP Server on crafted regular expressions in the configuration. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Us...

CVE-2026-44631

Buffer Underwrite vulnerability in Apache HTTP Server on crafted regular expressions in the configuration. This issue a

历史摘要 · 未重新核验 · NVD

安全公告2026-05-20 发布INFO

Improper input validation in the System Management Mode (SMM) communications buffer could allow a...

CVE-2024-36343

Improper input validation in the System Management Mode (SMM) communications buffer could allow a privileged attacker to

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-19 发布INFO

Improper input validation in the System Management Mode (SMM) communications buffer could allow a privileged attacker to perform an out of bounds read or write to a limited sect...

CVE-2024-36343

Improper input validation in the System Management Mode (SMM) communications buffer could allow a privileged attacker to

历史摘要 · 未重新核验 · NVD

安全公告2026-05-15 发布INFO

A buffer underflow vulnerability has been identified in the ogg123 utility from the vorbis-tools...

CVE-2026-34253

A buffer underflow vulnerability has been identified in the ogg123 utility from the vorbis-tools 1.4.3 package in functi

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-15 发布INFO

A buffer underflow vulnerability has been identified in the ogg123 utility from the vorbis-tools 1.4.3 package in function remotethread in remote.c. This vulnerability occurs in...

CVE-2026-34253

A buffer underflow vulnerability has been identified in the ogg123 utility from the vorbis-tools 1.4.3 package in functi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-29 发布INFO

Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 4.0.0 to before version 4.14.4, multiple heap-based out-of-bounds WRIT...

CVE-2026-41499

Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 4.0.0 to befo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-29 发布INFO

Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 1.0.0 to before version 4.14.4, a heap-based out-of-bounds WRITE occur...

CVE-2026-26204

Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 1.0.0 to befo

历史摘要 · 未重新核验 · NVD