#cwe-125

共收录 1565 条相关情报。

← 返回所有主题
漏洞预警2026-10-09 发布INFO

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the qc_info plugin could be confused by a...

CVE-2026-107816

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3

历史摘要 · 未重新核验 · NVD

安全公告2026-10-09 发布INFO

RIOT: Out-of-Bounds Read in RIOT OS 6LoWPAN SFF Fragment Handling

CVE-2026-107837

RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded syste

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-09 发布INFO

RIOT: nanoCoAP Block2 client slice handling underflows on inconsistent server-controlled block size

CVE-2026-107836

RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded syste

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-09 发布INFO

MariaDB: mysql_json plugin OOB reads

CVE-2026-107817

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-09 发布INFO

MariaDB: `qc_info` plugin can do OOB reads if query contains \0

CVE-2026-107816

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-10-09 发布INFO

An out-of-bounds read vulnerability exists in EIPStackGroup OpENer v2.3 and master up to commit 76b95cf in the EtherNet/IP TCP SendRRData Common Packet Format parser. The issue ...

CVE-2026-75348

An out-of-bounds read vulnerability exists in EIPStackGroup OpENer v2.3 and master up to commit 76b95cf in the EtherNet/

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-09 发布INFO

An out-of-bounds read vulnerability exists in EIPStackGroup OpENer v2.3 and master through commit 76b95cf in the server-side CIP SetAttributeList service. This allows a remote a...

CVE-2026-75346

An out-of-bounds read vulnerability exists in EIPStackGroup OpENer v2.3 and master through commit 76b95cf in the server-

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-09 发布INFO

Open5GS through 2.8.0 contains a heap out-of-bounds read vulnerability in ogs_pfcp_parse_dropped_dl_traffic_threshold() that allows remote unauthenticated attackers to read past...

CVE-2026-108103

Open5GS through 2.8.0 contains a heap out-of-bounds read vulnerability in ogs_pfcp_parse_dropped_dl_traffic_threshold()

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-09 发布INFO

Open5GS through 2.8.0 contains a heap out-of-bounds read vulnerability in ogs_pfcp_parse_volume_measurement() in lib/pfcp/types.c that allows remote unauthenticated attackers to...

CVE-2026-108102

Open5GS through 2.8.0 contains a heap out-of-bounds read vulnerability in ogs_pfcp_parse_volume_measurement() in lib/pfc

历史摘要 · 未重新核验 · NVD

安全公告2026-10-09 发布INFO

Open5GS through 2.8.0 Heap Out-of-Bounds Read via PFCP Dropped DL Traffic Threshold IE

CVE-2026-108103

Open5GS through 2.8.0 contains a heap out-of-bounds read vulnerability in ogs_pfcp_parse_dropped_dl_traffic_threshold()

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-09 发布INFO

Open5GS through 2.8.0 Heap Out-of-Bounds Read via PFCP Volume Measurement IE

CVE-2026-108102

Open5GS through 2.8.0 contains a heap out-of-bounds read vulnerability in ogs_pfcp_parse_volume_measurement() in lib/pfc

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-10-09 发布INFO

The Affinity by Canva app for macOS before 3.3.1 (October 2026 release) did not perform adequate bounds checking when generating QuickLook thumbnails and previews of Affinity do...

CVE-2026-96395

The Affinity by Canva app for macOS before 3.3.1 (October 2026 release) did not perform adequate bounds checking when ge

历史摘要 · 未重新核验 · NVD

安全公告2026-10-09 发布INFO

A heap-based out-of-bounds read in the BufferSerializerIOv2_ReadBuffer function (src/serializers...

CVE-2026-7826

A heap-based out-of-bounds read in the BufferSerializerIOv2_ReadBuffer function (src/serializers/serializer_io.c) in Fal

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-08 发布INFO

SumatraPDF is a multi-format reader for Windows. In 3.7.0.22298, four independently reachable range-validation variants in src/LitDoc.cpp allow file-controlled offsets and sizes...

CVE-2026-107731

SumatraPDF is a multi-format reader for Windows. In 3.7.0.22298, four independently reachable range-validation variants

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-08 发布INFO

SumatraPDF is a multi-format reader for Windows. In 3.7.0.22298, src/MobiDoc.cpp narrows the untrusted unsigned mobiHdr.hdrLen field to a signed integer for validation; values a...

CVE-2026-107729

SumatraPDF is a multi-format reader for Windows. In 3.7.0.22298, src/MobiDoc.cpp narrows the untrusted unsigned mobiHdr.

历史摘要 · 未重新核验 · NVD

安全公告2026-10-08 发布INFO

SumatraPDF: LIT parser range-validation flaws cause invalid-pointer reads and denial of service

CVE-2026-107731

SumatraPDF is a multi-format reader for Windows. In 3.7.0.22298, four independently reachable range-validation variants

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-08 发布INFO

SumatraPDF: Unsigned-to-signed hdrLen validation bypass in SumatraPDF MOBI parsing causes out-of-bounds read

CVE-2026-107729

SumatraPDF is a multi-format reader for Windows. In 3.7.0.22298, src/MobiDoc.cpp narrows the untrusted unsigned mobiHdr.

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-10-08 发布INFO

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a denial of service due to a heap-based out-of-bounds read. A rem...

CVE-2026-12091

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a denial

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-08 发布INFO

The MongoDB Python Driver's binary accelerator can read outside a buffer when an application decodes malformed BSON containing a truncated regular-expression element without a t...

CVE-2026-106435

The MongoDB Python Driver's binary accelerator can read outside a buffer when an application decodes malformed BSON cont

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-08 发布INFO

IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based out-of-bounds read in the TDS7 LOGIN7 protocol parser. A remote attacker could send a specially craft...

CVE-2026-82334

IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based out-of-bounds read in the TDS7 LOGIN7 protoc

历史摘要 · 未重新核验 · NVD