#cwe-125

共收录 1565 条相关情报。

← 返回所有主题
漏洞预警2026-10-29 发布MEDIUM

A flaw was found in dnsmasq. The DHCPv6 client hostname parser can read one byte past the end of a crafted FQDN option because it checks the next label length before confirming ...

CVE-2026-93009

A flaw was found in dnsmasq. The DHCPv6 client hostname parser can read one byte past the end of a crafted FQDN option b

来源摘录 · NVD

漏洞预警2026-10-29 发布MEDIUM

lwIP 2.0.0 through 2.2.1 built with the SNMP agent contains an out-of-bounds read vulnerability in snmp_pbuf_stream_writeto() that bounds copies by pbuf->len instead of remainin...

CVE-2026-119053

lwIP 2.0.0 through 2.2.1 built with the SNMP agent contains an out-of-bounds read vulnerability in snmp_pbuf_stream_writ

来源摘录 · NVD

漏洞预警2026-10-29 发布INFO

A misconfigured wildcard TLS certificate causes a stack read overflow. This issue does not affect any wildcard certificate issued to the RFC9525 standard - the fix only accep...

CVE-2026-115942

A misconfigured wildcard TLS certificate causes a stack read overflow. This issue does not affect any wildcard certif

来源摘录 · NVD

漏洞预警2026-10-29 发布LOW

A flaw was found in polkit. When processing input that begins with a null byte, an arithmetic error in the authentication agent helper causes an integer underflow during buffer ...

CVE-2026-85498

A flaw was found in polkit. When processing input that begins with a null byte, an arithmetic error in the authenticatio

来源摘录 · NVD

安全公告2026-10-28 发布INFO

ONNX: Out-of-bounds read in ConvTranspose shape inference via undersized weight rank

CVE-2026-115920

## Summary ONNX ConvTranspose shape inference performed an out-of-bounds read when the weight tensor had fewer than thr

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-28 发布INFO

ONNX: Out-of-Bounds Read in RNN/GRU/LSTM Shape Inference (Old Opsets, Missing Rank Check)

CVE-2026-115919

## Summary ONNX shape inference performed an out-of-bounds read when processing a malformed RNN, GRU, or LSTM node from

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-28 发布LOW

Alpine iLX-F511 libanwbtstack.so prh_rfcomm_cc_process_test Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disc...

CVE-2026-118608

Alpine iLX-F511 libanwbtstack.so prh_rfcomm_cc_process_test Out-Of-Bounds Read Information Disclosure Vulnerability. Thi

来源摘录 · NVD

漏洞预警2026-10-28 发布MEDIUM

An Out-of-Bounds Read vulnerability in the VRRP implementation in Juniper Networks Session Smart Router allows an L2-adjacent attacker to read stale memory contents or cause a s...

CVE-2026-103393

An Out-of-Bounds Read vulnerability in the VRRP implementation in Juniper Networks Session Smart Router allows an L2-adj

来源摘录 · NVD

漏洞预警2026-10-28 发布MEDIUM

An Out-of-Bounds Read vulnerability in the HttpParser component in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker to cause a denial of serv...

CVE-2026-103390

An Out-of-Bounds Read vulnerability in the HttpParser component in Juniper Networks Session Smart Router and Session Sma

来源摘录 · NVD

漏洞预警2026-10-27 发布MEDIUM

Thor Vector Graphics (ThorVG) is a production-ready vector graphics engine. Prior to 1.0.7, the `SFNT/TTF` font loader's `SfntLoader::gen` function in `tvgSfntLoader.cpp` reads ...

CVE-2026-58496

Thor Vector Graphics (ThorVG) is a production-ready vector graphics engine. Prior to 1.0.7, the `SFNT/TTF` font loader's

来源摘录 · NVD

漏洞预警2026-10-27 发布INFO

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an ...

CVE-2026-57192

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

Tanium addressed an information disclosure vulnerability in Threat Response Client Extension.

CVE-2026-108330

Tanium addressed an information disclosure vulnerability in Threat Response Client Extension.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布MEDIUM

Substance3D - Painter is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disc...

CVE-2026-48380

Substance3D - Painter is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memo

来源摘录 · NVD

漏洞预警2026-10-27 发布INFO

An out-of-bounds read vulnerability in the FireCluster Sync processing allows an attacker positioned on the cluster interconnect, such as a compromised cluster peer or an on-pat...

CVE-2026-93862

An out-of-bounds read vulnerability in the FireCluster Sync processing allows an attacker positioned on the cluster inte

来源摘录 · NVD

漏洞预警2026-10-27 发布INFO

SDL_image through 3.4.8 and through 2.8.12 contains a stack out-of-bounds read vulnerability in IMG_LoadLBM_IO() in src/IMG_lbm.c that skips bitplane count validation when HAM m...

CVE-2026-117557

SDL_image through 3.4.8 and through 2.8.12 contains a stack out-of-bounds read vulnerability in IMG_LoadLBM_IO() in src/

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布MEDIUM

zchunk before 1.5.5 contains a heap out-of-bounds read vulnerability in read_preface() in src/lib/header.c that passes the total header length instead of remaining bytes to comp...

CVE-2026-117556

zchunk before 1.5.5 contains a heap out-of-bounds read vulnerability in read_preface() in src/lib/header.c that passes t

来源摘录 · NVD

漏洞预警2026-10-27 发布INFO

An out-of-bounds read vulnerability in the QTextCodec TSCII encoding of the Qt 5 Compatibility APIs module (Qt Core in Qt 5 and earlier) impacts Qt. Applications that convert te...

CVE-2026-107472

An out-of-bounds read vulnerability in the QTextCodec TSCII encoding of the Qt 5 Compatibility APIs module (Qt Core in Q

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

Out-of-bounds read in the QAuthenticator NTLM authentication handling in the Qt Network module in Qt Group Qt allows remote attackers to obtain sensitive information (heap memor...

CVE-2026-105946

Out-of-bounds read in the QAuthenticator NTLM authentication handling in the Qt Network module in Qt Group Qt allows rem

历史摘要 · 未重新核验 · NVD

安全公告2026-10-27 发布INFO

llama.cpp before b2731 contains an out-of-bounds read vulnerability in llama_model_loader that...

CVE-2024-58399

llama.cpp before b2731 contains an out-of-bounds read vulnerability in llama_model_loader that allows attackers to read

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-27 发布INFO

DevilutionX 1.4.0 through 1.5.5 contains an out-of-bounds read vulnerability in the bundled...

CVE-2026-116841

DevilutionX 1.4.0 through 1.5.5 contains an out-of-bounds read vulnerability in the bundled libmpq libmpq__file_number_f

历史摘要 · 未重新核验 · GitHub Advisory