#cwe-125

共收录 1565 条相关情报。

← 返回所有主题

漏洞预警2026-09-22 发布INFO

Out-of-bounds Read, Function Call With Incorrect Number of Arguments, Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in RTI Connext Professional (Co...

CVE-2026-18458

Out-of-bounds Read, Function Call With Incorrect Number of Arguments, Access of Resource Using Incompatible Type ('Type

历史摘要 · 未重新核验 · NVD

#cve #cwe-125 #cwe-685 #cwe-843

漏洞预警2026-09-22 发布INFO

Out-of-bounds Read, Function Call With Incorrect Number of Arguments, Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in RTI Connext Professional (Co...

CVE-2026-11389

Out-of-bounds Read, Function Call With Incorrect Number of Arguments, Access of Resource Using Incompatible Type ('Type

历史摘要 · 未重新核验 · NVD

#cve #cwe-125 #cwe-685 #cwe-843

漏洞预警2026-09-22 发布INFO

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Mach-O LC_DATA_IN_CODE parser was vulnerable because the Mach-O LC_DATA_...

CVE-2026-81884

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Mach-O LC_DATA_

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-09-22 发布INFO

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Lua 5.3 bytecode function parser was vulnerable because the Lua 5.3 byte...

CVE-2026-81883

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Lua 5.3 bytecod

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-09-22 发布INFO

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's binary property-list Unicode parser was vulnerable because the binary-pr...

CVE-2026-81882

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's binary property

历史摘要 · 未重新核验 · NVD

#cve #cwe-125 #cwe-170

漏洞预警2026-09-22 发布INFO

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Mach-O Swift field-metadata parser was vulnerable because a relative Swi...

CVE-2026-81881

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Mach-O Swift fi

历史摘要 · 未重新核验 · NVD

#cve #cwe-125 #cwe-191

漏洞预警2026-09-22 发布INFO

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's ELF PN_XNUM handling was vulnerable because the ELF parser allocated the...

CVE-2026-81879

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's ELF PN_XNUM han

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

安全公告2026-09-22 发布INFO

radare2: Out-of-bounds Read at the end of string in the LUA 5.3 bytecode

CVE-2026-81883

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Lua 5.3 bytecod

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-125

安全公告2026-09-22 发布INFO

radare2: Missing string termination causes heap out-of-bounds read in radare2 bplist parser

CVE-2026-81882

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's binary property

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-125 #cwe-170

安全公告2026-09-22 发布INFO

radare2: Heap out-of-bounds read in radare2 Mach-O LC_DATA_IN_CODE parser

CVE-2026-81884

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Mach-O LC_DATA_

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-125

安全公告2026-09-22 发布INFO

radare2: Heap out-of-bounds read in radare2 ELF PN_XNUM handling

CVE-2026-81879

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's ELF PN_XNUM han

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-125

安全公告2026-09-22 发布INFO

radare2: Heap out-of-bounds read in radare2 Mach-O Swift metadata parser

CVE-2026-81881

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Mach-O Swift fi

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-125 #cwe-191

漏洞预警2026-09-22 发布INFO

LibreOffice can import PICT images, which may be embedded in documents. An out of bounds read existed when importing an image that uses a colour palette. The palette index held ...

CVE-2026-63279

LibreOffice can import PICT images, which may be embedded in documents. An out of bounds read existed when importing an

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-09-22 发布INFO

LibreOffice Draw can import PDF documents. A heap buffer overflow existed when importing a stream object. The length of the stream was taken from the object's own dictionary and...

CVE-2026-63274

LibreOffice Draw can import PDF documents. A heap buffer overflow existed when importing a stream object. The length of

历史摘要 · 未重新核验 · NVD

#cve #cwe-125 #cwe-787

漏洞预警2026-09-22 发布INFO

LibreOffice can import WMF graphics, which may be embedded in documents. A heap buffer overflow existed when importing a text record that carries its own character advance width...

CVE-2026-63272

LibreOffice can import WMF graphics, which may be embedded in documents. A heap buffer overflow existed when importing a

历史摘要 · 未重新核验 · NVD

#cve #cwe-125 #cwe-787

漏洞预警2026-09-22 发布INFO

Net::IDN::Punycode versions before 2.590 for Perl allow an out-of-bounds read via integer overflow of the delta accumulator in encode_punycode. The XS backend keeps the punycod...

CVE-2026-74765

Net::IDN::Punycode versions before 2.590 for Perl allow an out-of-bounds read via integer overflow of the delta accumula

历史摘要 · 未重新核验 · NVD

#cve #cwe-125 #cwe-190

安全公告2026-09-22 发布INFO

Net::IDN::Punycode versions before 2.590 for Perl allow an out-of-bounds read via integer overflow of the delta accumulator in encode_punycode

CVE-2026-74765

Net::IDN::Punycode versions before 2.590 for Perl allow an out-of-bounds read via integer overflow of the delta accumula

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-125 #cwe-190

漏洞预警2026-09-21 发布INFO

The Espressif ESP-hosted Wi-Fi driver (drivers/wifi/esp_hosted/) parses frames received over SPI from the ESP co-processor in esp_hosted_event_task(). For control frames it took...

CVE-2026-17054

The Espressif ESP-hosted Wi-Fi driver (drivers/wifi/esp_hosted/) parses frames received over SPI from the ESP co-process

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

安全公告2026-09-18 发布INFO

In libsmpp35 from 0.1.0 through 1.8.0 out of bound read issue was found in the at smpp34_unpack()...

CVE-2026-75895

In libsmpp35 from 0.1.0 through 1.8.0 out of bound read issue was found in the at smpp34_unpack() function via attacker

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-125

安全公告2026-09-18 发布INFO

IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to obtain...

CVE-2026-11726

IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to obtain sensitive information or c

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-125 #severity:high