#cwe-125

共收录 1565 条相关情报。

漏洞预警2026-09-18 发布INFO

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 7.0.13 until 7.0.17, the SMTP MIME quoted-printable de...

CVE-2026-57228

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Fr

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-09-18 发布INFO

In libsmpp35 from 0.1.0 through 1.8.0 out of bound read issue was found in the at smpp34_unpack() function via attacker controlled SMPP PDUs, leading to memory corruption.

CVE-2026-75895

In libsmpp35 from 0.1.0 through 1.8.0 out of bound read issue was found in the at smpp34_unpack() function via attacker

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-09-18 发布INFO

FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.5.0 until 2.5.6, the native DLS loader assigns file-controlled wsmp.loop_start and wsmp.loop...

CVE-2026-61721

FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.5.0 until 2.5.6, the native DLS loa

历史摘要 · 未重新核验 · NVD

#cve #cwe-122 #cwe-125

漏洞预警2026-09-18 发布INFO

FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.2.4 until 2.5.6, configuring synth.midi-channels above 16 allows the MIDI player to index _f...

CVE-2026-61714

FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.2.4 until 2.5.6, configuring synth.

历史摘要 · 未重新核验 · NVD

#cve #cwe-122 #cwe-125 #cwe-787

漏洞预警2026-09-18 发布INFO

IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to obtain sensitive information or cause a denial of service due to improper validation of me...

CVE-2026-11726

IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to obtain sensitive information or c

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-09-18 发布INFO

NanoMQ is an MQTT broker. Prior to 0.24.14, NanoMQ's broker-side MQTT v5 nmq_subinfo_decode() function in nng/src/sp/protocol/mqtt/mqtt_parser.c reuses len_of_varint from the ou...

CVE-2026-73863

NanoMQ is an MQTT broker. Prior to 0.24.14, NanoMQ's broker-side MQTT v5 nmq_subinfo_decode() function in nng/src/sp/pro

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

安全公告2026-09-18 发布INFO

NanoMQ: Heap-Buffer-Overflow in `nmq_subinfo_decode()` During MQTT v5 SUBSCRIBE Parsing

CVE-2026-73863

NanoMQ is an MQTT broker. Prior to 0.24.14, NanoMQ's broker-side MQTT v5 nmq_subinfo_decode() function in nng/src/sp/pro

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-125

漏洞预警2026-09-18 发布INFO

libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.3, the no-icef full-item branch of unc_decoder::get_compressed_image_data_uncompressed() in li...

CVE-2026-84451

libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.3, the no-icef full-item branch of un

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-09-18 发布INFO

libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.19.6, Op_RGB24_32_to_YCbCr::convert_colorspace() stores image-plane strides in an integer width that can o...

CVE-2026-84449

libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.19.6, Op_RGB24_32_to_YCbCr::convert_colorspace()

历史摘要 · 未重新核验 · NVD

#cve #cwe-125 #cwe-190

漏洞预警2026-09-18 发布INFO

libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.23.2, the public heif_region_item_add_region_inline_mask_data() function in libheif/api/libheif/heif_regio...

CVE-2026-84448

libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.23.2, the public heif_region_item_add_region_inli

历史摘要 · 未重新核验 · NVD

#cve #cwe-125 #cwe-131

漏洞预警2026-09-18 发布INFO

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.21.0, 3.1.16.0, and 3.2.0.3-beta1,...

CVE-2026-65969

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / a

历史摘要 · 未重新核验 · NVD

#cve #cwe-125 #cwe-190

漏洞预警2026-09-18 发布INFO

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.21.0, 3.1.16.0, and 3.2.0.3-beta1,...

CVE-2026-63635

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / a

历史摘要 · 未重新核验 · NVD

#cve #cwe-125 #cwe-129

漏洞预警2026-09-18 发布INFO

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.21.0, 3.1.16.0, and 3.2.0.3-beta1,...

CVE-2026-63420

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / a

历史摘要 · 未重新核验 · NVD

#cve #cwe-125 #cwe-129

漏洞预警2026-09-18 发布INFO

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.20.0, 3.1.15.0, and 3.2.0.3-beta1,...

CVE-2026-59956

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / a

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

安全公告2026-09-18 发布INFO

libheif hOp_RGB24_32_to_YCbCr Memory Access Error / SEGV

CVE-2026-84449

libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.19.6, Op_RGB24_32_to_YCbCr::convert_colorspace()

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-125 #cwe-190

安全公告2026-09-18 发布INFO

libheif: Incomplete fix for CVE-2026-62292 leaves libheif vulnerable to an out-of-bounds read

CVE-2026-84451

libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.3, the no-icef full-item branch of un

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-125

安全公告2026-09-18 发布INFO

libheif: Heap out-of-bounds read in libheif inline-mask region API (heif_region_item_add_region_inline_mask_data / heif_region_get_mask_image)

CVE-2026-84448

libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.23.2, the public heif_region_item_add_region_inli

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-125 #cwe-131

安全公告2026-09-18 发布INFO

OpenImageIO: TGA-to-GIF palette split signed overflow causes SIGSEGV

CVE-2026-65969

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / a

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-125 #cwe-190

安全公告2026-09-18 发布INFO

OpenImageIO: PSD RawColor invalid color mode causes global out-of-bounds read and allocation DoS

CVE-2026-63635

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / a

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-125 #cwe-129

安全公告2026-09-18 发布INFO

OpenImageIO: PSD RawColor indexed image out-of-bounds read in `interleave_row`

CVE-2026-63420

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / a

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-125 #cwe-129