#cwe-125

共收录 1565 条相关情报。

漏洞预警2026-09-10 发布INFO

An out-of-bounds read vulnerability exists in the xls_dumpSummary() function of libxls 1.6.3 due to insufficient validation of file-controlled OLE summary offsets.

CVE-2026-79592

An out-of-bounds read vulnerability exists in the xls_dumpSummary() function of libxls 1.6.3 due to insufficient validat

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-09-10 发布INFO

zstd-jni versions 1.5.5-6 through 1.5.7-13 contain an out-of-bounds read vulnerability in Zstd.getFrameContentSize that fails to validate negative srcPosition arguments. Attacke...

CVE-2026-89046

zstd-jni versions 1.5.5-6 through 1.5.7-13 contain an out-of-bounds read vulnerability in Zstd.getFrameContentSize that

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-09-10 发布INFO

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Plumbing::DeSerialize in src/lstm/plumbing.cpp rejects excessively large network stacks but accepts a zero-...

CVE-2026-88054

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Plumbing::DeSerialize in src/lstm/plumbing.cpp rej

历史摘要 · 未重新核验 · NVD

#cve #cwe-125 #cwe-824

安全公告2026-09-10 发布INFO

Tesseract: Denial of service via empty-stack dereference in Plumbing/Series at model load

CVE-2026-88054

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Plumbing::DeSerialize in src/lstm/plumbing.cpp rej

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-125 #cwe-824

安全公告2026-09-10 发布INFO

zstd-jni 1.5.5-6 through 1.5.7-13 Out-of-Bounds Read via Negative Offset

CVE-2026-89046

zstd-jni versions 1.5.5-6 through 1.5.7-13 contain an out-of-bounds read vulnerability in Zstd.getFrameContentSize that

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-125

漏洞预警2026-09-10 发布INFO

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, FullyConnected::DeSerialize in src/lstm/fullyconnected.cpp does not validate the deserialized layer scalars...

CVE-2026-88048

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, FullyConnected::DeSerialize in src/lstm/fullyconne

历史摘要 · 未重新核验 · NVD

#cve #cwe-125 #cwe-787

安全公告2026-09-10 发布INFO

Tesseract: Heap out-of-bounds write/read in FullyConnected::Forward via layer/weight-matrix dimension mismatch

CVE-2026-88048

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, FullyConnected::DeSerialize in src/lstm/fullyconne

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-125 #cwe-787

漏洞预警2026-09-10 发布INFO

ESP32-audioI2S versions 3.4.4 through 4.0.0 contain a heap-based out-of-bounds read vulnerability in the read_ID3_Header function due to a shadowed length parameter in ID3 synch...

CVE-2026-87961

ESP32-audioI2S versions 3.4.4 through 4.0.0 contain a heap-based out-of-bounds read vulnerability in the read_ID3_Header

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

安全公告2026-09-10 发布INFO

ESP32-audioI2S 3.4.4 through 4.0.0 Heap-based Out-of-Bounds Read via Shadowed Length Parameter in read_ID3_Header

CVE-2026-87961

ESP32-audioI2S versions 3.4.4 through 4.0.0 contain a heap-based out-of-bounds read vulnerability in the read_ID3_Header

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-125

漏洞预警2026-09-10 发布INFO

An out-of-bounds read vulnerability was discovered in the Bosch BME690 SensorAPI (C-driver) in version v1.0.3 and prior, specifically within the field data parsing logic in read...

CVE-2026-42806

An out-of-bounds read vulnerability was discovered in the Bosch BME690 SensorAPI (C-driver) in version v1.0.3 and prior,

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-09-09 发布INFO

An out-of-bounds read in the gf_dm_get_chunk_data function (src/utils/downloader.c) of GPAC v26.07.0 allows attackers to cause a Denial of Service (DoS) via sending a crafted HT...

CVE-2026-79522

An out-of-bounds read in the gf_dm_get_chunk_data function (src/utils/downloader.c) of GPAC v26.07.0 allows attackers to

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-09-09 发布INFO

An issue was discovered in Cyrus IMAP before 3.12.4. A JMAP email-header blob ID can reference an out-of-bounds index. An authenticated user could attempt to download a crafted ...

CVE-2026-61908

An issue was discovered in Cyrus IMAP before 3.12.4. A JMAP email-header blob ID can reference an out-of-bounds index. A

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

安全公告2026-09-09 发布INFO

Out of bounds read in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a...

CVE-2026-87640

Out of bounds read in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had co