#cwe-125

共收录 1574 条相关情报。

漏洞预警2026-08-19 发布INFO

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive information due to an out-of-bounds read.

CVE-2026-16891

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive information due to an out

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-08-19 发布INFO

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive information due to an out-of-bounds read.

CVE-2026-16883

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive information due to an out

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-08-19 发布INFO

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an out-of-bounds read.

CVE-2026-16866

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an out-o

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-08-19 发布INFO

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information due to an integer underflow in the IPv4 IP-options parser.

CVE-2026-16839

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information due to an in

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-08-19 发布INFO

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to disclose kernel memory due to an out-of-bounds read.

CVE-2026-16833

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to disclose kernel memory due to an out-of-b

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-08-19 发布INFO

IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the service processor...

CVE-2026-16707

IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-08-19 发布INFO

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the ASMI web inte...

CVE-2026-16828

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW9

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-08-19 发布INFO

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.29.0, planar_decompress_plane_rle and planar_decompress_plane_rle_only in libfreerdp/codec/planar.c v...

CVE-2026-69159

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.29.0, planar_decompress_plane_rle and planar

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-08-19 发布INFO

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, the glyph_cache_get function in libfreerdp/cache/glyph.c checks whether index is greater than c...

CVE-2026-55564

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, the glyph_cache_get function in libfre

历史摘要 · 未重新核验 · NVD

#cve #cwe-125 #cwe-193

漏洞预警2026-08-19 发布INFO

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, FreeRDP H.264 decoder backends can return YUV planes sized from the bitstream without comparing...

CVE-2026-55192

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, FreeRDP H.264 decoder backends can ret

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-08-19 发布INFO

FFmpeg before commit 983dae9 contains an out-of-bounds read in the AV1 RTP packetizer (libavformat/rtpenc_av1.c). The keyframe detection loop that searches for a sequence header...

CVE-2026-75147

FFmpeg before commit 983dae9 contains an out-of-bounds read in the AV1 RTP packetizer (libavformat/rtpenc_av1.c). The ke

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-08-19 发布INFO

FFmpeg before commit 65b0dab contains an out-of-bounds read in the DASH demuxer (libavformat/dashdec.c). When a live DASH manifest is refreshed with a startNumber that is lower ...

CVE-2026-75146

FFmpeg before commit 65b0dab contains an out-of-bounds read in the DASH demuxer (libavformat/dashdec.c). When a live DAS

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-08-19 发布INFO

An out-of-bounds read vulnerability was found in swtpm's SWTPM_NVRAM_CheckHeader() function. The entry guard checks the buffer length against sizeof(bh), where bh is a pointer, ...

CVE-2026-75900

An out-of-bounds read vulnerability was found in swtpm's SWTPM_NVRAM_CheckHeader() function. The entry guard checks the

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-08-19 发布INFO

The GETALL and SETALL commands in semctl(2) recorded the number of semaphores in the target set, dropped the lock protecting the set, allocated a buffer sized for that count, an...

CVE-2026-58087

The GETALL and SETALL commands in semctl(2) recorded the number of semaphores in the target set, dropped the lock protec

历史摘要 · 未重新核验 · NVD

#cve #cwe-125 #cwe-191 #cwe-787

漏洞预警2026-08-18 发布MEDIUM

libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.1, a crafted uncompressed HEIF image using generic zlib unci full-item compression can crash a...

CVE-2026-62292

libheif 是一个用于解码和编码 HEIF 与 AVIF 图像格式的开源库。在 1.19.0 至 1.23.1 版本中，存在一个由特制的未压缩 HEIF 图像触发的安全漏洞。该图像使用通用的 zlib "unci" 全文压缩方式，当应用

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-08-18 发布MEDIUM

libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.0 and earlier, a crafted image sequence with a 2x2 primary plane and a 256x256 auxiliary alpha plane can caus...

CVE-2026-62291

CVE-2026-62291 是 libheif 库（HEIF/AVIF 格式编解码器）中的一个漏洞，影响 1.23.0 及更早版本。该漏洞源于在处理特制的图像序列时，主平面尺寸（2x2）与辅助 alpha 平面尺寸（256x256）不一致

历史摘要 · 未重新核验 · NVD

#cve #cwe-125 #cwe-787

漏洞预警2026-08-18 发布INFO

Zephyr's Precision Time Protocol receive handler ptp_msg_post_recv() in subsys/net/lib/ptp/msg.c takes the 4-bit message type straight off the wire via ptp_msg_type() (msg->head...

CVE-2026-12632

Zephyr's Precision Time Protocol receive handler ptp_msg_post_recv() in subsys/net/lib/ptp/msg.c takes the 4-bit message

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

安全公告2026-08-18 发布INFO

surfio has an out-of-bounds read

CVE-2026-55211

### Impact Prior to version 0.0.19, surfio would not correctly validate size fields in irap files, leading to a buffer o

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #pip #cwe-125 #severity:critical

安全公告2026-08-18 发布INFO

resdata has Classic Buffer Overflow, Improper Validation of Array Index, NULL Pointer Dereference and Out-of-bounds Read

CVE-2026-55209

### Impact Prior to version 6.2.9 resdata would not correctly validate input in GRDECL files. The severity rating assume

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #pip #cwe-120 #cwe-125 #cwe-129 #cwe-476

漏洞预警2026-08-18 发布INFO

Adaguc-server is an open source geographical information system to visualize, combine, compare and share real-time meteorological, climatological and remote sensing data via OGC...

CVE-2026-50126

Adaguc-server is an open source geographical information system to visualize, combine, compare and share real-time meteo

历史摘要 · 未重新核验 · NVD

#cve #cwe-125 #cwe-476