#cwe-125

共收录 1565 条相关情报。

← 返回所有主题
漏洞预警2026-10-26 发布MEDIUM

libfvde through 20260923 contains a heap out-of-bounds read vulnerability in libfvde_encrypted_metadata_read_type_0x0024() because xml_plist_data_size is not checked against the...

CVE-2026-116728

libfvde through 20260923 contains a heap out-of-bounds read vulnerability in libfvde_encrypted_metadata_read_type_0x0024

来源摘录 · NVD

漏洞预警2026-10-26 发布INFO

gbsplay through 0.0.103 contains a heap out-of-bounds read vulnerability in vgm_open() in gbs.c that walks the VGM command stream without bounds checks. Attackers can supply a c...

CVE-2026-116727

gbsplay through 0.0.103 contains a heap out-of-bounds read vulnerability in vgm_open() in gbs.c that walks the VGM comma

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-26 发布INFO

Gbsplay through 0.0.103 contains a heap out-of-bounds read vulnerability in gbr_open() in gbs.c that fails to verify file length before scanning the GBR ROM title field. Attacke...

CVE-2026-116726

Gbsplay through 0.0.103 contains a heap out-of-bounds read vulnerability in gbr_open() in gbs.c that fails to verify fil

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-26 发布INFO

gbsplay through 0.0.103 contains an out-of-bounds read vulnerability in mapper_map() in mapper.c that fails to reject ROM bank indexes beyond the ROM size, causing an underflowe...

CVE-2026-116725

gbsplay through 0.0.103 contains an out-of-bounds read vulnerability in mapper_map() in mapper.c that fails to reject RO

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-26 发布MEDIUM

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia...

CVE-2026-86954

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2,

来源摘录 · NVD

漏洞预警2026-10-26 发布HIGH

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a mal...

CVE-2026-86929

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, m

来源摘录 · NVD

漏洞预警2026-10-26 发布HIGH

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, mac...

CVE-2026-113912

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26

来源摘录 · NVD

漏洞预警2026-10-26 发布INFO

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS S...

CVE-2026-112634

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2,

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-26 发布INFO

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS S...

CVE-2026-112629

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2,

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-26 发布INFO

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, ins...

CVE-2026-57184

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2

来源摘录 · NVD

漏洞预警2026-10-26 发布HIGH

libosmocore through 1.14.1 contains out-of-bounds reads in the IPA CCM identity-tag parsers in src/gsm/ipa.c. This allows a remote attacker to obtain sensitive information.

CVE-2026-104594

libosmocore through 1.14.1 contains out-of-bounds reads in the IPA CCM identity-tag parsers in src/gsm/ipa.c. This allow

来源摘录 · NVD

漏洞预警2026-10-26 发布MEDIUM

libosmocore through 1.14.1 contains an out-of-bounds read in the CBSP WRITE-REPLACE decoder in src/gsm/cbsp.c. This allows a remote attacker to cause a denial of service.

CVE-2026-104592

libosmocore through 1.14.1 contains an out-of-bounds read in the CBSP WRITE-REPLACE decoder in src/gsm/cbsp.c. This allo

来源摘录 · NVD

漏洞预警2026-10-26 发布MEDIUM

OpenJPEG 2.4.0 through 2.5.4, and git master through commit 8314119b, contains an out-of-bounds read and write in opj_dwt_encode_and_deinterleave_v() in src/lib/openjp2/dwt.c. T...

CVE-2026-107080

OpenJPEG 2.4.0 through 2.5.4, and git master through commit 8314119b, contains an out-of-bounds read and write in opj_dw

来源摘录 · NVD

安全公告2026-10-25 发布INFO

ImageMagick before 7.1.2-33 contains a heap buffer over-read vulnerability that allows attackers...

CVE-2026-116142

ImageMagick before 7.1.2-33 contains a heap buffer over-read vulnerability that allows attackers to read beyond allocate

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-25 发布LOW

ImageMagick before 7.1.2-33 contains a heap buffer over-read vulnerability that allows attackers to read beyond allocated memory when printing a minimum-bounding-box. Attackers ...

CVE-2026-116142

ImageMagick before 7.1.2-33 contains a heap buffer over-read vulnerability that allows attackers to read beyond allocate

来源摘录 · NVD

漏洞预警2026-10-23 发布MEDIUM

A security flaw has been discovered in Kakao khaiii up to 0.4. The impacted element is the function khaiii::nn::Linear::open of the file src/main/cpp/khaiii/nn/Linear.cpp of the...

CVE-2026-115801

A security flaw has been discovered in Kakao khaiii up to 0.4. The impacted element is the function khaiii::nn::Linear::

来源摘录 · NVD

安全公告2026-10-23 发布INFO

A flaw was found in the iscsiuio component of open-iscsi. The IPv6 Neighbor Discovery handler...

CVE-2026-115486

A flaw was found in the iscsiuio component of open-iscsi. The IPv6 Neighbor Discovery handler accesses link-layer addres

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-23 发布INFO

A flaw was found in the iscsiuio component of open-iscsi. The DHCPv4 option parser incorrectly...

CVE-2026-115484

A flaw was found in the iscsiuio component of open-iscsi. The DHCPv4 option parser incorrectly calculates the length of

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-23 发布INFO

A flaw was found in the iscsiuio component of open-iscsi. The DHCPv6 option parser calls strlen()...

CVE-2026-115485

A flaw was found in the iscsiuio component of open-iscsi. The DHCPv6 option parser calls strlen() on raw network data wi

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-23 发布MEDIUM

A flaw was found in the iscsiuio component of open-iscsi. The DHCPv6 option parser calls strlen() on raw network data without ensuring a NUL terminator is present, causing it to...

CVE-2026-115485

A flaw was found in the iscsiuio component of open-iscsi. The DHCPv6 option parser calls strlen() on raw network data wi

来源摘录 · NVD