#cwe-125

共收录 1574 条相关情报。

← 返回所有主题
漏洞预警2026-08-06 发布HIGH

llama.cpp builds b3978 through b9058 contain an integer underflow and out-of-bounds read vulnerability in the DRY sampler that allows unauthenticated attackers to trigger a heap...

CVE-2026-43628

llama.cpp builds b3978 through b9058 contain an integer underflow and out-of-bounds read vulnerability in the DRY sample

来源摘录 · NVD

漏洞预警2026-08-06 发布INFO

A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a c...

CVE-2026-11803

A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read vulnerability. A mal

历史摘要 · 未重新核验 · NVD

安全公告2026-08-06 发布INFO

node-re2: Out-of-bounds heap read in `replace`/`split` via a `Buffer` ending in a truncated multi-byte UTF-8 character → adjacent heap memory disclosed to JavaScript

CVE-2026-71498

## Summary `re2` infers a character's byte length from its UTF-8 lead byte alone, with no bound on the bytes actually r

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-06 发布INFO

node-re2: Out-of-bounds heap read in `replace`/`split` via a `Buffer` ending in a truncated multi-byte UTF-8 character → adjacent heap memory disclosed to JavaScript

CVE-2026-71498

node-re2 provides RE2 regular expression bindings for Node.js. Prior to version 1.26.1, passing a Buffer whose final byt

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-08-06 发布INFO

TimescaleDB 2.29.1 Out-of-Bounds Read DoS via Bulk Dictionary Decompression Negative Index

CVE-2026-70635

TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read vulnerability that allows authentica

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-08-06 发布INFO

TimescaleDB 2.29.1 Out-of-Bounds Read Information Disclosure via Dictionary Compression Reverse Iterator

CVE-2026-70634

TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read in the Dictionary compression revers

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-08-06 发布INFO

TimescaleDB 2.29.1 Out-of-Bounds Read DoS via Gorilla Compression Reverse Iterator

CVE-2026-70633

TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read vulnerability in the Gorilla compres

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-08-06 发布INFO

llama.cpp b5702–b7653 Out-of-Bounds Read Information Disclosure

CVE-2026-43630

llama.cpp builds b5702 through b7653 contain an out-of-bounds read vulnerability in the recurrent memory state restore p

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-08-06 发布INFO

H5Z__filter_fletcher32 in H5Zfletcher32.c in HDF5 through 2.3.0 computes the data length to checksum by subtracting the 4-byte trailing checksum size from the input buffer size ...

CVE-2026-19028

H5Z__filter_fletcher32 in H5Zfletcher32.c in HDF5 through 2.3.0 computes the data length to checksum by subtracting the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

The H5Z__nbit_decompress_one_byte, H5Z__nbit_decompress_one_nooptype, and H5Z__nbit_decompress_one_atomic functions in H5Znbit.c in HDF5 through 2.3.0 advance a read index into ...

CVE-2026-19027

The H5Z__nbit_decompress_one_byte, H5Z__nbit_decompress_one_nooptype, and H5Z__nbit_decompress_one_atomic functions in H

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-05 发布INFO

S2OPC 1.7.3 contains an out-of-bounds read in RepublishResponse handling. This allows a remote attacker to cause a denial of service

CVE-2026-67865

S2OPC 1.7.3 contains an out-of-bounds read in RepublishResponse handling. This allows a remote attacker to cause a denia

历史摘要 · 未重新核验 · NVD

安全公告2026-08-04 发布INFO

A flaw was found in SSSD. The extract_authtok_v1() function in the PAM responder does not...

CVE-2026-68743

A flaw was found in SSSD. The extract_authtok_v1() function in the PAM responder does not validate the auth_token_length

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-03 发布INFO

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.3, an out-of-bounds heap read could occur in the C response parser while building a...

CVE-2026-69244

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.3, an out-of-bounds heap r

历史摘要 · 未重新核验 · NVD

安全公告2026-08-03 发布INFO

AIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response)

CVE-2026-69244

### Summary An out-of-bounds heap read could occur in the C response parser while building an error message for a malfo

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-03 发布INFO

A flaw was found in SSSD. The sss_nss_protocol_parse_addr() function in the NSS responder does not validate the addrlen field against the remaining packet body size. A local att...

CVE-2026-68742

A flaw was found in SSSD. The sss_nss_protocol_parse_addr() function in the NSS responder does not validate the addrlen

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-03 发布INFO

A weakness has been identified in mz-automation libiec61850 up to 1.6.1. This issue affects the function checkDataSetAccess of the file src/iec61850/server/mms_mapping/mms_mappi...

CVE-2026-18583

A weakness has been identified in mz-automation libiec61850 up to 1.6.1. This issue affects the function checkDataSetAcc

历史摘要 · 未重新核验 · NVD

安全公告2026-08-03 发布INFO

In geniezone, there is a possible out of bounds read due to a missing bounds check. This could...

CVE-2026-20496

In geniezone, there is a possible out of bounds read due to a missing bounds check. This could lead to local information

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-03 发布INFO

In ccci, there is a possible out of bounds read due to a missing bounds check. This could lead to...

CVE-2026-20490

In ccci, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of servic

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-03 发布INFO

In display, there is a possible information disclosure due to an integer overflow. This could...

CVE-2026-20489

In display, there is a possible information disclosure due to an integer overflow. This could lead to local information

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-03 发布INFO

In wifi, there is a possible out of bounds read due to a missing bounds check. This could lead to...

CVE-2026-20494

In wifi, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disc

历史摘要 · 未重新核验 · GitHub Advisory