#cwe-125

共收录 1565 条相关情报。

← 返回所有主题
漏洞预警2026-10-23 发布HIGH

A flaw was found in the iscsiuio component of open-iscsi. The DHCPv4 option parser incorrectly calculates the length of the options data, causing it to read beyond the allocated...

CVE-2026-115484

A flaw was found in the iscsiuio component of open-iscsi. The DHCPv4 option parser incorrectly calculates the length of

来源摘录 · NVD

安全公告2026-10-22 发布INFO

Electron: Frame subscription trusts GPU-supplied frame geometry

CVE-2026-114122

### Impact Frame data received from the GPU process for `webContents.beginFrameSubscription` was not fully validated by

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-22 发布INFO

Electron: Off-screen rendering on macOS trusts GPU-supplied frame geometry

CVE-2026-114124

### Impact In offscreen rendering mode on macOS, frame data received from the GPU process was not fully validated by the

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-21 发布HIGH

Pillow is a Python imaging library. Prior to 13.0.0 on Windows, src/PIL/WmfImagePlugin.py passes unchecked 32-bit WMF or EMF dimensions to the native drawwmf handler in src/disp...

CVE-2026-96644

Pillow is a Python imaging library. Prior to 13.0.0 on Windows, src/PIL/WmfImagePlugin.py passes unchecked 32-bit WMF or

来源摘录 · NVD

漏洞预警2026-10-21 发布CRITICAL

Pillow is a Python imaging library. From 11.0.0 until 13.0.0, multi-frame loaders can retain an ImagingCore allocation created for a narrow frame mode while a later frame of the...

CVE-2026-96639

Pillow is a Python imaging library. From 11.0.0 until 13.0.0, multi-frame loaders can retain an ImagingCore allocation c

来源摘录 · NVD

安全公告2026-10-21 发布INFO

Pillow multi-frame loaders can reuse stale native image storage after mode transitions

CVE-2026-96639

Pillow is a Python imaging library. From 11.0.0 until 13.0.0, multi-frame loaders can retain an ImagingCore allocation c

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-21 发布INFO

Pillow: Heap over-read in WMF/EMF rendering via 16-bit dimension truncation (Windows builds)

CVE-2026-96644

Pillow is a Python imaging library. Prior to 13.0.0 on Windows, src/PIL/WmfImagePlugin.py passes unchecked 32-bit WMF or

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-10-21 发布INFO

The Bluetooth Classic A2DP host stores a codec Information Element (IE) in struct bt_a2dp_codec_ie, a one-byte len field plus a fixed 8-byte codec_ie[] array. When an AVDTP peer...

CVE-2026-18748

The Bluetooth Classic A2DP host stores a codec Information Element (IE) in struct bt_a2dp_codec_ie, a one-byte len field

历史摘要 · 未重新核验 · NVD

安全公告2026-10-21 发布INFO

Out-of-bounds read in Bluetooth Classic A2DP codec information element handling

CVE-2026-18748

The Bluetooth Classic A2DP host stores a codec Information Element (IE) in struct bt_a2dp_codec_ie, a one-byte len field

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-10-21 发布INFO

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.6, 43.7.3, 44.4.3, and 45.0.0-alpha.9, frame data...

CVE-2026-114124

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to version

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-21 发布HIGH

Out-of-bounds read in NTS extension field parsing in NTPsec ntpd 1.1.4 through 1.2.5 allows a remote attacker to crash the daemon via an NTS Authenticator and Encrypted Extensio...

CVE-2026-102486

Out-of-bounds read in NTS extension field parsing in NTPsec ntpd 1.1.4 through 1.2.5 allows a remote attacker to crash t

来源摘录 · NVD

漏洞预警2026-10-21 发布MEDIUM

Out-of-bounds read in the Motorola Oncore refclock driver in NTPsec ntpd before 1.2.6 allows an attacker who controls the GPS receiver's serial data to crash ntpd or disclose me...

CVE-2026-102485

Out-of-bounds read in the Motorola Oncore refclock driver in NTPsec ntpd before 1.2.6 allows an attacker who controls th

来源摘录 · NVD

漏洞预警2026-10-21 发布HIGH

An out-of-bounds read vulnerability exists in the streaming RPC client of Apache bRPC (versions 1.11.0 through  1.17.0) on all platforms. A client that creates multiple streams ...

CVE-2026-79704

An out-of-bounds read vulnerability exists in the streaming RPC client of Apache bRPC (versions 1.11.0 through  1.17.0)

来源摘录 · NVD

漏洞预警2026-10-21 发布HIGH

Out-of-bounds reads in URL parsing and case-insensitive header lookup in Apache bRPC before version 1.18.0 on platforms where plain char is unsigned, such as ARM64, allow remote...

CVE-2026-61916

Out-of-bounds reads in URL parsing and case-insensitive header lookup in Apache bRPC before version 1.18.0 on platforms

来源摘录 · NVD

漏洞预警2026-10-21 发布MEDIUM

A flaw was found in libmodulemd. In the module stream v2 rpm-map emission path, an inner loop incorrectly uses the count of digest algorithms as its bound instead of the number ...

CVE-2026-92824

A flaw was found in libmodulemd. In the module stream v2 rpm-map emission path, an inner loop incorrectly uses the count

来源摘录 · NVD

安全公告2026-10-21 发布INFO

FreeRDP before 3.32.1 on Windows contains a heap out-of-bounds read in...

CVE-2026-114041

FreeRDP before 3.32.1 on Windows contains a heap out-of-bounds read in client_cli_present_gateway_message that passes a

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-21 发布INFO

FreeRDP before 3.32.1 contains a heap out-of-bounds read vulnerability in the Android client that...

CVE-2026-114044

FreeRDP before 3.32.1 contains a heap out-of-bounds read vulnerability in the Android client that allows malicious RDP s

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-21 发布INFO

FreeRDP before 3.32.1 contains a heap-based out-of-bounds read in WinPR's clipboard PNG-to-CF_DIB...

CVE-2026-114043

FreeRDP before 3.32.1 contains a heap-based out-of-bounds read in WinPR's clipboard PNG-to-CF_DIB synthesis because winp

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-21 发布INFO

A flaw was found in device-mapper-multipath. A local user can trigger an out-of-bounds read by...

CVE-2026-114038

A flaw was found in device-mapper-multipath. A local user can trigger an out-of-bounds read by sending a command with a

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-21 发布MEDIUM

FreeRDP before 3.32.1 contains a heap out-of-bounds read vulnerability in the Android client that allows malicious RDP servers to read beyond surface buffers by supplying unvali...

CVE-2026-114044

FreeRDP before 3.32.1 contains a heap out-of-bounds read vulnerability in the Android client that allows malicious RDP s

来源摘录 · NVD