#cwe-125
共收录 1565 条相关情报。
← 返回所有主题 漏洞预警2026-10-23 发布HIGH
CVE-2026-115484
A flaw was found in the iscsiuio component of open-iscsi. The DHCPv4 option parser incorrectly calculates the length of
来源摘录 · NVD
安全公告2026-10-22 发布INFO
CVE-2026-114122
### Impact
Frame data received from the GPU process for `webContents.beginFrameSubscription` was not fully validated by
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-10-22 发布INFO
CVE-2026-114124
### Impact
In offscreen rendering mode on macOS, frame data received from the GPU process was not fully validated by the
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-10-21 发布HIGH
CVE-2026-96644
Pillow is a Python imaging library. Prior to 13.0.0 on Windows, src/PIL/WmfImagePlugin.py passes unchecked 32-bit WMF or
来源摘录 · NVD
漏洞预警2026-10-21 发布CRITICAL
CVE-2026-96639
Pillow is a Python imaging library. From 11.0.0 until 13.0.0, multi-frame loaders can retain an ImagingCore allocation c
来源摘录 · NVD
安全公告2026-10-21 发布INFO
CVE-2026-96639
Pillow is a Python imaging library. From 11.0.0 until 13.0.0, multi-frame loaders can retain an ImagingCore allocation c
历史摘要 · 未重新核验 · OSV.dev
安全公告2026-10-21 发布INFO
CVE-2026-96644
Pillow is a Python imaging library. Prior to 13.0.0 on Windows, src/PIL/WmfImagePlugin.py passes unchecked 32-bit WMF or
历史摘要 · 未重新核验 · OSV.dev
漏洞预警2026-10-21 发布INFO
CVE-2026-18748
The Bluetooth Classic A2DP host stores a codec Information Element (IE) in struct bt_a2dp_codec_ie, a one-byte len field
历史摘要 · 未重新核验 · NVD
安全公告2026-10-21 发布INFO
CVE-2026-18748
The Bluetooth Classic A2DP host stores a codec Information Element (IE) in struct bt_a2dp_codec_ie, a one-byte len field
历史摘要 · 未重新核验 · OSV.dev
漏洞预警2026-10-21 发布INFO
CVE-2026-114124
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to version
历史摘要 · 未重新核验 · NVD
漏洞预警2026-10-21 发布HIGH
CVE-2026-102486
Out-of-bounds read in NTS extension field parsing in NTPsec ntpd 1.1.4 through 1.2.5 allows a remote attacker to crash t
来源摘录 · NVD
漏洞预警2026-10-21 发布MEDIUM
CVE-2026-102485
Out-of-bounds read in the Motorola Oncore refclock driver in NTPsec ntpd before 1.2.6 allows an attacker who controls th
来源摘录 · NVD
漏洞预警2026-10-21 发布HIGH
CVE-2026-79704
An out-of-bounds read vulnerability exists in the streaming RPC client of Apache bRPC (versions 1.11.0 through 1.17.0)
来源摘录 · NVD
漏洞预警2026-10-21 发布HIGH
CVE-2026-61916
Out-of-bounds reads in URL parsing and case-insensitive header lookup in Apache bRPC before version 1.18.0 on platforms
来源摘录 · NVD
漏洞预警2026-10-21 发布MEDIUM
CVE-2026-92824
A flaw was found in libmodulemd. In the module stream v2 rpm-map emission path, an inner loop incorrectly uses the count
来源摘录 · NVD
安全公告2026-10-21 发布INFO
CVE-2026-114041
FreeRDP before 3.32.1 on Windows contains a heap out-of-bounds read in client_cli_present_gateway_message that passes a
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-10-21 发布INFO
CVE-2026-114044
FreeRDP before 3.32.1 contains a heap out-of-bounds read vulnerability in the Android client that allows malicious RDP s
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-10-21 发布INFO
CVE-2026-114043
FreeRDP before 3.32.1 contains a heap-based out-of-bounds read in WinPR's clipboard PNG-to-CF_DIB synthesis because winp
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-10-21 发布INFO
CVE-2026-114038
A flaw was found in device-mapper-multipath. A local user can trigger an out-of-bounds read by sending a command with a
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-10-21 发布MEDIUM
CVE-2026-114044
FreeRDP before 3.32.1 contains a heap out-of-bounds read vulnerability in the Android client that allows malicious RDP s
来源摘录 · NVD