#cwe-125

共收录 1611 条相关情报。

← 返回所有主题
漏洞预警2026-07-27 发布INFO

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Parsing a maliciously craf...

CVE-2026-43747

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS So

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-27 发布INFO

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. Processing a maliciously crafted asset catalog may resul...

CVE-2026-43738

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-27 发布INFO

A flaw was found in the file-icns plugin in GIMP. When applying a decompressed mask during ICNS image processing, the plugin reads from the mask data buffer without verifying if...

CVE-2026-66759

A flaw was found in the file-icns plugin in GIMP. When applying a decompressed mask during ICNS image processing, the pl

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-27 发布INFO

facil.io 0.7.5 through 0.7.6 contains a denial-of-service vulnerability in the HTTP/1.1 chunked transfer encoding parser that allows unauthenticated remote attackers to crash th...

CVE-2026-66731

facil.io 0.7.5 through 0.7.6 contains a denial-of-service vulnerability in the HTTP/1.1 chunked transfer encoding parser

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-27 发布INFO

facil.io 0.6.0 through 0.7.6 contains an integer underflow vulnerability in the multipart MIME body parser that allows unauthenticated remote attackers to crash the server proce...

CVE-2026-66729

facil.io 0.6.0 through 0.7.6 contains an integer underflow vulnerability in the multipart MIME body parser that allows u

历史摘要 · 未重新核验 · NVD

安全公告2026-07-27 发布INFO

facil.io 0.7.5 - 0.7.6 HTTP/1.1 Chunked Transfer Encoding Parser Crash DoS

CVE-2026-66731

facil.io 0.7.5 through 0.7.6 contains a denial-of-service vulnerability in the HTTP/1.1 chunked transfer encoding parser

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-27 发布INFO

facil.io 0.6.0 - 0.7.6 Integer Underflow DoS via Multipart MIME Body Parser

CVE-2026-66729

facil.io 0.6.0 through 0.7.6 contains an integer underflow vulnerability in the multipart MIME body parser that allows u

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-07-27 发布INFO

Heap-based buffer overflow in the SOHM list-index deserialization code in HDF5 through 2.1.1 on all platforms allows attackers to cause a denial of service (crash) via a crafted...

CVE-2026-17572

Heap-based buffer overflow in the SOHM list-index deserialization code in HDF5 through 2.1.1 on all platforms allows att

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-27 发布INFO

A flaw was found in the GNU Binutils (Binary Utilities) linker. This vulnerability, a heap-buffer-overflow read (CWE-125), occurs when the linker processes a specially crafted 3...

CVE-2026-15003

A flaw was found in the GNU Binutils (Binary Utilities) linker. This vulnerability, a heap-buffer-overflow read (CWE-125

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-27 发布INFO

A vulnerability has been found in ggml-org whisper.cpp 1.8.4-58. This impacts the function log_mel_spectrogram of the file src/whisper.cpp. The manipulation leads to out-of-boun...

CVE-2026-17512

A vulnerability has been found in ggml-org whisper.cpp 1.8.4-58. This impacts the function log_mel_spectrogram of the fi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-27 发布INFO

Improper Validation of Specified Quantity in Input, Out-of-bounds Read vulnerability in Apache Thrift C++ bindings. This issue affects Apache Thrift: before 0.24.0. Users are ...

CVE-2026-58662

Improper Validation of Specified Quantity in Input, Out-of-bounds Read vulnerability in Apache Thrift C++ bindings. Thi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-27 发布INFO

Out-of-bounds Read vulnerability in Apache Thrift c_glib bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which f...

CVE-2026-58023

Out-of-bounds Read vulnerability in Apache Thrift c_glib bindings. This issue affects Apache Thrift: before 0.24.0. Us

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-25 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loop The IE parsing loop in OnAssocRsp() advances by (p...

CVE-2026-64444

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB read in OnAssocRsp() IE

来源摘录 · NVD

漏洞预警2026-07-25 发布CRITICAL

In the Linux kernel, the following vulnerability has been resolved: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page nvmet_execute_disc_get_log_page() val...

CVE-2026-64320

In the Linux kernel, the following vulnerability has been resolved: nvmet: fix pre-auth out-of-bounds heap read in Disc

来源摘录 · NVD

漏洞预警2026-07-25 发布CRITICAL

In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: validate reply message payload bounds against transfer length nvmet_auth_reply() accesses the v...

CVE-2026-64319

In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: validate reply message payload bounds a

来源摘录 · NVD

安全公告2026-07-25 发布INFO

A flaw was found in libsoup. An unsigned integer underflow in the...

CVE-2026-66337

A flaw was found in libsoup. An unsigned integer underflow in the soup_filter_input_stream_read_until() function causes

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-24 发布INFO

libssh2 through 1.11.1, fixed in commit a13bb6c, contains a missing bounds check vulnerability that allows a malicious SSH server to trigger an arbitrary-length heap out-of-boun...

CVE-2026-66034

libssh2 through 1.11.1, fixed in commit a13bb6c, contains a missing bounds check vulnerability that allows a malicious S

历史摘要 · 未重新核验 · NVD

安全公告2026-07-24 发布INFO

libssh2 Heap Out-of-Bounds Read via publickey subsystem

CVE-2026-66034

libssh2 through 1.11.1, fixed in commit a13bb6c, contains a missing bounds check vulnerability that allows a malicious S

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-23 发布INFO

PyTorch torchvision through 0.28.0, fixed in commit 4e05dc2, contains an out-of-bounds heap read...

CVE-2026-65918

PyTorch torchvision through 0.28.0, fixed in commit 4e05dc2, contains an out-of-bounds heap read vulnerability in the GI

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-23 发布INFO

A flaw was found in gdk-pixbuf. When parsing a specially crafted ICO file with pixel values that...

CVE-2026-16768

A flaw was found in gdk-pixbuf. When parsing a specially crafted ICO file with pixel values that exceed the defined pale

历史摘要 · 未重新核验 · GitHub Advisory