#cwe-125

共收录 1611 条相关情报。

← 返回所有主题
漏洞预警2026-07-08 发布MEDIUM

ImageMagick before 7.1.2-15 contains a heap-buffer-overflow read vulnerability in GetPixelIndex caused by OpenPixelCache updating image channel metadata before pixel cache memor...

CVE-2026-56362

ImageMagick before 7.1.2-15 contains a heap-buffer-overflow read vulnerability in GetPixelIndex caused by OpenPixelCache

来源摘录 · NVD

安全公告2026-07-08 发布INFO

ImageMagick - Heap Buffer Overflow in FTXT Encoder via format Parameter

CVE-2026-56374

ImageMagick before 7.1.2-19 contains a heap buffer overflow vulnerability in the FTXT encoder due to missing boundary ch

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-08 发布INFO

ImageMagick - Heap-buffer-overflow Read in GetPixelIndex via OpenPixelCache Metadata Desynchronization

CVE-2026-56362

ImageMagick before 7.1.2-15 contains a heap-buffer-overflow read vulnerability in GetPixelIndex caused by OpenPixelCache

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-07-08 发布INFO

The PRC file header parsing logic trusts the constructed file structure description information, assumes that the underlying array contains elements and reads them, leading to o...

CVE-2026-57258

The PRC file header parsing logic trusts the constructed file structure description information, assumes that the underl

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-08 发布INFO

During the PRC parsing stage, there is a lack of boundary verification for the PRC entity index, which leads to an out-of-bounds read of the entity array. As a result, the appli...

CVE-2026-57257

During the PRC parsing stage, there is a lack of boundary verification for the PRC entity index, which leads to an out-o

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-08 发布INFO

The application opens a PDF containing an abnormal color space whose attributes reference a valid but semantically malformed function. The function's output is not validated; wh...

CVE-2026-57255

The application opens a PDF containing an abnormal color space whose attributes reference a valid but semantically malfo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-08 发布INFO

An abnormal image object causes the renderer to enter the wrong processing branch. When converting the scan lines, an invalid image buffer pointer is used, resulting in the appl...

CVE-2026-57253

An abnormal image object causes the renderer to enter the wrong processing branch. When converting the scan lines, an in

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-08 发布INFO

During the process of page opening and form formatting, a JavaScript reentrancy results in an inconsistent document status. Subsequently, with outdated page information, the app...

CVE-2026-57243

During the process of page opening and form formatting, a JavaScript reentrancy results in an inconsistent document stat

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-08 发布INFO

The application opens the PDF, and JavaScript performs operations on the page and the document, causing the page-related objects within the application to lose synchronization; ...

CVE-2026-57241

The application opens the PDF, and JavaScript performs operations on the page and the document, causing the page-related

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-07 发布INFO

An out-of-bounds read vulnerability exists in FreeType 2.14.3 and versions before commit 5a280ecde6f324de0d226261036e736e0cb49a71 in src/truetype/ttgxvar.c, in the TT_Get_Var_De...

CVE-2026-50811

An out-of-bounds read vulnerability exists in FreeType 2.14.3 and versions before commit 5a280ecde6f324de0d226261036e736

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-07 发布INFO

DBI versions before 1.650 for Perl read one byte out-of-bounds in preparse when deleting an initial SQL comment. The preparse method normalises SQL and removes comments. When t...

CVE-2026-14740

DBI versions before 1.650 for Perl read one byte out-of-bounds in preparse when deleting an initial SQL comment. The pr

历史摘要 · 未重新核验 · NVD

安全公告2026-07-07 发布INFO

DBI versions before 1.650 for Perl read one byte out-of-bounds in preparse when deleting an initial SQL comment

CVE-2026-14740

DBI versions before 1.650 for Perl read one byte out-of-bounds in preparse when deleting an initial SQL comment. The pr

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-07 发布INFO

GNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buffer underread vulnerability...

CVE-2026-58469

GNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buffer underread vulnerability in the clean_metalink_s

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-07 发布INFO

GNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buffer underread vulnerability in the clean_metalink_string() function within src/metalink.c that allows a mali...

CVE-2026-58469

GNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buffer underread vulnerability in the clean_metalink_s

历史摘要 · 未重新核验 · NVD

安全公告2026-07-07 发布INFO

GNU Wget 1.25.0 Heap Buffer Underread via Metalink URL Parsing

CVE-2026-58469

GNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buffer underread vulnerability in the clean_metalink_s

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-07-06 发布INFO

Imager versions before 1.032 for Perl have a heap out-of-bounds read in the bundled Imager::File::SGI reader via a 16-bit RLE literal run in read_rgb_16_rle. read_rgb_16_rle gu...

CVE-2026-13705

Imager versions before 1.032 for Perl have a heap out-of-bounds read in the bundled Imager::File::SGI reader via a 16-bi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-05 发布INFO

Zephyr's DNS resolver detects mDNS (.local) queries in dns_resolve_name_internal() (subsys/net/lib/dns/resolve.c) with memcmp(strrchr(query, '.'), ".local", 7), which always rea...

CVE-2026-10657

Zephyr's DNS resolver detects mDNS (.local) queries in dns_resolve_name_internal() (subsys/net/lib/dns/resolve.c) with m

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-04 发布INFO

A weakness has been identified in onnx up to 1.21.x. This vulnerability affects the function convPoolShapeInference_opset19 of the file onnx/defs/nn/old.cc of the component onnx...

CVE-2026-14647

A weakness has been identified in onnx up to 1.21.x. This vulnerability affects the function convPoolShapeInference_opse

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-03 发布INFO

Net::IP::LPM versions through 1.10 for Perl allow a heap out-of-bounds read via an unbounded prefix length. add() passes the prefix string to the trie builder addPrefixToTrie()...

CVE-2026-56015

Net::IP::LPM versions through 1.10 for Perl allow a heap out-of-bounds read via an unbounded prefix length. add() passe

历史摘要 · 未重新核验 · NVD

安全公告2026-07-02 发布INFO

Out of bounds read in Dawn in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to...

CVE-2026-14416

Out of bounds read in Dawn in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sa

历史摘要 · 未重新核验 · GitHub Advisory