#cwe-125

共收录 1611 条相关情报。

← 返回所有主题
漏洞预警2026-06-30 发布HIGH

ImageMagick before 7.1.2-19 contains an off-by-one error in morphology validation allowing out-of-bounds heap buffer reads. Attackers can trigger heap buffer overflow by providi...

CVE-2026-56361

ImageMagick before 7.1.2-19 contains an off-by-one error in morphology validation allowing out-of-bounds heap buffer rea

来源摘录 · NVD

漏洞预警2026-06-30 发布INFO

Insufficient validation of untrusted input in CameraCapture in Google Chrome on ChromeOS prior to 150.0.7871.47 allowed a remote attacker to perform an out of bounds memory read...

CVE-2026-14090

Insufficient validation of untrusted input in CameraCapture in Google Chrome on ChromeOS prior to 150.0.7871.47 allowed

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-30 发布INFO

Out of bounds read in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a local attacker to obtain potentially sensitive information from process memory via malicious n...

CVE-2026-14063

Out of bounds read in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a local attacker to obtain potentially

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-30 发布INFO

Out of bounds read in SurfaceCapture in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium...

CVE-2026-14011

Out of bounds read in SurfaceCapture in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform an out

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-30 发布INFO

Out of bounds read in ANGLE in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive inf...

CVE-2026-13975

Out of bounds read in ANGLE in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who had compromised

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-30 发布INFO

Out of bounds read in Codecs in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML...

CVE-2026-13906

Out of bounds read in Codecs in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sen

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-30 发布INFO

Out of bounds read in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive infor...

CVE-2026-13890

Out of bounds read in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-30 发布INFO

Out of bounds read in Layout in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML...

CVE-2026-13873

Out of bounds read in Layout in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sen

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-30 发布INFO

Out of bounds read in FFmpeg in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted vide...

CVE-2026-13858

Out of bounds read in FFmpeg in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sen

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-30 发布INFO

Out of bounds read in Skia in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a craf...

CVE-2026-13820

Out of bounds read in Skia in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who had compromised

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-30 发布INFO

Out of bounds read in ANGLE in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory ...

CVE-2026-13819

Out of bounds read in ANGLE in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who had compromised

历史摘要 · 未重新核验 · NVD

安全公告2026-06-30 发布INFO

Open Babel has an out-of-bounds read in CIF transform3d::DescribeAsString

CVE-2026-2704

> ### Summary > > A memory-safety vulnerability in Open Babel's CIF file format parser > allowed an out-of-bounds read w

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-30 发布INFO

The Zephyr Bluetooth controller ISO Adaptation Layer (subsys/bluetooth/controller/ll_sw/isoal.c) fails to validate the length field of a framed ISO PDU start segment. Per the Bl...

CVE-2026-9263

The Zephyr Bluetooth controller ISO Adaptation Layer (subsys/bluetooth/controller/ll_sw/isoal.c) fails to validate the l

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-30 发布INFO

Zephyr's DNS resolver (subsys/net/lib/dns) parses resource records from DNS responses in dns_unpack_answer(), which validated only the fixed RR header (type, class, TTL, rdlengt...

CVE-2026-10652

Zephyr's DNS resolver (subsys/net/lib/dns) parses resource records from DNS responses in dns_unpack_answer(), which vali

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-30 发布INFO

Insufficient input validation in NetScaler ADC and NetScaler Gateway leading to memory overread if NetScaler ADC or NetScaler Gateway is configured as a SAML IDP

CVE-2026-8451

Insufficient input validation in NetScaler ADC and NetScaler Gateway leading to memory overread if NetScaler ADC or NetS

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-30 发布HIGH

A flaw was found in GLib. An out-of-bounds read of only 2 bytes can occur in the g_date_time_get_ymd function in the glib/gdatetime.c file when an invalid GDateTime object produ...

CVE-2026-58011

A flaw was found in GLib. An out-of-bounds read of only 2 bytes can occur in the g_date_time_get_ymd function in the gli

来源摘录 · NVD

漏洞预警2026-06-30 发布INFO

Insufficient input validation leading to memory overread in NetScaler ADC and NetScaler Gateway if the TCP TimeStamp is enabled in TCP Profile and is associated with the virtual...

CVE-2026-10817

Insufficient input validation leading to memory overread in NetScaler ADC and NetScaler Gateway if the TCP TimeStamp is

历史摘要 · 未重新核验 · NVD

安全公告2026-06-29 发布INFO

JavaScript::Minifier::XS versions before 0.16 for Perl crash with a NULL pointer dereference when...

CVE-2026-56017

JavaScript::Minifier::XS versions before 0.16 for Perl crash with a NULL pointer dereference when the first meaningful t

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-29 发布INFO

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS...

CVE-2026-43712

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-29 发布INFO

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in...

CVE-2026-43676

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 26.5.2, iOS 26.

历史摘要 · 未重新核验 · GitHub Advisory