#cwe-125

共收录 1611 条相关情报。

漏洞预警2026-06-25 发布INFO

In EmberZNet v9.0.2 and earlier, malformed global ZCL messages can trigger out-of-bounds reads in framework parsing logic and terminate the process. These messages must come fro...

CVE-2026-4526

In EmberZNet v9.0.2 and earlier, malformed global ZCL messages can trigger out-of-bounds reads in framework parsing logi

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-06-25 发布INFO

In EmberZNet v9.0.2 and earlier, a malformed GetProfileResponse message can trigger out-of-bounds reads while iterating interval entries and terminate the process. These message...

CVE-2026-47154

In EmberZNet v9.0.2 and earlier, a malformed GetProfileResponse message can trigger out-of-bounds reads while iterating

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-06-25 发布INFO

In EmberZNet v9.0.2 and earlier, malformed or out-of-range Door Lock user identifiers can trigger out-of-bounds table reads and terminate the process. These messages must come f...

CVE-2026-47149

In EmberZNet v9.0.2 and earlier, malformed or out-of-range Door Lock user identifiers can trigger out-of-bounds table re

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-06-25 发布INFO

In EmberZNet v9.0.2 and earlier, malformed GetGroupMembership commands can trigger repeated reads past the end of the message payload and terminate the process. These messages m...

CVE-2026-47148

In EmberZNet v9.0.2 and earlier, malformed GetGroupMembership commands can trigger repeated reads past the end of the me

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-06-25 发布INFO

In EmberZNet v9.0.2 and earlier, malformed OTA requests can drive the OTA server parser into out-of-bounds reads. A limited amount of data from RAM is read back to the requester...

CVE-2026-47147

In EmberZNet v9.0.2 and earlier, malformed OTA requests can drive the OTA server parser into out-of-bounds reads. A limi

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-06-25 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list mlx5_query_nic_vport_mac_list() sizes its...

CVE-2026-53230

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_

来源摘录 · NVD

#cve #cwe-125 #cwe-787

漏洞预警2026-06-25 发布CRITICAL

In the Linux kernel, the following vulnerability has been resolved: sctp: validate embedded INIT chunk and address list lengths in cookie sctp_unpack_cookie() only checked tha...

CVE-2026-53224

In the Linux kernel, the following vulnerability has been resolved: sctp: validate embedded INIT chunk and address list

来源摘录 · NVD

#cve #cwe-125

安全公告2026-06-24 发布INFO

Out of bounds read and write in Blink>InterestGroups in Google Chrome prior to 149.0.7827.197...

CVE-2026-13033

Out of bounds read and write in Blink>InterestGroups in Google Chrome prior to 149.0.7827.197 allowed a remote attacker

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-125 #severity:high

漏洞预警2026-06-24 发布INFO

Out of bounds read and write in Blink>InterestGroups in Google Chrome prior to 149.0.7827.197 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chrom...

CVE-2026-13033

Out of bounds read and write in Blink>InterestGroups in Google Chrome prior to 149.0.7827.197 allowed a remote attacker

历史摘要 · 未重新核验 · NVD

#cve #cwe-125 #cwe-787

漏洞预警2026-06-24 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix OOB in pcpu_init_value An out-of-bounds read occurs when copying element from a BPF_MAP_TYPE_CGROU...

CVE-2026-53076

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix OOB in pcpu_init_value An out-of-bounds r

来源摘录 · NVD

#cve #cwe-125

漏洞预警2026-06-24 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() In __ceph_x_decrypt(), a part of the buff...

CVE-2026-52956

In the Linux kernel, the following vulnerability has been resolved: libceph: Fix potential out-of-bounds access in __ce

来源摘录 · NVD

#cve #cwe-125

漏洞预警2026-06-24 发布HIGH

ImageMagick before 7.1.2-19 contains an out-of-bounds access vulnerability in ConnectedComponentsImage() when processing connected-components artifacts with invalid indices. Att...

CVE-2026-56370

ImageMagick before 7.1.2-19 contains an out-of-bounds access vulnerability in ConnectedComponentsImage() when processing

来源摘录 · NVD

#cve #cwe-125

漏洞预警2026-06-24 发布INFO

An out-of-bounds heap read and integer underflow in the TCP urgent data handling (sosendoob) in freedesktop.org libslirp version before v4.9.2 on hypervisor host environments (e...

CVE-2026-9539

An out-of-bounds heap read and integer underflow in the TCP urgent data handling (sosendoob) in freedesktop.org libslirp

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-06-23 发布INFO

A flaw was found in GStreamer's gst-plugins-bad package. When processing a specially crafted H.264 video file containing malformed MVC or SVC extension slice NAL units, a 1-byte...

CVE-2026-12892

A flaw was found in GStreamer's gst-plugins-bad package. When processing a specially crafted H.264 video file containing

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-06-23 发布INFO

A flaw was found in the GStreamer gst-plugins-bad package. When processing a malformed H.266/VVC video stream with a crafted aspect ratio indicator value, the H.266 parser perfo...

CVE-2026-12891

A flaw was found in the GStreamer gst-plugins-bad package. When processing a malformed H.266/VVC video stream with a cra

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-06-23 发布LOW

A flaw was found in OpenSSH. This vulnerability, a heap out-of-bounds read, occurs during the cleanup of GSSAPI (Generic Security Service Application Programming Interface) indi...

CVE-2026-55654

CVE-2026-55654 是一个影响 OpenSSH 的堆越界读取漏洞，存在于 GSSAPI 认证指示器清理过程中。由于 auth-indicators 数组缺少尾部的 NULL 终止符，远程攻击者在特定配置下（涉及 GSSAPI 认证

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-06-23 发布MEDIUM

Zephyr's ext2 directory-entry parser does not fully validate on-disk directory entry structure before copying the entry name and advancing traversal state. In ext2_fetch_direntr...

CVE-2026-10645

CVE-2026-10645 是 Zephyr 实时操作系统 (RTOS) 文件系统模块中 ext2 目录项解析器的一个安全漏洞。漏洞位于 subsys/fs/ext2/ext2_diskops.c 文件的 ext2_fetch_diren

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-06-22 发布INFO

MessagePack for C# is a MessagePack serializer for C#. Prior to 2.5.301 and 3.1.7, MessagePackReader.ReadDateTime() can allocate stack memory based on an attacker-controlled Mes...

CVE-2026-48502

MessagePack for C# is a MessagePack serializer for C#. Prior to 2.5.301 and 3.1.7, MessagePackReader.ReadDateTime() can

历史摘要 · 未重新核验 · NVD

#cve #cwe-125 #cwe-190 #cwe-407 #cwe-409 #cwe-470

安全公告2026-06-21 发布INFO

ImageMagick before 7.1.2-15 and 6.9.x before 6.9.13-40 contains an integer overflow in the PSB ...

CVE-2026-56367

ImageMagick before 7.1.2-15 and 6.9.x before 6.9.13-40 contains an integer overflow in the PSB (PSD v2) RLE decoding pat

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-125 #severity:medium

安全公告2026-06-21 发布INFO

ImageMagick before 7.1.2-15 (and 6.x before 6.9.13-40) contains a heap out-of-bounds read in the...

CVE-2026-56378

ImageMagick before 7.1.2-15 (and 6.x before 6.9.13-40) contains a heap out-of-bounds read in the PCD coder's DecodeImage

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-125 #severity:medium