#cwe-125

共收录 1611 条相关情报。

← 返回所有主题
漏洞预警2026-06-21 发布HIGH

ImageMagick before 7.1.2-15 (and 6.x before 6.9.13-40) contains a heap out-of-bounds read in the PCD coder's DecodeImage loop. A crafted PCD file can trigger a one-byte heap out...

CVE-2026-56378

ImageMagick before 7.1.2-15 (and 6.x before 6.9.13-40) contains a heap out-of-bounds read in the PCD coder's DecodeImage

来源摘录 · NVD

漏洞预警2026-06-21 发布INFO

ImageMagick before 7.1.2-15 and 6.9.x before 6.9.13-40 contains an integer overflow in the PSB (PSD v2) RLE decoding path (ReadPSDChannelRLE in coders/psd.c) that causes a heap ...

CVE-2026-56367

ImageMagick before 7.1.2-15 and 6.9.x before 6.9.13-40 contains an integer overflow in the PSB (PSD v2) RLE decoding pat

历史摘要 · 未重新核验 · NVD

安全公告2026-06-20 发布INFO

Crypt::OpenSSL::PKCS12 versions before 1.96 for Perl permits a heap OOB read in print_attribute...

CVE-2026-9265

Crypt::OpenSSL::PKCS12 versions before 1.96 for Perl permits a heap OOB read in print_attribute UTF8STRING path. print_

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-20 发布HIGH

Crypt::OpenSSL::PKCS12 versions before 1.96 for Perl permits a heap OOB read in print_attribute UTF8STRING path. print_attribute() copies a UTF8STRING ASN.1 attribute value int...

CVE-2026-9265

CVE-2026-9265 是 Perl 的 Crypt::OpenSSL::PKCS12 模块中的一个堆越界读取漏洞,影响版本 1.96 之前。漏洞位于 print_attribute 函数处理 UTF8STRING ASN.1 属性时:

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-19 发布INFO

libheif is a HEIF and AVIF file format decoder and encoder. Prior to version 1.22.1, the uncompressed HEIF decoder validates explicit icef compressed-unit offsets using unit_off...

CVE-2026-49271

libheif is a HEIF and AVIF file format decoder and encoder. Prior to version 1.22.1, the uncompressed HEIF decoder valid

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-19 发布INFO

A heap-buffer-overflow read vulnerability was found in libaom, the reference AV1 codec implementation. A missing bounds check in the SVC (Scalable Video Coding) layer ID control...

CVE-2026-56210

A heap-buffer-overflow read vulnerability was found in libaom, the reference AV1 codec implementation. A missing bounds

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-19 发布INFO

There is an out-of-bounds read vulnerability in the NI grpc-device streaming API due to a missing bounds check that may result in a denial of service. Successful exploitation re...

CVE-2026-48138

There is an out-of-bounds read vulnerability in the NI grpc-device streaming API due to a missing bounds check that may

历史摘要 · 未重新核验 · NVD

安全公告2026-06-18 发布INFO

OpenBSD before commit 6a23123 (2026-06-18) contains an out-of-bounds read vulnerability in the...

CVE-2026-56099

OpenBSD before commit 6a23123 (2026-06-18) contains an out-of-bounds read vulnerability in the mpls_do_error function wi

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-18 发布INFO

libssh2 through 1.11.1, fixed in commit 2dae302, contains an out-of-bounds heap read...

CVE-2025-15661

libssh2 through 1.11.1, fixed in commit 2dae302, contains an out-of-bounds heap read vulnerability in the sftp_symlink()

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-18 发布INFO

libssh2 through 1.11.1, fixed in commit 2dae302, contains an out-of-bounds heap read vulnerability in the sftp_symlink() function in src/sftp.c that allows a malicious SSH serve...

CVE-2025-15661

libssh2 through 1.11.1, fixed in commit 2dae302, contains an out-of-bounds heap read vulnerability in the sftp_symlink()

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-18 发布INFO

OpenBSD before commit 6a23123 (2026-06-18) contains an out-of-bounds read vulnerability in the mpls_do_error function within sys/netmpls/mpls_input.c that allows remote attacker...

CVE-2026-56099

OpenBSD before commit 6a23123 (2026-06-18) contains an out-of-bounds read vulnerability in the mpls_do_error function wi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-18 发布INFO

8cc is vulnerable to an Out‑of‑Bounds Read due to improper handling of #line directives and GNU linemarkers. The compiler accepts attacker-controlled filename and line number me...

CVE-2026-50643

8cc is vulnerable to an Out‑of‑Bounds Read due to improper handling of #line directives and GNU linemarkers. The compile

历史摘要 · 未重新核验 · NVD

安全公告2026-06-17 发布INFO

Out-of-bounds Read vulnerability in RTI Connext Professional (Core Libraries) allows Overread...

CVE-2026-3894

Out-of-bounds Read vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers.This issue affects

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-17 发布INFO

Out-of-bounds Read vulnerability in RTI Connext Micro (Core Libraries) allows Overread Buffers...

CVE-2026-30802

Out-of-bounds Read vulnerability in RTI Connext Micro (Core Libraries) allows Overread Buffers.This issue affects Connex

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-17 发布INFO

NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_charset_module module. When...

CVE-2026-48142

NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_charset_module module. When content is served or p

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-16 发布INFO

A flaw was found in libXpm. A local user with low privileges could exploit an Out-of-Bounds Read...

CVE-2026-4367

A flaw was found in libXpm. A local user with low privileges could exploit an Out-of-Bounds Read vulnerability in the `x

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-16 发布INFO

DNG SDK versions 1.7.1 2536 and earlier are affected by an out-of-bounds read vulnerability that...

CVE-2026-47963

DNG SDK versions 1.7.1 2536 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosur

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-16 发布INFO

A flaw was found in libXpm. A local user with low privileges could exploit an Out-of-Bounds Read vulnerability in the `xpmNextWord()` function by processing a specially crafted ...

CVE-2026-4367

A flaw was found in libXpm. A local user with low privileges could exploit an Out-of-Bounds Read vulnerability in the `x

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-16 发布INFO

DNG SDK versions 1.7.1 2536 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vu...

CVE-2026-47963

DNG SDK versions 1.7.1 2536 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosur

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-16 发布INFO

DNG SDK versions 1.7.1 2536 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vu...

CVE-2026-47934

DNG SDK versions 1.7.1 2536 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosur

历史摘要 · 未重新核验 · NVD