#cwe-125

共收录 1611 条相关情报。

漏洞预警2026-06-11 发布INFO

Out of bounds read in VideoCapture in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the GPU process to obtain potentially sensitive informa...

CVE-2026-12033

Out of bounds read in VideoCapture in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromise

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-06-11 发布INFO

Out of bounds read in Video in Google Chrome on ChromeOS prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to obtain potentially sensiti...

CVE-2026-12026

Out of bounds read in Video in Google Chrome on ChromeOS prior to 149.0.7827.115 allowed a remote attacker who had compr

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-06-11 发布INFO

Vim is an open source, command line text editor. Prior to version 9.2.0565, the update_snapshot() function in src/terminal.c copies the visible terminal screen into the scrollba...

CVE-2026-52859

Vim is an open source, command line text editor. Prior to version 9.2.0565, the update_snapshot() function in src/termin

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

安全公告2026-06-11 发布INFO

netty-incubator-codec-ohttp's Incorrect Native Pointer Derivation in Pooled Direct ByteBuf Fallback Leads to Out-of-Bounds Native Memory Access

CVE-2026-48040

The netty-incubator-codec-ohttp library implements Oblivious HTTP (RFC 9458) using BoringSSL's HPKE C library via JNI. W

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #maven #cwe-125 #severity:medium

漏洞预警2026-06-10 发布INFO

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-23, an attacker who can connect to a magick ...

CVE-2026-47166

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-

历史摘要 · 未重新核验 · NVD

#cve #cwe-125 #cwe-287

漏洞预警2026-06-10 发布INFO

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, when performing a polynomial distortion ...

CVE-2026-45624

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-

历史摘要 · 未重新核验 · NVD

#cve #cwe-125 #cwe-129

漏洞预警2026-06-10 发布INFO

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-22, an invalid connected-components:keep-top...

CVE-2026-45359

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-

历史摘要 · 未重新核验 · NVD

#cve #cwe-125 #cwe-129

漏洞预警2026-06-10 发布INFO

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, an off by one in the meta encoder could ...

CVE-2026-45358

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-

历史摘要 · 未重新核验 · NVD

#cve #cwe-125 #cwe-193

漏洞预警2026-06-10 发布INFO

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, when writing an IPTC output file a malic...

CVE-2026-42326

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-

历史摘要 · 未重新核验 · NVD

#cve #cwe-125 #cwe-191

漏洞预警2026-06-10 发布MEDIUM

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.2.6, 5.3.5, 5.4.4, 5.5.3, and 6.0, an out-of-bounds read exists in the BlueDroid AVRCP ven...

CVE-2026-46532

CVE-2026-46532 是 Espressif IoT 开发框架 (ESF-IDF) 中的一个越界读取漏洞，存在于 BlueDroid 蓝牙协议栈的 AVRCP 厂商命令解析器函数 avrc_pars_vendor_cmd() 中。该

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-06-10 发布INFO

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.5.4 and 6.0, several ESP-TEE secure-service wrappers in esp_secure_services.c and esp_secu...

CVE-2026-45329

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.5.4 and 6.0, several ESP-TEE secu

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-125 #cwe-200

漏洞预警2026-06-10 发布INFO

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.2.7, 5.3.5, 5.4.4, 5.5.4, and 6.0.1, an out-of-bounds read flaw exists in the DHCP server ...

CVE-2026-45160

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.2.7, 5.3.5, 5.4.4, 5.5.4, and 6.0

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-06-09 发布INFO

lldpd is an implementation of IEEE 802.1ab (LLDP). Prior to version 1.0.22, lldpd_decode() in src/daemon/lldpd.c strips 802.1Q VLAN tags from received Ethernet frames by calling...

CVE-2026-46433

lldpd is an implementation of IEEE 802.1ab (LLDP). Prior to version 1.0.22, lldpd_decode() in src/daemon/lldpd.c strips

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

安全公告2026-06-09 发布INFO