#cwe-125

共收录 1611 条相关情报。

← 返回所有主题
漏洞预警2026-05-21 发布INFO

An out-of-bounds read in ASP session ID handling in Netatalk 1.3 through 4.4.2 allows an adjacent network attacker to obtain limited information or cause a denial of service via...

CVE-2026-44064

An out-of-bounds read in ASP session ID handling in Netatalk 1.3 through 4.4.2 allows an adjacent network attacker to ob

历史摘要 · 未重新核验 · NVD

安全公告2026-05-20 发布INFO

Out of bounds read in GPU in Google Chrome on prior to 148.0.7778.179 allowed a remote attacker...

CVE-2026-9121

Out of bounds read in GPU in Google Chrome on prior to 148.0.7778.179 allowed a remote attacker to potentially exploit h

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-20 发布INFO

Out of bounds read in GPU in Google Chrome on Mac prior to 148.0.7778.179 allowed a remote...

CVE-2026-9122

Out of bounds read in GPU in Google Chrome on Mac prior to 148.0.7778.179 allowed a remote attacker to obtain potentiall

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-20 发布INFO

Out of bounds read in GPU in Google Chrome on Mac prior to 148.0.7778.179 allowed a remote...

CVE-2026-9113

Out of bounds read in GPU in Google Chrome on Mac prior to 148.0.7778.179 allowed a remote attacker to perform an out of

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-20 发布INFO

Out of bounds read in GPU in Google Chrome on Mac prior to 148.0.7778.179 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted...

CVE-2026-9122

Out of bounds read in GPU in Google Chrome on Mac prior to 148.0.7778.179 allowed a remote attacker to obtain potentiall

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-20 发布INFO

Out of bounds read in GPU in Google Chrome on prior to 148.0.7778.179 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium securit...

CVE-2026-9121

Out of bounds read in GPU in Google Chrome on prior to 148.0.7778.179 allowed a remote attacker to potentially exploit h

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-20 发布INFO

Out of bounds read in GPU in Google Chrome on Mac prior to 148.0.7778.179 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium se...

CVE-2026-9113

Out of bounds read in GPU in Google Chrome on Mac prior to 148.0.7778.179 allowed a remote attacker to perform an out of

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-20 发布INFO

Multiple flaws have been identified in `named` related to the handling of DNS messages whose CLASS is not Internet (`IN`) — for example, `CHAOS` or `HESIOD`, or DNS messages tha...

CVE-2026-5946

Multiple flaws have been identified in `named` related to the handling of DNS messages whose CLASS is not Internet (`IN`

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-20 发布INFO

NLnet Labs Unbound 1.6.2 up to and including version 1.25.0 has a denial of service vulnerability when compiled with DNSCrypt support ('--enable-dnscrypt'). A bad DNSCrypt query...

CVE-2026-32792

NLnet Labs Unbound 1.6.2 up to and including version 1.25.0 has a denial of service vulnerability when compiled with DNS

历史摘要 · 未重新核验 · NVD

安全公告2026-05-20 发布INFO

NVIDIA Triton Inference Server contains a vulnerability in the DALI backend where an attacker...

CVE-2026-24213

NVIDIA Triton Inference Server contains a vulnerability in the DALI backend where an attacker could cause an out-of-boun

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-20 发布INFO

NVIDIA Triton Inference Server contains a vulnerability in the DALI backend where an attacker could cause an out-of-bounds read. A successful exploit of this vulnerability might...

CVE-2026-24213

NVIDIA Triton Inference Server contains a vulnerability in the DALI backend where an attacker could cause an out-of-boun

历史摘要 · 未重新核验 · NVD

安全公告2026-05-20 发布INFO

Rsync version 3.4.2 and prior contain a receiver-side out-of-bounds array read vulnerability in...

CVE-2026-43620

Rsync version 3.4.2 and prior contain a receiver-side out-of-bounds array read vulnerability in recv_files() in receiver

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-20 发布INFO

Rsync version 3.4.2 and prior contain an integer overflow vulnerability in the compressed-token...

CVE-2026-43618

Rsync version 3.4.2 and prior contain an integer overflow vulnerability in the compressed-token decoder where a 32-bit s

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-20 发布INFO

Rsync version 3.4.2 and prior contain a receiver-side out-of-bounds array read vulnerability in recv_files() in receiver.c that allows a malicious rsync server to crash the rsyn...

CVE-2026-43620

Rsync version 3.4.2 and prior contain a receiver-side out-of-bounds array read vulnerability in recv_files() in receiver

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-20 发布INFO

Rsync version 3.4.2 and prior contain an integer overflow vulnerability in the compressed-token decoder where a 32-bit signed counter is not checked for overflow, allowing a mal...

CVE-2026-43618

Rsync version 3.4.2 and prior contain an integer overflow vulnerability in the compressed-token decoder where a 32-bit s

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-19 发布INFO

libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.21.2 and prior contain a heap buffer over-read in HeifPixelImage::overlay() in libheif/pixelimage.cc. When...

CVE-2026-32882

libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.21.2 and prior contain a heap buffer over-read in

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-19 发布INFO

Kitty is a cross-platform GPU based terminal. In versions 0.46.2 and below, the handle_compose_command() function in kitty/graphics.c performs bounds validation on composition o...

CVE-2026-33642

Kitty is a cross-platform GPU based terminal. In versions 0.46.2 and below, the handle_compose_command() function in kit

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-19 发布INFO

libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and below, a crafted 792-byte HEIF sequence file with samples_per_chunk=0 in the stsc box causes a...

CVE-2026-32738

libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and below, a crafted 792-byte HEIF sequen

历史摘要 · 未重新核验 · NVD

安全公告2026-05-18 发布INFO

ImageMagick: Heap Buffer Over-Read of a 4 bytes in distort operation.

CVE-2026-45624

When performing a polynomial distortion an out of bounds over-read of 24 bytes can occur when specifying specific argume

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-18 发布INFO

OpenTelemetry eBPF Instrumentation: CPU-mismatch fallback uses 256-byte buffer with 8KB size

CVE-2026-45681

### Summary The per-CPU message-buffer fallback path uses a 256-byte backup buffer but preserves the original payload s

历史摘要 · 未重新核验 · GitHub Advisory