#cwe-125

共收录 1611 条相关情报。

← 返回所有主题
漏洞预警2026-05-05 发布INFO

In Eclipse Open9J versions 0.21 to 0.58, a pre-authentication remote attacker can crash JITServer by sending a 32-byte crafted TCP message.

CVE-2026-6918

In Eclipse Open9J versions 0.21 to 0.58, a pre-authentication remote attacker can crash JITServer by sending a 32-byte c

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

An out-of-bounds read in the ParseIP6Extended function (/bgp/bgp.go) of gobgp v4.3.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted BGP UPDATE message.

CVE-2026-37461

An out-of-bounds read in the ParseIP6Extended function (/bgp/bgp.go) of gobgp v4.3.0 allows attackers to cause a Denial

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXConverter.cpp, FBXConverter::ConvertMeshMultiMaterial() components

CVE-2025-70072

An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXConverter.cpp, FBXConverter:

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

Improper Null Termination, Out-of-bounds Read vulnerability in Apache HTTP Server. This issue affects Apache HTTP Server: through 2.4.66. Users are recommended to upgrade to v...

CVE-2026-34032

Improper Null Termination, Out-of-bounds Read vulnerability in Apache HTTP Server. This issue affects Apache HTTP Serve

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

Out-of-bounds Read vulnerability in mod_proxy_ajp of Apache HTTP Server. This issue affects Apache HTTP Server: through 2.4.66. Users are recommended to upgrade to version 2...

CVE-2026-33857

Out-of-bounds Read vulnerability in mod_proxy_ajp of Apache HTTP Server. This issue affects Apache HTTP Server: throu

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

Ollama before 0.17.1 contains a heap out-of-bounds read vulnerability in the GGUF model loader. The /api/create endpoint accepts an attacker-supplied GGUF file in which the decl...

CVE-2026-7482

Ollama before 0.17.1 contains a heap out-of-bounds read vulnerability in the GGUF model loader. The /api/create endpoint

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

A vulnerability was identified in osrg GoBGP up to 4.3.0. Affected by this issue is the function BMPPeerUpNotification.ParseBody/BMPStatisticsReport.ParseBody of the file pkg/pa...

CVE-2026-7737

A vulnerability was identified in osrg GoBGP up to 4.3.0. Affected by this issue is the function BMPPeerUpNotification.P

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

In geniezone, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtain...

CVE-2026-20447

In geniezone, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escala

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-02 发布HIGH

A vulnerability was identified in MikroTik RouterOS 6.49.8. This vulnerability affects the function ASN1_STRING_data in the library nova/lib/www/scep.p of the component SCEP End...

CVE-2026-7668

CVE-2026-7668 是影响 MikroTik RouterOS 6.49.8 版本的一个越界读取漏洞。该漏洞位于 SCEP(简单证书注册协议)端点组件中,具体涉及函数 ASN1_STRING_data。攻击者可以通过操纵 SCEP

历史摘要 · 未重新核验 · NVD

安全公告2026-05-01 发布INFO

An unprivileged attacker can craft a user-space process with a malicious ELF binary containing an...

CVE-2026-35233

An unprivileged attacker can craft a user-space process with a malicious ELF binary containing an out-of-range sh_link f

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

Open CASCADE Technology (OCCT) V8_0_0_rc5 contains multiple vulnerabilities in its IGES and STEP...

CVE-2026-42481

Open CASCADE Technology (OCCT) V8_0_0_rc5 contains multiple vulnerabilities in its IGES and STEP file parsers that can b

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

openxc/isotp-c thru commit 5a5d19245f65189202719321facd49ce6f5d46ac (2021-08-09) contains an out...

CVE-2026-37535

openxc/isotp-c thru commit 5a5d19245f65189202719321facd49ce6f5d46ac (2021-08-09) contains an out-of-bounds read in the I

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

A stack-based out-of-bounds read vulnerability in VrmlData_Scene::ReadLine in the VRML parser in...

CVE-2026-42480

A stack-based out-of-bounds read vulnerability in VrmlData_Scene::ReadLine in the VRML parser in Open CASCADE Technology

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-01 发布INFO

An unprivileged attacker can craft a user-space process with a malicious ELF binary containing an out-of-range sh_link field. When root-level dtrace attaches to -- or instrument...

CVE-2026-35233

An unprivileged attacker can craft a user-space process with a malicious ELF binary containing an out-of-range sh_link f

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-01 发布INFO

openxc/isotp-c thru commit 5a5d19245f65189202719321facd49ce6f5d46ac (2021-08-09) contains an out-of-bounds read in the ISO-TP Single Frame receive handler, where the 4-bit paylo...

CVE-2026-37535

openxc/isotp-c thru commit 5a5d19245f65189202719321facd49ce6f5d46ac (2021-08-09) contains an out-of-bounds read in the I

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-01 发布INFO

Open CASCADE Technology (OCCT) V8_0_0_rc5 contains multiple vulnerabilities in its IGES and STEP file parsers that can be triggered by crafted IGES or STEP files. These issues i...

CVE-2026-42481

Open CASCADE Technology (OCCT) V8_0_0_rc5 contains multiple vulnerabilities in its IGES and STEP file parsers that can b

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-01 发布INFO

A stack-based out-of-bounds read vulnerability in VrmlData_Scene::ReadLine in the VRML parser in Open CASCADE Technology (OCCT) V8_0_0_rc5 allows attackers to cause a denial of ...

CVE-2026-42480

A stack-based out-of-bounds read vulnerability in VrmlData_Scene::ReadLine in the VRML parser in Open CASCADE Technology

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-01 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: HID: core: Mitigate potential OOB by removing bogus memset() The memset() in hid_report_raw_event() has the...

CVE-2026-43048

In the Linux kernel, the following vulnerability has been resolved: HID: core: Mitigate potential OOB by removing bogus

来源摘录 · NVD

漏洞预警2026-05-01 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: mpls: add seqcount to protect the platform_label{,s} pair The RCU-protected codepaths (mpls_forward, mpls_d...

CVE-2026-43042

In the Linux kernel, the following vulnerability has been resolved: mpls: add seqcount to protect the platform_label{,s

来源摘录 · NVD

漏洞预警2026-05-01 发布INFO

An out-of-bounds read vulnerability in VrmlData_IndexedLineSet::TShape in the VRML parser in Open CASCADE Technology (OCCT) V8_0_0_rc5 allows attackers to cause a denial of serv...

CVE-2026-42479

An out-of-bounds read vulnerability in VrmlData_IndexedLineSet::TShape in the VRML parser in Open CASCADE Technology (OC

历史摘要 · 未重新核验 · NVD