#cwe-125

共收录 1565 条相关情报。

← 返回所有主题
漏洞预警2026-10-20 发布INFO

A VideoStreaming interface reports the size of its whole class-specific descriptor block in the `wTotalLength` field of its input header. The USBX host recorded that figure and ...

CVE-2026-96406

A VideoStreaming interface reports the size of its whole class-specific descriptor block in the `wTotalLength` field of

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

A heap memory read vulnerability could allow an attacker to exfiltrate sensitive data.

CVE-2026-43849

A heap memory read vulnerability could allow an attacker to exfiltrate sensitive data.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

A malformed header in the binary file fed to QBinaryJson::fromBinaryData() can cause undefined behaviour because of out-of-bounds read.

CVE-2026-101201

A malformed header in the binary file fed to QBinaryJson::fromBinaryData() can cause undefined behaviour because of out-

历史摘要 · 未重新核验 · NVD

安全公告2026-10-20 发布INFO

Ning compress-lzf before 1.2.0 contains an out-of-bounds memory access vulnerability in the sun...

CVE-2026-109395

Ning compress-lzf before 1.2.0 contains an out-of-bounds memory access vulnerability in the sun.misc.Unsafe based Unsafe

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-20 发布INFO

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processin...

CVE-2026-86975

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Go

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15....

CVE-2026-86957

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布LOW

An out-of-bounds read was addressed with improved input validation. This issue is fixed in Xcode 27. Parsing a maliciously crafted binary may lead to unexpected tool termination.

CVE-2026-86874

An out-of-bounds read was addressed with improved input validation. This issue is fixed in Xcode 27. Parsing a malicious

来源摘录 · NVD

漏洞预警2026-10-20 发布INFO

Ning compress-lzf before 1.2.0 contains an out-of-bounds memory access vulnerability in the sun.misc.Unsafe based UnsafeChunkDecoder that fails to validate back-references and l...

CVE-2026-109395

Ning compress-lzf before 1.2.0 contains an out-of-bounds memory access vulnerability in the sun.misc.Unsafe based Unsafe

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-19 发布INFO

Pillow is a Python imaging library. Prior to 13.0.0, Pillow's TIFF encoder can read beyond a ColorMap buffer when retained TIFF metadata has a plane size inconsistent with BitsP...

CVE-2026-112896

Pillow is a Python imaging library. Prior to 13.0.0, Pillow's TIFF encoder can read beyond a ColorMap buffer when retain

历史摘要 · 未重新核验 · NVD

安全公告2026-10-16 发布INFO

FreeRDP from 3.30.0 before 3.32.0 contains a heap out-of-bounds read vulnerability in the Windows...

CVE-2026-111376

FreeRDP from 3.30.0 before 3.32.0 contains a heap out-of-bounds read vulnerability in the Windows client's CliprdrStream

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-16 发布INFO

This vulnerability allows remote attackers to disclose sensitive information on affected...

CVE-2026-105227

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Delta ISPSoft.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-16 发布INFO

FreeRDP from 3.0.0 before 3.32.0 contains an out-of-bounds read vulnerability in the Windows RAIL...

CVE-2026-111375

FreeRDP from 3.0.0 before 3.32.0 contains an out-of-bounds read vulnerability in the Windows RAIL client that allows mal

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-16 发布INFO

This vulnerability allows remote attackers to disclose sensitive information on affected...

CVE-2026-105228

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Delta ISPSoft.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-16 发布INFO

unarr through 1.1.1 contains a heap-based out-of-bounds read in zip_parse_extra_fields() in zip...

CVE-2026-111274

unarr through 1.1.1 contains a heap-based out-of-bounds read in zip_parse_extra_fields() in zip/parse-zip.c due to an in

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-16 发布INFO

libical through 4.0.6 contains a heap-based out-of-bounds read in icalvalue_decode_ical_string()...

CVE-2026-111269

libical through 4.0.6 contains a heap-based out-of-bounds read in icalvalue_decode_ical_string() in src/libical/icalvalu

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-16 发布INFO

libmodplug through 0.8.9.1 contains a heap-based out-of-bounds read vulnerability in CSoundFile:...

CVE-2026-111271

libmodplug through 0.8.9.1 contains a heap-based out-of-bounds read vulnerability in CSoundFile::ReadAMS2() in src/load_

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-16 发布INFO

LibRaw through 0.22.2 contains a heap-based out-of-bounds read in LibRaw::parseNikonMakernote()...

CVE-2026-111272

LibRaw through 0.22.2 contains a heap-based out-of-bounds read in LibRaw::parseNikonMakernote() that allows attackers to

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-14 发布HIGH

Mongoose is an embedded web server and network library. Prior to 7.23, the built-in TCP/IP stack enabled by MG_ENABLE_TCPIP in src/net_builtin.c does not reject a TCP option who...

CVE-2026-73261

Mongoose is an embedded web server and network library. Prior to 7.23, the built-in TCP/IP stack enabled by MG_ENABLE_TC

来源摘录 · NVD

安全公告2026-10-14 发布INFO

An integer underflow in OpenVPN version 2.7_alpha3 through 2.7.7 on Windows and Android allows...

CVE-2026-88964

An integer underflow in OpenVPN version 2.7_alpha3 through 2.7.7 on Windows and Android allows remote authenticated serv

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-14 发布INFO

Out-of-bounds read vulnerability in Citirx Citrix Workspace app for Windows. This issue affects...

CVE-2026-84420

Out-of-bounds read vulnerability in Citirx Citrix Workspace app for Windows. This issue affects Citrix Workspace app fo

历史摘要 · 未重新核验 · GitHub Advisory