#cwe-126

共收录 128 条相关情报。

← 返回所有主题
安全公告2026-07-06 发布INFO

Memory Corruption when allocating memory with sizes that exceed the maximum allowed value.

CVE-2026-21379

Memory Corruption when allocating memory with sizes that exceed the maximum allowed value.

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-06 发布INFO

Memory Corruption when allocating memory with sizes that exceed the maximum allowed value.

CVE-2026-21379

Memory Corruption when allocating memory with sizes that exceed the maximum allowed value.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-30 发布HIGH

A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line_backend() in the giochannel.c file when a custom line terminator with a length greater than one ...

CVE-2026-58013

A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line_backend() in the giochannel.c file when

来源摘录 · NVD

漏洞预警2026-06-30 发布HIGH

A flaw was found in GLib. A buffer over-read can occur in the g_regex_replace function when used with the `G_REGEX_RAW` compile flag and case-change replacement escapes because ...

CVE-2026-58012

A flaw was found in GLib. A buffer over-read can occur in the g_regex_replace function when used with the `G_REGEX_RAW`

来源摘录 · NVD

漏洞预警2026-06-30 发布HIGH

A flaw was found in GLib. An off-by-one error can occur in the gvs_tuple_is_normal function in the glib/gvariant-serialiser.c file when doing an alignment padding check because ...

CVE-2026-58010

A flaw was found in GLib. An off-by-one error can occur in the gvs_tuple_is_normal function in the glib/gvariant-seriali

来源摘录 · NVD

漏洞预警2026-06-29 发布INFO

GNU gzip contains a global buffer overflow vulnerability in the LZH decompression logic caused by improper reuse of shared global state between different decompression formats w...

CVE-2026-41992

GNU gzip contains a global buffer overflow vulnerability in the LZH decompression logic caused by improper reuse of shar

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-25 发布INFO

An out-of-bounds read might happen when SetMacAddrAction is used, potentially resulting in uninitialized memory being sent over the network or a crash.

CVE-2026-40210

An out-of-bounds read might happen when SetMacAddrAction is used, potentially resulting in uninitialized memory being se

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVE-2026-45460

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

Buffer over-read in Windows Projected File System Filter Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-42828

Buffer over-read in Windows Projected File System Filter Driver allows an authorized attacker to elevate privileges loca

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

A flaw was found in 389 Directory Server. The ldap_utf8prev() function reads bytes before the start of a buffer without bounds checking, causing a heap buffer over-read in strin...

CVE-2026-11787

A flaw was found in 389 Directory Server. The ldap_utf8prev() function reads bytes before the start of a buffer without

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-08 发布INFO

Buffer Over-read vulnerability in Apache HTTP Server via outbound OCSP requests to an attacker controlled OCSP server This issue affects Apache HTTP Server: from 2.4.0 through ...

CVE-2026-44185

Buffer Over-read vulnerability in Apache HTTP Server via outbound OCSP requests to an attacker controlled OCSP server T

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-02 发布INFO

OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. From version 0.7.0 to before version 0.9.0, OBI's log enricher mishandles w...

CVE-2026-45684

OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. From version 0.7.0

历史摘要 · 未重新核验 · NVD

安全公告2026-06-02 发布INFO

Information Disclosure when processing advertisement frames with malformed MBSSID elements of...

CVE-2025-59609

Information Disclosure when processing advertisement frames with malformed MBSSID elements of insufficient length.

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-01 发布INFO

Information Disclosure when processing advertisement frames with malformed MBSSID elements of insufficient length.

CVE-2025-59609

Information Disclosure when processing advertisement frames with malformed MBSSID elements of insufficient length.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-26 发布HIGH

A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret during an RSA key exchange to a server using an RSA key backed by a PKCS#11 toke...

CVE-2026-5260

A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret during an RSA key excha

来源摘录 · NVD

安全公告2026-05-18 发布INFO

OpenTelemetry eBPF Instrumentation: Log enricher writev path can overread and overwrite user buffers

CVE-2026-45684

### Summary OBI's log enricher mishandles `writev` buffers by reading only the first `iovec` entry but using the total

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-14 发布INFO

Buffer over-read in PostgreSQL function pg_restore_attribute_stats() accepts array values of unmatched length, which causes query planning to read past end of one array. This a...

CVE-2026-6575

Buffer over-read in PostgreSQL function pg_restore_attribute_stats() accepts array values of unmatched length, which cau

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-13 发布INFO

Crypt::Argon2 versions from 0.017 before 0.031 for Perl perform a heap out-of-bounds read in argon2_verify on empty encoded input. The auto-detect form of argon2_verify passes ...

CVE-2026-8463

Crypt::Argon2 versions from 0.017 before 0.031 for Perl perform a heap out-of-bounds read in argon2_verify on empty enco

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-12 发布INFO

Buffer over-read in Windows DWM Core Library allows an authorized attacker to disclose information locally.

CVE-2026-34336

Buffer over-read in Windows DWM Core Library allows an authorized attacker to disclose information locally.

历史摘要 · 未重新核验 · NVD

安全公告2026-05-07 发布INFO

diesel-async may expose uninitialized padding bytes for MySQL temporal columns

### Summary diesel-async exposes uninitialized stack padding to safe code on every read of a MySQL `DATE`, `TIME`, `DAT

历史摘要 · 未重新核验 · GitHub Advisory