#cwe-1285

共收录 16 条相关情报。

漏洞预警2026-10-20 发布INFO

A HID report descriptor is a sequence of items, each declaring in its header how many data bytes follow. The USBX host walks that sequence by advancing over each header and pars...

CVE-2026-96582

A HID report descriptor is a sequence of items, each declaring in its header how many data bytes follow. The USBX host w

历史摘要 · 未重新核验 · NVD

#cve #cwe-125 #cwe-1285

漏洞预警2026-10-09 发布INFO

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB insufficiently validated counts, ...

CVE-2026-107821

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3

历史摘要 · 未重新核验 · NVD

#cve #cwe-1285

安全公告2026-10-09 发布INFO

MariaDB: insufficient validation of binary frm data when opening a table

CVE-2026-107821

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-1285

安全公告2026-10-05 发布INFO

In apu, there is a possible memory corruption due to improper input validation. This could lead...

CVE-2026-20524

In apu, there is a possible memory corruption due to improper input validation. This could lead to local escalation of p

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-1285

漏洞预警2026-10-05 发布INFO

In apu, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. ...

CVE-2026-20524

In apu, there is a possible memory corruption due to improper input validation. This could lead to local escalation of p

历史摘要 · 未重新核验 · NVD

#cve #cwe-1285

漏洞预警2026-09-05 发布INFO

libpcap BPF interpreter detects neither reaching the end of the filter program buffer due to lack of a return instruction nor executing a jump instruction with an offset that tr...

CVE-2026-31912

libpcap BPF interpreter detects neither reaching the end of the filter program buffer due to lack of a return instructio

历史摘要 · 未重新核验 · NVD

#cve #cwe-125 #cwe-823 #cwe-1285

漏洞预警2026-08-21 发布INFO

RaTeX is a KaTeX-compatible math rendering engine written in Rust. Prior to version 0.1.11, the public parser entrypoint `ratex_parser::parse(&str)` panics on the 9-byte input `...

CVE-2026-53530

RaTeX is a KaTeX-compatible math rendering engine written in Rust. Prior to version 0.1.11, the public parser entrypoint

历史摘要 · 未重新核验 · NVD

#cve #cwe-248 #cwe-400 #cwe-1285

漏洞预警2026-08-12 发布INFO

A maliciously crafted input, when processed by the Autodesk Installer IPC frame parser, may trigger improper validation of an input-specified position or offset, resulting in an...

CVE-2026-14479

A maliciously crafted input, when processed by the Autodesk Installer IPC frame parser, may trigger improper validation

历史摘要 · 未重新核验 · NVD

#cve #cwe-1285

漏洞预警2026-08-05 发布INFO

There is a local privilege escalation vulnerability recently discovered in the NI-PAL kernel driver. This may allow a local, authenticated user to escalate privileges and execu...

CVE-2026-18485

There is a local privilege escalation vulnerability recently discovered in the NI-PAL kernel driver. This may allow a l

历史摘要 · 未重新核验 · NVD

#cve #cwe-1285

安全公告2026-07-07 发布INFO

ratex-parser panics on `\verb` with a multibyte delimiter (UTF-8 byte-boundary slice)

CVE-2026-53530

### Summary The public parser entrypoint `ratex_parser::parse(&str)` panics on the **9-byte** input `\verbéxé` (i.e. `\

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #rust #cwe-248 #cwe-400 #cwe-1285 #severity:high

漏洞预警2026-06-24 发布INFO

Improper Validation of Specified Index, Position, or Offset in Input vulnerability in Google go-attestation. parseEfiSignatureList() does not advance the buffer past vendor byte...

CVE-2026-12681

Improper Validation of Specified Index, Position, or Offset in Input vulnerability in Google go-attestation. parseEfiSig

历史摘要 · 未重新核验 · NVD

#cve #cwe-1285

安全公告2026-06-02 发布INFO

Improper input validation in NI-PAL may allow a local authenticated user to access arbitrary...

CVE-2026-8036

Improper input validation in NI-PAL may allow a local authenticated user to access arbitrary system memory, potentially

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-1285 #severity:high

漏洞预警2026-06-02 发布INFO

Improper input validation in NI-PAL may allow a local authenticated user to access arbitrary system memory, potentially leading to privilege escalation. This vulnerability affec...

CVE-2026-8036

Improper input validation in NI-PAL may allow a local authenticated user to access arbitrary system memory, potentially

历史摘要 · 未重新核验 · NVD

#cve #cwe-1285

漏洞预警2026-05-29 发布MEDIUM

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.43.4, negative chunk-size in chunked Transfer-Encoding causes unbounded memory alloc...

CVE-2026-45352

CVE-2026-45352 影响 cpp-httplib（一个 C++11 单文件头跨平台 HTTP/HTTPS 库）0.43.4 之前的版本。漏洞存在于分块传输编码的解析过程中：函数 ChunkedDecoder::read_paylo

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-770 #cwe-1285

安全公告2026-05-20 发布INFO

The MongoDB C Driver's legacy GridFS API accepts malformed file metadata from the database...

CVE-2026-9100

The MongoDB C Driver's legacy GridFS API accepts malformed file metadata from the database without adequate validation.

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-1285 #severity:medium

漏洞预警2026-05-20 发布INFO

The MongoDB C Driver's legacy GridFS API accepts malformed file metadata from the database without adequate validation. Crafted documents in a GridFS collection may cause any ap...

CVE-2026-9100

The MongoDB C Driver's legacy GridFS API accepts malformed file metadata from the database without adequate validation.

历史摘要 · 未重新核验 · NVD

#cve #cwe-1285