#cwe-129

共收录 141 条相关情报。

← 返回所有主题
漏洞预警2026-10-30 发布MEDIUM

gopacket provides packet processing capabilities for Go. Prior to 1.7.2, the SCTP chunk chain in layers/sctp.go passes attacker-controlled declared lengths and counts to decodeS...

CVE-2026-119299

gopacket provides packet processing capabilities for Go. Prior to 1.7.2, the SCTP chunk chain in layers/sctp.go passes a

来源摘录 · NVD / OSV.dev

漏洞预警2026-10-29 发布MEDIUM

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3.3.7 and 3.4.5, during caching_sha2_password authenticati...

CVE-2026-119278

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3

来源摘录 · NVD

漏洞预警2026-10-29 发布MEDIUM

Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service vulnerability that allows guest code to trigger a host panic through out-of-bounds zero-lengt...

CVE-2026-119143

Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service vulnerability that allows guest code

来源摘录 · NVD

漏洞预警2026-10-27 发布INFO

An out-of-bounds read vulnerability in the FireCluster Sync processing allows an attacker positioned on the cluster interconnect, such as a compromised cluster peer or an on-pat...

CVE-2026-93862

An out-of-bounds read vulnerability in the FireCluster Sync processing allows an attacker positioned on the cluster inte

来源摘录 · NVD

漏洞预警2026-10-27 发布INFO

A stack-based buffer overflow vulnerability in Fireware OS's VPN Network Access Enforcement process allows an authenticated mobile VPN user to create a denial of service conditi...

CVE-2026-113881

A stack-based buffer overflow vulnerability in Fireware OS's VPN Network Access Enforcement process allows an authentica

历史摘要 · 未重新核验 · NVD

安全公告2026-10-27 发布INFO

llama.cpp before b3701 contains an out-of-bounds read vulnerability in llama_decode_internal and...

CVE-2024-58400

llama.cpp before b3701 contains an out-of-bounds read vulnerability in llama_decode_internal and llama_encode_internal t

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-27 发布INFO

llama.cpp b5899 before b10261 contains a heap out-of-bounds write vulnerability in...

CVE-2026-116816

llama.cpp b5899 before b10261 contains a heap out-of-bounds write vulnerability in llm_tokenizer_plamo2::build that allo

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-27 发布HIGH

llama.cpp b5899 before b10261 contains a heap out-of-bounds write vulnerability in llm_tokenizer_plamo2::build that allows attackers to corrupt heap memory via crafted GGUF mode...

CVE-2026-116816

llama.cpp b5899 before b10261 contains a heap out-of-bounds write vulnerability in llm_tokenizer_plamo2::build that allo

来源摘录 · NVD

漏洞预警2026-10-27 发布INFO

llama.cpp before b3701 contains an out-of-bounds read vulnerability in llama_decode_internal and llama_encode_internal that allows remote unauthenticated attackers to read memor...

CVE-2024-58400

llama.cpp before b3701 contains an out-of-bounds read vulnerability in llama_decode_internal and llama_encode_internal t

历史摘要 · 未重新核验 · NVD

安全公告2026-10-27 发布INFO

Furnace through 0.6.8.3 contains an out-of-bounds write vulnerability in DivEngine::loadFTM()...

CVE-2026-116731

Furnace through 0.6.8.3 contains an out-of-bounds write vulnerability in DivEngine::loadFTM() that allows attackers to c

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-26 发布INFO

Furnace through 0.6.8.3 contains an out-of-bounds write vulnerability in DivEngine::loadFTM() that allows attackers to corrupt heap memory via an unchecked subsong index in the ...

CVE-2026-116731

Furnace through 0.6.8.3 contains an out-of-bounds write vulnerability in DivEngine::loadFTM() that allows attackers to c

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-26 发布MEDIUM

snappy-java is a Java port of the snappy, a fast C++ compresser/decompresser developed by Google. Prior to 1.1.10.9, Snappy.arrayCopy(Object src, int offset, int byteLength, Obj...

CVE-2026-116590

snappy-java is a Java port of the snappy, a fast C++ compresser/decompresser developed by Google. Prior to 1.1.10.9, Sna

来源摘录 · NVD

漏洞预警2026-10-26 发布INFO

Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (J...

CVE-2026-116585

Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including sup

来源摘录 · NVD

漏洞预警2026-10-26 发布MEDIUM

vLLM is an inference and serving engine for large language models. Prior to 0.32.0, vllm/tokenizers/hf.py computes max_token_id with an off-by-one upper bound, allowing a pre-to...

CVE-2026-115916

vLLM is an inference and serving engine for large language models. Prior to 0.32.0, vllm/tokenizers/hf.py computes max_t

来源摘录 · NVD / GitHub Advisory

安全公告2026-10-25 发布INFO

vLLM from 0.20.1 before 0.29.0 contains an improper input validation vulnerability that allows...

CVE-2026-116181

vLLM from 0.20.1 before 0.29.0 contains an improper input validation vulnerability that allows remote attackers to crash

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-25 发布MEDIUM

vLLM from 0.20.1 before 0.29.0 contains an improper input validation vulnerability that allows remote attackers to crash the engine by supplying out-of-vocabulary stop_token_ids...

CVE-2026-116181

vLLM from 0.20.1 before 0.29.0 contains an improper input validation vulnerability that allows remote attackers to crash

来源摘录 · NVD

漏洞预警2026-10-23 发布MEDIUM

RPly through 1.1.4 contains an improper array index validation vulnerability in ply_read_header_property() that accepts list as a list property's length or value type. Attackers...

CVE-2026-115722

RPly through 1.1.4 contains an improper array index validation vulnerability in ply_read_header_property() that accepts

来源摘录 · NVD

漏洞预警2026-10-20 发布HIGH

The PEAK-System PCAN parser indexes a length table using attacker-controlled DLC without enforcing DLC <= 0x0f, then copies attacker payload from record+0x1c into a fixed-size s...

CVE-2026-103672

The PEAK-System PCAN parser indexes a length table using attacker-controlled DLC without enforcing DLC <= 0x0f, then cop

来源摘录 · NVD

漏洞预警2026-10-20 发布INFO

`_gx_binres_pixelmap_table_load()` in the GUIX binary resource (theme) loader indexes the pixelmap table with a value read verbatim from the resource file and never bounds it ag...

CVE-2026-92449

`_gx_binres_pixelmap_table_load()` in the GUIX binary resource (theme) loader indexes the pixelmap table with a value re

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-14 发布INFO

F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. From 4.1.0 until 4.2.0, Svc::GenericHub output-port ...

CVE-2026-92152

F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applicati

来源摘录 · NVD