#cwe-131

共收录 54 条相关情报。

漏洞预警2026-10-27 发布INFO

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an ...

CVE-2026-57192

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2

历史摘要 · 未重新核验 · NVD

#cve #cwe-125 #cwe-131 #cwe-787

漏洞预警2026-10-27 发布INFO

A heap-based buffer overflow vulnerability exists in the Fireware OS authentication service allows an attacker who controls or intercepts traffic to the configured Active Direct...

CVE-2026-112710

A heap-based buffer overflow vulnerability exists in the Fireware OS authentication service allows an attacker who contr

历史摘要 · 未重新核验 · NVD

#cve #cwe-122 #cwe-131

漏洞预警2026-10-27 发布INFO

A heap-based buffer overflow vulnerability in the Fireware OS authentication service allows an attacker who controls or intercepts traffic to the configured Active Directory ser...

CVE-2026-112709

A heap-based buffer overflow vulnerability in the Fireware OS authentication service allows an attacker who controls or

历史摘要 · 未重新核验 · NVD

#cve #cwe-122 #cwe-131 #cwe-787

漏洞预警2026-10-27 发布INFO

An out-of-bounds write vulnerability in the Qt QTextCodec iconv-based encoding of the Qt 5 Compatibility APIs module (Qt Core in Qt 5 and earlier) impacts Qt. Under certain cond...

CVE-2026-107590

An out-of-bounds write vulnerability in the Qt QTextCodec iconv-based encoding of the Qt 5 Compatibility APIs module (Qt

历史摘要 · 未重新核验 · NVD

#cve #cwe-131 #cwe-787

安全公告2026-10-27 发布INFO

libphdi through 20260902 contains a heap out-of-bounds read vulnerability in...

CVE-2026-116737

libphdi through 20260902 contains a heap out-of-bounds read vulnerability in libphdi_data_files_get_extent_data_file_pat

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-131 #severity:medium

漏洞预警2026-10-26 发布INFO

libphdi through 20260902 contains a heap out-of-bounds read vulnerability in libphdi_data_files_get_extent_data_file_path that uses the directory prefix length instead of the ba...

CVE-2026-116737

libphdi through 20260902 contains a heap out-of-bounds read vulnerability in libphdi_data_files_get_extent_data_file_pat

历史摘要 · 未重新核验 · NVD

#cve #cwe-131

漏洞预警2026-10-22 发布INFO

EDK2 contains a vulnerability in BIOS where a user may cause “Out-of-bounds Write”, Classic Buffer Overflow, and “Incorrect Calculation of Buffer Size” by remote access. Success...

CVE-2026-97631

EDK2 contains a vulnerability in BIOS where a user may cause “Out-of-bounds Write”, Classic Buffer Overflow, and “Incorr

来源摘录 · NVD

#cve #cwe-120 #cwe-131 #cwe-787

安全公告2026-10-21 发布INFO

Vyper before 0.2.6 contains a call stack corruption vulnerability that causes incorrect function...

CVE-2020-37287

Vyper before 0.2.6 contains a call stack corruption vulnerability that causes incorrect function outputs when complex ty

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-131 #severity:high

漏洞预警2026-10-21 发布MEDIUM

Vyper before 0.2.6 contains a call stack corruption vulnerability that causes incorrect function outputs when complex types with non-base members are passed as arguments. Contra...

CVE-2020-37287

Vyper before 0.2.6 contains a call stack corruption vulnerability that causes incorrect function outputs when complex ty

来源摘录 · NVD

#cve #cwe-131

漏洞预警2026-10-20 发布INFO

A memory-protected ThreadX module's queue request reaches the Module Manager's dispatch layer, which decides how much of the module's buffer the privileged queue copy may touch ...

CVE-2026-95111

A memory-protected ThreadX module's queue request reaches the Module Manager's dispatch layer, which decides how much of

历史摘要 · 未重新核验 · NVD

#cve #cwe-125 #cwe-131

漏洞预警2026-10-02 发布INFO

Zebra before 6.1.0 contains an incorrect calculation vulnerability in its ZIP-317 block template selector that omits header and transaction-count size from the block budget. Att...

CVE-2026-104424

Zebra before 6.1.0 contains an incorrect calculation vulnerability in its ZIP-317 block template selector that omits hea

历史摘要 · 未重新核验 · NVD

#cve #cwe-131

安全公告2026-10-02 发布INFO

Zebra before 6.1.0 Incorrect Block Size Calculation in getblocktemplate

CVE-2026-104424

Zebra before 6.1.0 contains an incorrect calculation vulnerability in its ZIP-317 block template selector that omits hea

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-131

漏洞预警2026-10-01 发布INFO

Imager versions before 1.037 for Perl overflow a heap buffer fetching float samples from a paletted image in i_gsampf_fp. For a paletted image, getsamples() with type "float" a...

CVE-2026-102505

Imager versions before 1.037 for Perl overflow a heap buffer fetching float samples from a paletted image in i_gsampf_fp

历史摘要 · 未重新核验 · NVD

#cve #cwe-131

漏洞预警2026-09-29 发布INFO

`gx_binres_theme_load()` sizes its theme buffer for the theme it was asked for, and allocates it even when the resource holds no theme with that id. A theme id at or past the th...

CVE-2026-102729

`gx_binres_theme_load()` sizes its theme buffer for the theme it was asked for, and allocates it even when the resource

历史摘要 · 未重新核验 · NVD

#cve #cwe-131 #cwe-787

安全公告2026-09-29 发布INFO

CVE-2026-102729

`gx_binres_theme_load()` sizes its theme buffer for the theme it was asked for, and allocates it even when the resource

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-131 #cwe-787

漏洞预警2026-09-29 发布INFO

Strings optimized for Latin-1 displaying Latin-1 characters cause incorrect String.arg() formatting by an incorrect buffer size calculation, causing out-of-bounds reading.

CVE-2026-95509

Strings optimized for Latin-1 displaying Latin-1 characters cause incorrect String.arg() formatting by an incorrect buff

历史摘要 · 未重新核验 · NVD

#cve #cwe-125 #cwe-131

漏洞预警2026-09-23 发布INFO

A unit confusion in BusyBox TLS Montgomery reduction buffer allocation causes a pre-authentication heap buffer overflow when processing a crafted ClientKeyExchange message.

CVE-2026-88830

A unit confusion in BusyBox TLS Montgomery reduction buffer allocation causes a pre-authentication heap buffer overflow

历史摘要 · 未重新核验 · NVD

#cve #cwe-131

漏洞预警2026-09-18 发布INFO

libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.23.2, the public heif_region_item_add_region_inline_mask_data() function in libheif/api/libheif/heif_regio...

CVE-2026-84448

libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.23.2, the public heif_region_item_add_region_inli

历史摘要 · 未重新核验 · NVD

#cve #cwe-125 #cwe-131

漏洞预警2026-09-18 发布INFO

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.1.16.0, A crafted 1-bit contiguous c...

CVE-2026-67549

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / a

历史摘要 · 未重新核验 · NVD

#cve #cwe-122 #cwe-131 #cwe-787

安全公告2026-09-18 发布INFO

libheif: Heap out-of-bounds read in libheif inline-mask region API (heif_region_item_add_region_inline_mask_data / heif_region_get_mask_image)

CVE-2026-84448

libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.23.2, the public heif_region_item_add_region_inli

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-125 #cwe-131