#cwe-190

共收录 700 条相关情报。

← 返回所有主题
漏洞预警2026-06-21 发布INFO

libexpat before 2.8.2 has an integer overflow in copyString.

CVE-2026-56408

libexpat before 2.8.2 has an integer overflow in copyString.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-21 发布INFO

libexpat before 2.8.2 has an integer overflow in doProlog that is related to storeEntityValue and entity textLen.

CVE-2026-56407

libexpat before 2.8.2 has an integer overflow in doProlog that is related to storeEntityValue and entity textLen.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-21 发布INFO

libexpat before 2.8.2 has an integer overflow in XML_ParseBuffer because it lacked a check that was present in XML_Parse.

CVE-2026-56406

libexpat before 2.8.2 has an integer overflow in XML_ParseBuffer because it lacked a check that was present in XML_Parse

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-21 发布INFO

libexpat before 2.8.2 has an integer overflow in getAttributeId.

CVE-2026-56405

libexpat before 2.8.2 has an integer overflow in getAttributeId.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-21 发布INFO

libexpat before 2.8.2 has an integer overflow in addBinding.

CVE-2026-56404

libexpat before 2.8.2 has an integer overflow in addBinding.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-21 发布INFO

libexpat before 2.8.2 has an integer overflow in storeAtts.

CVE-2026-56403

libexpat before 2.8.2 has an integer overflow in storeAtts.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-19 发布HIGH

libde265 is an open source implementation of the h.265 video codec. Prior to version 1.1.0, a crafted H.265 bitstream with large SPS dimensions and 16-bit bit depth causes a sig...

CVE-2026-49346

libde265 是一个开源的 H.265 视频编解码器实现。在版本 1.1.0 之前,处理特制的 H.265 比特流时,如果序列参数集(SPS)包含大尺寸(如 4K 或更大)且位深为 16 位,会导致 `de265_image_get_b

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-19 发布INFO

An integer overflow vulnerability was found in the virtio-snd device via PCM_INFO requests from the guest. A malicious guest can provide out-of-bounds stream counts, potentially...

CVE-2026-3196

An integer overflow vulnerability was found in the virtio-snd device via PCM_INFO requests from the guest. A malicious g

历史摘要 · 未重新核验 · NVD

安全公告2026-06-19 发布INFO

Integer Overflow or Wraparound vulnerability in the EtherNet/IP function of Mitsubishi Electric...

CVE-2026-8805

Integer Overflow or Wraparound vulnerability in the EtherNet/IP function of Mitsubishi Electric MELSEC iQ-F Series FX5-E

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-19 发布HIGH

Integer Overflow or Wraparound vulnerability in the EtherNet/IP function of Mitsubishi Electric MELSEC iQ-F Series FX5-EIP EtherNet/IP module FX5-EIP versions 1.000 and prior al...

CVE-2026-8805

CVE-2026-8805 是 Mitsubishi Electric MELSEC iQ-F 系列 FX5-EIP EtherNet/IP 模块(固件版本 1.000 及之前)中的一个整数溢出或回绕漏洞。该漏洞存在于该模块的 EtherN

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-18 发布INFO

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions 3.4.0 through 3.4.11, an integer over...

CVE-2026-44663

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture in

历史摘要 · 未重新核验 · NVD

安全公告2026-06-18 发布INFO

HAProxy through 3.4.0, fixed in commit 5985276, contains an integer overflow vulnerability in the...

CVE-2026-55203

HAProxy through 3.4.0, fixed in commit 5985276, contains an integer overflow vulnerability in the fcgi_conn structure's

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-18 发布INFO

HAProxy through 3.4.0, fixed in commit 5985276, contains an integer overflow vulnerability in the fcgi_conn structure's drl field that allows buffer misparse as new FCGI record ...

CVE-2026-55203

HAProxy through 3.4.0, fixed in commit 5985276, contains an integer overflow vulnerability in the fcgi_conn structure's

历史摘要 · 未重新核验 · NVD

安全公告2026-06-17 发布INFO

An integer overflow in the mtar_next() function in src/microtar.c in rxi microtar 0.1.0 allows a...

CVE-2026-54417

An integer overflow in the mtar_next() function in src/microtar.c in rxi microtar 0.1.0 allows a remote attacker to caus

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-16 发布INFO

A flaw was found in Pacemaker. An unauthenticated remote attacker can exploit an integer overflow vulnerability in the remote message decompression process. By sending a special...

CVE-2026-10649

A flaw was found in Pacemaker. An unauthenticated remote attacker can exploit an integer overflow vulnerability in the r

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-15 发布INFO

A flaw was found in GStreamer's WavPack audio decoder in gst-plugins-good. When processing a specially crafted WavPack file, an integer overflow in the buffer size calculation (...

CVE-2026-53705

A flaw was found in GStreamer's WavPack audio decoder in gst-plugins-good. When processing a specially crafted WavPack f

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-15 发布INFO

A signed integer overflow vulnerability was found in GStreamer's VMnc decoder. A crafted VMnc stream with large cursor dimensions can overflow signed integer payload-size arithm...

CVE-2026-52722

A signed integer overflow vulnerability was found in GStreamer's VMnc decoder. A crafted VMnc stream with large cursor d

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-15 发布INFO

An Out-of-Memory in the mp4_mux_cenc_insert_pssh function (filters/mux_isom.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP...

CVE-2025-55647

An Out-of-Memory in the mp4_mux_cenc_insert_pssh function (filters/mux_isom.c) of GPAC MP4Box v2.4 allows attackers to c

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-15 发布INFO

LibreOffice can import EMF+ graphics, which may be embedded in documents. A heap buffer overflow existed when importing an EMF+ gradient brush. The number of gradient blend poin...

CVE-2026-6045

LibreOffice can import EMF+ graphics, which may be embedded in documents. A heap buffer overflow existed when importing

历史摘要 · 未重新核验 · NVD

安全公告2026-06-13 发布INFO

Heap buffer out-of-bounds write vulnerability due to integer overflow in Avira Antivirus engine...

CVE-2025-14098

Heap buffer out-of-bounds write vulnerability due to integer overflow in Avira Antivirus engine when scanning a malforme

历史摘要 · 未重新核验 · GitHub Advisory