#cwe-190

共收录 699 条相关情报。

漏洞预警2026-10-26 发布INFO

compress provides various compression algorithms. Prior to 1.20.2, the zstd DecodeAll and streaming decoder paths can panic when a crafted two-block frame reaches huff0.ReadTabl...

CVE-2026-116591

compress provides various compression algorithms. Prior to 1.20.2, the zstd DecodeAll and streaming decoder paths can pa

历史摘要 · 未重新核验 · NVD

#cve #cwe-190

漏洞预警2026-10-26 发布INFO

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia ...

CVE-2026-64759

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, i

历史摘要 · 未重新核验 · NVD

#cve #cwe-190

安全公告2026-10-25 发布INFO

rclone serve s3 versions 1.75.0 before 1.75.2 contain an integer overflow vulnerability in...

CVE-2026-116188

rclone serve s3 versions 1.75.0 before 1.75.2 contain an integer overflow vulnerability in multipart reorder-memory acco

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-190 #severity:medium

安全公告2026-10-25 发布INFO

ImageMagick before 7.1.2-33 contains a heap buffer overflow vulnerability on 32-bit systems that...

CVE-2026-116153

ImageMagick before 7.1.2-33 contains a heap buffer overflow vulnerability on 32-bit systems that allows attackers to ove

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-190 #severity:low

漏洞预警2026-10-25 发布MEDIUM

rclone serve s3 versions 1.75.0 before 1.75.2 contain an integer overflow vulnerability in multipart reorder-memory accounting that bypasses the configured buffer limit. Attacke...

CVE-2026-116188

rclone serve s3 versions 1.75.0 before 1.75.2 contain an integer overflow vulnerability in multipart reorder-memory acco

来源摘录 · NVD

#cve #cwe-190

漏洞预警2026-10-25 发布LOW

ImageMagick before 7.1.2-33 contains a heap buffer overflow vulnerability on 32-bit systems that allows attackers to overwrite heap memory when convex-hull information is reques...

CVE-2026-116153

ImageMagick before 7.1.2-33 contains a heap buffer overflow vulnerability on 32-bit systems that allows attackers to ove

来源摘录 · NVD

#cve #cwe-190

安全公告2026-10-24 发布INFO

open62541 1.5.0 before 1.5.7 contains an integer overflow in UA_DataType_fromStructureDescription...

CVE-2026-116014

open62541 1.5.0 before 1.5.7 contains an integer overflow in UA_DataType_fromStructureDescription() that wraps the 16-bi

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-190 #severity:critical

漏洞预警2026-10-24 发布HIGH

open62541 1.5.0 before 1.5.7 contains an integer overflow in UA_DataType_fromStructureDescription() that wraps the 16-bit memSize field for large custom structure definitions. A...

CVE-2026-116014

open62541 1.5.0 before 1.5.7 contains an integer overflow in UA_DataType_fromStructureDescription() that wraps the 16-bi

来源摘录 · NVD

#cve #cwe-190

安全公告2026-10-22 发布INFO

libsmb2 before 6.3 contains integer overflow vulnerabilities in the DCE/RPC NDR decoder in lib...

CVE-2026-115505

libsmb2 before 6.3 contains integer overflow vulnerabilities in the DCE/RPC NDR decoder in lib/dcerpc.c that allow heap

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-190 #severity:high

漏洞预警2026-10-22 发布HIGH

libsmb2 before 6.3 contains integer overflow vulnerabilities in the DCE/RPC NDR decoder in lib/dcerpc.c that allow heap out-of-bounds reads and writes. A malicious SMB server or...

CVE-2026-115505

libsmb2 before 6.3 contains integer overflow vulnerabilities in the DCE/RPC NDR decoder in lib/dcerpc.c that allow heap

来源摘录 · NVD

#cve #cwe-190

漏洞预警2026-10-22 发布MEDIUM

A 32-bit integer wraparound in the MongoDB C Driver's Windows-only Kerberos/SSPI authentication code can cause an undersized heap buffer to be allocated when an excessively long...

CVE-2026-114645

A 32-bit integer wraparound in the MongoDB C Driver's Windows-only Kerberos/SSPI authentication code can cause an unders

来源摘录 · NVD

#cve #cwe-190

漏洞预警2026-10-22 发布CRITICAL

An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before 19.1.9, 19.2 before 19.2.9, 19.3 before 19.3.6, 19...

CVE-2026-110264

An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-190

漏洞预警2026-10-21 发布INFO

Pillow is a Python imaging library. Prior to 13.0.0, PILfont text-width accumulation in src/_imaging.c checks positive glyph advances against INT_MAX but does not check negative...

CVE-2026-96641

Pillow is a Python imaging library. Prior to 13.0.0, PILfont text-width accumulation in src/_imaging.c checks positive g

历史摘要 · 未重新核验 · NVD

#cve #cwe-190

安全公告2026-10-21 发布INFO

Pillow: Reachable undefined behavior in native integer operations, potentially leading to denial of service or logic integrity compromise

CVE-2026-96641

Pillow is a Python imaging library. Prior to 13.0.0, PILfont text-width accumulation in src/_imaging.c checks positive g

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-190

漏洞预警2026-10-21 发布INFO

A malicious SVG can trigger an integer overflow which in turn triggers a null-pointer dereference in VectorImage QML Type.

CVE-2026-105923

A malicious SVG can trigger an integer overflow which in turn triggers a null-pointer dereference in VectorImage QML Typ

来源摘录 · NVD

#cve #cwe-190 #cwe-476

漏洞预警2026-10-20 发布INFO

A ThreadX module chooses `object_size` when it calls `txm_module_object_allocate`. The Module Manager adds its own 16-byte private header to that size and asked the object pool ...

CVE-2026-95107

A ThreadX module chooses `object_size` when it calls `txm_module_object_allocate`. The Module Manager adds its own 16-by

历史摘要 · 未重新核验 · NVD

#cve #cwe-190 #cwe-680 #cwe-787

漏洞预警2026-10-20 发布INFO

OpenImageIO before 3.0.20.0, 3.1.x before 3.1.15.0, and 3.2.x before 3.2.0.3-beta1 contains an integer overflow in cineon::Codec::Read that undersizes the scanline buffer, causi...

CVE-2026-113681

OpenImageIO before 3.0.20.0, 3.1.x before 3.1.15.0, and 3.2.x before 3.2.0.3-beta1 contains an integer overflow in cineo

历史摘要 · 未重新核验 · NVD

#cve #cwe-190

漏洞预警2026-10-20 发布INFO

The GUIX binary resource loader never checks that a font page's glyph range is well formed. `gx_page_header_first_glyph` and `gx_page_header_last_glyph` are read verbatim from t...

CVE-2026-91189

The GUIX binary resource loader never checks that a font page's glyph range is well formed. `gx_page_header_first_glyph`

历史摘要 · 未重新核验 · NVD

#cve #cwe-190 #cwe-680 #cwe-787

漏洞预警2026-10-20 发布CRITICAL

Incorrect boundary conditions in the SVG component. This vulnerability was fixed in Firefox 158.0.1 and Thunderbird 158.0.1.

CVE-2026-113399

Incorrect boundary conditions in the SVG component. This vulnerability was fixed in Firefox 158.0.1 and Thunderbird 158.

来源摘录 · NVD

#cve #cwe-190

漏洞预警2026-10-20 发布INFO

An integer overflow vulnerability in the license manager service could allow an unauthenticated attacker to crash the service.

CVE-2026-43843

An integer overflow vulnerability in the license manager service could allow an unauthenticated attacker to crash the se

历史摘要 · 未重新核验 · NVD

#cve #cwe-190