#cwe-190

共收录 699 条相关情报。

← 返回所有主题
漏洞预警2026-10-09 发布INFO

dynamic_object_create() in kernel/userspace/userspace.c computed the backing allocation for a dynamically allocated kernel object as obj_size_get(otype) + size, and for thread s...

CVE-2026-19569

dynamic_object_create() in kernel/userspace/userspace.c computed the backing allocation for a dynamically allocated kern

历史摘要 · 未重新核验 · NVD

安全公告2026-10-09 发布INFO

Integer overflow in dynamic kernel object allocation allows user-mode threads to corrupt the kernel heap

CVE-2026-19569

dynamic_object_create() in kernel/userspace/userspace.c computed the backing allocation for a dynamically allocated kern

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-10-08 发布INFO

SumatraPDF is a multi-format reader for Windows. In 3.7.0.22298, LitParseHeader() in src/LitDoc.cpp computes the attacker-controlled hdrLen + nPieces * 16 section offset using s...

CVE-2026-107730

SumatraPDF is a multi-format reader for Windows. In 3.7.0.22298, LitParseHeader() in src/LitDoc.cpp computes the attacke

历史摘要 · 未重新核验 · NVD

安全公告2026-10-08 发布INFO

SumatraPDF: Signed integer overflow in the LIT header parsing causes invalid-pointer read

CVE-2026-107730

SumatraPDF is a multi-format reader for Windows. In 3.7.0.22298, LitParseHeader() in src/LitDoc.cpp computes the attacke

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-08 发布INFO

containerd overlaybd through 1.0.18 has a do_load_index (LSMT index loading) integer overflow ...

CVE-2026-107446

containerd overlaybd through 1.0.18 has a do_load_index (LSMT index loading) integer overflow (and resultant out-of-boun

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-07 发布INFO

VMware Workstation and Fusion contain an integer-overflow vulnerability. A malicious actor with local administrative privileges on a virtual machine with VMXNET3 virtual network...

CVE-2026-59346

VMware Workstation and Fusion contain an integer-overflow vulnerability. A malicious actor with local administrative pri

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

Integer overflow in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (C...

CVE-2026-106417

Integer overflow in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbit

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

Integer overflow in Compositing in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severit...

CVE-2026-106332

Integer overflow in Compositing in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

Integer overflow in WebGL in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted...

CVE-2026-106239

Integer overflow in WebGL in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to potentially

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

libmikmod before 3.3.14 contains an integer overflow in the Oktalyzer loader OKT_doPBOD() that allows attackers to cause heap buffer overflow via crafted track counts. Attackers...

CVE-2026-105839

libmikmod before 3.3.14 contains an integer overflow in the Oktalyzer loader OKT_doPBOD() that allows attackers to cause

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

libmikmod before 3.3.14 contains an integer overflow vulnerability in DSM_Load() in load_dsm.c that allows attackers to trigger heap buffer overflow via crafted track counts. At...

CVE-2026-105837

libmikmod before 3.3.14 contains an integer overflow vulnerability in DSM_Load() in load_dsm.c that allows attackers to

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

GNU Aspell contains an integer truncation vulnerability in the WritableDict::add() function in modules/speller/default/writable.cpp. When loading a personal wordlist, the word l...

CVE-2026-75820

GNU Aspell contains an integer truncation vulnerability in the WritableDict::add() function in modules/speller/default/w

历史摘要 · 未重新核验 · NVD

安全公告2026-10-05 发布INFO

PyMongo: PYTHON-5996 Heap out-of-bounds write via signed size overflow in BSON document encoding

CVE-2026-96749

An integer overflow in the BSON document encoding component of the MongoDB Python Driver's bundled native extension may

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-05 发布INFO

In rw_t4t_update_file of rw_t4t.cc, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execu...

CVE-2026-49885

In rw_t4t_update_file of rw_t4t.cc, there is a possible out-of-bounds write due to an integer overflow. This could lead

历史摘要 · 未重新核验 · NVD

安全公告2026-10-05 发布INFO

In display, there is a possible escalation of privilege due to an integer overflow. This could...

CVE-2026-20533

In display, there is a possible escalation of privilege due to an integer overflow. This could lead to local escalation

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-05 发布INFO

In display, there is a possible escalation of privilege due to an integer overflow. This could lead to local escalation of privilege if a malicious actor has already obtained th...

CVE-2026-20533

In display, there is a possible escalation of privilege due to an integer overflow. This could lead to local escalation

历史摘要 · 未重新核验 · NVD

安全公告2026-10-03 发布INFO

OpenAPV before 1.1.1.0 has a read_bitstream heap-based buffer overflow.

CVE-2026-79113

OpenAPV before 1.1.1.0 has a read_bitstream heap-based buffer overflow.

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-03 发布INFO

OpenAPV before 1.1.1.0 has a read_bitstream heap-based buffer overflow.

CVE-2026-79113

OpenAPV 从命名与上下文看是 APV(Advanced Professional Video)专业视频编解码格式的开源实现。根据 NVD 元数据,CVE-2026-79113 的官方描述为 "OpenAPV before 1.1.1.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

Integer overflow in Skia in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)

CVE-2026-103629

Integer overflow in Skia in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to leak cross-origin data via

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

Integer overflow in Compositing in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity:...

CVE-2026-103621

Integer overflow in Compositing in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to leak cross-origin d

历史摘要 · 未重新核验 · NVD