#cwe-190

共收录 699 条相关情报。

← 返回所有主题
漏洞预警2026-10-02 发布INFO

Allocation of resources without limits or throttling, Integer overflow or wraparound, Heap-based buffer overflow vulnerability in Apache Thrift. This issue affects Apache Thr...

CVE-2026-83632

Allocation of resources without limits or throttling, Integer overflow or wraparound, Heap-based buffer overflow vulnera

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

Stack-based Buffer Overflow, Integer Overflow or Wraparound vulnerability in Apache Thrift php bindings. This issue affects Apache Thrift: before 0.25.0. Users are recomme...

CVE-2026-66837

Stack-based Buffer Overflow, Integer Overflow or Wraparound vulnerability in Apache Thrift php bindings. This issue a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-01 发布INFO

Integer overflow in mod_dav_fs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write access to crash worker processes and persistently corrupt a ...

CVE-2026-93546

Integer overflow in mod_dav_fs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write acc

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-01 发布INFO

Imager versions before 1.037 for Perl exit the process reading a raw image with an out-of-range raw_datachannels value in i_readraw_wiol. Nothing range-checks raw_datachannels....

CVE-2026-102504

Imager versions before 1.037 for Perl exit the process reading a raw image with an out-of-range raw_datachannels value i

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-30 发布INFO

A flaw has been found in Nothings stb up to 1.16. This affects the function stbi_write_png_to_mem/stbi_write_jpg_core/stbi_write_tga_core in the library stb_image_write.h of the...

CVE-2026-102805

A flaw has been found in Nothings stb up to 1.16. This affects the function stbi_write_png_to_mem/stbi_write_jpg_core/st

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-30 发布INFO

A vulnerability was detected in Nothings stb up to 2c980bb59875b0d32144a71867fbdebb2f77cd20. The impacted element is the function hexwave_init in the library stb_hexwave.h. Perf...

CVE-2026-102804

A vulnerability was detected in Nothings stb up to 2c980bb59875b0d32144a71867fbdebb2f77cd20. The impacted element is the

历史摘要 · 未重新核验 · NVD

安全公告2026-09-30 发布INFO

U-Boot before 2026.10-rc4 contains an integer overflow vulnerability in sqfs_read_directory_table...

CVE-2026-71973

U-Boot before 2026.10-rc4 contains an integer overflow vulnerability in sqfs_read_directory_table() function when alloca

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-29 发布INFO

U-Boot before 2026.10-rc4 contains an integer overflow vulnerability in sqfs_read_directory_table() function when allocating the directory table buffer. Attackers can supply a c...

CVE-2026-71973

U-Boot before 2026.10-rc4 contains an integer overflow vulnerability in sqfs_read_directory_table() function when alloca

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

A vulnerability was identified in Freedesktop Poppler up to 26.08.0. Affected is the function SplashClip::clipToPath of the file splash/SplashClip.cc. Such manipulation leads to...

CVE-2026-102621

A vulnerability was identified in Freedesktop Poppler up to 26.08.0. Affected is the function SplashClip::clipToPath of

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

A vulnerability was determined in Freedesktop Poppler 26.06.0/26.07.0/26.08.0. This impacts the function FoFiTrueType::cvtSfnts of the file fofi/FoFiTrueType.cc. This manipulati...

CVE-2026-102620

A vulnerability was determined in Freedesktop Poppler 26.06.0/26.07.0/26.08.0. This impacts the function FoFiTrueType::c

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Integer overflow in Metrics in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially read memory outside the san...

CVE-2026-95308

Integer overflow in Metrics in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the re

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

libexpat versions 2.7.2 through 2.8.5 contain an integer overflow vulnerability in expat_realloc() function on 32-bit platforms when computing allocation sizes. Attackers supply...

CVE-2026-102633

libexpat versions 2.7.2 through 2.8.5 contain an integer overflow vulnerability in expat_realloc() function on 32-bit pl

历史摘要 · 未重新核验 · NVD

安全公告2026-09-29 发布INFO

libexpat 2.7.2 through 2.8.5 Integer Overflow in expat_realloc

CVE-2026-102633

libexpat versions 2.7.2 through 2.8.5 contain an integer overflow vulnerability in expat_realloc() function on 32-bit pl

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-29 发布INFO

NVIDIA DeepStream contains a vulnerability where an attacker could cause an integer overflow by supplying crafted tensor dimensions in a YAML configuration file. A successful e...

CVE-2026-65102

NVIDIA DeepStream contains a vulnerability where an attacker could cause an integer overflow by supplying crafted tenso

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

compress provides various compression algorithms. Prior to version 1.18.7, a signed integer overflow vulnerability in s2.NewDict() allows an attacker to bypass repeat index vali...

CVE-2026-63209

compress provides various compression algorithms. Prior to version 1.18.7, a signed integer overflow vulnerability in s2

历史摘要 · 未重新核验 · NVD

安全公告2026-09-29 发布INFO

Integer Overflow or Wraparound and Out-of-bounds Write in compress

CVE-2026-63209

compress provides various compression algorithms. Prior to version 1.18.7, a signed integer overflow vulnerability in s2

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-29 发布INFO

A security vulnerability has been detected in Trusted Domain Project OpenDMARC up to 1.4.2. This impacts an unknown function of the file libopendmarc/opendmarc_policy.c of the c...

CVE-2026-101279

A security vulnerability has been detected in Trusted Domain Project OpenDMARC up to 1.4.2. This impacts an unknown func

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-25 发布INFO

Esri LERC is an open-source image or raster format which supports rapid encoding and decoding for any pixel type. A Heap based Out-of-Bounds Write via Integer Overflow in LERC v...

CVE-2026-10758

Esri LERC is an open-source image or raster format which supports rapid encoding and decoding for any pixel type. A Heap

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-25 发布HIGH

Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

CVE-2026-100208

Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a networ

来源摘录 · NVD

安全公告2026-09-24 发布INFO

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19...

CVE-2026-93577

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 1

历史摘要 · 未重新核验 · GitHub Advisory