#cwe-190

共收录 699 条相关情报。

← 返回所有主题
漏洞预警2026-09-24 发布CRITICAL

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could hav...

CVE-2026-93577

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 1

来源摘录 · NVD / OSV.dev

漏洞预警2026-09-23 发布INFO

Integer overflow in the packet buffer growth logic in PgBouncer through 1.25.2 allows an unauthenticated remote attacker to cause a denial of service. Sufficiently large input m...

CVE-2026-6668

Integer overflow in the packet buffer growth logic in PgBouncer through 1.25.2 allows an unauthenticated remote attacker

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

alsa-lib through 1.2.16.1 computes combined topology element size using 32-bit arithmetic in src/topology/ctl.c, allowing integer overflow that defeats bounds checks. Attackers ...

CVE-2026-96674

alsa-lib through 1.2.16.1 computes combined topology element size using 32-bit arithmetic in src/topology/ctl.c, allowin

历史摘要 · 未重新核验 · NVD

安全公告2026-09-23 发布INFO

alsa-lib through 1.2.16.1 Integer Overflow via Topology File

CVE-2026-96674

alsa-lib through 1.2.16.1 computes combined topology element size using 32-bit arithmetic in src/topology/ctl.c, allowin

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-23 发布INFO

FFmpeg before 9.0 has a signed integer overflow in libavformat/mov.c. In mov_read_ispe(), uint32_t width/height values from a crafted HEIF ispe box are stored into signed int fi...

CVE-2026-96611

FFmpeg before 9.0 has a signed integer overflow in libavformat/mov.c. In mov_read_ispe(), uint32_t width/height values f

历史摘要 · 未重新核验 · NVD

安全公告2026-09-23 发布INFO

CVE-2026-96611

CVE-2026-96611

FFmpeg before 9.0 has a signed integer overflow in libavformat/mov.c. In mov_read_ispe(), uint32_t width/height values f

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-22 发布INFO

CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vuln...

CVE-2026-89277

CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an applicati

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-22 发布INFO

Integer Overflow or Wraparound, Improper Access Control vulnerability in RTI Connext Professional (Core Libraries) allows Shared Resource Manipulation. This issue affects Connex...

CVE-2026-18462

Integer Overflow or Wraparound, Improper Access Control vulnerability in RTI Connext Professional (Core Libraries) allow

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-22 发布INFO

Netdata is an open source observability tool. Prior to 2.10.4, an authenticated child agent can send an oversized DIMENSION SLOT value that str2ull_encoded passes to pluginsd_rr...

CVE-2026-83601

Netdata is an open source observability tool. Prior to 2.10.4, an authenticated child agent can send an oversized DIMENS

历史摘要 · 未重新核验 · NVD

安全公告2026-09-22 发布INFO

Netdata: Streaming protocol dimension slot has no upper-bound guard, allowing integer overflow and out-of-bounds write

CVE-2026-83601

Netdata is an open source observability tool. Prior to 2.10.4, an authenticated child agent can send an oversized DIMENS

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-22 发布INFO

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's CPython bytecode .pyc marshal parser was vulnerable because the CPython ...

CVE-2026-81878

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's CPython bytecod

历史摘要 · 未重新核验 · NVD

安全公告2026-09-22 发布INFO

radare2: Integer overflow causes heap out-of-bounds write in radare2 PYC parser

CVE-2026-81878

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's CPython bytecod

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-22 发布HIGH

A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned operator new in the C++ library. This vulnerability could lead to an und...

CVE-2026-95619

A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned operator new in

来源摘录 · NVD

漏洞预警2026-09-22 发布INFO

Net::IDN::Punycode versions before 2.590 for Perl allow an out-of-bounds read via integer overflow of the delta accumulator in encode_punycode. The XS backend keeps the punycod...

CVE-2026-74765

Net::IDN::Punycode versions before 2.590 for Perl allow an out-of-bounds read via integer overflow of the delta accumula

历史摘要 · 未重新核验 · NVD

安全公告2026-09-22 发布INFO

Net::IDN::Punycode versions before 2.590 for Perl allow an out-of-bounds read via integer overflow of the delta accumulator in encode_punycode

CVE-2026-74765

Net::IDN::Punycode versions before 2.590 for Perl allow an out-of-bounds read via integer overflow of the delta accumula

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-20 发布INFO

A security vulnerability has been detected in SerenityOS up to 3d83e4509fd20d7438e1ae8470ffe668c136229c. Affected by this vulnerability is the function decode_bmp_pixel_data of ...

CVE-2026-94030

A security vulnerability has been detected in SerenityOS up to 3d83e4509fd20d7438e1ae8470ffe668c136229c. Affected by thi

历史摘要 · 未重新核验 · NVD

安全公告2026-09-18 发布INFO

IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute...

CVE-2026-11725

IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-18 发布INFO

FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.5.0 until 2.5.6, the native DLS parser validates ptbl chunks with the unsigned expression cu...

CVE-2026-61723

FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.5.0 until 2.5.6, the native DLS par

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-18 发布INFO

FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.5.0 until 2.5.6, the native DLS parser validates articulation chunks using the unsigned expr...

CVE-2026-61722

FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.5.0 until 2.5.6, the native DLS par

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-18 发布INFO

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.17 and 8.0.6, HTTP SWF decompression with the ...

CVE-2026-57226

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Pr

历史摘要 · 未重新核验 · NVD