#cwe-191

共收录 203 条相关情报。

漏洞预警2026-07-28 发布INFO

gopacket provides packet processing capabilities for Go. In version 1.6.0 and earlier, the Diameter AVP decoder computes an AVP data length by subtracting a fixed header size fr...

CVE-2026-54345

gopacket provides packet processing capabilities for Go. In version 1.6.0 and earlier, the Diameter AVP decoder computes

历史摘要 · 未重新核验 · NVD

#cve #cwe-191 #cwe-770

安全公告2026-07-28 发布INFO

GoPacket's Diameter AVP decoder: uint32 underflow on vendor header size leads to unbounded ~4 GiB allocation (unauthenticated remote DoS)

CVE-2026-54345

gopacket provides packet processing capabilities for Go. In version 1.6.0 and earlier, the Diameter AVP decoder computes

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-191 #cwe-770

漏洞预警2026-07-28 发布INFO

schreibfaul1 ESP32-audioI2S v3.4.5 has an integer underflow vulnerability in the MP3Decoder::GetBits() function of the MP3 decoder due to unchecked bit reading operations. The l...

CVE-2026-51254

schreibfaul1 ESP32-audioI2S v3.4.5 has an integer underflow vulnerability in the MP3Decoder::GetBits() function of the M

历史摘要 · 未重新核验 · NVD

#cve #cwe-191

漏洞预警2026-07-28 发布INFO

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] The directory and Rock Ridge / SUSP walk in lib...

CVE-2026-42495

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to whi

历史摘要 · 未重新核验 · NVD

#cve #cwe-191

漏洞预警2026-07-27 发布INFO

Integer Underflow (Wrap or Wraparound) vulnerability in erlang otp erlang/otp (erts modules), erlang otp erts (erts modules) allows Forced Integer Overflow, Excessive Allocation...

CVE-2026-54890

Integer Underflow (Wrap or Wraparound) vulnerability in erlang otp erlang/otp (erts modules), erlang otp erts (erts modu

历史摘要 · 未重新核验 · NVD

#cve #cwe-191 #cwe-789 #cwe-1284

安全公告2026-07-23 发布INFO

FFmpeg through 8.1.2 contains an out-of-bounds write vulnerability that allows attackers to cause...

CVE-2026-65704

FFmpeg through 8.1.2 contains an out-of-bounds write vulnerability that allows attackers to cause heap corruption by sup

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-191 #severity:high

漏洞预警2026-07-22 发布INFO

libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.19.0 through 1.21.2 have a heap OOB read in ImageItem_Grid::decode_grid_tile via irot-induced tile-coordin...

CVE-2026-48029

libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.19.0 through 1.21.2 have a heap OOB read in Image

历史摘要 · 未重新核验 · NVD

#cve #cwe-125 #cwe-191

安全公告2026-07-22 发布INFO

libheif: heap OOB read in ImageItem_Grid::decode_grid_tile via irot-induced tile-coordinate underflow

CVE-2026-48029

libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.19.0 through 1.21.2 have a heap OOB read in Image

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-125 #cwe-191

漏洞预警2026-07-19 发布CRITICAL

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Ignore Port I/O requests of length '0' Explicitly ignore Port I/O requests of length '0' (or coun...

CVE-2026-63940

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Ignore Port I/O requests of length '0' E

来源摘录 · NVD

#cve #cwe-190 #cwe-191

漏洞预警2026-07-17 发布INFO

Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions 3.0.0 and above, prior to 4.14.5, a size_t integer underflow in os_cryp...

CVE-2026-44251

Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions 3.0.0 and abov

历史摘要 · 未重新核验 · NVD

#cve #cwe-122 #cwe-191

安全公告2026-07-17 发布INFO

Wazuh : size_t underflow in msgs.c ReadSecMSG causes wazuh-remoted DoS and potential heap overflow via crafted agent message

CVE-2026-44251

Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions 3.0.0 and abov

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-122 #cwe-191

安全公告2026-07-15 发布INFO

CVE-2026-40954 is an integer underflow vulnerability in the traffic parsing function of Secure...

CVE-2026-40954

CVE-2026-40954 is an integer underflow vulnerability in the traffic parsing function of Secure Access clients prior to 1

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-191 #severity:low

安全公告2026-07-15 发布INFO

CVE-2026-40955 is an integer underflow vulnerability in the traffic parsing function of Secure...

CVE-2026-40955

CVE-2026-40955 is an integer underflow vulnerability in the traffic parsing function of Secure Access clients prior to 1

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-191 #severity:low

漏洞预警2026-07-15 发布INFO

CVE-2026-40955 is an integer underflow vulnerability in the traffic parsing function of Secure Access clients prior to 14.55. Attackers with intimate knowledge of and total cont...

CVE-2026-40955

CVE-2026-40955 is an integer underflow vulnerability in the traffic parsing function of Secure Access clients prior to 1

历史摘要 · 未重新核验 · NVD

#cve #cwe-191

漏洞预警2026-07-15 发布INFO

CVE-2026-40954 is an integer underflow vulnerability in the traffic parsing function of Secure Access clients prior to 14.55. Attackers with intimate knowledge of and total cont...

CVE-2026-40954

CVE-2026-40954 is an integer underflow vulnerability in the traffic parsing function of Secure Access clients prior to 1

历史摘要 · 未重新核验 · NVD

#cve #cwe-191

安全公告2026-07-15 发布INFO

CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability...

CVE-2026-48298

CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an a

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-191 #severity:medium

安全公告2026-07-15 发布INFO

CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability...

CVE-2026-48296

CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an a

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-191 #severity:medium

漏洞预警2026-07-14 发布INFO

CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an application denial-of-service. An attacker could exploit t...

CVE-2026-48298

CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an a

历史摘要 · 未重新核验 · NVD

#cve #cwe-191

漏洞预警2026-07-14 发布INFO

CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an application denial-of-service. An attacker could exploit t...

CVE-2026-48296

CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an a

历史摘要 · 未重新核验 · NVD

#cve #cwe-191

漏洞预警2026-07-14 发布INFO

Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-55039

Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally

历史摘要 · 未重新核验 · NVD

#cve #cwe-122 #cwe-191