#cwe-191

共收录 203 条相关情报。

← 返回所有主题
安全公告2026-06-17 发布INFO

Integer Underflow (Wrap or Wraparound) vulnerability in RTI Connext Micro (Core Libraries) allows...

CVE-2026-30803

Integer Underflow (Wrap or Wraparound) vulnerability in RTI Connext Micro (Core Libraries) allows Overread Buffers.This

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-12 发布INFO

NanaZip is the 7-Zip derivative intended for the modern Windows experience. From version 3.0.1000.0 to before version 6.0.1698.0, a heap out-of-bounds read exists in the Android...

CVE-2026-47222

NanaZip is the 7-Zip derivative intended for the modern Windows experience. From version 3.0.1000.0 to before version 6.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-11 发布MEDIUM

An integer underflow vulnerability was found in MIT krb5 in the berval2tl_data() function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c. The function performs an unsigned su...

CVE-2026-11850

An integer underflow vulnerability was found in MIT krb5 in the berval2tl_data() function in plugins/kdb/ldap/libkdb_lda

来源摘录 · NVD

漏洞预警2026-06-10 发布INFO

TDengine is an open source, time-series database optimized for Internet of Things devices. In versions 3.4.0.0 through 3.4.1.5, an unauthenticated remote attacker can crash the ...

CVE-2026-42542

TDengine is an open source, time-series database optimized for Internet of Things devices. In versions 3.4.0.0 through 3

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-10 发布INFO

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, when writing an IPTC output file a malic...

CVE-2026-42326

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-45469

Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2026-45463

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

Integer underflow (wrap or wraparound) in Windows Performance Monitor allows an unauthorized attacker to execute code over a network.

CVE-2026-42981

Integer underflow (wrap or wraparound) in Windows Performance Monitor allows an unauthorized attacker to execute code ov

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

Integer underflow (wrap or wraparound) in Windows NT OS Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-42980

Integer underflow (wrap or wraparound) in Windows NT OS Kernel allows an authorized attacker to elevate privileges local

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

A flaw was found in 389 Directory Server. The SMD5 password storage plugin performs unsigned integer underflow when computing salt length from a crafted password hash shorter th...

CVE-2026-11789

A flaw was found in 389 Directory Server. The SMD5 password storage plugin performs unsigned integer underflow when comp

历史摘要 · 未重新核验 · NVD

安全公告2026-06-07 发布INFO

Comodo Internet Security's firewall driver Inspect.sys contains an integer underflow in its IPv6...

CVE-2026-49494

Comodo Internet Security's firewall driver Inspect.sys contains an integer underflow in its IPv6 packet parser. The pars

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-07 发布INFO

Comodo Internet Security's firewall driver Inspect.sys contains an integer underflow in its IPv6 packet parser. The parser decrements an unsigned 64-bit payload-length value (ta...

CVE-2026-49494

Comodo Internet Security's firewall driver Inspect.sys contains an integer underflow in its IPv6 packet parser. The pars

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-05 发布INFO

Graphite before 1.3.15 has an integer underflow and resultant out-of-bounds write via Graphite actions, because slotat does not ensure that an offset is within the allowed slot-...

CVE-2026-50593

Graphite before 1.3.15 has an integer underflow and resultant out-of-bounds write via Graphite actions, because slotat d

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-02 发布INFO

wire-ios is an iOS client for the Wire secure messaging application. Prior to version 4.16.0, upon receiving a crafted malicious Proteus external message with an encrypted paylo...

CVE-2026-35049

wire-ios is an iOS client for the Wire secure messaging application. Prior to version 4.16.0, upon receiving a crafted m

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-01 发布INFO

FlexRIC v2.0.0 uses a uint16_t counter for xapp_id assignment but stores the value in uint32_t message fields. After 65,530+ E42_SETUP_REQUESTs, the 16-bit counter wraps around ...

CVE-2026-37231

FlexRIC v2.0.0 uses a uint16_t counter for xapp_id assignment but stores the value in uint32_t message fields. After 65,

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-26 发布INFO

MediaArea MediaInfoLib LXF parsing heap-based buffer overflow vulnerability

CVE-2026-25104

MediaArea MediaInfoLib LXF parsing heap-based buffer overflow vulnerability

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-21 发布INFO

An integer underflow in the volxlate function in Netatalk 3.0.0 through 4.4.2 allows a local privileged user to obtain limited information, modify limited data, or cause a minor...

CVE-2026-44069

An integer underflow in the volxlate function in Netatalk 3.0.0 through 4.4.2 allows a local privileged user to obtain l

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-21 发布INFO

An integer underflow in dsi_writeinit() in Netatalk 1.5.0 through 4.4.2 allows a remote unauthenticated attacker to cause a denial of service via a crafted DSI write request.

CVE-2026-44060

An integer underflow in dsi_writeinit() in Netatalk 1.5.0 through 4.4.2 allows a remote unauthenticated attacker to caus

历史摘要 · 未重新核验 · NVD

安全公告2026-05-18 发布INFO

iskorotkov/avro: Integer Overflow in Decoder

CVE-2026-46384

# Integer Overflow in Avro Decoder ## Summary Several Avro decoder paths read attacker-controlled 64-bit values from t

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-13 发布INFO

Crypt::Argon2 versions from 0.017 before 0.031 for Perl perform a heap out-of-bounds read in argon2_verify on empty encoded input. The auto-detect form of argon2_verify passes ...

CVE-2026-8463

Crypt::Argon2 versions from 0.017 before 0.031 for Perl perform a heap out-of-bounds read in argon2_verify on empty enco

历史摘要 · 未重新核验 · NVD