libpff through 20260926 contains an off-by-one bounds check in...
CVE-2026-116735
libpff through 20260926 contains an off-by-one bounds check in libpff_table_read_6c_record_entries that allows attackers
#cwe-193
共收录 69 条相关情报。
← 返回所有主题libpff through 20260926 contains an off-by-one bounds check in libpff_table_read_6c_record_entries that allows attackers to trigger a heap out-of-bounds read via crafted 6c tabl...
CVE-2026-116735
libpff through 20260926 contains an off-by-one bounds check in libpff_table_read_6c_record_entries that allows attackers
vLLM is an inference and serving engine for large language models. Prior to 0.32.0, vllm/tokenizers/hf.py computes max_token_id with an off-by-one upper bound, allowing a pre-to...
CVE-2026-115916
vLLM is an inference and serving engine for large language models. Prior to 0.32.0, vllm/tokenizers/hf.py computes max_t
A flaw was found in mod_qos. An off-by-one pointer calculation error occurs when merging request body parameters with an existing URL query, which truncates the query string dur...
CVE-2026-114460
A flaw was found in mod_qos. An off-by-one pointer calculation error occurs when merging request body parameters with an
unarr through 1.1.1 contains an off-by-one heap-based buffer overflow in tar_get_name() in tar...
CVE-2026-111273
unarr through 1.1.1 contains an off-by-one heap-based buffer overflow in tar_get_name() in tar/parse-tar.c, reachable th
Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.
CVE-2026-102857
Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.
OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 until 3.8.0, the t:jsDecode transformation in internal/transformations/js_decode...
CVE-2026-104774
OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 until 3.8.0, the t:jsDe
Unsigned integer underflow in wstrncat() in src/port.c in wolfSSL wolfSSH from v1.4.11 through v1.5.0 on non-Windows platforms allows an authenticated remote attacker to write o...
CVE-2026-83742
Unsigned integer underflow in wstrncat() in src/port.c in wolfSSL wolfSSH from v1.4.11 through v1.5.0 on non-Windows pla
In ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times because...
CVE-2026-106584
In ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times because of Daylight Saving mish
In ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times because of Daylight Saving mishandling. There can be a slightly more severe effect on us...
CVE-2026-106584
In ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times because of Daylight Saving mish
A flaw was found in SSSD. When configured to enforce account expiration using LDAP (Lightweight...
CVE-2026-104033
A flaw was found in SSSD. When configured to enforce account expiration using LDAP (Lightweight Directory Access Protoco
A flaw was found in SSSD. When configured to enforce account expiration using LDAP (Lightweight Directory Access Protocol) shadow attributes, SSSD fails to treat an expiration v...
CVE-2026-104033
A flaw was found in SSSD. When configured to enforce account expiration using LDAP (Lightweight Directory Access Protoco
A vulnerability was detected in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this vulnerability is the function opendmarc_util_cleanup in the library libopendmarc/o...
CVE-2026-101014
A vulnerability was detected in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this vulnerability is the func
Trusted Domain Project OpenDMARC DMARC Record opendmarc_util.c opendmarc_util_cleanup off-by-one
CVE-2026-101014
A vulnerability was detected in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this vulnerability is the func
A vulnerability was detected in Trusted Domain Project OpenDKIM up to 2.11.0. Affected is the function dkim_qp_decode of the file util.c of the component Decoder. The manipulati...
CVE-2026-100889
A vulnerability was detected in Trusted Domain Project OpenDKIM up to 2.11.0. Affected is the function dkim_qp_decode of
Off-by-one Error, Out-of-bounds Write vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Buffers. This issue affects Connext Professional: from 7.4.0 bef...
CVE-2026-18460
Off-by-one Error, Out-of-bounds Write vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Buffers
Netdata is an open source observability tool. Prior to 2.10.4, an authenticated child agent can send an oversized CHART SLOT value that str2ull_encoded passes to pluginsd_rrdset...
CVE-2026-83600
Netdata is an open source observability tool. Prior to 2.10.4, an authenticated child agent can send an oversized CHART
Netdata: Streaming protocol chart slot guard off-by-one allows ~16 GiB allocation request, crashing parent agent
CVE-2026-83600
Netdata is an open source observability tool. Prior to 2.10.4, an authenticated child agent can send an oversized CHART
Imager versions before 1.036 for Perl disclose uninitialised heap memory reading a paletted image with pixel indexes past its colour map in i_gpix_p and i_glin_p. The palette i...
CVE-2026-93018
Imager versions before 1.036 for Perl disclose uninitialised heap memory reading a paletted image with pixel indexes pas
Imager versions before 1.036 for Perl disclose uninitialised heap memory reading a paletted image with pixel indexes past its colour map in i_gpix_p and i_glin_p
CVE-2026-93018
Imager versions before 1.036 for Perl disclose uninitialised heap memory reading a paletted image with pixel indexes pas