ImageMagick: Heap Buffer Over-Write of a single byte in the JP2 encoder.
CVE-2026-46559
An incorrect check in the JP2 will result in an heap buffer over-write of a single byte when specifying certain options.
#cwe-193
共收录 69 条相关情报。
← 返回所有主题ImageMagick: Out-of-Bounds Read of a single byte in meta encoder
CVE-2026-45358
An of by one in the meta encoder could result in an out of bounds read of a single byte in the meta encoder.
Tor before 0.4.9.7 has an out-of-bounds read by one byte via a malformed BEGIN cell, aka TROVE-2026-007.
CVE-2026-44603
Tor before 0.4.9.7 has an out-of-bounds read by one byte via a malformed BEGIN cell, aka TROVE-2026-007.
An off-by-one error (CWE-193) in the ConsumeUnit16Array and ConsumeUnit64Array functions in...
CVE-2026-7572
An off-by-one error (CWE-193) in the ConsumeUnit16Array and ConsumeUnit64Array functions in Velocidex Velociraptor befor
An off-by-one error (CWE-193) in the ConsumeUnit16Array and ConsumeUnit64Array functions in Velocidex Velociraptor before version 0.76.5 on Windows and Linux allows a local atta...
CVE-2026-7572
CVE-2026-7572 是一个存在于 Velocidex Velociraptor 中的 off-by-one 错误（CWE-193），影响 Windows 和 Linux 平台上的 0.76.5 之前版本。该漏洞位于 ConsumeU
Postfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9 sometimes allows a buffer over...
CVE-2026-43964
Postfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9 sometimes allows a buffer over-read and process crash v
Postfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9 sometimes allows a buffer over-read and process crash via an enhanced status code that lacks text after the thir...
CVE-2026-43964
Postfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9 sometimes allows a buffer over-read and process crash v
mutt before 2.3.2 sometimes truncates the hash_passwd by one byte for IMAP auth_cram MD5 digest.
CVE-2026-43860
mutt before 2.3.2 sometimes truncates the hash_passwd by one byte for IMAP auth_cram MD5 digest.
Netfoil has incorrect allowlist enforcement
### Summary Rules could be bypassed by changing the first character: `example.com` could be be bypassed by e.g. `fxample