HTSlib through 1.24 contains a heap out-of-bounds write and read vulnerability in...
CVE-2026-116742
HTSlib through 1.24 contains a heap out-of-bounds write and read vulnerability in bgzf_index_load_hfile() in bgzf.c that
#cwe-197
共收录 43 条相关情报。
← 返回所有主题HTSlib through 1.24 contains a heap out-of-bounds write and read vulnerability in bgzf_index_load_hfile() in bgzf.c that allows attackers to corrupt heap memory by supplying a c...
CVE-2026-116742
HTSlib through 1.24 contains a heap out-of-bounds write and read vulnerability in bgzf_index_load_hfile() in bgzf.c that
Ghidra before 12.2 contains a numeric truncation vulnerability in PackedDecode::skipAttribute and...
CVE-2026-116012
Ghidra before 12.2 contains a numeric truncation vulnerability in PackedDecode::skipAttribute and skipAttributeRemaining
Wasmtime: Bit-packing in Cranelift compiler causes silent overflow and miscompilation
CVE-2026-115889
## Summary In Wasmtime prior to v43, the Cranelift compiler backend bit-packs its SSA value indices in a way that can r
Numeric truncation error in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
CVE-2026-70123
Numeric truncation error in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
CVE-2026-102225
Out-of-bounds read in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
Heap-based buffer overflow in Windows Client License Service allows an authorized attacker to elevate privileges locally.
CVE-2026-100201
Heap-based buffer overflow in Windows Client License Service allows an authorized attacker to elevate privileges locally
apko allows users to build and publish OCI container images built from apk packages. From version 0.2.0 to before version 1.4.5, UserEntry.Parse and GroupEntry.Parse in pkg/pass...
CVE-2026-105768
apko allows users to build and publish OCI container images built from apk packages. From version 0.2.0 to before versio
Nezha before 2.3.8 fails to validate alert rule type and duration bounds, allowing authenticated...
CVE-2026-101085
Nezha before 2.3.8 fails to validate alert rule type and duration bounds, allowing authenticated non-administrator users
The OCI delta stream parser read sizes as guint64 but passed them to GLib I/O and allocation functions expecting gsize (32 bits on 32-bit systems), causing undersized allocation...
CVE-2026-96280
The OCI delta stream parser read sizes as guint64 but passed them to GLib I/O and allocation functions expecting gsize (
Nezha before 2.3.8 fails to validate alert rule type and duration bounds, allowing authenticated non-administrator users to create malformed rules that trigger unrecovered panic...
CVE-2026-101085
Nezha before 2.3.8 fails to validate alert rule type and duration bounds, allowing authenticated non-administrator users
Nezha before 2.3.8 Denial of Service via Alert Rule
CVE-2026-101085
Nezha before 2.3.8 fails to validate alert rule type and duration bounds, allowing authenticated non-administrator users
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, the SIP parser in rust/src/sip/pars...
CVE-2026-63449
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Fr
Out-of-bounds read (buffer over-read) in the HTTP Cache-Control response header parsing in the QtNetwork module in Qt Group Qt 6.0.0 through 6.8.8, and 6.9.0 through 6.11.1, all...
CVE-2026-76151
Out-of-bounds read (buffer over-read) in the HTTP Cache-Control response header parsing in the QtNetwork module in Qt Gr
Numeric truncation error in Internet Storage Name Service allows an authorized attacker to disclose information locally.
CVE-2026-68895
Numeric truncation error in Internet Storage Name Service allows an authorized attacker to disclose information locally.
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.
CVE-2026-68880
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.
An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::MessageEncoder wrote a DNS label's length into a single octet without checking its range. A label l...
CVE-2026-80213
An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::MessageEncoder wrote a DNS label's length
CVE-2026-80213
CVE-2026-80213
An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::MessageEncoder wrote a DNS label's length
A flaw was found in libsoup's SoupServer HTTP Range header processing. The sort_ranges() comparator in soup-message-headers.c truncates a 64-bit subtraction result to 32-bit int...
CVE-2026-77014
A flaw was found in libsoup's SoupServer HTTP Range header processing. The sort_ranges() comparator in soup-message-head
nnn stores homelen variable as uchar_t, which can only represent values in the range 0-255. An attacker who can influence the victim's execution environment can provide an arbit...
CVE-2026-65610
nnn stores homelen variable as uchar_t, which can only represent values in the range 0-255. An attacker who can influenc