#cwe-416

共收录 2247 条相关情报。

← 返回所有主题

漏洞预警2026-09-25 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF snd_pcm_hw_params() and snd_pcm_hw_f...

CVE-2026-98116

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Serialize PCM mmap with buffer reallocat

来源摘录 · NVD

#cve #cwe-416

漏洞预警2026-09-25 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix listener task lifetime on netdev events The listener thread exits when its listening socket is s...

CVE-2026-98112

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix listener task lifetime on netdev events

来源摘录 · NVD

#cve #cwe-362 #cwe-416

安全公告2026-09-23 发布INFO

IBM Concert 1.0.0 through 3.0.0 references or accesses memory after it has been freed. This...

CVE-2026-6928

IBM Concert 1.0.0 through 3.0.0 references or accesses memory after it has been freed. This allows an attacker who can i

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-416 #severity:critical

漏洞预警2026-09-23 发布INFO

IBM Concert 1.0.0 through 3.0.0 references or accesses memory after it has been freed. This allows an attacker who can influence program execution or input may exploit this cond...

CVE-2026-6928

IBM Concert 1.0.0 through 3.0.0 references or accesses memory after it has been freed. This allows an attacker who can i

历史摘要 · 未重新核验 · NVD

#cve #cwe-416

漏洞预警2026-09-23 发布HIGH

A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions (Xincludes) with duplicate entity declarations, a use-after-free error can occur. T...

CVE-2026-96889

A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions (Xincludes) with duplicate

来源摘录 · NVD

#cve #cwe-416

漏洞预警2026-09-23 发布INFO

A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s JavaScript handling of PDF annotations. Reentrant page-event processing during annotation enumeration may rele...

CVE-2026-91818

A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s JavaScript handling of PDF annotations. Reentrant pag

历史摘要 · 未重新核验 · NVD

#cve #cwe-416

漏洞预警2026-09-23 发布INFO

A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of PDF annotations. Reentrant annotation deletion triggered by embedded JavaScript can cause the appl...

CVE-2026-91816

A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of PDF annotations. Reentrant annotation del

历史摘要 · 未重新核验 · NVD

#cve #cwe-416

漏洞预警2026-09-23 发布INFO

A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of malformed PDF form fields. Improper validation during field-name traversal may cause the applicati...

CVE-2026-91809

A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of malformed PDF form fields. Improper valid

历史摘要 · 未重新核验 · NVD

#cve #cwe-416

漏洞预警2026-09-23 发布INFO

A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of PDF form fields. Embedded JavaScript may access form-field references after the corresponding fiel...

CVE-2026-91806

A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of PDF form fields. Embedded JavaScript may

历史摘要 · 未重新核验 · NVD

#cve #cwe-416

漏洞预警2026-09-23 发布INFO

A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s PDF page-tree handling. A specially crafted PDF can trigger page-structure changes during rendering, causing t...

CVE-2026-91805

A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s PDF page-tree handling. A specially crafted PDF can t

历史摘要 · 未重新核验 · NVD

#cve #cwe-416

漏洞预警2026-09-23 发布INFO

A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of JavaScript array objects. A specially crafted PDF may cause the application to access a released o...

CVE-2026-91799

A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of JavaScript array objects. A specially cra

历史摘要 · 未重新核验 · NVD

#cve #cwe-416

漏洞预警2026-09-23 发布INFO

When opening a specially crafted PDF, Foxit PDF Editor/Reader executes scripts that modify annotation rich-text attributes containing malformed font data. During subsequent anno...

CVE-2026-91793

When opening a specially crafted PDF, Foxit PDF Editor/Reader executes scripts that modify annotation rich-text attribut

历史摘要 · 未重新核验 · NVD

#cve #cwe-416

漏洞预警2026-09-23 发布INFO

When processing a specially crafted PDF, Foxit PDF Editor/Reader may perform reentrant zoom and layout operations through page- and annotation-related JavaScript actions. This c...

CVE-2026-91792

When processing a specially crafted PDF, Foxit PDF Editor/Reader may perform reentrant zoom and layout operations throug

历史摘要 · 未重新核验 · NVD

#cve #cwe-416

漏洞预警2026-09-23 发布INFO

When processing a specially crafted PDF file, Foxit PDF Editor/Reader may encounter a reentrant execution condition involving JavaScript triggered by page-visibility events. Thi...

CVE-2026-91791

When processing a specially crafted PDF file, Foxit PDF Editor/Reader may encounter a reentrant execution condition invo

历史摘要 · 未重新核验 · NVD

#cve #cwe-416

漏洞预警2026-09-23 发布INFO

When rendering the page image, Foxit PDF Editor/Reader fails to perform validation on image objects whose optional content attributes are malformed. As a result, the program may...

CVE-2026-91790

When rendering the page image, Foxit PDF Editor/Reader fails to perform validation on image objects whose optional conte

历史摘要 · 未重新核验 · NVD

#cve #cwe-416

漏洞预警2026-09-22 发布INFO

Use After Free vulnerability in RTI Connext Professional (Security Plugins) allows File Manipulation. This issue affects Connext Professional: from 7.6.0 before 7.7.0.1.

CVE-2026-8849

Use After Free vulnerability in RTI Connext Professional (Security Plugins) allows File Manipulation. This issue affects

历史摘要 · 未重新核验 · NVD

#cve #cwe-416

漏洞预警2026-09-22 发布INFO

Net::IDN::Punycode versions from 2.301 before 2.590 for Perl allow a heap use-after-free via a decoded code point that reallocates the output buffer in decode_punycode. The XS ...

CVE-2026-74766

Net::IDN::Punycode versions from 2.301 before 2.590 for Perl allow a heap use-after-free via a decoded code point that r

历史摘要 · 未重新核验 · NVD

#cve #cwe-416

安全公告2026-09-22 发布INFO

Net::IDN::Punycode versions from 2.301 before 2.590 for Perl allow a heap use-after-free via a decoded code point that reallocates the output buffer in decode_punycode

CVE-2026-74766

Net::IDN::Punycode versions from 2.301 before 2.590 for Perl allow a heap use-after-free via a decoded code point that r

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-416

漏洞预警2026-09-21 发布INFO

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's HttpDatagramHandler caches the curre...

CVE-2026-73512

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4,

历史摘要 · 未重新核验 · NVD

#cve #cwe-416

漏洞预警2026-09-21 发布INFO

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's HTTP external-authorization client c...

CVE-2026-50572

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4,

历史摘要 · 未重新核验 · NVD

#cve #cwe-416