共收录 154 条相关情报。
← 返回所有主题CVE-2026-120246
FFmpeg 4.4 through 9.0.2 contains a use of uninitialized variable vulnerability in the CDXL decoder that leaks stack mem
CVE-2026-120243
FFmpeg 2.0 through 9.0.2 contains a use of uninitialized variable vulnerability in the Go2Meeting decoder that allows at
CVE-2026-112898
``` ============================================================================ Image.quantize() with empty palette lea
CVE-2026-112893
### Summary When text is drawn with a non-zero stroke width, Pillow creates a FreeType stroker and then loads each glyph
CVE-2026-94018
The Web add-on's HTTP server dereferences and releases an uninitialized pointer when it detects a `Content-Length` under
CVE-2026-92449
`_gx_binres_pixelmap_table_load()` in the GUIX binary resource (theme) loader indexes the pixelmap table with a value re
CVE-2026-113400
Uninitialized memory in the Audio/Video: cubeb component. This vulnerability was fixed in Firefox 158.0.1 and Thunderbir
CVE-2026-112898
Pillow is a Python imaging library. From 9.1.0 until 13.0.0, Pillow can disclose uninitialized stack memory when Image.q
CVE-2026-112893
Pillow is a Python imaging library. From 10.0.0 until 13.0.0, Pillow can free an invalid glyph pointer during FreeType r
CVE-2026-110143
Use of uninitialized variable in ThirdParty lmza_sdk in Google Chrome prior to 155.0.8059.79 allowed a remote attacker t
CVE-2026-109828
A vulnerability was found in libsndfile up to 1.2.2. This issue affects the function wavlike_subchunk_parse of the file
CVE-2026-109828
A vulnerability was found in libsndfile up to 1.2.2. This issue affects the function wavlike_subchunk_parse of the file
CVE-2026-109854
A flaw was found in m17n-lib. An attacker who supplies crafted input to an application processing ISO-2022 encoded text
CVE-2026-55280
In multiple locations, there is a possible out-of-bounds write due to uninitialized data. This could lead to remote esca
CVE-2026-66859
NULL Pointer Dereference, Use of Uninitialized Variable vulnerability in Apache Thrift c_glib bindings. This issue af
CVE-2026-18397
This vulnerability enables unauthenticated remote code execution (RCE) on a victim's machine by exploiting a combination
CVE-2026-95332
Use of uninitialized variable in Tint in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to
CVE-2026-100806
Uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox ESR 153.4 and Firefox 15
CVE-2026-100802
Uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 157.
CVE-2026-100799
Uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 157.