#cwe-617

共收录 216 条相关情报。

← 返回所有主题

漏洞预警2026-10-30 发布MEDIUM

Tesseract is an open source OCR engine. Prior to 5.5.4, WeightMatrix::DeSerialize trusts a mode byte from a traineddata LSTM network and calls WeightMatrix::DeSerializeOld when ...

CVE-2026-119339

Tesseract is an open source OCR engine. Prior to 5.5.4, WeightMatrix::DeSerialize trusts a mode byte from a traineddata

来源摘录 · NVD

#cve #cwe-20 #cwe-617

漏洞预警2026-10-29 发布MEDIUM

Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service vulnerability where dropping the Future returned by TypedFunc::call_async can panic the host....

CVE-2026-119142

Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service vulnerability where dropping the Fut

来源摘录 · NVD

#cve #cwe-617

漏洞预警2026-10-29 发布MEDIUM

Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a leftover assertion in component::Func::call that rejects guest exports using the async ABI option. An attacker ...

CVE-2026-119139

Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a leftover assertion in component::Func::call that rejec

来源摘录 · NVD

#cve #cwe-617

漏洞预警2026-10-29 发布MEDIUM

Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service vulnerability that allows pending calls to trigger an assertion failure after a trap poisons ...

CVE-2026-119138

Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service vulnerability that allows pending ca

来源摘录 · NVD

#cve #cwe-617

漏洞预警2026-10-29 发布MEDIUM

Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 panics when the host reads a component model stream as a different Rust item type than it was created with, because the ho...

CVE-2026-119135

Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 panics when the host reads a component model stream as a differen

来源摘录 · NVD

#cve #cwe-617

漏洞预警2026-10-29 发布MEDIUM

Wasmtime from 49.0.0 before 49.0.3 contains a denial-of-service vulnerability that allows a WebAssembly guest to trigger a host panic by transcoding overlapping strings in fused...

CVE-2026-119132

Wasmtime from 49.0.0 before 49.0.3 contains a denial-of-service vulnerability that allows a WebAssembly guest to trigger

来源摘录 · NVD

#cve #cwe-617

安全公告2026-10-27 发布INFO

undici vulnerable to Denial of Service via TLS 1.2 certificate-changing renegotiation

CVE-2026-87018

## Impact undici crashes the client process when a TLS 1.2 server renegotiates after the connection is established and

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #npm #cwe-248 #cwe-617 #severity:high

漏洞预警2026-10-26 发布INFO

A security flaw has been discovered in ggml-org llama.cpp up to 0.7.0. Affected by this vulnerability is an unknown functionality of the file src/llama-sampler.cpp of the compon...

CVE-2026-116467

A security flaw has been discovered in ggml-org llama.cpp up to 0.7.0. Affected by this vulnerability is an unknown func

历史摘要 · 未重新核验 · NVD

#cve #cwe-617

漏洞预警2026-10-26 发布MEDIUM

vLLM is an inference and serving engine for large language models. From 0.11.1 until 0.32.0, the DeepSeek-OCR, DeepSeek-OCR-2, and Unlimited-OCR image path allows a remote clien...

CVE-2026-115914

vLLM is an inference and serving engine for large language models. From 0.11.1 until 0.32.0, the DeepSeek-OCR, DeepSeek-

来源摘录 · NVD

#cve #cwe-617

漏洞预警2026-10-21 发布HIGH

Reachable exit in NTPsec ntpd 1.1.4 through 1.2.5 allows a remote attacker to terminate the daemon via an NTS request with excess NTS Cookie Placeholder extension fields.

CVE-2026-102483

Reachable exit in NTPsec ntpd 1.1.4 through 1.2.5 allows a remote attacker to terminate the daemon via an NTS request wi

来源摘录 · NVD

#cve #cwe-617

漏洞预警2026-10-21 发布HIGH

A reachable assertion in Apache bRPC (version < 1.18.0) on all platforms allows a malicious remote peer to crash the process, resulting in denial of service. Root Cause: When a...

CVE-2026-82425

A reachable assertion in Apache bRPC (version < 1.18.0) on all platforms allows a malicious remote peer to crash the pro

来源摘录 · NVD

#cve #cwe-617

漏洞预警2026-10-21 发布HIGH

Enforceable assertion in the streaming feature of Apache bRPC (version < 1.18.0) on all platforms allows a remote attacker to crash the server process by sending a malformed str...

CVE-2026-82210

Enforceable assertion in the streaming feature of Apache bRPC (version 0) and unconditionally asserts CHECK(buf.IsEmpty

来源摘录 · NVD

#cve #cwe-617

漏洞预警2026-10-21 发布HIGH

A reachable-assertion flaw in the HPACK header-compression decoder of the HTTP/2 (h2/gRPC) stack in Apache bRPC (version < 1.18.0) on all platforms allows a remote attacker to c...

CVE-2026-78048

A reachable-assertion flaw in the HPACK header-compression decoder of the HTTP/2 (h2/gRPC) stack in Apache bRPC (version

来源摘录 · NVD

#cve #cwe-617

漏洞预警2026-10-21 发布CRITICAL

The Redis server command parser in Apache bRPC accepts an empty RESP array as a command header. A remote unauthenticated attacker who can reach a bRPC server with Redis service ...

CVE-2026-56388

The Redis server command parser in Apache bRPC accepts an empty RESP array as a command header. A remote unauthenticated

来源摘录 · NVD

#cve #cwe-252 #cwe-617 #cwe-787

漏洞预警2026-10-20 发布INFO

IBM Cyber Fraud 1.0.0 through 1.0.2 has a missing secure attribute allowing sensitive cookies to be transmitted over unencrypted connections, potentially enabling an attacker to...

CVE-2026-9825

IBM Cyber Fraud 1.0.0 through 1.0.2 has a missing secure attribute allowing sensitive cookies to be transmitted over une

历史摘要 · 未重新核验 · NVD

#cve #cwe-617

漏洞预警2026-10-20 发布INFO

A vulnerability could allow an attacker to send a crafted message to trigger an assertion fault, causing the service to crash.

CVE-2026-43853

A vulnerability could allow an attacker to send a crafted message to trigger an assertion fault, causing the service to

历史摘要 · 未重新核验 · NVD

#cve #cwe-617

漏洞预警2026-10-13 发布INFO

A security issue was discovered in MongoDB mongos (the sharded cluster router) where an authenticated user with readWrite privileges could crash the mongos process by crafting a...

CVE-2026-96299

A security issue was discovered in MongoDB mongos (the sharded cluster router) where an authenticated user with readWrit

历史摘要 · 未重新核验 · NVD

#cve #cwe-617

漏洞预警2026-10-13 发布INFO

A security issue was discovered in MongoDB mongos (the sharded cluster router) where an authenticated user with readWrite privileges could crash the mongos process by crafting a...

CVE-2026-104005

A security issue was discovered in MongoDB mongos (the sharded cluster router) where an authenticated user with readWrit

历史摘要 · 未重新核验 · NVD

#cve #cwe-617

漏洞预警2026-10-13 发布INFO

FreeRDP 3.11.0 before 3.32.0 does not validate that AVC444 and AVC444v2 region widths are even before YUV444 conversion, so an odd width reaches an assertion and aborts the clie...

CVE-2026-109946

FreeRDP 3.11.0 before 3.32.0 does not validate that AVC444 and AVC444v2 region widths are even before YUV444 conversion,

历史摘要 · 未重新核验 · NVD

#cve #cwe-617

漏洞预警2026-10-13 发布INFO

FreeRDP 3.0.0 before 3.32.0 does not remove card handles when Emulate_SCardReleaseContext releases a smartcard-emulation context, so Emulate_SCardTransmit later looks up the del...

CVE-2026-109944

FreeRDP 3.0.0 before 3.32.0 does not remove card handles when Emulate_SCardReleaseContext releases a smartcard-emulation

历史摘要 · 未重新核验 · NVD

#cve #cwe-617