#cwe-617

共收录 216 条相关情报。

← 返回所有主题
漏洞预警2026-10-13 发布INFO

FreeRDP 3.0.0-beta1 before 3.32.0, when built with verbose WinPR assertions and using smartcard emulation, has a reachable assertion: the emulated SCardStatusA passes a NULL rea...

CVE-2026-109678

FreeRDP 3.0.0-beta1 before 3.32.0, when built with verbose WinPR assertions and using smartcard emulation, has a reachab

历史摘要 · 未重新核验 · NVD

安全公告2026-10-13 发布INFO

FreeRDP 3.11.0 before 3.32.0 Reachable Assertion via AVC444 Odd Region Width

CVE-2026-109946

FreeRDP 3.11.0 before 3.32.0 does not validate that AVC444 and AVC444v2 region widths are even before YUV444 conversion,

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-13 发布INFO

FreeRDP 3.0.0 before 3.32.0 Reachable Assertion via Stale Smartcard Handle

CVE-2026-109944

FreeRDP 3.0.0 before 3.32.0 does not remove card handles when Emulate_SCardReleaseContext releases a smartcard-emulation

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-13 发布INFO

FreeRDP 3.0.0-beta1 before 3.32.0 Reachable Assertion via Emulated SCardStatusA

CVE-2026-109678

FreeRDP 3.0.0-beta1 before 3.32.0, when built with verbose WinPR assertions and using smartcard emulation, has a reachab

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-10-12 发布INFO

ZcashFoundation Zebra 6.4.0 before 6.4.2 parses version 6 transactions carrying a pre-NU6.3 consensus branch ID, but the size computation during UnminedTx construction treats re...

CVE-2026-109363

ZcashFoundation Zebra 6.4.0 before 6.4.2 parses version 6 transactions carrying a pre-NU6.3 consensus branch ID, but the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

Gitoxide gix-pack before 0.75.0 contains a denial of service vulnerability that allows malicious remotes to crash fetch operations by sending crafted thin-pack OFS_DELTA entries...

CVE-2026-109350

Gitoxide gix-pack before 0.75.0 contains a denial of service vulnerability that allows malicious remotes to crash fetch

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

gitoxide gix-pack before 0.75.0 contains a reachable assertion in BytesToEntriesIter::new_from_header: the pack header decoder accepts version 3, but a release-enabled assert_eq...

CVE-2026-109349

gitoxide gix-pack before 0.75.0 contains a reachable assertion in BytesToEntriesIter::new_from_header: the pack header d

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

FreeRDP 3.11.0 before 3.32.1 contains a reachable assertion vulnerability in urb_isoch_transfer that allows malicious RDP servers to crash clients by sending unvalidated OutputB...

CVE-2026-109240

FreeRDP 3.11.0 before 3.32.1 contains a reachable assertion vulnerability in urb_isoch_transfer that allows malicious RD

历史摘要 · 未重新核验 · NVD

安全公告2026-10-12 发布INFO

Zebra 6.4.0 before 6.4.2 Denial of Service via Malformed v6 Transaction

CVE-2026-109363

ZcashFoundation Zebra 6.4.0 before 6.4.2 parses version 6 transactions carrying a pre-NU6.3 consensus branch ID, but the

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-12 发布INFO

Gitoxide gix-pack before 0.75.0 Denial of Service via OFS_DELTA Base Distance

CVE-2026-109350

Gitoxide gix-pack before 0.75.0 contains a denial of service vulnerability that allows malicious remotes to crash fetch

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-12 发布INFO

gix-pack before 0.75.0 Reachable Assertion DoS via Pack Version 3 Header

CVE-2026-109349

gitoxide gix-pack before 0.75.0 contains a reachable assertion in BytesToEntriesIter::new_from_header: the pack header d

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-10-11 发布INFO

The Link Layer Control Procedure (LLCP) implementation of the Zephyr software Bluetooth LE Controller retains the receive node that carried an accepted LL_PHY_UPDATE_IND so that...

CVE-2026-19740

The Link Layer Control Procedure (LLCP) implementation of the Zephyr software Bluetooth LE Controller retains the receiv

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-11 发布INFO

The Bluetooth Link Layer control procedure code in subsys/bluetooth/controller/ll_sw/ull_llcp_conn_upd.c retains the received RX node while a Connection Update / Connection Para...

CVE-2026-19739

The Bluetooth Link Layer control procedure code in subsys/bluetooth/controller/ll_sw/ull_llcp_conn_upd.c retains the rec

历史摘要 · 未重新核验 · NVD

安全公告2026-10-11 发布INFO

Bluetooth LE Controller: retained RX node leak and reachable assertion in the PHY Update procedure

CVE-2026-19740

The Link Layer Control Procedure (LLCP) implementation of the Zephyr software Bluetooth LE Controller retains the receiv

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-10-09 发布INFO

RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. From version 2023.07 through version 2026.07, nanocoa...

CVE-2026-107838

RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded syste

历史摘要 · 未重新核验 · NVD

安全公告2026-10-09 发布INFO

RIOT: nanocoap_fileserver ignores response initialization failure, leading to reachable assertion

CVE-2026-107838

RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded syste

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-10-09 发布INFO

Navigating to a certain URL on the switch’s web server causes the switch to reboot. This can be automated using a tool like curl to create DoS conditions where the switch consta...

CVE-2026-39453

Navigating to a certain URL on the switch’s web server causes the switch to reboot. This can be automated using a tool l

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-09 发布INFO

Open5GS through 2.8.0 contains a reachable assertion vulnerability in mme_gn_handle_sgsn_context_request() that allows remote unauthenticated attackers to crash the MME via malf...

CVE-2026-108105

Open5GS through 2.8.0 contains a reachable assertion vulnerability in mme_gn_handle_sgsn_context_request() that allows r

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-09 发布INFO

A reachable assertion in the illumos bhyve instruction emulator allows a guest to panic the host. When emulating a REP-prefixed MOVS or STOS instruction that accesses guest MMIO...

CVE-2026-102916

A reachable assertion in the illumos bhyve instruction emulator allows a guest to panic the host. When emulating a REP-p

历史摘要 · 未重新核验 · NVD

安全公告2026-10-09 发布INFO

Reachable assertion in illumos bhyve REP string instruction emulation allows guest to panic host

CVE-2026-102916

A reachable assertion in the illumos bhyve instruction emulator allows a guest to panic the host. When emulating a REP-p

历史摘要 · 未重新核验 · OSV.dev