#cwe-617

共收录 216 条相关情报。

← 返回所有主题
漏洞预警2026-09-08 发布INFO

A security issue in MongoDB Server allows an unauthenticated network user to cause a denial of service on a specific type of replica set member. The server contains an assertion...

CVE-2026-82064

A security issue in MongoDB Server allows an unauthenticated network user to cause a denial of service on a specific typ

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

An internal aggregation expression in MongoDB Server was incorrectly registered as accessible to any authenticated user rather than being restricted to internal cluster operatio...

CVE-2026-82059

An internal aggregation expression in MongoDB Server was incorrectly registered as accessible to any authenticated user

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

The $regexFindAll expression can be used by an authenticated user who can run aggregation pipeline stages to crash a MongoDB server (mongod). Under certain specific conditions t...

CVE-2026-82052

The $regexFindAll expression can be used by an authenticated user who can run aggregation pipeline stages to crash a Mon

历史摘要 · 未重新核验 · NVD

安全公告2026-09-07 发布INFO

A vulnerability was detected in ggml-org llama.cpp up to 0.4.0. This impacts the function...

CVE-2026-86317

A vulnerability was detected in ggml-org llama.cpp up to 0.4.0. This impacts the function rpc_server::deserialize_tensor

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-07 发布INFO

A vulnerability was detected in ggml-org llama.cpp up to 0.4.0. This impacts the function rpc_server::deserialize_tensor of the file ggml/src/ggml-rpc/ggml-rpc.cpp of the compon...

CVE-2026-86317

A vulnerability was detected in ggml-org llama.cpp up to 0.4.0. This impacts the function rpc_server::deserialize_tensor

历史摘要 · 未重新核验 · NVD

安全公告2026-09-07 发布INFO

ggml-org llama.cpp RPC Server ggml-rpc.cpp deserialize_tensor assertion

CVE-2026-86317

A vulnerability was detected in ggml-org llama.cpp up to 0.4.0. This impacts the function rpc_server::deserialize_tensor

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-07 发布INFO

In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled b...

CVE-2026-20504

In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, i

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-07 发布INFO

In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled b...

CVE-2026-20503

In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, i

历史摘要 · 未重新核验 · NVD

安全公告2026-09-05 发布INFO

libpcap BPF interpreter calls abort() if it encounters a BPF instruction that has an invalid...

CVE-2026-31911

libpcap BPF interpreter calls abort() if it encounters a BPF instruction that has an invalid opcode. In particular unco

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-05 发布INFO

libpcap BPF interpreter calls abort() if it encounters a BPF instruction that has an invalid opcode. In particular uncommon use cases a crafted filter program can terminate the...

CVE-2026-31911

libpcap BPF interpreter calls abort() if it encounters a BPF instruction that has an invalid opcode. In particular unco

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-04 发布INFO

A flaw was found in libsoup. When a client sends an HTTP/2 request body from a non-pollable input stream, the library can buffer more data than the current flow-control window l...

CVE-2026-85534

A flaw was found in libsoup. When a client sends an HTTP/2 request body from a non-pollable input stream, the library ca

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

Improper handling of an unexpected value size in the decryption path of a client-side encryption library can cause a failed internal check that terminates the process using the ...

CVE-2026-84971

Improper handling of an unexpected value size in the decryption path of a client-side encryption library can cause a fai

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-02 发布INFO

In FIPS mode, Libreswan's add_decoded_cert() function calls CERT_ExtractPublicKey() and asserts that the result is not NULL. However, CERT_ExtractPublicKey() returns NULL when p...

CVE-2026-14957

In FIPS mode, Libreswan's add_decoded_cert() function calls CERT_ExtractPublicKey() and asserts that the result is not N

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

llama.cpp b5693 and before has a Reachable Assertion via the gguf_reader::read function.

CVE-2026-52131

llama.cpp b5693 and before has a Reachable Assertion via the gguf_reader::read function.

历史摘要 · 未重新核验 · NVD

安全公告2026-08-31 发布INFO

A weakness has been identified in Open5GS up to 2.7.7. The affected element is the function...

CVE-2026-82590

A weakness has been identified in Open5GS up to 2.7.7. The affected element is the function smf_nudm_sdm_handle_get of t

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-30 发布INFO

A weakness has been identified in Open5GS up to 2.7.7. The affected element is the function smf_nudm_sdm_handle_get of the file src/smf/nudm-handler.c of the component SMF. Exec...

CVE-2026-82590

A weakness has been identified in Open5GS up to 2.7.7. The affected element is the function smf_nudm_sdm_handle_get of t

历史摘要 · 未重新核验 · NVD

安全公告2026-08-30 发布INFO

Open5GS SMF nudm-handler.c smf_nudm_sdm_handle_get assertion

CVE-2026-82590

A weakness has been identified in Open5GS up to 2.7.7. The affected element is the function smf_nudm_sdm_handle_get of t

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-08-27 发布INFO

A reachable assertion vulnerability in the /nsmf-pdusession/v1/sm-contexts component of Open5GS v2.7.6 allows attackers to cause a Denial of Service (DoS) via supplying a crafte...

CVE-2026-30047

A reachable assertion vulnerability in the /nsmf-pdusession/v1/sm-contexts component of Open5GS v2.7.6 allows attackers

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-27 发布INFO

A reachable assertion vulnerability in the NUDM-UECM interface of Open5GS v2.7.6 allows attackers to cause a Denial of Service (DoS) via supplying a crafted DELETE request.

CVE-2026-30046

A reachable assertion vulnerability in the NUDM-UECM interface of Open5GS v2.7.6 allows attackers to cause a Denial of S

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-24 发布MEDIUM

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions 3.4.0 through 3.4.12, a crafted HTJ2K...

CVE-2026-53532

OpenEXR 是 EXR 图像格式的参考实现与规范,广泛应用于影视特效、渲染和后期制作。受影响版本为 3.4.0 至 3.4.12。恶意构造的 HTJ2K 压缩 EXR 文件可导致任何调用 exr_start_read() 处理不可信输入

历史摘要 · 未重新核验 · NVD