共收录 32 条相关情报。
← 返回所有主题CVE-2026-119340
Tesseract is an open source OCR engine. Prior to 5.5.4, GENERIC_2D_ARRAY::DeSerializeSize in src/ccstruct/matrix.h reads
CVE-2026-118769
Botan is a C++ cryptography library. From 2.1.0 until 3.13.0, the Botan C API function botan_block_cipher_block_size con
CVE-2026-114654
A numeric-type conversion flaw in the BSON handling library of the MongoDB C# Driver allows an out-of-range binary subty
CVE-2026-114118
Vyper 0.3.4 through 0.5.0b1 computes the remaining blueprint size in create_from_blueprint by uint256 subtraction withou
CVE-2026-69438
Incorrect conversion between numeric types in Microsoft JScript allows an unauthorized attacker to execute code over a n
CVE-2026-84966
An incorrect numeric type conversion in the BSON document building component of the MongoDB C++ Driver may cause a lengt
CVE-2026-84963
An incorrect numeric conversion in the JSON parsing component of the MongoDB C Driver's BSON library may cause an unusua
CVE-2026-84970
A numeric truncation weakness exists in the JSON parsing component of the MongoDB C++ Driver's BSON library. An actor wh
CVE-2026-82522
libjxl before 0.12 contains an integer underflow vulnerability in the container box parser that allows remote attackers
CVE-2026-82522
libjxl before 0.12 contains an integer underflow vulnerability in the container box parser that allows remote attackers
CVE-2026-82522
libjxl before 0.12 contains an integer underflow vulnerability in the container box parser that allows remote attackers
CVE-2026-82457
su-exec through 0.3 fails to validate numeric user and group identifiers parsed with strtol before assigning to uid_t an
CVE-2026-82457
su-exec through 0.3 fails to validate numeric user and group identifiers parsed with strtol before assigning to uid_t an
CVE-2026-82457
su-exec through 0.3 fails to validate numeric user and group identifiers parsed with strtol before assigning to uid_t an
CVE-2026-61799
## Summary `io.netty.incubator:netty-incubator-codec-bhttp` uses attacker-controlled Binary HTTP variable-length intege
CVE-2026-75145
FFmpeg before commit b4c199c contains an incorrect integer narrowing conversion in the AV1 RTP packetizer (libavformat/r
CVE-2026-19879
A flaw was found in Undertow, an HTTP server, within its HTTP response header writing path. The `writeString()` method p
CVE-2026-6426
A type mismatch vulnerability was found in QEMU's vhost inflight migration VMState handling. The destination buffer size
CVE-2026-6426
A type mismatch vulnerability was found in QEMU's vhost inflight migration VMState handling. The destination buffer size
CVE-2026-21069
Incorrect conversion between numeric types in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local att