ImageMagick: Heap Buffer Over-Read in XCF decoder due to integer conversion overflow
CVE-2026-53466
An integer overflow in the XCF decoder can result in an out of bounds read when a crafted image is read and that can res
#cwe-681
共收录 32 条相关情报。
← 返回所有主题GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in *nix systems or through the browser. Prior to version 1.11, the built-in WebSocket ser...
CVE-2026-55768
GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in *nix systems or through the b
GoAccess WebSocket Server: Signed 32 bit truncation of the 64 bit frame length causes a remote pre-authentication denial of service
CVE-2026-55768
GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in *nix systems or through the b
Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.
CVE-2026-55123
Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.
Incorrect conversion between numeric types in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-50402
Incorrect conversion between numeric types in Windows NTFS allows an authorized attacker to elevate privileges locally.
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, an integer overflow in the XCF decoder c...
CVE-2026-53466
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-
dsp_mmap_single() validated the requested mapping by checking the sum of the user-supplied offset and length against the buffer size. This addition could overflow, so that a la...
CVE-2026-45258
CVE-2026-45258 是 Linux 内核音频子系统 /dev/dsp 设备驱动中的一个整数溢出漏洞。该漏洞位于 dsp_mmap_single() 函数中，该函数负责验证用户请求的内存映射。具体而言，函数通过将用户提供的偏移量（o
In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix clone_alias() to use the original device's devid Currently clone_alias() assumes first argum...
CVE-2026-53053
In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix clone_alias() to use the original de
vLLM is an inference and serving engine for large language models (LLMs). From 0.5.5 until 0.23.1rc0, integer truncation of tensor dimensions in vLLM's GGUF dequantize kernels (...
CVE-2026-53923
CVE-2026-53923 影响 vLLM 推理引擎（版本 0.5.5 至 0.23.1rc0 之前）。漏洞存在于 GGUF 反量化内核（csrc/quantization/gguf/gguf_kernel.cu）中，因张量维度整数截断导
There is an incorrect conversion between numeric types vulnerability in NI grpc-device due to missing range checks in CodeGen. This may silently discard high bits if a size val...
CVE-2026-9143
There is an incorrect conversion between numeric types vulnerability in NI grpc-device due to missing range checks in Co
NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause an incorrect conversion between numeric types, leading to a heap buffer overflow. A succes...
CVE-2026-24192
NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause an incorrect conversion between n
iskorotkov/avro: Integer Overflow in Decoder
CVE-2026-46384
# Integer Overflow in Avro Decoder ## Summary Several Avro decoder paths read attacker-controlled 64-bit values from t