#cwe-787

共收录 1314 条相关情报。

← 返回所有主题
漏洞预警2026-10-01 发布INFO

Out-of-bounds Write vulnerability in Apache HTTP Server's mod_charset_lite. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.

CVE-2026-56153

Out-of-bounds Write vulnerability in Apache HTTP Server's mod_charset_lite. This issue affects Apache HTTP Server: fr

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-01 发布INFO

boks_ksllogsd accepts a checksum algorithm name in the MD field of an authenticated KSL start message. Affected releases verify that OpenSSL recognizes the digest name but do no...

CVE-2026-79900

boks_ksllogsd accepts a checksum algorithm name in the MD field of an authenticated KSL start message. Affected releases

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-01 发布INFO

A flaw was found in tnef. A heap-based buffer overflow can occur in the find_free_number() function when generating numbered backup suffixes for duplicate filenames. When number...

CVE-2026-103680

A flaw was found in tnef. A heap-based buffer overflow can occur in the find_free_number() function when generating numb

历史摘要 · 未重新核验 · NVD

安全公告2026-10-01 发布INFO

Tnef: heap buffer overflow in find_free_number() via numbered-backup suffix generation

CVE-2026-103680

A flaw was found in tnef. A heap-based buffer overflow can occur in the find_free_number() function when generating numb

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-30 发布HIGH

PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-bounds write with arbitrary data.

CVE-2026-103111

CVE-2026-103111 是 PCRE2 库中的一个高危漏洞,影响版本低于 10.49。PCRE2 是一个广泛使用的正则表达式库,许多编程语言和应用程序(如 PHP、Apache、Nginx 等)都依赖它。该漏洞存在于 JIT(即时编

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-30 发布CRITICAL

Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation that allows a remote attacker to execute code remotely as an unprivileged user on ...

CVE-2026-103110

CVE-2026-103110 是 Pexip Infinity 视频会议平台中被披露的一个严重远程代码执行漏洞,NVD 给出的 CVSS 3.1 基础评分为 9.8(Critical),向量为 AV:N/AC:L/PR:N/UI:N/S:

历史摘要 · 未重新核验 · NVD

安全公告2026-09-30 发布INFO

Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation in...

CVE-2026-103109

Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation in the media implementati

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-30 发布HIGH

Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation in the media implementation that allows a remote attacker to trigger memory corrup...

CVE-2026-103109

Pexip Infinity 是企业级视频会议与实时通信(RTC)平台,广泛用于政府、医疗与金融等行业的远程协作场景。根据 NVD 元数据,该产品在媒体处理实现(media implementation)中存在输入校验不当(improper

历史摘要 · 未重新核验 · NVD

安全公告2026-09-30 发布INFO

U-Boot before 2026.10-rc3 contains an out-of-bounds write vulnerability in read_slotted_partition...

CVE-2026-71974

U-Boot before 2026.10-rc3 contains an out-of-bounds write vulnerability in read_slotted_partition() that fails to valida

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-30 发布INFO

U-Boot before 2026.10-rc5 contains out-of-bounds memory access in dhcp6_parse_options() that...

CVE-2026-74225

U-Boot before 2026.10-rc5 contains out-of-bounds memory access in dhcp6_parse_options() that fails to validate SERVERID

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-30 发布INFO

U-Boot before 2026.10-rc3 with CONFIG_IP_DEFRAG enabled contains an out-of-bounds write...

CVE-2026-71971

U-Boot before 2026.10-rc3 with CONFIG_IP_DEFRAG enabled contains an out-of-bounds write vulnerability in the __net_defra

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-30 发布INFO

U-Boot through 2026.10-rc5 contains an out-of-bounds write vulnerability in the...

CVE-2026-71972

U-Boot through 2026.10-rc5 contains an out-of-bounds write vulnerability in the video_display_rle8_bitmap function in dr

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-30 发布INFO

A stack-based buffer overflow vulnerability in WatchGuard Fireware OS's DHCP fingerprinting daemon (fingerd) allows an unauthenticated attacker with adjacent network access to e...

CVE-2026-81433

A stack-based buffer overflow vulnerability in WatchGuard Fireware OS's DHCP fingerprinting daemon (fingerd) allows an u

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

U-Boot before 2026.10-rc5 contains out-of-bounds memory access in dhcp6_parse_options() that fails to validate SERVERID and CLIENTID option lengths from DHCPv6 packets. Attacker...

CVE-2026-74225

U-Boot before 2026.10-rc5 contains out-of-bounds memory access in dhcp6_parse_options() that fails to validate SERVERID

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

U-Boot before 2026.10-rc3 contains an out-of-bounds write vulnerability in read_slotted_partition() that fails to validate image size against partition bounds. Attackers with ph...

CVE-2026-71974

U-Boot before 2026.10-rc3 contains an out-of-bounds write vulnerability in read_slotted_partition() that fails to valida

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

U-Boot through 2026.10-rc5 contains an out-of-bounds write vulnerability in the video_display_rle8_bitmap function in drivers/video/video_bmp.c. Attackers can supply a crafted R...

CVE-2026-71972

U-Boot through 2026.10-rc5 contains an out-of-bounds write vulnerability in the video_display_rle8_bitmap function in dr

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

U-Boot before 2026.10-rc3 with CONFIG_IP_DEFRAG enabled contains an out-of-bounds write vulnerability in the __net_defragment() function in net/net.c. Remote attackers can send ...

CVE-2026-71971

U-Boot before 2026.10-rc3 with CONFIG_IP_DEFRAG enabled contains an out-of-bounds write vulnerability in the __net_defra

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Out of bounds write in GPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outsi...

CVE-2026-102301

Out of bounds write in GPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the ren

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Out of bounds write in GPU in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafte...

CVE-2026-95357

Out of bounds write in GPU in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentiall

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Out of bounds write in ANGLE in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page....

CVE-2026-95331

Out of bounds write in ANGLE in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute ar

历史摘要 · 未重新核验 · NVD