#cwe-787

共收录 1314 条相关情报。

← 返回所有主题
漏洞预警2026-09-22 发布INFO

A heap out-of-bounds write vulnerability was found in the Linux kernel's RPC-over-RDMA server reply path in net/sunrpc/xprtrdma/svc_rdma_sendto.c. When a crafted RPC-over-RDMA c...

CVE-2026-13087

A heap out-of-bounds write vulnerability was found in the Linux kernel's RPC-over-RDMA server reply path in net/sunrpc/x

历史摘要 · 未重新核验 · NVD

安全公告2026-09-22 发布INFO

Netdata: Streaming protocol dimension slot has no upper-bound guard, allowing integer overflow and out-of-bounds write

CVE-2026-83601

Netdata is an open source observability tool. Prior to 2.10.4, an authenticated child agent can send an oversized DIMENS

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-22 发布INFO

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's CPython bytecode .pyc marshal parser was vulnerable because the CPython ...

CVE-2026-81878

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's CPython bytecod

历史摘要 · 未重新核验 · NVD

安全公告2026-09-22 发布INFO

radare2: Integer overflow causes heap out-of-bounds write in radare2 PYC parser

CVE-2026-81878

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's CPython bytecod

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-22 发布INFO

LibreOffice converts CFF fonts to Type 1 when it subsets a font, which happens when a document is exported to PDF, and CFF fonts may be embedded in documents. A stack buffer ove...

CVE-2026-63276

LibreOffice converts CFF fonts to Type 1 when it subsets a font, which happens when a document is exported to PDF, and C

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-22 发布INFO

LibreOffice can read CFF fonts, which may be embedded in documents. A stack buffer overflow existed when reading the hints of a glyph. The number of hints was checked against th...

CVE-2026-63275

LibreOffice can read CFF fonts, which may be embedded in documents. A stack buffer overflow existed when reading the hin

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-22 发布INFO

LibreOffice Draw can import PDF documents. A heap buffer overflow existed when importing a stream object. The length of the stream was taken from the object's own dictionary and...

CVE-2026-63274

LibreOffice Draw can import PDF documents. A heap buffer overflow existed when importing a stream object. The length of

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-22 发布INFO

LibreOffice Draw can import PDF documents. A heap buffer overflow existed when importing an encrypted document. The length of the decryption key was taken from the document's ow...

CVE-2026-63273

LibreOffice Draw can import PDF documents. A heap buffer overflow existed when importing an encrypted document. The leng

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-22 发布INFO

LibreOffice can import WMF graphics, which may be embedded in documents. A heap buffer overflow existed when importing a text record that carries its own character advance width...

CVE-2026-63272

LibreOffice can import WMF graphics, which may be embedded in documents. A heap buffer overflow existed when importing a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-22 发布INFO

A heap-based buffer overflow was found in the DHCPv6 and TFTP response builders of libslirp. When the host is configured with a small interface MTU, a guest-supplied DHCPv6 CLIE...

CVE-2026-95508

A heap-based buffer overflow was found in the DHCPv6 and TFTP response builders of libslirp. When the host is configured

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-21 发布INFO

The Time-aware GPIO syscall verification handler z_vrfy_tgpio_pin_read_ts_ec() in drivers/timeaware_gpio/timeaware_gpio_handlers.c validated only the port device object and pass...

CVE-2026-17052

The Time-aware GPIO syscall verification handler z_vrfy_tgpio_pin_read_ts_ec() in drivers/timeaware_gpio/timeaware_gpio_

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-21 发布INFO

An out-of-bounds write flaw was found in usbredir. Starting an isochronous OUT stream with a transfer count of 1 leaves the stream's single transfer buffer permanently unsubmitt...

CVE-2026-92382

An out-of-bounds write flaw was found in usbredir. Starting an isochronous OUT stream with a transfer count of 1 leaves

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-21 发布INFO

The Intel SEDI IPM (inter-processor mailbox) driver in drivers/ipm/ipm_sedi.c handles an inbound message interrupt in ipm_event_dispose(). It read the peer-written doorbell regi...

CVE-2026-17051

The Intel SEDI IPM (inter-processor mailbox) driver in drivers/ipm/ipm_sedi.c handles an inbound message interrupt in ip

历史摘要 · 未重新核验 · NVD

安全公告2026-09-20 发布INFO

Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, has an out-of...

CVE-2026-94054

Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, has an out-of-bounds write.

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-19 发布HIGH

Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, has an out-of-bounds write.

CVE-2026-94054

Exim 是广泛使用的邮件传输代理(MTA)。CVE-2026-94054 影响 Exim 4.100.1 之前的版本。当 Exim 配置使用 Proxy-Protocol(PROXY 协议)且其前置代理可被攻击者控制时,攻击者可以通过该代

历史摘要 · 未重新核验 · NVD

安全公告2026-09-18 发布INFO

In Vinyl Cache before 9.0,2, workspace buffer overflow vulnerability was found in the .upper()...

CVE-2026-93894

In Vinyl Cache before 9.0,2, workspace buffer overflow vulnerability was found in the .upper() and .lower() string type

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-18 发布INFO

In Vinyl Cache before 9.0,2, workspace buffer overflow vulnerability was found in the .upper() and .lower() string type methods of VCL. This can be used as a remote denial of se...

CVE-2026-93894

In Vinyl Cache before 9.0,2, workspace buffer overflow vulnerability was found in the .upper() and .lower() string type

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-18 发布INFO

FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.2.4 until 2.5.6, configuring synth.midi-channels above 16 allows the MIDI player to index _f...

CVE-2026-61714

FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.2.4 until 2.5.6, configuring synth.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-18 发布INFO

In osmo-ggsn 1.14.0 an out of bounds write issue was found in the gtp_decode_pdp_ctx() function through the PDP context GSN-Address sub-field, leading to memory corruption.

CVE-2026-75892

In osmo-ggsn 1.14.0 an out of bounds write issue was found in the gtp_decode_pdp_ctx() function through the PDP context

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-18 发布INFO

PJSIP is a free and open source multimedia communication library written in C. In 2.17 and earlier, the PJSIP AVI parser in pjmedia/src/pjmedia/avi_player.c uses an input-file v...

CVE-2026-77396

PJSIP is a free and open source multimedia communication library written in C. In 2.17 and earlier, the PJSIP AVI parser

历史摘要 · 未重新核验 · NVD