#cwe-787

共收录 1314 条相关情报。

← 返回所有主题
漏洞预警2026-09-18 发布INFO

A flaw was found in Cockpit. An integer overflow vulnerability in the `do_lastlog()` function, specifically in the offset calculation for `lastlog` entries on ILP32 (Integer, Lo...

CVE-2026-91142

A flaw was found in Cockpit. An integer overflow vulnerability in the `do_lastlog()` function, specifically in the offse

历史摘要 · 未重新核验 · NVD

安全公告2026-09-18 发布INFO

PJSIP: Heap buffer overflow in the AVI parser

CVE-2026-77396

PJSIP is a free and open source multimedia communication library written in C. In 2.17 and earlier, the PJSIP AVI parser

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-18 发布INFO

libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.23.2, when WITH_UNCOMPRESSED_CODEC is enabled, heif_context_add_image_tile() accepts an independently cons...

CVE-2026-84444

libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.23.2, when WITH_UNCOMPRESSED_CODEC is enabled, he

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-18 发布INFO

libheif is a HEIF and AVIF file format decoder and encoder. From 1.22.0 until 1.23.2, a crafted HEIF, HEIC, or AVIF item graph using nested iden and auxl references can make Hei...

CVE-2026-84383

libheif is a HEIF and AVIF file format decoder and encoder. From 1.22.0 until 1.23.2, a crafted HEIF, HEIC, or AVIF item

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-18 发布INFO

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.1.16.0, A crafted 1-bit contiguous c...

CVE-2026-67549

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-18 发布INFO

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.21.0, 3.1.16.0, and 3.2.0.3-beta1,...

CVE-2026-63638

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-18 发布INFO

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.21.0, 3.1.16.0, and 3.2.0.3-beta1,...

CVE-2026-63422

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-18 发布INFO

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.21.0, 3.1.16.0, and 3.2.0.3-beta1,...

CVE-2026-63419

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-18 发布INFO

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.20.0, 3.1.15.0, and 3.2.0.3-beta1,...

CVE-2026-59181

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-18 发布INFO

IBM MQ could allow a remote attacker to cause a denial of service or execute arbitrary code due to a buffer overflow when processing malformed compressed data on channels config...

CVE-2026-10027

IBM MQ could allow a remote attacker to cause a denial of service or execute arbitrary code due to a buffer overflow whe

历史摘要 · 未重新核验 · NVD

安全公告2026-09-18 发布INFO

libheif uncompressed tiled image encoding allows out-of-bounds write

CVE-2026-84444

libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.23.2, when WITH_UNCOMPRESSED_CODEC is enabled, he

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-18 发布INFO

libheif: Heap buffer overflow in `scale_nearest_neighbor()` via duplicate Alpha planes from nested `iden`/`auxl` items

CVE-2026-84383

libheif is a HEIF and AVIF file format decoder and encoder. From 1.22.0 until 1.23.2, a crafted HEIF, HEIC, or AVIF item

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-18 发布INFO

OpenImageIO: TIFF 1-bit CMYK bit conversion heap out-of-bounds write

CVE-2026-67549

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / a

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-18 发布INFO

OpenImageIO: Cineon invalid bit depth heap out-of-bounds write

CVE-2026-63638

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / a

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-18 发布INFO

OpenImageIO: IFF ZBUFFER tile read writes past caller tile buffer

CVE-2026-63419

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / a

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-18 发布INFO

OpenImageIO OpenEXR plugin partial edge tile heap out-of-bounds write

CVE-2026-63422

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / a

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-18 发布INFO

OpenImageIO: Stack buffer overflow in OpenImageIO Cineon reader via unchecked numberOfElements

CVE-2026-59181

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / a

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-18 发布HIGH

A flaw was found in QEMU. The VAPIC setup hypercall in hw/i386/vapic.c does not validate that the writable RAM alias remains within the option ROM window. A privileged guest use...

CVE-2026-81627

A flaw was found in QEMU. The VAPIC setup hypercall in hw/i386/vapic.c does not validate that the writable RAM alias rem

来源摘录 · NVD

漏洞预警2026-09-18 发布INFO

An out-of-bounds write vulnerability exists in some of the Ethernet switches because of improper validation of the username field length during Web login processing. This may al...

CVE-2026-15579

An out-of-bounds write vulnerability exists in some of the Ethernet switches because of improper validation of the usern

历史摘要 · 未重新核验 · NVD

安全公告2026-09-18 发布INFO

snappy-java through 1.1.10.8 contains a buffer overflow vulnerability in typed Snappy.uncompress...

CVE-2026-93451

snappy-java through 1.1.10.8 contains a buffer overflow vulnerability in typed Snappy.uncompress*Array methods that allo

历史摘要 · 未重新核验 · GitHub Advisory