#cwe-787

共收录 1314 条相关情报。

漏洞预警2026-10-29 发布INFO

P-Net before 1.0.3 does not validate the LengthPeerStationName field of a CheckPeers block in get_check_peer(). The received length (up to 255) was used to copy data into the 24...

CVE-2026-111730

P-Net before 1.0.3 does not validate the LengthPeerStationName field of a CheckPeers block in get_check_peer(). The rece

来源摘录 · NVD

#cve #cwe-787

漏洞预警2026-10-29 发布MEDIUM

A flaw was found in dnsmasq. After a reduction of internal domain-name buffer sizes, the DNSSEC validator can write a few bytes past a name buffer when converting names to and f...

CVE-2026-93011

A flaw was found in dnsmasq. After a reduction of internal domain-name buffer sizes, the DNSSEC validator can write a fe

来源摘录 · NVD

#cve #cwe-787

漏洞预警2026-10-28 发布HIGH

FreeImage (danoli3 fork) before 3.19.25 contains a heap buffer overflow vulnerability in PluginGIF.cpp that allows attackers to write past the canvas allocation via unclipped GI...

CVE-2026-118753

FreeImage (danoli3 fork) before 3.19.25 contains a heap buffer overflow vulnerability in PluginGIF.cpp that allows attac

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-787 #severity:high

漏洞预警2026-10-28 发布HIGH

FreeImage (danoli3 fork) before 3.19.22 contains a heap buffer overflow vulnerability in the PBM RLE decoder of PluginIFF.cpp that lacks bounds checks on ByteRun1 runs. Attacker...

CVE-2026-118752

FreeImage (danoli3 fork) before 3.19.22 contains a heap buffer overflow vulnerability in the PBM RLE decoder of PluginIF

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-787 #severity:high

漏洞预警2026-10-28 发布MEDIUM

Don't Starve Together (Steam AppID 322330) through build 747465 contains a memory-corruption vulnerability in the native persistent-string decoder that allows a remote attacker ...

CVE-2026-58458

Don't Starve Together (Steam AppID 322330) through build 747465 contains a memory-corruption vulnerability in the native

来源摘录 · NVD

#cve #cwe-787

漏洞预警2026-10-28 发布MEDIUM

ethernet_fill_header() in subsys/net/l2/ethernet/ethernet.c can prepend the Ethernet header in place, by pushing it into the headroom of the packet's first fragment, instead of ...

CVE-2026-82962

ethernet_fill_header() in subsys/net/l2/ethernet/ethernet.c can prepend the Ethernet header in place, by pushing it into

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-787

漏洞预警2026-10-28 发布HIGH

The GPIO syscall handlers in drivers/gpio/gpio_handlers.c did not validate the pin argument supplied by a user-mode caller. z_vrfy_gpio_pin_configure(), z_vrfy_gpio_pin_get_conf...

CVE-2026-82961

The GPIO syscall handlers in drivers/gpio/gpio_handlers.c did not validate the pin argument supplied by a user-mode call

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-787

漏洞预警2026-10-28 发布MEDIUM

An Out-of-Bounds Write vulnerability in the TCP header processing in Juniper Networks Session Smart Router allows an attacker to corrupt TCP payload data and potentially cause s...

CVE-2026-103392

An Out-of-Bounds Write vulnerability in the TCP header processing in Juniper Networks Session Smart Router allows an att

来源摘录 · NVD

#cve #cwe-787

漏洞预警2026-10-28 发布MEDIUM

An Out-of-bounds Write vulnerability in the SSR TCP proxy/optimization path in Juniper Networks Session Smart Router allows an attacker to corrupt forwarded packet data and pote...

CVE-2026-103391

An Out-of-bounds Write vulnerability in the SSR TCP proxy/optimization path in Juniper Networks Session Smart Router all

来源摘录 · NVD

#cve #cwe-787

漏洞预警2026-10-28 发布INFO

SimulationCraft is a tool to explore combat mechanics in World of Warcraft. In builds after release-820-01 and before the identified May 7, 2026 nightly, the `bcp_api.cpp` loop ...

CVE-2026-47235

SimulationCraft is a tool to explore combat mechanics in World of Warcraft. In builds after release-820-01 and before th

来源摘录 · NVD

#cve #cwe-122 #cwe-787

漏洞预警2026-10-28 发布HIGH

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1....

CVE-2026-86377

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7

来源摘录 · NVD

#cve #cwe-787

漏洞预警2026-10-28 发布MEDIUM

Out-of-bounds write vulnerability in Samsung Open Source escargot allows Buffer Manipulation.

CVE-2026-118435

Out-of-bounds write vulnerability in Samsung Open Source escargot allows Buffer Manipulation.

来源摘录 · NVD

#cve #cwe-787

安全公告2026-10-28 发布INFO

llama.cpp b8841 before b11865 contains an out-of-bounds write vulnerability in the ggml-rpc RDMA...

CVE-2026-118375

llama.cpp b8841 before b11865 contains an out-of-bounds write vulnerability in the ggml-rpc RDMA transport rdma_recv() f

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-787 #severity:critical

漏洞预警2026-10-28 发布HIGH

llama.cpp b8841 before b11865 contains an out-of-bounds write vulnerability in the ggml-rpc RDMA transport rdma_recv() function that allows unauthenticated peers to overflow the...

CVE-2026-118375

llama.cpp b8841 before b11865 contains an out-of-bounds write vulnerability in the ggml-rpc RDMA transport rdma_recv() f

来源摘录 · NVD

#cve #cwe-787

安全公告2026-10-28 发布INFO

Out of bounds write in Editing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker...

CVE-2026-118342

Out of bounds write in Editing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-787

漏洞预警2026-10-27 发布CRITICAL

Out of bounds write in Editing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML pag...

CVE-2026-118342

Out of bounds write in Editing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute

来源摘录 · NVD

#cve #cwe-787

漏洞预警2026-10-27 发布INFO

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, `ap...

CVE-2026-57199

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2

历史摘要 · 未重新核验 · NVD

#cve #cwe-787

漏洞预警2026-10-27 发布INFO

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an ...

CVE-2026-57192

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2

历史摘要 · 未重新核验 · NVD

#cve #cwe-125 #cwe-131 #cwe-787

漏洞预警2026-10-27 发布INFO

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an ...

CVE-2026-57191

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2

历史摘要 · 未重新核验 · NVD

#cve #cwe-120 #cwe-787

漏洞预警2026-10-27 发布INFO

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an ...

CVE-2026-57188

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-787