#cwe-787

共收录 1314 条相关情报。

← 返回所有主题
漏洞预警2026-09-14 发布INFO

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequ...

CVE-2026-65414

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-14 发布INFO

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequ...

CVE-2026-65395

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-14 发布INFO

A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a malicious We...

CVE-2026-65374

A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Seq

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-14 发布INFO

A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Processing a maliciously...

CVE-2026-64752

A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in iOS 27 and iPadOS 27, ma

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-14 发布INFO

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, ...

CVE-2026-64736

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26.6.1 and iPadOS

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-14 发布INFO

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Mounting a maliciou...

CVE-2026-43761

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, m

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-14 发布INFO

An out-of-bounds write issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a ma...

CVE-2026-43677

An out-of-bounds write issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27,

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-14 发布INFO

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a denial of service as a result of a buffer overflow in a PASE process. An authenticated attacker could leverage this to terminate their...

CVE-2026-19280

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a denial of service as a result of a buffer overflow in a PASE process. An auth

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-14 发布INFO

UEFI Firmware Parser parses BIOS, Intel ME, and UEFI firmware structures including volumes, file systems, and files. Prior to 1.14, MakeTable() in uefi_firmware/compression/Tian...

CVE-2026-54333

UEFI Firmware Parser parses BIOS, Intel ME, and UEFI firmware structures including volumes, file systems, and files. Pri

历史摘要 · 未重新核验 · NVD

安全公告2026-09-12 发布INFO

stb_vorbis through 1.22 contains a heap buffer overflow in start_decoder() where the codebook...

CVE-2026-89266

stb_vorbis through 1.22 contains a heap buffer overflow in start_decoder() where the codebook multiplicands allocation s

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-12 发布HIGH

stb_vorbis through 1.22 contains a heap buffer overflow in start_decoder() where the codebook multiplicands allocation size is truncated from size_t to int. Attackers can craft ...

CVE-2026-89266

CVE-2026-89266 是 stb_vorbis(广泛使用的单头文件 Ogg Vorbis 音频解码库)1.22 及之前版本中存在的一个堆缓冲区溢出漏洞,位于核心解码入口函数 start_decoder()。问题根源在于整数类型截断:

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-11 发布INFO

libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.1.1 use signed 32-bit arithmetic to calculate pixel offsets, allowing a crafted HEVC stre...

CVE-2026-54240

libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.1.1 use signed 32-bit arithmetic

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-11 发布INFO

ArduinoBLE enables Bluetooth Low Energy connectivity on certain Arduino models. Versions prior to 2.0.2 contain a missing bounds check in the ATT layer write request handler tha...

CVE-2026-47773

ArduinoBLE enables Bluetooth Low Energy connectivity on certain Arduino models. Versions prior to 2.0.2 contain a missin

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-11 发布INFO

Out-of-bounds write vulnerability in Citrix Citrix Workspace app for Windows. This issue affects Citrix Workspace app for Windows: before 2603.11 Current Release (CR), before 2...

CVE-2026-78547

Out-of-bounds write vulnerability in Citrix Citrix Workspace app for Windows. This issue affects Citrix Workspace app f

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to version 8.0.5, a Lua...

CVE-2026-45770

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. St

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Classify::ReadIntTemplates in src/classify/intproto.cpp reads NumClassPruners, NumClasses, and NumProtoSets...

CVE-2026-88053

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Classify::ReadIntTemplates in src/classify/intprot

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, UNICHARSET::load_via_fgets in src/ccutil/unicharset.cpp trusts the declared unichar count as a loop bound a...

CVE-2026-88052

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, UNICHARSET::load_via_fgets in src/ccutil/unicharse

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, the callback form of GenericVector::read in src/ccutil/genericvector.h reads the independent int32 fields r...

CVE-2026-88051

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, the callback form of GenericVector::read in src/cc

历史摘要 · 未重新核验 · NVD

安全公告2026-09-10 发布INFO

Tesseract: Heap out-of-bounds write in Classify::ReadIntTemplates via unvalidated counts in crafted .traineddata

CVE-2026-88053

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Classify::ReadIntTemplates in src/classify/intprot

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-10 发布INFO

Tesseract: Heap out-of-bounds write in UNICHARSET::load_via_fgets via count/insert desynchronization

CVE-2026-88052

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, UNICHARSET::load_via_fgets in src/ccutil/unicharse

历史摘要 · 未重新核验 · OSV.dev