#cwe-787

共收录 1314 条相关情报。

← 返回所有主题
漏洞预警2026-09-03 发布INFO

MOOS-IvP through 24.8.1 contains multiple buffer overflow vulnerabilities in IvP function string decoders that trust attacker-controlled length fields without validation. Attack...

CVE-2026-85437

MOOS-IvP through 24.8.1 contains multiple buffer overflow vulnerabilities in IvP function string decoders that trust att

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

There is an out-of-bounds write vulnerability in DASYLab due to improper validation of user-supplied data, resulting in a write past the end of an allocated data structure. Succ...

CVE-2026-64197

There is an out-of-bounds write vulnerability in DASYLab due to improper validation of user-supplied data, resulting in

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

There is an out-of-bounds write vulnerability in DASYLab due to improper validation of user-supplied data, resulting in a write past the end of an allocated heap. Successful exp...

CVE-2026-64196

There is an out-of-bounds write vulnerability in DASYLab due to improper validation of user-supplied data, resulting in

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

There is an out-of-bounds write vulnerability in DASYLab due to lack of proper validation of user-supplied data. Successful exploitation requires an attacker to get a user to op...

CVE-2026-64195

There is an out-of-bounds write vulnerability in DASYLab due to lack of proper validation of user-supplied data. Success

历史摘要 · 未重新核验 · NVD

安全公告2026-09-03 发布INFO

Out of bounds write in WebGL in Google Chrome on on Android prior to 152.0.7977.82 allowed a...

CVE-2026-85050

Out of bounds write in WebGL in Google Chrome on on Android prior to 152.0.7977.82 allowed a remote attacker to execute

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-03 发布INFO

Out of bounds write in WebGL in Google Chrome on on Android prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML pag...

CVE-2026-85050

Out of bounds write in WebGL in Google Chrome on on Android prior to 152.0.7977.82 allowed a remote attacker to execute

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

pymonocypher uses cython to wrap the Monocypher C library. Prior to version 4.0.2.8, the argon2i_32 implementation does not check the nb_blocks size. If the caller does not prov...

CVE-2026-53720

pymonocypher uses cython to wrap the Monocypher C library. Prior to version 4.0.2.8, the argon2i_32 implementation does

历史摘要 · 未重新核验 · NVD

安全公告2026-09-03 发布INFO

pymonocypher: Potential heap buffer overflow on nb_blocks in argon2i_32 when provided buffer is too small

CVE-2026-53720

pymonocypher uses cython to wrap the Monocypher C library. Prior to version 4.0.2.8, the argon2i_32 implementation does

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-03 发布INFO

A memory-handling error in the BSON-to-JSON conversion helpers of the MongoDB C Driver can write a small number of bytes past the end of a heap buffer when a binary field is enc...

CVE-2026-84969

A memory-handling error in the BSON-to-JSON conversion helpers of the MongoDB C Driver can write a small number of bytes

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

A remote code execution security issue exists in the affected products when parsing DOE files that could allow a remote attacker to write past the end of an allocated object and...

CVE-2026-6071

A remote code execution security issue exists in the affected products when parsing DOE files that could allow a remote

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vulnerability in the gz_vacate() function when processing non-blocking gzwrite() operations with stale externa...

CVE-2026-85091

zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vulnerability in the gz_vacate() function when proces

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

Out-of-bounds Write and Improper Validation of Array Index vulnerability in Samsung Open Source TizenFX Samsung/TizenFX allows Overflow Buffers.

CVE-2026-85084

Out-of-bounds Write and Improper Validation of Array Index vulnerability in Samsung Open Source TizenFX Samsung/TizenFX

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

A stack out-of-bounds write vulnerability was found in gfs2-utils. In savemeta, the height value from on-disk inode metadata is used as a loop bound without bounds checking, cau...

CVE-2026-71221

A stack out-of-bounds write vulnerability was found in gfs2-utils. In savemeta, the height value from on-disk inode meta

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

A stack out-of-bounds write vulnerability was found in gfs2-utils. In gfs2_edit, the di_height field from on-disk inode metadata is used as an array index without bounds checkin...

CVE-2026-71220

A stack out-of-bounds write vulnerability was found in gfs2-utils. In gfs2_edit, the di_height field from on-disk inode

历史摘要 · 未重新核验 · NVD

安全公告2026-09-03 发布INFO

zlib 1.3.1.2 through 1.3.2 Heap Buffer Overflow via gz_vacate

CVE-2026-85091

zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vulnerability in the gz_vacate() function when proces

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-02 发布INFO

PX4 Autopilot contains a heap buffer overflow vulnerability in the sd_bench command that writes a...

CVE-2026-84698

PX4 Autopilot contains a heap buffer overflow vulnerability in the sd_bench command that writes a four-byte block number

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-02 发布MEDIUM

PX4 Autopilot contains a heap buffer overflow vulnerability in the sd_bench command that writes a four-byte block number into a user-supplied sized allocation. Attackers can inv...

CVE-2026-84698

CVE-2026-84698 是 PX4 Autopilot(开源自动驾驶仪软件)中的堆缓冲区溢出漏洞。该漏洞存在于 sd_bench 命令中,该命令用于执行SD卡性能基准测试。具体来说,当用户(或攻击者)调用 sd_bench 并指定一个

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

A security issue exists within FactoryTalk® Historian Machine Edition. An attacker with low-level authentication could exploit this vulnerability to achieve remote code executio...

CVE-2025-12768

A security issue exists within FactoryTalk® Historian Machine Edition. An attacker with low-level authentication could e

历史摘要 · 未重新核验 · NVD

安全公告2026-08-31 发布INFO

A flaw was found in GDB's STABS debug format parser. The read_member_functions() function in gdb...

CVE-2026-13732

A flaw was found in GDB's STABS debug format parser. The read_member_functions() function in gdb/stabsread.c contains a

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-31 发布INFO

A flaw was found in GDB's STABS debug format parser. The read_member_functions() function in gdb/stabsread.c contains a linked list removal bug in the code that separates destru...

CVE-2026-13732

A flaw was found in GDB's STABS debug format parser. The read_member_functions() function in gdb/stabsread.c contains a

历史摘要 · 未重新核验 · NVD