#cwe-787

共收录 1314 条相关情报。

← 返回所有主题
漏洞预警2026-08-31 发布INFO

The LwM2M JSON content formatter's get_string() in subsys/net/lib/lwm2m/lwm2m_rw_json.c copies a parsed JSON string into a caller-supplied buffer and NUL-terminates it. The leng...

CVE-2026-14368

The LwM2M JSON content formatter's get_string() in subsys/net/lib/lwm2m/lwm2m_rw_json.c copies a parsed JSON string into

历史摘要 · 未重新核验 · NVD

安全公告2026-08-31 发布INFO

Off-by-one out-of-bounds NUL write in Zephyr LwM2M JSON string parser

CVE-2026-14368

The LwM2M JSON content formatter's get_string() in subsys/net/lib/lwm2m/lwm2m_rw_json.c copies a parsed JSON string into

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-08-31 发布INFO

A weakness has been identified in D-Link DSM-G600 1.01. This affects an unknown function of the file /load_file.cgi of the component Multipart Handler. Executing a manipulation ...

CVE-2026-82680

A weakness has been identified in D-Link DSM-G600 1.01. This affects an unknown function of the file /load_file.cgi of t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

CVE-2025-40843 https://github.com/advisories/GHSA-5xf2-f6ch-6p8r  was fixed by replacing unchecked strcpy() with a bounded safe_strcpy() helper. At ldlogger-tool-gcc.c:129 the d...

CVE-2026-58106

CVE-2025-40843 https://github.com/advisories/GHSA-5xf2-f6ch-6p8r  was fixed by replacing unchecked strcpy() with a bound

历史摘要 · 未重新核验 · NVD

安全公告2026-08-28 发布INFO

Incomplete fix for CVE-2025-40843: safe_strcpy is called with PATH_MAX into fullPath+2, writing 2 bytes past the buffer on every CodeChecker log invocation

CVE-2026-58106

CVE-2025-40843 https://github.com/advisories/GHSA-5xf2-f6ch-6p8r  was fixed by replacing unchecked strcpy() with a bound

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-08-28 发布INFO

A flaw was found in FFmpeg. The tdsc_load_cursor() function writes beyond the bounds of a heap-allocated buffer when processing crafted TDSC cursor data. A remote attacker could...

CVE-2026-18393

A flaw was found in FFmpeg. The tdsc_load_cursor() function writes beyond the bounds of a heap-allocated buffer when pro

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

An integer underflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service (DoS) condition in VPN proce...

CVE-2026-78011

An integer underflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

A stack-based buffer overflow vulnerability in the WatchGuard Fireware OS iked process iallows a remote unauthenticated attacker to create a Denial of Service (DoS) condition in...

CVE-2026-78010

A stack-based buffer overflow vulnerability in the WatchGuard Fireware OS iked process iallows a remote unauthenticated

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

A buffer overflow vulnerability in the WatchGuard Fireware OS Management Web UI allows an authenticated administrator with network access to cause a denial of service (DoS) cond...

CVE-2026-78008

A buffer overflow vulnerability in the WatchGuard Fireware OS Management Web UI allows an authenticated administrator wi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

An integer underflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service (DoS) condition in VPN proce...

CVE-2026-19314

An integer underflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

A stack-based buffer overflow in the epm (Endpoint Protection Manager) service used by the deprecated Mobile Security feature in WatchGuard Fireware OS allows an unauthenticated...

CVE-2026-13086

A stack-based buffer overflow in the epm (Endpoint Protection Manager) service used by the deprecated Mobile Security fe

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

Bendix EC80 Brake ECU is vulnerable to an out-of-bounds write, which could allow an attacker to deliver a payload that could establish an arbitrary write primitive, which coul...

CVE-2026-68967

Bendix EC80 Brake ECU is vulnerable to an out-of-bounds write, which could allow an attacker to deliver a payload that

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-27 发布INFO

A flaw was found in gdk-pixbuf. When loading a specially crafted JPEG image containing chunked ICC profile markers, an error during ICC profile parsing can leave stale size meta...

CVE-2026-81893

A flaw was found in gdk-pixbuf. When loading a specially crafted JPEG image containing chunked ICC profile markers, an e

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-27 发布INFO

Unitree G1 EDU firmware through 1.5.2 contains multiple chained vulnerabilities in the BLE GATT server and WiFi provisioning stack that allow unauthenticated proximate attackers...

CVE-2026-76640

Unitree G1 EDU firmware through 1.5.2 contains multiple chained vulnerabilities in the BLE GATT server and WiFi provisio

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-27 发布INFO

DNG SDK versions 1.7.1 2502 and earlier are affected by an out-of-bounds write vulnerability that could lead to application denial-of-service. An attacker could leverage this vu...

CVE-2026-34620

DNG SDK versions 1.7.1 2502 and earlier are affected by an out-of-bounds write vulnerability that could lead to applicat

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-27 发布INFO

Passing an effectively empty string to the `,ccs=` syntax extension of the mode argument in the `fopen` function in the GNU C Library version 2.45 or earlier may result in a hea...

CVE-2026-18374

Passing an effectively empty string to the `,ccs=` syntax extension of the mode argument in the `fopen` function in the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-27 发布INFO

darknet subscripts its layer array with an index taken from a configuration file without checking it against the array's length. The array is allocated in src-lib/darknet_networ...

CVE-2026-81334

darknet subscripts its layer array with an index taken from a configuration file without checking it against the array's

历史摘要 · 未重新核验 · NVD

安全公告2026-08-27 发布INFO

darknet through 6.0 Out-of-Bounds Read and Write via Unchecked Layer Index in .cfg Parser

CVE-2026-81334

darknet subscripts its layer array with an index taken from a configuration file without checking it against the array's

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-08-27 发布INFO

A remote attacker with user privileges may use a malicious or compromised NASL vulnerability test (VT) on the affected products to trigger a stack buffer overflow and gain full ...

CVE-2026-81625

A remote attacker with user privileges may use a malicious or compromised NASL vulnerability test (VT) on the affected p

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-27 发布INFO

“unsupported-when-assigned.” An out-of-bounds write in the SmiFlash SMM module of ASUS FA507NU and FA507NV BIOS allows a local  administrator to cause a system crash (BSOD) or B...

CVE-2026-19398

“unsupported-when-assigned.” An out-of-bounds write in the SmiFlash SMM module of ASUS FA507NU and FA507NV BIOS allows a

历史摘要 · 未重新核验 · NVD