#cwe-787

共收录 1336 条相关情报。

← 返回所有主题
漏洞预警2026-07-21 发布INFO

Heap type confusion and out-of-bounds read/write in the Apache Fory C++ implementation. When deserializing data in compatible mode, the field-skip paths do not correctly validat...

CVE-2026-64608

Heap type confusion and out-of-bounds read/write in the Apache Fory C++ implementation. When deserializing data in compa

历史摘要 · 未重新核验 · NVD

安全公告2026-07-20 发布INFO

Pillow: Controlled heap out-of-bounds write in Pillow `ImageCmsTransform.apply()` via output mode mismatch

CVE-2026-59205

### Summary Pillow's public `ImageCms.ImageCmsTransform.apply(im, imOut)` API can trigger controlled native heap corrup

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-20 发布INFO

Pillow: Heap out-of-bounds write `Image.paste()` / `Image.crop()` via signed coordinate overflow

CVE-2026-59199

### Summary Pillow's public image coordinate APIs can trigger a native heap out-of-bounds write when given coordinates

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-20 发布INFO

A vulnerability was found in the network packet de-fragmentation engine of kronosnet (Version affected <= 1.34). The internal reassembly code does not properly validate sequence...

CVE-2026-15813

A vulnerability was found in the network packet de-fragmentation engine of kronosnet (Version affected <= 1.34). The int

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-19 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: iio: imu: st_lsm6dsx: fix stack leak in tagged FIFO buffer The tagged FIFO path declares iio_buff on the st...

CVE-2026-63967

In the Linux kernel, the following vulnerability has been resolved: iio: imu: st_lsm6dsx: fix stack leak in tagged FIFO

来源摘录 · NVD

漏洞预警2026-07-19 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: USB: serial: safe_serial: fix memory corruption with small endpoint Make sure that the bulk-out buffer size...

CVE-2026-63957

In the Linux kernel, the following vulnerability has been resolved: USB: serial: safe_serial: fix memory corruption wit

来源摘录 · NVD

漏洞预警2026-07-19 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: USB: serial: cypress_m8: fix memory corruption with small endpoint Make sure that the interrupt-out endpoin...

CVE-2026-63956

In the Linux kernel, the following vulnerability has been resolved: USB: serial: cypress_m8: fix memory corruption with

来源摘录 · NVD

漏洞预警2026-07-19 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: USB: serial: omninet: fix memory corruption with small endpoint Make sure that the bulk-out buffers are at ...

CVE-2026-63928

In the Linux kernel, the following vulnerability has been resolved: USB: serial: omninet: fix memory corruption with sm

来源摘录 · NVD

漏洞预警2026-07-19 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: HID: wacom: Fix OOB write in wacom_hid_set_device_mode() wacom_hid_set_device_mode() currently assumes that...

CVE-2026-63916

In the Linux kernel, the following vulnerability has been resolved: HID: wacom: Fix OOB write in wacom_hid_set_device_m

来源摘录 · NVD

漏洞预警2026-07-19 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: USB: serial: digi_acceleport: fix memory corruption with small endpoints Add the missing bulk-out buffer si...

CVE-2026-63901

In the Linux kernel, the following vulnerability has been resolved: USB: serial: digi_acceleport: fix memory corruption

来源摘录 · NVD

漏洞预警2026-07-19 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: USB: serial: mxuport: fix memory corruption with small endpoint Make sure that the bulk-out endpoint max pa...

CVE-2026-63899

In the Linux kernel, the following vulnerability has been resolved: USB: serial: mxuport: fix memory corruption with sm

来源摘录 · NVD

漏洞预警2026-07-19 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: USB: serial: mct_u232: fix memory corruption with small endpoint The driver overrides the maximum transfer ...

CVE-2026-63898

In the Linux kernel, the following vulnerability has been resolved: USB: serial: mct_u232: fix memory corruption with s

来源摘录 · NVD

漏洞预警2026-07-19 发布INFO

A security flaw has been discovered in davenardella snap7 up to 1.4.3. The impacted element is the function TSnap7Peer::NegotiatePDULength of the file src/core/s7_peer.cpp. The ...

CVE-2026-16225

A security flaw has been discovered in davenardella snap7 up to 1.4.3. The impacted element is the function TSnap7Peer::

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-17 发布INFO

rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.10.50 until 0.10.80, CipherCtxRef::cipher_update_inplace in openssl/src/cipher_ctx.rs incorrectl...

CVE-2026-45784

rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.10.50 until 0.10.80, CipherCtxRef::ciph

历史摘要 · 未重新核验 · NVD

安全公告2026-07-17 发布INFO

Out-of-bounds write vulnerability in Legion of the Bouncy Castle Inc. BC-LTS bcprov-lts8on on ARM...

CVE-2026-15997

Out-of-bounds write vulnerability in Legion of the Bouncy Castle Inc. BC-LTS bcprov-lts8on on ARM allows Overflow Buffer

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-16 发布INFO

Quicly is an IETF QUIC protocol implementation intended primarily for use within the H2O HTTP server. Prior to commit 8b178e6, Quicly is vulnerable to a Denial of Service attack...

CVE-2026-44436

Quicly is an IETF QUIC protocol implementation intended primarily for use within the H2O HTTP server. Prior to commit 8b

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-16 发布INFO

Out-of-bounds write vulnerability in Legion of the Bouncy Castle Inc. BC-LTS bcprov-lts8on on ARM allows Overflow Buffers. This vulnerability is associated with program files ...

CVE-2026-15997

Out-of-bounds write vulnerability in Legion of the Bouncy Castle Inc. BC-LTS bcprov-lts8on on ARM allows Overflow Buffer

历史摘要 · 未重新核验 · NVD

安全公告2026-07-16 发布INFO

Quicly is vulnerable to connection state corruption

CVE-2026-44436

Quicly is an IETF QUIC protocol implementation intended primarily for use within the H2O HTTP server. Prior to commit 8b

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-16 发布INFO

An out-of-bounds write vulnerability in the Productivity Suite allows a local attacker to...

CVE-2026-61389

An out-of-bounds write vulnerability in the Productivity Suite allows a local attacker to trigger kernel memory corrupt

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-16 发布INFO

An out-of-bounds write vulnerability in the Productivity Suite allows a local attacker to...

CVE-2026-60063

An out-of-bounds write vulnerability in the Productivity Suite allows a local attacker to trigger kernel memory corrupt

历史摘要 · 未重新核验 · GitHub Advisory