#cwe-787

共收录 1336 条相关情报。

← 返回所有主题
漏洞预警2026-06-30 发布INFO

Out of bounds read in Layout in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML...

CVE-2026-13873

Out of bounds read in Layout in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sen

历史摘要 · 未重新核验 · NVD

安全公告2026-06-30 发布INFO

Open Babel has out-of-bounds write (overlapping memcpy) in zipstream basic_unzip_streambuf::underflow

CVE-2025-10995

### Summary A memory-safety vulnerability in Open Babel's bundled zipstream decompression code caused an out-of-bounds

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-29 发布INFO

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in...

CVE-2026-43745

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in Safari 26.5.2, iOS 26.

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-29 发布INFO

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. Processing mal...

CVE-2026-43745

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in Safari 26.5.2, iOS 26.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-29 发布INFO

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. Processing maliciously crafted web...

CVE-2026-43712

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-29 发布INFO

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. Processing maliciously crafted web content may le...

CVE-2026-43703

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-29 发布INFO

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. Processing mal...

CVE-2026-43676

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 26.5.2, iOS 26.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-29 发布INFO

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. Processing mal...

CVE-2026-28979

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 26.5.2, iOS 26.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-29 发布INFO

A vulnerability was detected in liftoff-sr CIPster up to e8e9dba09bf56962807d3504b783ccdb6287f3e4. Affected by this issue is the function BufWriter::append of the component Ethe...

CVE-2026-13592

A vulnerability was detected in liftoff-sr CIPster up to e8e9dba09bf56962807d3504b783ccdb6287f3e4. Affected by this issu

历史摘要 · 未重新核验 · NVD

安全公告2026-06-28 发布INFO

FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) performs 32-bit reads and writes...

CVE-2026-58049

FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) performs 32-bit reads and writes at the row cursor before

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-28 发布HIGH

FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) performs 32-bit reads and writes at the row cursor before the NEXT_LINE row-boundary check and validates the DLTA ...

CVE-2026-58049

FFmpeg 的 RASC 视频解码器(位于 libavcodec/rasc.c 的 decode_dlta 函数)存在一个二进制安全漏洞。该函数在 NEXT_LINE 行边界检查之前对行游标(row cursor)执行 32 位读写操作,

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-28 发布HIGH

Zephyr's IP socket recvmsg() implementation (subsys/net/lib/sockets/sockets_inet.c, insert_pktinfo()) validated the user-supplied ancillary (msg_control) buffer using only the p...

CVE-2026-10643

Zephyr 实时操作系统(RTOS)的 IP 套接字 recvmsg() 实现中存在一个堆越界写入漏洞,影响 v3.6.0 至 v4.4.0 版本。漏洞位于 subsys/net/lib/sockets/sockets_inet.c 文件

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-27 发布HIGH

dsp_mmap_single() validated the requested mapping by checking the sum of the user-supplied offset and length against the buffer size. This addition could overflow, so that a la...

CVE-2026-45258

CVE-2026-45258 是 Linux 内核音频子系统 /dev/dsp 设备驱动中的一个整数溢出漏洞。该漏洞位于 dsp_mmap_single() 函数中,该函数负责验证用户请求的内存映射。具体而言,函数通过将用户提供的偏移量(o

历史摘要 · 未重新核验 · NVD

安全公告2026-06-26 发布INFO

ImageMagick has a Heap Buffer Over-Write in SF3 encoder when writing multi-frame image

CVE-2026-53465

An crafted multi-frame can result in a heap buffer over-write when encoding it with the SF3 encoder.

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-26 发布INFO

An unauthenticated out-of-bounds write vulnerability exists in onvif.cgi in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by insufficient bo...

CVE-2026-57876

An unauthenticated out-of-bounds write vulnerability exists in onvif.cgi in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 an

历史摘要 · 未重新核验 · NVD

安全公告2026-06-26 发布INFO

Out-of-bounds write in SetSuitesHashSigAlgo when processing an oversized signature algorithms...

CVE-2026-6325

Out-of-bounds write in SetSuitesHashSigAlgo when processing an oversized signature algorithms list, allowing a write pas

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-25 发布INFO

Out-of-bounds write in SetSuitesHashSigAlgo when processing an oversized signature algorithms list, allowing a write past the bounds of the destination buffer.

CVE-2026-6325

Out-of-bounds write in SetSuitesHashSigAlgo when processing an oversized signature algorithms list, allowing a write pas

历史摘要 · 未重新核验 · NVD

安全公告2026-06-25 发布INFO

ImageMagick has out-of-bounds write in ICON decoder due to incorrect loop

CVE-2026-53461

An incorrect loop in the ICON decoder can result in an out of bounds heap write resulting in a crash.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-25 发布INFO

ImageMagick has a Heap Buffer Underwrite in the Floyd-Steinberg depth dithering method

CVE-2026-48724

When using an image with mask the Floyd-Steinberg dithering method will cause a negative heap buffer over-write.

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-25 发布INFO

The PKCS#7 decode path ignores the caller-supplied output buffer size (outputSz), allowing decoded content to be written past the bounds of the provided buffer. This affects wol...

CVE-2026-6681

The PKCS#7 decode path ignores the caller-supplied output buffer size (outputSz), allowing decoded content to be written

历史摘要 · 未重新核验 · NVD