#cwe-787

共收录 1380 条相关情报。

漏洞预警2026-06-29 发布INFO

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. Processing mal...

CVE-2026-28979

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 26.5.2, iOS 26.

历史摘要 · 未重新核验 · NVD

#cve #cwe-125 #cwe-787

漏洞预警2026-06-29 发布INFO

A vulnerability was detected in liftoff-sr CIPster up to e8e9dba09bf56962807d3504b783ccdb6287f3e4. Affected by this issue is the function BufWriter::append of the component Ethe...

CVE-2026-13592

A vulnerability was detected in liftoff-sr CIPster up to e8e9dba09bf56962807d3504b783ccdb6287f3e4. Affected by this issu

历史摘要 · 未重新核验 · NVD

#cve #cwe-119 #cwe-787

安全公告2026-06-28 发布INFO

FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) performs 32-bit reads and writes...

CVE-2026-58049

FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) performs 32-bit reads and writes at the row cursor before

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-787 #severity:high

漏洞预警2026-06-28 发布HIGH

FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) performs 32-bit reads and writes at the row cursor before the NEXT_LINE row-boundary check and validates the DLTA ...

CVE-2026-58049

FFmpeg 的 RASC 视频解码器（位于 libavcodec/rasc.c 的 decode_dlta 函数）存在一个二进制安全漏洞。该函数在 NEXT_LINE 行边界检查之前对行游标（row cursor）执行 32 位读写操作，

历史摘要 · 未重新核验 · NVD

#cve #cwe-787

漏洞预警2026-06-28 发布HIGH

Zephyr's IP socket recvmsg() implementation (subsys/net/lib/sockets/sockets_inet.c, insert_pktinfo()) validated the user-supplied ancillary (msg_control) buffer using only the p...

CVE-2026-10643

Zephyr 实时操作系统（RTOS）的 IP 套接字 recvmsg() 实现中存在一个堆越界写入漏洞，影响 v3.6.0 至 v4.4.0 版本。漏洞位于 subsys/net/lib/sockets/sockets_inet.c 文件

历史摘要 · 未重新核验 · NVD

#cve #cwe-787

漏洞预警2026-06-27 发布HIGH

dsp_mmap_single() validated the requested mapping by checking the sum of the user-supplied offset and length against the buffer size. This addition could overflow, so that a la...

CVE-2026-45258

CVE-2026-45258 是 Linux 内核音频子系统 /dev/dsp 设备驱动中的一个整数溢出漏洞。该漏洞位于 dsp_mmap_single() 函数中，该函数负责验证用户请求的内存映射。具体而言，函数通过将用户提供的偏移量（o

历史摘要 · 未重新核验 · NVD

#cve #cwe-125 #cwe-190 #cwe-681 #cwe-787

安全公告2026-06-26 发布INFO

ImageMagick has a Heap Buffer Over-Write in SF3 encoder when writing multi-frame image

CVE-2026-53465

An crafted multi-frame can result in a heap buffer over-write when encoding it with the SF3 encoder.

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #nuget #cwe-122 #cwe-787 #severity:medium

漏洞预警2026-06-26 发布INFO

An unauthenticated out-of-bounds write vulnerability exists in onvif.cgi in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by insufficient bo...

CVE-2026-57876

An unauthenticated out-of-bounds write vulnerability exists in onvif.cgi in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 an

历史摘要 · 未重新核验 · NVD

#cve #cwe-787

安全公告2026-06-26 发布INFO

Out-of-bounds write in SetSuitesHashSigAlgo when processing an oversized signature algorithms...

CVE-2026-6325

Out-of-bounds write in SetSuitesHashSigAlgo when processing an oversized signature algorithms list, allowing a write pas

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-787 #severity:low

漏洞预警2026-06-25 发布INFO

Out-of-bounds write in SetSuitesHashSigAlgo when processing an oversized signature algorithms list, allowing a write past the bounds of the destination buffer.

CVE-2026-6325

Out-of-bounds write in SetSuitesHashSigAlgo when processing an oversized signature algorithms list, allowing a write pas

历史摘要 · 未重新核验 · NVD

#cve #cwe-787

安全公告2026-06-25 发布INFO

ImageMagick has out-of-bounds write in ICON decoder due to incorrect loop

CVE-2026-53461

An incorrect loop in the ICON decoder can result in an out of bounds heap write resulting in a crash.

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #nuget #cwe-787 #severity:high

安全公告2026-06-25 发布INFO

ImageMagick has a Heap Buffer Underwrite in the Floyd-Steinberg depth dithering method

CVE-2026-48724

When using an image with mask the Floyd-Steinberg dithering method will cause a negative heap buffer over-write.

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #nuget #cwe-787 #severity:medium

漏洞预警2026-06-25 发布INFO

The PKCS#7 decode path ignores the caller-supplied output buffer size (outputSz), allowing decoded content to be written past the bounds of the provided buffer. This affects wol...

CVE-2026-6681

The PKCS#7 decode path ignores the caller-supplied output buffer size (outputSz), allowing decoded content to be written

历史摘要 · 未重新核验 · NVD

#cve #cwe-120 #cwe-787

漏洞预警2026-06-25 发布INFO

A heap buffer overflow could occur in the DTLS 1.3 ACK serialization path before the connecting peer is authenticated. The buffer overflow was due to an integer truncation when ...

CVE-2026-6679

A heap buffer overflow could occur in the DTLS 1.3 ACK serialization path before the connecting peer is authenticated. T

历史摘要 · 未重新核验 · NVD

#cve #cwe-190 #cwe-197 #cwe-787

漏洞预警2026-06-25 发布INFO

Out-of-bounds write in the Renesas TSIP TLS 1.3 transcript buffer. In tsip_StoreMessage() the capacity check guarding the fixed message bag (MSGBAG_SIZE) sets an error code but ...

CVE-2026-55958

Out-of-bounds write in the Renesas TSIP TLS 1.3 transcript buffer. In tsip_StoreMessage() the capacity check guarding th

历史摘要 · 未重新核验 · NVD

#cve #cwe-393 #cwe-787

漏洞预警2026-06-25 发布INFO

RTKLIB through 2.4.3 contains an out-of-bounds write vulnerability in decode_type1033 function that fails to clamp length counters to destination buffer size, allowing up to 191...

CVE-2026-56786

RTKLIB through 2.4.3 contains an out-of-bounds write vulnerability in decode_type1033 function that fails to clamp lengt

历史摘要 · 未重新核验 · NVD

#cve #cwe-787

漏洞预警2026-06-25 发布INFO

jq is a command-line JSON processor. Prior to 1.8.2,` jq --rawfile` can turn a handled oversized-string error into invalid-state reuse and a real heap out-of-bounds write in ass...

CVE-2026-49839

jq is a command-line JSON processor. Prior to 1.8.2,` jq --rawfile` can turn a handled oversized-string error into inval

历史摘要 · 未重新核验 · NVD

#cve #cwe-787

漏洞预警2026-06-25 发布INFO

Vim is an open source, command line text editor. Prior to 9.2.0698, the single-byte branch of spell_soundfold_sofo() in src/spell.c translates a word through a spell file's SOFO...

CVE-2026-57455

Vim is an open source, command line text editor. Prior to 9.2.0698, the single-byte branch of spell_soundfold_sofo() in

历史摘要 · 未重新核验 · NVD

#cve #cwe-787

漏洞预警2026-06-25 发布INFO

Vim is an open source, command line text editor. Prior to 9.2.0662, the dump_prefixes() function in src/spell.c walks a spell-file prefix trie iteratively with a depth counter w...

CVE-2026-55892

Vim is an open source, command line text editor. Prior to 9.2.0662, the dump_prefixes() function in src/spell.c walks a

历史摘要 · 未重新核验 · NVD

#cve #cwe-787

漏洞预警2026-06-25 发布INFO

Vim is an open source, command line text editor. Prior to 9.2.0653, the tree_count_words() function in src/spellfile.c fills in the word-count fields of a spell-file word trie b...

CVE-2026-55693

Vim is an open source, command line text editor. Prior to 9.2.0653, the tree_count_words() function in src/spellfile.c f

历史摘要 · 未重新核验 · NVD

#cve #cwe-787