#cwe-787

共收录 1314 条相关情报。

← 返回所有主题
漏洞预警2026-10-20 发布INFO

Acrobat for Edge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue...

CVE-2026-100134

Acrobat for Edge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in th

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

The Cortex-A7 MMU Modules port validates a caller-supplied buffer by translating **one address** — the first byte. The common Module Manager hands its range check the module ins...

CVE-2026-95109

The Cortex-A7 MMU Modules port validates a caller-supplied buffer by translating **one address** — the first byte. The c

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

A ThreadX module chooses `object_size` when it calls `txm_module_object_allocate`. The Module Manager adds its own 16-byte private header to that size and asked the object pool ...

CVE-2026-95107

A ThreadX module chooses `object_size` when it calls `txm_module_object_allocate`. The Module Manager adds its own 16-by

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

The X.509 parser in NetX Secure accepts an RSA public key of any size, but every signature-verification path decrypts into fixed-size buffers dimensioned for the `NX_CRYPTO_MAX_...

CVE-2026-93475

The X.509 parser in NetX Secure accepts an RSA public key of any size, but every signature-verification path decrypts in

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

HarfBuzz 8.0.0 through 14.6.0 contains an out-of-bounds write vulnerability in the experimental WebAssembly shaper because the font_glyph_to_string import has a wrong WAMR signa...

CVE-2026-113679

HarfBuzz 8.0.0 through 14.6.0 contains an out-of-bounds write vulnerability in the experimental WebAssembly shaper becau

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

`_gx_binres_pixelmap_table_load()` in the GUIX binary resource (theme) loader indexes the pixelmap table with a value read verbatim from the resource file and never bounds it ag...

CVE-2026-92449

`_gx_binres_pixelmap_table_load()` in the GUIX binary resource (theme) loader indexes the pixelmap table with a value re

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

The GUIX binary resource loader never checks that a font page's glyph range is well formed. `gx_page_header_first_glyph` and `gx_page_header_last_glyph` are read verbatim from t...

CVE-2026-91189

The GUIX binary resource loader never checks that a font page's glyph range is well formed. `gx_page_header_first_glyph`

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

The PNG chunk reader has no notion of chunk ordering. It records whether an IDAT has been seen and whether a tRNS has already supplied transparency, but nothing prevents an IHDR...

CVE-2026-91186

The PNG chunk reader has no notion of chunk ordering. It records whether an IDAT has been seen and whether a tRNS has al

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

Mounting an attacker-controlled FAT image with fault tolerance enabled causes an out-of-bounds heap write during log replay. The write is attacker-positioned and attacker-valued...

CVE-2026-91041

Mounting an attacker-controlled FAT image with fault tolerance enabled causes an out-of-bounds heap write during log rep

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

UnRTF by GNU Project is vulnerable to out-of-bounds write. If a user opens an RTF file crafted by an attacker, it may lead to a denial-of-service (DoS) condition.

CVE-2026-109831

UnRTF by GNU Project is vulnerable to out-of-bounds write. If a user opens an RTF file crafted by an attacker, it may le

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布MEDIUM

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected sys...

CVE-2026-86981

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.8, mac

来源摘录 · NVD

漏洞预警2026-10-20 发布INFO

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An...

CVE-2026-86953

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, m

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布MEDIUM

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be ab...

CVE-2026-86944

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.

来源摘录 · NVD

漏洞预警2026-10-20 发布INFO

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Pr...

CVE-2026-86918

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, m

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequ...

CVE-2026-84613

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-19 发布INFO

The user-mode syscall verifier z_vrfy_rtio_cqe_get_mempool_buffer() in subsys/rtio/rtio_syscalls.c validated its two output parameters, buff and buff_len, with K_SYSCALL_MEMORY_...

CVE-2026-19595

The user-mode syscall verifier z_vrfy_rtio_cqe_get_mempool_buffer() in subsys/rtio/rtio_syscalls.c validated its two out

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-19 发布INFO

Pillow is a Python imaging library. Prior to 13.0.0, Pillow's FlashPix JPEG-tile decoder can write decoded scanlines beyond the allocated tile buffer. FlashPix (FPX) JPEG decodi...

CVE-2026-112398

Pillow is a Python imaging library. Prior to 13.0.0, Pillow's FlashPix JPEG-tile decoder can write decoded scanlines bey

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-19 发布INFO

Pillow is a Python imaging library. Prior to 13.0.0, Pillow's ImageMorph.MorphOp.apply() can access memory before a row buffer for a zero-width image. PPM and PGM input can crea...

CVE-2026-112397

Pillow is a Python imaging library. Prior to 13.0.0, Pillow's ImageMorph.MorphOp.apply() can access memory before a row

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-19 发布INFO

The OSDP Control Panel reply parser cp_decode_response() in subsys/mgmt/osdp/src/osdp_cp.c decodes replies from a Peripheral Device into a stack-allocated struct osdp_event. For...

CVE-2026-76788

The OSDP Control Panel reply parser cp_decode_response() in subsys/mgmt/osdp/src/osdp_cp.c decodes replies from a Periph

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-19 发布HIGH

Cpanel::JSON::XS versions from 4.20 before 4.80 for Perl write out of bounds when a tied or shared hash grows during canonical encoding in encode_hv. With canonical, the keys o...

CVE-2026-110680

Cpanel::JSON::XS versions from 4.20 before 4.80 for Perl write out of bounds when a tied or shared hash grows during can

来源摘录 · NVD