#cwe-787

共收录 1380 条相关情报。

← 返回所有主题
漏洞预警2026-05-11 发布INFO

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present The DATA-packet handler in rxrpc_inp...

CVE-2026-43500

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Also unshare DATA/RESPONSE packets when page

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-09 发布INFO

Pillow is a Python imaging library. From version 10.3.0 to before version 12.2.0, processing a malicious PSD file could lead to memory corruption, potentially resulting in a cra...

CVE-2026-42311

Pillow is a Python imaging library. From version 10.3.0 to before version 12.2.0, processing a malicious PSD file could

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-07 发布INFO

Out-of-bounds write vulnerability in The Document Foundation LibreOffice via crafted OOXML documents with mismatched encryption salt parameters. This issue affects LibreOffice:...

CVE-2026-4430

Out-of-bounds write vulnerability in The Document Foundation LibreOffice via crafted OOXML documents with mismatched enc

历史摘要 · 未重新核验 · NVD

安全公告2026-05-07 发布INFO

ZTE ZX297520V3 BootROM contains a vulnerability that allows arbitrary memory writes via USB....

CVE-2026-40003

ZTE ZX297520V3 BootROM contains a vulnerability that allows arbitrary memory writes via USB. Attackers can exploit the l

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-07 发布INFO

ZTE ZX297520V3 BootROM contains a vulnerability that allows arbitrary memory writes via USB. Attackers can exploit the lack of target address validation in the USB download mode...

CVE-2026-40003

ZTE ZX297520V3 BootROM contains a vulnerability that allows arbitrary memory writes via USB. Attackers can exploit the l

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-06 发布INFO

Out of bounds write in Media in Google Chrome on Mac, iOS prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to execute arbitrary code ins...

CVE-2026-7957

Out of bounds write in Media in Google Chrome on Mac, iOS prior to 148.0.7778.96 allowed a remote attacker who had compr

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-06 发布INFO

A buffer overflow vulnerability in the User-ID™ Authentication Portal (aka Captive Portal) service of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to ex...

CVE-2026-0300

A buffer overflow vulnerability in the User-ID™ Authentication Portal (aka Captive Portal) service of Palo Alto Networks

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-06 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: alpha: fix user-space corruption during memory compaction Alpha systems can suffer sporadic user-space cras...

CVE-2026-43258

In the Linux kernel, the following vulnerability has been resolved: alpha: fix user-space corruption during memory comp

来源摘录 · NVD

漏洞预警2026-05-06 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: usb: chipidea: udc: fix DMA and SG cleanup in _ep_nuke() The ChipIdea UDC driver can encounter "not page al...

CVE-2026-43250

In the Linux kernel, the following vulnerability has been resolved: usb: chipidea: udc: fix DMA and SG cleanup in _ep_n

来源摘录 · NVD

漏洞预警2026-05-06 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: vhost: move vdpa group bound check to vhost_vdpa Remove duplication by consolidating these here. This redu...

CVE-2026-43248

In the Linux kernel, the following vulnerability has been resolved: vhost: move vdpa group bound check to vhost_vdpa R

来源摘录 · NVD

漏洞预警2026-05-06 发布CRITICAL

In the Linux kernel, the following vulnerability has been resolved: dlm: validate length in dlm_search_rsb_tree The len parameter in dlm_dump_rsb_name() is not validated and c...

CVE-2026-43125

In the Linux kernel, the following vulnerability has been resolved: dlm: validate length in dlm_search_rsb_tree The le

来源摘录 · NVD

漏洞预警2026-05-05 发布INFO

The rtl8192cd Wi-Fi kernel driver in the Realtek rtl819x Jungle SDK (all known versions through v3.4.14B) does not perform any access control checks on the write_mem (ioctl 0x89...

CVE-2026-36355

The rtl8192cd Wi-Fi kernel driver in the Realtek rtl819x Jungle SDK (all known versions through v3.4.14B) does not perfo

历史摘要 · 未重新核验 · NVD

安全公告2026-05-04 发布INFO

Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow)

CVE-2026-42311

### Impact Processing a malicious PSD file could lead to memory corruption, potentially resulting in a crash or arbitrar

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-04 发布INFO

A stack overflow vulnerability exists in the WebCam Server Login functionality of GeoVision GV...

CVE-2026-7372

A stack overflow vulnerability exists in the WebCam Server Login functionality of GeoVision GV-VMS V20 20.0.2. A special

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-04 发布INFO

A stack overflow vulnerability exists in the WebCam Server Login functionality of GeoVision GV...

CVE-2026-42370

A stack overflow vulnerability exists in the WebCam Server Login functionality of GeoVision GV-VMS V20 20.0.2. A special

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-04 发布INFO

GV-VMS V20 is a Video Monitoring Software used to gather the feeds of many surveillance cameras...

CVE-2026-42369

GV-VMS V20 is a Video Monitoring Software used to gather the feeds of many surveillance cameras and manage other securit

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-04 发布INFO

A stack overflow vulnerability exists in the WebCam Server Login functionality of GeoVision GV-VMS V20 20.0.2. A specially crafted HTTP request can lead to an arbitrary code exe...

CVE-2026-7372

A stack overflow vulnerability exists in the WebCam Server Login functionality of GeoVision GV-VMS V20 20.0.2. A special

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

A stack overflow vulnerability exists in the WebCam Server Login functionality of GeoVision GV-VMS V20 20.0.2. A specially crafted HTTP request can lead to an arbitrary code exe...

CVE-2026-42370

A stack overflow vulnerability exists in the WebCam Server Login functionality of GeoVision GV-VMS V20 20.0.2. A special

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

GV-VMS V20 is a Video Monitoring Software used to gather the feeds of many surveillance cameras and manage other security devices. It is a native application accessed locally, b...

CVE-2026-42369

GV-VMS V20 is a Video Monitoring Software used to gather the feeds of many surveillance cameras and manage other securit

历史摘要 · 未重新核验 · NVD

安全公告2026-05-01 发布INFO

An off-by-one out-of-bounds write vulnerability in the bgp_flowspec_op_decode() function (bgpd...

CVE-2026-37457

An off-by-one out-of-bounds write vulnerability in the bgp_flowspec_op_decode() function (bgpd/bgp_flowspec_util.c) of F

历史摘要 · 未重新核验 · GitHub Advisory