#cwe-789

共收录 243 条相关情报。

漏洞预警2026-10-30 发布HIGH

ag-psd is a JavaScript library for reading and writing Photoshop Document files. Before the allocation-limit remediation attempt in version 31.0.0, `readPsd()` commits image and...

CVE-2026-62297

ag-psd is a JavaScript library for reading and writing Photoshop Document files. Before the allocation-limit remediation

来源摘录 · NVD

#cve #cwe-789

漏洞预警2026-10-30 发布MEDIUM

LibreDWG is a free C library to read and write DWG files. Prior to 0.14, a specially crafted R13-R2000 DWG can trigger algorithmic resource exhaustion in `decode_R13_R2000` in `...

CVE-2026-62254

LibreDWG is a free C library to read and write DWG files. Prior to 0.14, a specially crafted R13-R2000 DWG can trigger a

来源摘录 · NVD

#cve #cwe-400 #cwe-789

漏洞预警2026-10-30 发布INFO

Crass is a Ruby CSS parser that's fully compliant with the CSS Syntax Level 3 specification. Prior to 1.0.7, Crass converts `CSS scientific notation` number values with unbounde...

CVE-2026-61845

Crass is a Ruby CSS parser that's fully compliant with the CSS Syntax Level 3 specification. Prior to 1.0.7, Crass conve

来源摘录 · NVD

#cve #cwe-789

漏洞预警2026-10-30 发布INFO

Starlet versions before 0.33 for Perl allow a request declaring a large Content-Length to kill a worker by exhausting memory. The request body is read in a loop that asks sysre...

CVE-2026-115865

Starlet versions before 0.33 for Perl allow a request declaring a large Content-Length to kill a worker by exhausting me

来源摘录 · NVD

#cve #cwe-789

漏洞预警2026-10-29 发布LOW

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3.3.7, 3.4.5, and 3.5.11, the MariaDbPoolConnection.recove...

CVE-2026-119280

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-20 #cwe-789 #maven #severity:low

漏洞预警2026-10-29 发布MEDIUM

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3.3.7 and 3.4.5, during caching_sha2_password authenticati...

CVE-2026-119278

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3

来源摘录 · NVD

#cve #cwe-129 #cwe-789

漏洞预警2026-10-29 发布MEDIUM

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3.3.7, 3.4.5, and 3.5.11, when CLIENT_SESSION_TRACK was ne...

CVE-2026-119276

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-130 #cwe-789 #maven #severity:medium

安全公告2026-10-29 发布HIGH

zip: legacy Shrink/Reduce/Implode decoder: denial of service from attacker-controlled ZIP64 uncompressed size

CVE-2026-115907

### Summary A malicious 149-byte ZIP archive can cause a denial of service in applications that enable `legacy-zip` and

来源摘录 · GitHub Advisory

#advisory #cwe-400 #cwe-789 #rust #severity:high

安全公告2026-10-29 发布HIGH

zip: Unbounded Symlink-Target Handling Can Abort Or Exhaust Memory During Extraction

CVE-2026-115909

### Summary The symbolic-link branch of `ZipArchive::extract_internal()` allocates a buffer using an attacker-declared

来源摘录 · GitHub Advisory

#advisory #cwe-400 #cwe-789 #rust #severity:high

漏洞预警2026-10-29 发布MEDIUM

A security vulnerability has been detected in nipy nibabel up to 5.4.2. The affected element is the function array_from_file of the file nibabel/volumeutils.py of the component ...

CVE-2026-118590

A security vulnerability has been detected in nipy nibabel up to 5.4.2. The affected element is the function array_from_

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-400 #cwe-789 #severity:medium

漏洞预警2026-10-29 发布MEDIUM

A weakness has been identified in nschloe meshio up to 5.3.5. Impacted is an unknown function of the file meshio/_vtk_42.py of the component VTK Reader. Executing a manipulation...

CVE-2026-118589

A weakness has been identified in nschloe meshio up to 5.3.5. Impacted is an unknown function of the file meshio/_vtk_42

来源摘录 · NVD

#cve #cwe-400 #cwe-789

安全公告2026-10-28 发布INFO

ONNX: Denial of service via unchecked expansion of packed sub-byte tensors in ONNX Python APIs

CVE-2026-115922

## Summary ONNX's Python tensor-materialization helpers could allocate memory according to attacker-controlled tensor d

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-789 #pip #severity:medium

漏洞预警2026-10-28 发布MEDIUM

PostgreSQL Anonymizer's `anon.image_blur()` function doesn't check the declared dimension of the provided image, allowing an attacker to provide a small image with enormous decl...

CVE-2026-105614

PostgreSQL Anonymizer's `anon.image_blur()` function doesn't check the declared dimension of the provided image, allowin

来源摘录 · NVD

#cve #cwe-789

漏洞预警2026-10-28 发布MEDIUM

PostgreSQL Anonymizer's range-based dummy functions dont constraint the range size. This vulnerability can be exploited to exhaust the memory of a backend and OOM-kill it (when ...

CVE-2026-105613

PostgreSQL Anonymizer's range-based dummy functions dont constraint the range size. This vulnerability can be exploited

来源摘录 · NVD

#cve #cwe-789

漏洞预警2026-10-28 发布INFO

When a broker decodes a compressed record batch, the per-record decoder reads a declared body size from the decompressed stream and allocates a buffer of that size before valida...

CVE-2026-114349

When a broker decodes a compressed record batch, the per-record decoder reads a declared body size from the decompressed

来源摘录 · NVD

#cve #cwe-1284 #cwe-400 #cwe-789

漏洞预警2026-10-28 发布INFO

Several Kafka deserialization paths read a size or count field from input data and use it directly to allocate an array, collection, or byte buffer, with no check against the by...

CVE-2026-111551

Several Kafka deserialization paths read a size or count field from input data and use it directly to allocate an array,

来源摘录 · NVD

#cve #cwe-20 #cwe-400 #cwe-789

漏洞预警2026-10-28 发布INFO

Apache Kafka's code-generated protocol readers pre-size an array's collection from the element count declared by the sender. That count is checked only against the bytes remaini...

CVE-2026-111108

Apache Kafka's code-generated protocol readers pre-size an array's collection from the element count declared by the sen

来源摘录 · NVD

#cve #cwe-400 #cwe-770 #cwe-789

漏洞预警2026-10-28 发布INFO

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recursion, infinite loop, inefficient algorithmic complexity and resource allocati...

CVE-2026-118036

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recursion, infinite loop,

历史摘要 · 未重新核验 · NVD

#cve #cwe-407 #cwe-674 #cwe-770 #cwe-789 #cwe-835

漏洞预警2026-10-28 发布HIGH

The asynchronous Smile parser (NonBlockingByteArrayParser) uses a raw-binary length prefix taken from untrusted input to allocate a byte[] before the body is read, with no upper...

CVE-2026-104895

The asynchronous Smile parser (NonBlockingByteArrayParser) uses a raw-binary length prefix taken from untrusted input to

来源摘录 · NVD

#cve #cwe-789

漏洞预警2026-10-26 发布MEDIUM

Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to 1.22.0, _unpack_2bit() and _unpack_4bit() resize unpacked arrays accordin...

CVE-2026-115922

Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to 1.22.0, _unpack_

来源摘录 · NVD

#cve #cwe-789