#cwe-789

共收录 243 条相关情报。

漏洞预警2026-07-10 发布INFO

NanaZip is the 7-Zip derivative intended for the modern Windows experience. Prior to 6.5.1749.0, NanaZip's WebAssembly archive handler in NanaZip.Codecs.Archive.WebAssembly.cpp ...

CVE-2026-55782

NanaZip is the 7-Zip derivative intended for the modern Windows experience. Prior to 6.5.1749.0, NanaZip's WebAssembly a

历史摘要 · 未重新核验 · NVD

#cve #cwe-400 #cwe-789

漏洞预警2026-07-10 发布INFO

NanaZip is the 7-Zip derivative intended for the modern Windows experience. Prior to 6.5.1749.0, NanaZip's UFS and FFS image handler in NanaZip.Codecs.Archive.Ufs.cpp validates ...

CVE-2026-55781

NanaZip is the 7-Zip derivative intended for the modern Windows experience. Prior to 6.5.1749.0, NanaZip's UFS and FFS i

历史摘要 · 未重新核验 · NVD

#cve #cwe-400 #cwe-789

漏洞预警2026-07-10 发布INFO

Memory Allocation with Excessive Size Value, Allocation of Resources Without Limits or Throttling, Missing Authentication for Critical Function vulnerability in Apache IoTDB. Wh...

CVE-2026-40006

Memory Allocation with Excessive Size Value, Allocation of Resources Without Limits or Throttling, Missing Authenticatio

历史摘要 · 未重新核验 · NVD

#cve #cwe-306 #cwe-770 #cwe-789

漏洞预警2026-07-08 发布INFO

pypdf is a free and open-source pure-python PDF library. Prior to 6.14.0, an attacker can craft a PDF with declared image size values that are much too large compared to the act...

CVE-2026-59938

pypdf is a free and open-source pure-python PDF library. Prior to 6.14.0, an attacker can craft a PDF with declared imag

历史摘要 · 未重新核验 · NVD

#cve #cwe-789

安全公告2026-07-08 发布INFO

pypdf: Possible large memory usage for wrong image dimensions

CVE-2026-59938

pypdf is a free and open-source pure-python PDF library. Prior to 6.14.0, an attacker can craft a PDF with declared imag

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-789

漏洞预警2026-07-08 发布INFO

Tanium addressed a denial of service vulnerability in Tanium Server.

CVE-2026-15053

Tanium addressed a denial of service vulnerability in Tanium Server.

历史摘要 · 未重新核验 · NVD

#cve #cwe-789

漏洞预警2026-07-08 发布INFO

Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed. Imager mishandled large EXIF IFD entry count values, treating them as negative numbers. T...

CVE-2026-14454

Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed. Imager mishandled large EXIF IFD

历史摘要 · 未重新核验 · NVD

#cve #cwe-196 #cwe-789

漏洞预警2026-07-08 发布INFO

Coder allows organizations to provision remote development environments via Terraform. Starting in version 2.24.0 and prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, `NewD...

CVE-2026-55079

Coder allows organizations to provision remote development environments via Terraform. Starting in version 2.24.0 and pr

历史摘要 · 未重新核验 · NVD

#cve #cwe-789

安全公告2026-07-07 发布INFO

Coder's unbounded memory allocation in provisioner file upload allows authenticated denial of service

CVE-2026-55079

Coder allows organizations to provision remote development environments via Terraform. Starting in version 2.24.0 and pr

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-789

安全公告2026-07-06 发布INFO

Coder's unbounded memory allocation in provisioner file upload allows authenticated denial of service

CVE-2026-55079

### Summary `NewDataBuilder` in `provisionersdk/proto/dataupload.go` allocated a byte slice using the client-supplied `

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #go #cwe-789 #severity:medium

漏洞预警2026-07-06 发布INFO

Pillow is a Python imaging library. Prior to 12.3.0, PIL/GdImageFile.py GdImageFile._open() read image dimensions from the GD 2.x header and stored them in self._size without ca...

CVE-2026-55380

Pillow is a Python imaging library. Prior to 12.3.0, PIL/GdImageFile.py GdImageFile._open() read image dimensions from t

历史摘要 · 未重新核验 · NVD

#cve #cwe-789

漏洞预警2026-07-06 发布INFO

Pillow is a Python imaging library. Prior to 12.3.0, PIL/BdfFontFile.py bdf_char() read the BBX width and height field from a BDF font file and passed attacker-controlled dimens...

CVE-2026-55379

Pillow is a Python imaging library. Prior to 12.3.0, PIL/BdfFontFile.py bdf_char() read the BBX width and height field f

历史摘要 · 未重新核验 · NVD

#cve #cwe-789

漏洞预警2026-07-06 发布INFO

Pillow is a Python imaging library. Prior to 12.3.0, PIL/FontFile.py FontFile.compile() assembled per-glyph images into a combined bitmap with Image.new("1", (xsize, ysize)) wit...

CVE-2026-54060

Pillow is a Python imaging library. Prior to 12.3.0, PIL/FontFile.py FontFile.compile() assembled per-glyph images into

历史摘要 · 未重新核验 · NVD

#cve #cwe-789

漏洞预警2026-07-06 发布INFO

Pillow is a Python imaging library. Prior to 12.3.0, PIL/PcfFontFile.py _load_bitmaps() read glyph dimensions from the PCF METRICS section and passed them directly to Image.from...

CVE-2026-54059

Pillow is a Python imaging library. Prior to 12.3.0, PIL/PcfFontFile.py _load_bitmaps() read glyph dimensions from the P

历史摘要 · 未重新核验 · NVD

#cve #cwe-789

漏洞预警2026-07-05 发布LOW

A flaw has been found in HdrHistogram up to 2.2.2. This affects the function org.HdrHistogram.AbstractHistogram.decodeFromByteBuffer of the file src/main/java/org/HdrHistogram/A...

CVE-2026-14684

CVE-2026-14684 是一个影响 HdrHistogram 库（Java实现）的拒绝服务漏洞。该库广泛用于高性能时间序列数据记录，常见于监控系统、性能分析工具等场景。漏洞位于 AbstractHistogram.decodeFrom

历史摘要 · 未重新核验 · NVD

#cve #cwe-400 #cwe-789 #CVE-2026-14684 #HdrHistogram #uncontrolled memory allocation

漏洞预警2026-07-04 发布LOW

A vulnerability was detected in HdrHistogram up to 2.2.2. Affected by this issue is the function org.HdrHistogram.AbstractHistogram.decodeFromCompressedByteBuffer of the file sr...

CVE-2026-14683

CVE-2026-14683 是 HdrHistogram 库（版本 2.2.2 及之前）中的一个漏洞。该漏洞位于 AbstractHistogram.java 文件的 decodeFromCompressedByteBuffer 函数中，

历史摘要 · 未重新核验 · NVD

#cve #cwe-400 #cwe-789

漏洞预警2026-06-30 发布INFO

Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Client, Apache ActiveMQ Broker. An authenticated user can cau...

CVE-2026-53917

Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Clien

历史摘要 · 未重新核验 · NVD

#cve #cwe-789

漏洞预警2026-06-30 发布INFO

Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp. An unauthenticated client that opens a STOMP NIO conn...

CVE-2026-53916

Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp

历史摘要 · 未重新核验 · NVD

#cve #cwe-789

漏洞预警2026-06-30 发布INFO

Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ Client, Apache ActiveMQ, Apache ActiveMQ All. An unauthenticated network attacker can cause a broke...

CVE-2026-50734

Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ Client, Apache ActiveMQ, Apache ActiveMQ Al

历史摘要 · 未重新核验 · NVD

#cve #cwe-789

漏洞预警2026-06-29 发布INFO

Memory Allocation with Excessive Size Value vulnerability in leandrocp mdex allows an unauthenticated attacker to cause a denial of service through unbounded memory allocation. ...

CVE-2026-53428

Memory Allocation with Excessive Size Value vulnerability in leandrocp mdex allows an unauthenticated attacker to cause

历史摘要 · 未重新核验 · NVD

#cve #cwe-789