#cwe-823

共收录 16 条相关情报。

← 返回所有主题
漏洞预警2026-10-30 发布INFO

A web page that contains unusual WebGPU content loaded into the GPU GLES render process can trigger a OOB read and/or write crash in the GPU GLES user-space shared library. On c...

CVE-2026-74915

A web page that contains unusual WebGPU content loaded into the GPU GLES render process can trigger a OOB read and/or wr

来源摘录 · NVD

漏洞预警2026-10-30 发布INFO

On GPU systems with the security vulnerability fix for CVE-2026-49746 applied, the mapping range of graphics buffers is limited which causes errors when the mapping outside of t...

CVE-2026-74912

On GPU systems with the security vulnerability fix for CVE-2026-49746 applied, the mapping range of graphics buffers is

来源摘录 · NVD

漏洞预警2026-10-27 发布INFO

An out-of-bounds read vulnerability in the FireCluster Sync processing allows an attacker positioned on the cluster interconnect, such as a compromised cluster peer or an on-pat...

CVE-2026-93862

An out-of-bounds read vulnerability in the FireCluster Sync processing allows an attacker positioned on the cluster inte

来源摘录 · NVD

漏洞预警2026-10-06 发布INFO

TP-Link Tapo C500 v2.0 contains an out-of-bounds function-pointer dispatch in its TDP (TP-Link Device Protocol) daemon. A single unauthenticated UDP datagram can cause an invali...

CVE-2026-104944

TP-Link Tapo C500 v2.0 contains an out-of-bounds function-pointer dispatch in its TDP (TP-Link Device Protocol) daemon.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

An unprivileged, memory-protected ThreadX module can have the kernel read and write memory at addresses of its choosing, in privileged mode, and can use that to clear the MPU en...

CVE-2026-102757

An unprivileged, memory-protected ThreadX module can have the kernel read and write memory at addresses of its choosing,

历史摘要 · 未重新核验 · NVD

安全公告2026-09-29 发布INFO

CVE-2026-102757

CVE-2026-102757

An unprivileged, memory-protected ThreadX module can have the kernel read and write memory at addresses of its choosing,

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-17 发布INFO

OpenSlide is a C library for reading whole slide image files. From 3.4.1 until 4.0.1, OpenSlide's parse_level0_xml() processing in src/openslide-vendor-ventana.c accepts nonposi...

CVE-2026-48977

OpenSlide is a C library for reading whole slide image files. From 3.4.1 until 4.0.1, OpenSlide's parse_level0_xml() pro

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-05 发布INFO

libpcap BPF interpreter detects neither reaching the end of the filter program buffer due to lack of a return instruction nor executing a jump instruction with an offset that tr...

CVE-2026-31912

libpcap BPF interpreter detects neither reaching the end of the filter program buffer due to lack of a return instructio

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-21 发布INFO

Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a write of data outside the Guest's virtualised GPU memory. ...

CVE-2026-45199

Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a writ

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-13 发布INFO

The native inference process that Elasticsearch uses to evaluate uploaded machine learning models accepts a model operation that computes a memory address from an offset supplie...

CVE-2026-72642

The native inference process that Elasticsearch uses to evaluate uploaded machine learning models accepts a model operat

历史摘要 · 未重新核验 · NVD

安全公告2026-08-07 发布INFO

Software installed and run as a non-privileged user may conduct improper GPU system calls to...

CVE-2026-49746

Software installed and run as a non-privileged user may conduct improper GPU system calls to cause OOB read kernel memor

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-07 发布INFO

Software installed and run as a non-privileged user may conduct improper GPU system calls to cause OOB read kernel memory access and in certain cases cause GPU UAF of arbitrary ...

CVE-2026-49746

Software installed and run as a non-privileged user may conduct improper GPU system calls to cause OOB read kernel memor

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-26 发布INFO

A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can trigger a write out-of-bounds write crash in the GPU shader compiler library. On...

CVE-2026-21734

A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can trigger a write out-of-

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-01 发布INFO

Kernel software installed and running inside a Guest/Host VM may post improper commands to the GPU Firmware to trigger a write of data outside the intended GPU memory. A logi...

CVE-2026-34193

Kernel software installed and running inside a Guest/Host VM may post improper commands to the GPU Firmware to trigger a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-21 发布INFO

MediaArea MediaInfoLib LXF element parsing heap-based buffer overflow vulnerability

CVE-2026-28764

MediaArea MediaInfoLib LXF element parsing heap-based buffer overflow vulnerability

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-13 发布INFO

A vulnerability exists in the ngx_http_scgi_module and ngx_http_uwsgi_module modules that may result in excessive memory allocation or an over-read of data. When scgi_pass or uw...

CVE-2026-42946

A vulnerability exists in the ngx_http_scgi_module and ngx_http_uwsgi_module modules that may result in excessive memory

历史摘要 · 未重新核验 · NVD