#cwe-908

共收录 181 条相关情报。

← 返回所有主题
漏洞预警2026-11-01 发布MEDIUM

FFmpeg 2.3 through 9.0.2 contains a use of uninitialized resource vulnerability in the Huffyuv decoder that allows attackers to leak heap memory into decoded pixels via short pa...

CVE-2026-120247

FFmpeg 2.3 through 9.0.2 contains a use of uninitialized resource vulnerability in the Huffyuv decoder that allows attac

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-11-01 发布MEDIUM

FFmpeg 0.10 through 9.0.2 contains a use of uninitialized resource vulnerability in sunrast_decode_frame() that leaks heap memory when decoding truncated 1-bit and 4-bit palette...

CVE-2026-120245

FFmpeg 0.10 through 9.0.2 contains a use of uninitialized resource vulnerability in sunrast_decode_frame() that leaks he

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-11-01 发布MEDIUM

FFmpeg 2.1 through 9.0.2 contains a use of uninitialized resource vulnerability in the PCX decoder that allows attackers to leak heap memory through truncated RLE scanlines. Att...

CVE-2026-120244

FFmpeg 2.1 through 9.0.2 contains a use of uninitialized resource vulnerability in the PCX decoder that allows attackers

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-30 发布LOW

libmspack through 0.11alpha contains an uninitialized memory disclosure vulnerability in the MS-ZIP decompressor that allows attackers to leak heap data via unchecked back-refer...

CVE-2026-119602

libmspack through 0.11alpha contains an uninitialized memory disclosure vulnerability in the MS-ZIP decompressor that al

来源摘录 · NVD

安全公告2026-10-27 发布INFO

VMime through 0.9.2 contains an information disclosure vulnerability in the uuEncoder::decode...

CVE-2026-116739

VMime through 0.9.2 contains an information disclosure vulnerability in the uuEncoder::decode function that writes unini

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-26 发布INFO

VMime through 0.9.2 contains an information disclosure vulnerability in the uuEncoder::decode function that writes uninitialized stack memory into decoded output for over-long l...

CVE-2026-116739

VMime through 0.9.2 contains an information disclosure vulnerability in the uuEncoder::decode function that writes unini

历史摘要 · 未重新核验 · NVD

安全公告2026-10-25 发布INFO

vLLM from 0.8.5 before 0.31.0 has a denial of service flaw. LogprobsTensors.empty_cpu() in vllm...

CVE-2026-116180

vLLM from 0.8.5 before 0.31.0 has a denial of service flaw. LogprobsTensors.empty_cpu() in vllm/v1/outputs.py allocates

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-25 发布HIGH

vLLM from 0.8.5 before 0.31.0 has a denial of service flaw. LogprobsTensors.empty_cpu() in vllm/v1/outputs.py allocates an uninitialized int32 tensor, and the V1 model runner le...

CVE-2026-116180

vLLM from 0.8.5 before 0.31.0 has a denial of service flaw. LogprobsTensors.empty_cpu() in vllm/v1/outputs.py allocates

来源摘录 · NVD

安全公告2026-10-23 发布INFO

Pillow: Arrow export leaks stale heap memory when PILLOW_ALIGNMENT > 1

CVE-2026-114501

### Summary When [`PILLOW_ALIGNMENT`](https://pillow.readthedocs.io/en/stable/reference/block_allocator.html#memory-poo

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-22 发布MEDIUM

A memory-handling weakness in the BSON deserialization component of the MongoDB C# Driver may cause data left over from previously processed content to be returned when speciall...

CVE-2026-114651

A memory-handling weakness in the BSON deserialization component of the MongoDB C# Driver may cause data left over from

来源摘录 · NVD

漏洞预警2026-10-21 发布MEDIUM

Pillow is a Python imaging library. From 11.2.1 until 13.0.0, Arrow export assumes that an image's rows are tightly contiguous and exports from im->blocks[0].ptr even when PILLO...

CVE-2026-114501

Pillow is a Python imaging library. From 11.2.1 until 13.0.0, Arrow export assumes that an image's rows are tightly cont

来源摘录 · NVD

安全公告2026-10-21 发布INFO

Pillow: Arrow export leaks stale heap memory when PILLOW_ALIGNMENT > 1

CVE-2026-114501

Pillow is a Python imaging library. From 11.2.1 until 13.0.0, Arrow export assumes that an image's rows are tightly cont

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-20 发布INFO

Pillow: TiffDecode returns uninitialized memory as pixels for short JPEG strips

CVE-2026-112897

``` ============================================================================ TiffDecode returns uninitialized memory

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-19 发布INFO

Pillow is a Python imaging library. From 5.3.0 until 13.0.0, Pillow can return uninitialized memory as pixels when libtiff performs a short decode of JPEG-compressed or Group 4 ...

CVE-2026-112897

Pillow is a Python imaging library. From 5.3.0 until 13.0.0, Pillow can return uninitialized memory as pixels when libti

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布MEDIUM

Use of uninitialized resource in Windows Subsystem for Linux allows an authorized attacker to disclose information locally.

CVE-2026-96206

Use of uninitialized resource in Windows Subsystem for Linux allows an authorized attacker to disclose information local

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Use of uninitialized resource in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.

CVE-2026-85843

Use of uninitialized resource in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Use of uninitialized resource in Windows Print Spooler Components allows an authorized attacker to disclose information locally.

CVE-2026-85320

Use of uninitialized resource in Windows Print Spooler Components allows an authorized attacker to disclose information

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally.

CVE-2026-83755

Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally.

CVE-2026-83723

Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information loc

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Use of uninitialized resource in Windows HTTP.sys allows an authorized attacker to disclose information locally.

CVE-2026-83714

Use of uninitialized resource in Windows HTTP.sys allows an authorized attacker to disclose information locally.

来源摘录 · NVD