Out-of-bounds write in Das U-Boot
CVE-2026-15390
Out-of-bounds write in Das U-Boot
#microsoft
共收录 2274 条相关情报。
← 返回所有主题U-Boot through 2026.10-rc5 Out-of-Bounds Write in BMP RLE8 Decoder
CVE-2026-71972
U-Boot through 2026.10-rc5 Out-of-Bounds Write in BMP RLE8 Decoder
U-Boot before 2026.10-rc4 Integer Overflow in SquashFS Directory Table Allocation
CVE-2026-71973
U-Boot before 2026.10-rc4 Integer Overflow in SquashFS Directory Table Allocation
U-Boot before 2026.10-rc3 Out-of-Bounds Write in IP Fragment Reassembly
CVE-2026-71971
U-Boot before 2026.10-rc3 Out-of-Bounds Write in IP Fragment Reassembly
U-Boot before 2026.10-rc5 Buffer Overflow via NFS READLINK
CVE-2026-74221
U-Boot before 2026.10-rc5 Buffer Overflow via NFS READLINK
U-Boot before 2026.10-rc5 Buffer Overflow via NFS READ Reply
CVE-2026-74220
U-Boot before 2026.10-rc5 Buffer Overflow via NFS READ Reply
Use-after-free of a server-side SSLContext when sni_callback switches contexts
CVE-2026-19445
Use-after-free of a server-side SSLContext when sni_callback switches contexts
SSLContext.wrap_bio() missing validation of server_hostname parameter
CVE-2026-19553
SSLContext.wrap_bio() missing validation of server_hostname parameter
Race condition in tempfile.TemporaryDirectory cleanup allows deleting files outside the temporary directory
CVE-2026-12345
Race condition in tempfile.TemporaryDirectory cleanup allows deleting files outside the temporary directory
virtualenv bash and fish activation scripts execute commands embedded in paths
CVE-2026-102925
virtualenv bash and fish activation scripts execute commands embedded in paths
virtualenv: Downloaded seed wheels (pip/setuptools) are not integrity-checked before use
CVE-2026-102930
virtualenv: Downloaded seed wheels (pip/setuptools) are not integrity-checked before use
urllib3: HTTPResponse.stream()/read_chunked() buffers an unbounded chunk-size line into memory
CVE-2026-97689
urllib3: HTTPResponse.stream()/read_chunked() buffers an unbounded chunk-size line into memory
piscina: Prototype-pollution gadget in ThreadPool.options allows RCE via execArgv / loadBalancer / env
CVE-2026-102992
piscina: Prototype-pollution gadget in ThreadPool.options allows RCE via execArgv / loadBalancer / env
Werkzeug safe_join() allows Windows special device names
CVE-2026-102598
Werkzeug safe_join() allows Windows special device names
urllib3: HTTPS proxy TLS configuration may be ignored or overridden
CVE-2026-97687
urllib3: HTTPS proxy TLS configuration may be ignored or overridden
virtualenv: Command injection via --prompt in activate.bat (batch activator)
CVE-2026-102937
virtualenv: Command injection via --prompt in activate.bat (batch activator)
In Mbed TLS 3.2.0 though 3.6.6 and 4.0.0 through 4.1.0, an attacker who can cause an entropy source to fail can remove or inject bytes into the start of the TLS stream. This only affects TLS 1.3 servers.
CVE-2026-73064
In Mbed TLS 3.2.0 though 3.6.6 and 4.0.0 through 4.1.0, an attacker who can cause an entropy source to fail can remove o
Libsoup: libsoup: heap buffer overflow during websocket client-frame masking
CVE-2026-102559
Libsoup: libsoup: heap buffer overflow during websocket client-frame masking
Libsoup: libsoup: heap buffer overflow from websocket pong signal type confusion
CVE-2026-102556
Libsoup: libsoup: heap buffer overflow from websocket pong signal type confusion
Libsoup: libsoup: heap buffer overflow via uninitialized length in data-uri base64 decoding
CVE-2026-102555
Libsoup: libsoup: heap buffer overflow via uninitialized length in data-uri base64 decoding