OP-TEE Trusted OS 缓冲区错误漏洞

OP-TEE Trusted OS is an implementation of the OP-TEE open-source project, which creates an open-source Trusted Execution Environment TEE that utilizes Arm TrustZone technology. In versions 3.13.0 to 4.10.0 of OP-TEE Trusted OS, there is a buffer error vulnerability. This vulnerability stems from ...

uuid 缓冲区错误漏洞

uuid is a JavaScript module developed by UUID, which allows for the generation of RFC-compliant UUIDs in JavaScript. Versions of uuid prior to 14.0.0 contained a buffer error vulnerability. This vulnerability stems from functions v3, v5, and v6 accepting external output buffers without rejecting...

Libgcrypt 缓冲区错误漏洞

Libgcrypt is a general-purpose encryption library based on GnuPG code from the American GNU community. This library implements various encryption algorithms, including symmetric ciphers, hash algorithms, public key algorithms, etc. Versions of Libgcrypt prior to 1.12.2 contained a buffer error...

SWUpdate 缓冲区错误漏洞

SWUpdate is an embedded Linux system update tool developed by Stefano Babic. SWUpdate has a buffer error vulnerability, which stems from an integer underflow in the multipart upload parser in the mongoosemultipart.c file. This vulnerability allows unauthenticated attackers to cause...

X.Org X Server 缓冲区错误漏洞

The X.Org X Server is an X Window system display server developed by the X.Org Foundation. The X.Org X Server has a buffer error vulnerability, which stems from an out-of-bounds memory access during the validation of XKB key type requests. This vulnerability could allow local attackers to send...

PowerDNS DNSdist 缓冲区错误漏洞

PowerDNS DNSdist is a proxy software provided by PowerDNS that offers capabilities for DNS traffic load balancing and security protection. PowerDNS DNSdist has a buffer error vulnerability, which stems from malicious backends that can send specially crafted SVCB responses to resolver discovery...

Angry IP Scanner 缓冲区错误漏洞

Angry IP Scanner is an open-source network tool developed by Angry IP Scanner that allows for quick scanning of IP addresses and port information. The Angry IP Scanner for Linux version 3.5.3 contains a buffer error vulnerability. This vulnerability stems from a denial-of-service vulnerability in...

NVIDIA CUDA-Q 缓冲区错误漏洞

NVIDIA CUDA-Q is a hybrid quantum-classical computing development platform provided by NVIDIA Corporation. NVIDIA CUDA-Q has a buffer error vulnerability, which stems from out-of-bounds read operations at the endpoint. This vulnerability could allow unauthorized attackers to cause denial of servi...

CVE-2026-31429

A flaw was found in the Linux kernel. When the Kernel Electric Fence KFENCE, a memory safety error detector, is enabled, a memory corruption vulnerability can occur. This happens because the skbkfreehead function incorrectly frees network buffer skb head data to the wrong memory cache. This...

Adobe Framemaker 缓冲区错误漏洞

Adobe Framemaker is a page layout software developed by Adobe Inc. in the United States, used for writing and editing large or complex documents, including structured documents. Versions of Adobe Framemaker prior to 2022.8 contained a buffer error vulnerability. This vulnerability stemmed from...

Adobe InCopy 缓冲区错误漏洞

Adobe InCopy is a text editing software for creative purposes developed by Adobe, Inc. Versions of Adobe InCopy such as 20.5.2 and 21.2 and earlier have a buffer error vulnerability. This vulnerability stems from an out-of-bounds read during the parsing of specially crafted files, which may allow...

Microsoft Windows Storage Spaces Controller 缓冲区错误漏洞

Microsoft Windows Storage Spaces Controller is a necessary driver provided by Microsoft for providing storage space functions. There is a buffer error vulnerability in Microsoft Windows Storage Spaces Controller. Attackers can exploit this vulnerability to gain elevated privileges. The following...

Microsoft Word 缓冲区错误漏洞

Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. An information disclosure vulnerability exists in Microsoft Word. An attacker could exploit this vulnerability to obtain sensitive information...

Fortinet FortiWeb 缓冲区错误漏洞

Fortinet FortiWeb is a Web application layer firewall developed by the American company Fortinet. It can block threats such as cross-site scripting, SQL injection, cookie poisoning, and schema poisoning, ensuring the security of web applications and protecting sensitive database content. Fortinet...

jq 缓冲区错误漏洞

jq is a lightweight and flexible command-line JSON processor developed by jqlang. jq has a buffer error vulnerability, which stems from an out-of-bounds read in the error handling path of the jvparsesized function. This vulnerability may lead to memory leaks or process termination...

ImageMagick 缓冲区错误漏洞

ImageMagick is a set of open-source image processing software developed by the ImageMagick project. It can read, convert, and write images in various formats. Versions of ImageMagick prior to 7.1.2-19 contained a buffer error vulnerability. This vulnerability stemmed from improper handling of...

ImageMagick 缓冲区错误漏洞

ImageMagick is a set of open-source image processing software developed by the ImageMagick project. It can read, convert, and write images in various formats. Versions of ImageMagick prior to 7.1.2-19 and 6.9.13-44 contained a buffer error vulnerability. This vulnerability stemmed from integer...

ImageMagick 缓冲区错误漏洞

ImageMagick is a set of open-source image processing software developed by the ImageMagick project. It can read, convert, and write images in various formats. Versions of ImageMagick prior to 7.1.2-19 and 6.9.13-44 contained a buffer error vulnerability, which was caused by heap out-of-bound...

ImageMagick 缓冲区错误漏洞

ImageMagick is a set of open-source image processing software developed by the ImageMagick project. It can read, convert, and write images in various formats. Versions of ImageMagick prior to 7.1.2-19 and 6.9.13-44 contained a buffer error vulnerability. This vulnerability stemmed from the sample...

Mesa 缓冲区错误漏洞

Mesa is an open-source proxy modeling framework developed by Mesa projects. Versions of Mesa prior to 25.3.6 and 26.0.1 contain a buffer error vulnerability. This vulnerability stems from the fact that the amount of data to be allocated in WebGPU depends on an untrusted party, which is then used...