Lucene search
K

10 matches found

CNNVD
CNNVD
added 2026/06/11 12:0 a.m.6 views

gst-plugins-bad 缓冲区错误漏洞

gst-plugins-bad is a GStreamer open-source plugin. gst-plugins-bad has a buffer error vulnerability, which stems from the multiple slice processing loop in the gsth266 parser’s gsth266parserparsepicturepartition function. This loop does not check whether the slice index exceeds the boundary. When...

6.5CVSS5.6AI score0.00206EPSS
Exploits0References1
NVD
NVD
added 2026/03/26 8:16 p.m.2 views

CVE-2026-32285

The Delete function fails to properly validate offsets when processing malformed JSON input. This can lead to a negative slice index and a runtime panic, allowing a denial of service attack...

7.5CVSS0.00542EPSS
Exploits1References4
OSV
OSV
added 2026/03/26 8:16 p.m.1 views

DEBIAN-CVE-2026-32285

The Delete function fails to properly validate offsets when processing malformed JSON input. This can lead to a negative slice index and a runtime panic, allowing a denial of service attack...

7.5CVSS6AI score0.00542EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2026/03/26 7:40 p.m.0 views

CVE-2026-32285 Denial of service in github.com/buger/jsonparser

The Delete function fails to properly validate offsets when processing malformed JSON input. This can lead to a negative slice index and a runtime panic, allowing a denial of service attack...

5.9AI score0.00542EPSS
Exploits1References3
OSV
OSV
added 2025/08/11 5:25 p.m.4 views

GO-2025-3845 Fiber Crashes in BodyParser Due to Unvalidated Large Slice Index in Decoder in github.com/gofiber/fiber

Fiber Crashes in BodyParser Due to Unvalidated Large Slice Index in Decoder in github.com/gofiber/fiber...

8.7CVSS7AI score0.00331EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/08/06 12:0 a.m.5 views

Fiber 安全漏洞

Fiber is an open source web framework written in the Go language by Fiber Open Source. A security vulnerability exists in Fiber 2.52.8 and earlier versions, which stems from an unvalidated slice index range that could result in an integer overflow or memory exhaustion...

8.7CVSS6.8AI score0.00331EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/08/05 11:33 p.m.8 views

CVE-2025-54801 Fiber Susceptible to Crash via `BodyParser` Due to Unvalidated Large Slice Index in Decoder

Fiber is an Express inspired web framework written in Go. In versions 2.52.8 and below, when using Fiber's Ctx.BodyParser to parse form data containing a large numeric key that represents a slice index e.g., test.18446744073704, the application crashes due to an out-of-bounds slice allocation in...

8.7CVSS0.00331EPSS
Exploits0References2
OSV
OSV
added 2025/08/05 3:22 p.m.5 views

GHSA-QX2Q-88MX-VHG7 Fiber Crashes in BodyParser Due to Unvalidated Large Slice Index in Decoder

Description When using Fiber's Ctx.BodyParser to parse form data containing a large numeric key that represents a slice index e.g., test.18446744073704, the application crashes due to an out-of-bounds slice allocation in the underlying schema decoder. The root cause is that the decoder attempts t...

8.7CVSS6.9AI score0.00331EPSS
Exploits0References4
Github Security Blog
Github Security Blog
added 2025/08/05 3:22 p.m.10 views

Fiber Crashes in BodyParser Due to Unvalidated Large Slice Index in Decoder

Description When using Fiber's Ctx.BodyParser to parse form data containing a large numeric key that represents a slice index e.g., test.18446744073704, the application crashes due to an out-of-bounds slice allocation in the underlying schema decoder. The root cause is that the decoder attempts t...

8.7CVSS7.6AI score0.00331EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2023/06/14 11:8 a.m.30 views

CVE-2023-3036 Out of Bounds Slice index in cfnts leads to remote panic

An unchecked read in NTP server in github.com/cloudflare/cfnts prior to commit 783490b https://github.com/cloudflare/cfnts/commit/783490b913f05e508a492cd7b02e3c4ec2297b71 enabled a remote attacker to trigger a panic by sending an NTSAuthenticator packet with extension length longer than the packe...

8.6CVSS8.6AI score0.02237EPSS
Exploits0References1
Rows per page
Query Builder