Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Zziplib through 0.13.80 contains an out-of-bounds read vulnerability in zzip/mmapped.c that allows attackers to over-read heap memory via a crafted ZIP central directory. Attackers can craft an end-of-central-directory record placing the first entry near the buffer end, causing…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
Ansilove libansilove through 1.4.2 contains an out-of-bounds read vulnerability in ansilove_xbin() in src/loaders/xbin.c that lacks bounds checks for compressed run-length records. Attackers can supply a crafted compressed XBIN file ending in a control byte such as 0x7F to read past the input…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
NetSurf libnsbmp through 0.1.7 contains an out-of-bounds read vulnerability in bmp_decode_rle8() and bmp_decode_rle4() because absolute-run bound checks omit the word-alignment pad byte. Attackers can supply a crafted RLE8 or RLE4 BMP ending on an odd-length absolute run to cause a one-byte heap…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
AdPlug through 2.4 contains an out-of-bounds read vulnerability in src/xsm.cpp that allows attackers to read before note_table by supplying a negative note index. Attackers can craft an XSM file with the ofTAZ! signature and a song byte of 0x80 or higher, causing a global-buffer-overflow read…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
AdPlug through 2.4 contains a heap out-of-bounds read vulnerability in CdmoLoader::load() in src/dmo.cpp that allows attackers to read past a heap allocation by supplying a truncated TwinTeam DMO file. Attackers can supply a 12- or 13-byte file passing dmo_unpacker::decrypt(), opened via…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
Missing authorization in Caliptra Core Runtime Firmware (INVOKE_DPE_MLDSA87, CM_AES_GCM_DECRYPT_DMA, EXTERNAL_MAILBOX_CMD commands) in subsystem mode allows a privileged local attacker to cause a denial of service via mailbox commands containing unverified AXI addresses. The security impact beyond…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
libmikmod before 3.3.14 contains a heap out-of-bounds read vulnerability in the Impulse Tracker loader load_it.c that allows attackers to read adjacent heap memory via oversized patterns. Attackers can supply a crafted IT module with more than 200 pattern rows, causing IT_ConvertTrack() to read…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
LobsterAI before 2026.10.16 contains a hardcoded password vulnerability that allows attackers to decrypt exported provider API keys encrypted with the constant 'lobsterai-APP'. Attackers who obtain a providers export file can derive the AES-GCM key via PBKDF2 using the embedded salt and recover…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
A reachable assertion in the illumos bhyve instruction emulator allows a guest to panic the host. When emulating a REP-prefixed MOVS or STOS instruction that accesses guest MMIO, vie_emulate_movs() and vie_emulate_stos() in usr/src/uts/intel/io/vmm/vmm_instruction_emul.c do not clear the…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,12 % · rekomendacja wg zapisanej polityki
The parser in PEAK-System PCAN driver correctly detected the malformed record, but the loop iterating the record list advanced its processed-bytes counter even when a record had been rejected as invalid.
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,12 % · rekomendacja wg zapisanej polityki
libdvdnav before 7.0.0 contains a heap out-of-bounds read vulnerability in dvdnav_describe_title_chapters that allows attackers to read beyond the part-of-title array by supplying an oversized vts_ttn value. Attackers can provide a crafted DVD or disc image declaring a larger VMGI title vts_ttn…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,12 % · rekomendacja wg zapisanej polityki
VideoLAN libdvdnav through 7.0.0 contains an out-of-bounds read vulnerability in set_PTT that allows attackers to crash applications by supplying an invalid JumpTT title number checked only by an assert. Attackers can craft a DVD or disc image whose First Play program chain issues JumpTT with…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,12 % · rekomendacja wg zapisanej polityki
Schroedinger libschroedinger through 1.0.11 contains an out-of-bounds read vulnerability that allows attackers to read past a static quantiser table by supplying unvalidated wavelet filter index or transform depth values. Attackers can deliver a crafted low-delay Dirac stream with a wavelet filter…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,12 % · rekomendacja wg zapisanej polityki
FreeRDP 3.0.0 before 3.32.0 contains a heap out-of-bounds read in freerdp_assistance_parse_all_elements_of() because it advances its parsing cursor without reducing the remaining length, letting the scan window exceed the decrypted ConnectionString2 buffer. Attackers can supply a crafted…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,12 % · rekomendacja wg zapisanej polityki
SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, MaybeFlipBitmap() asks GDI+ to read the attacker-controlled PropertyTagOrientation size through GetPropertyItem() while supplying only a fixed 64-byte buf on the stack. Opening a crafted TIFF with enough EXIF Orientation values…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,12 % · rekomendacja wg zapisanej polityki
SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, ChmFile::GetCharZ() narrows file-controlled unsigned string offsets from /#WINDOWS and /#IVB to signed integers without a lower-bound check. An offset that becomes negative can make the function read before the /#STRINGS…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,12 % · rekomendacja wg zapisanej polityki
CVSS
6,8
EPSS
0,12 %
Poprawka
Status poprawki nieustalony
Publikacja
Aktualizacja NVD
Podatności: opis, rekomendacja, CVSS, EPSS i daty źródłowe. Rekomendacja nie potwierdza podatności własnego zasobu.
Zziplib through 0.13.80 contains an out-of-bounds read vulnerability in zzip/mmapped.c that allows attackers to over-read heap memory via a crafted ZIP central directory. Attackers can craft an end-of-central-directory record placing the first entry near the buffer end, causing…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
Ansilove libansilove through 1.4.2 contains an out-of-bounds read vulnerability in ansilove_xbin() in src/loaders/xbin.c that lacks bounds checks for compressed run-length records. Attackers can supply a crafted compressed XBIN file ending in a control byte such as 0x7F to read past the input…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
NetSurf libnsbmp through 0.1.7 contains an out-of-bounds read vulnerability in bmp_decode_rle8() and bmp_decode_rle4() because absolute-run bound checks omit the word-alignment pad byte. Attackers can supply a crafted RLE8 or RLE4 BMP ending on an odd-length absolute run to cause a one-byte heap…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
AdPlug through 2.4 contains an out-of-bounds read vulnerability in src/xsm.cpp that allows attackers to read before note_table by supplying a negative note index. Attackers can craft an XSM file with the ofTAZ! signature and a song byte of 0x80 or higher, causing a global-buffer-overflow read…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
AdPlug through 2.4 contains a heap out-of-bounds read vulnerability in CdmoLoader::load() in src/dmo.cpp that allows attackers to read past a heap allocation by supplying a truncated TwinTeam DMO file. Attackers can supply a 12- or 13-byte file passing dmo_unpacker::decrypt(), opened via…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
Missing authorization in Caliptra Core Runtime Firmware (INVOKE_DPE_MLDSA87, CM_AES_GCM_DECRYPT_DMA, EXTERNAL_MAILBOX_CMD commands) in subsystem mode allows a privileged local attacker to cause a denial of service via mailbox commands containing unverified AXI addresses. The security impact beyond…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
libmikmod before 3.3.14 contains a heap out-of-bounds read vulnerability in the Impulse Tracker loader load_it.c that allows attackers to read adjacent heap memory via oversized patterns. Attackers can supply a crafted IT module with more than 200 pattern rows, causing IT_ConvertTrack() to read…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
LobsterAI before 2026.10.16 contains a hardcoded password vulnerability that allows attackers to decrypt exported provider API keys encrypted with the constant 'lobsterai-APP'. Attackers who obtain a providers export file can derive the AES-GCM key via PBKDF2 using the embedded salt and recover…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
A reachable assertion in the illumos bhyve instruction emulator allows a guest to panic the host. When emulating a REP-prefixed MOVS or STOS instruction that accesses guest MMIO, vie_emulate_movs() and vie_emulate_stos() in usr/src/uts/intel/io/vmm/vmm_instruction_emul.c do not clear the…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,12 % · rekomendacja wg zapisanej polityki
The parser in PEAK-System PCAN driver correctly detected the malformed record, but the loop iterating the record list advanced its processed-bytes counter even when a record had been rejected as invalid.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,12 % · rekomendacja wg zapisanej polityki
libdvdnav before 7.0.0 contains a heap out-of-bounds read vulnerability in dvdnav_describe_title_chapters that allows attackers to read beyond the part-of-title array by supplying an oversized vts_ttn value. Attackers can provide a crafted DVD or disc image declaring a larger VMGI title vts_ttn…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,12 % · rekomendacja wg zapisanej polityki
VideoLAN libdvdnav through 7.0.0 contains an out-of-bounds read vulnerability in set_PTT that allows attackers to crash applications by supplying an invalid JumpTT title number checked only by an assert. Attackers can craft a DVD or disc image whose First Play program chain issues JumpTT with…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,12 % · rekomendacja wg zapisanej polityki
Schroedinger libschroedinger through 1.0.11 contains an out-of-bounds read vulnerability that allows attackers to read past a static quantiser table by supplying unvalidated wavelet filter index or transform depth values. Attackers can deliver a crafted low-delay Dirac stream with a wavelet filter…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,12 % · rekomendacja wg zapisanej polityki
FreeRDP 3.0.0 before 3.32.0 contains a heap out-of-bounds read in freerdp_assistance_parse_all_elements_of() because it advances its parsing cursor without reducing the remaining length, letting the scan window exceed the decrypted ConnectionString2 buffer. Attackers can supply a crafted…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,12 % · rekomendacja wg zapisanej polityki
SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, MaybeFlipBitmap() asks GDI+ to read the attacker-controlled PropertyTagOrientation size through GetPropertyItem() while supplying only a fixed 64-byte buf on the stack. Opening a crafted TIFF with enough EXIF Orientation values…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,12 % · rekomendacja wg zapisanej polityki
SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, ChmFile::GetCharZ() narrows file-controlled unsigned string offsets from /#WINDOWS and /#IVB to signed integers without a lower-bound check. An offset that becomes negative can make the function read before the /#STRINGS…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,12 % · rekomendacja wg zapisanej polityki
6,8
0,12 %
Publikacja
Aktualizacja NVD
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
NVD · publikacjeOpóźnione lub nieustalone
NVD · aktualizacjeOpóźnione lub nieustalone
CISA KEVOstatnie przetworzenie zakończone
FIRST EPSSOpóźnione lub nieustaloneData modelu znajduje się przy rekordzie.