Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
CImg through 4.0.6 contains a heap out-of-bounds read vulnerability in the _load_bmp() function of CImg.h caused by an integer overflow in the row byte count. Attackers can supply a crafted BMP file with a large header width that wraps dx_bytes, causing crashes or heap memory disclosure into the…
Opis źródłowy NVD · ENCVSS 6,1 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
libical through 4.0.6 contains a heap-based out-of-bounds read in icalvalue_decode_ical_string() in src/libical/icalvalue.c when decoding input ending in a backslash. Attackers can supply escaped iCalendar text with a trailing backslash, causing the loop to read past the terminator and crash the…
Opis źródłowy NVD · ENCVSS 6,1 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
libewf through 20260924 contains a heap out-of-bounds read vulnerability in libewf_lef_extended_attribute_read_data() because UTF-16 name and value sizes are validated before being doubled. Attackers can supply a crafted .L01/.Lx01 file with oversized 'ea' metadata counts to crash the application…
Opis źródłowy NVD · ENCVSS 6,1 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
FreeImage (danoli3 fork) through 3.19.23 contains a heap out-of-bounds read vulnerability in Unpack32Bits() in PluginPICT.cpp because rowBytes is never checked against the file-controlled PixMap width. Attackers can supply a crafted PICT file with a truncated or undersized rowBytes to over-read up…
Opis źródłowy NVD · ENCVSS 6,1 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
libfwsi through 20260522 contains a heap out-of-bounds read vulnerability in libfwsi_mtp_file_entry_values_read_data() that allows attackers to read past buffer bounds via crafted MTP file entry shell items. Attackers can embed a 10 to 73 byte shell item with item data size of 44 or more in .lnk…
Opis źródłowy NVD · ENCVSS 6,1 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
GitPython from 3.1.62 before 3.2.0 contains a symlink-following flaw in Submodule.move(), which checks the destination only lexically and does not reject symbolic links in intermediate path components. An untrusted repository can commit a symlink such as vendor pointing outside the worktree, so an…
Opis źródłowy NVD · ENCVSS 6,1 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
libpff through 20260926 contains an off-by-one bounds check in libpff_table_read_6c_record_entries that allows attackers to trigger a heap out-of-bounds read via crafted 6c table record entries. Attackers can supply crafted PST, OST or PAB files to applications like pffexport or pypff to read…
Opis źródłowy NVD · ENCVSS 6,1 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
libphdi through 20260902 contains a heap out-of-bounds read vulnerability in libphdi_data_files_get_extent_data_file_path that uses the directory prefix length instead of the basename length. Attackers can supply a crafted Parallels disk image descriptor with a long directory prefix and short…
Opis źródłowy NVD · ENCVSS 6,1 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
nono is software that allows users to run AI agents in a zero-latency sandbox. Prior to version 0.55.0, the nono Landlock/seccomp policies allow access to local Unix domain sockets (concrete and abstract). This allows an easy sandbox escape by talking to the per-user systemd dbus socket. Version…
Opis źródłowy NVD · ENCVSS 6,1 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
The Visit Counter plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.0. This is due to missing or incorrect nonce validation on the widgets.php page. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged…
Opis źródłowy NVD · ENCVSS 6,1 · EPSS 0,12 % · rekomendacja wg zapisanej polityki
A flaw was found in cockpit-files. A low-privileged local user can exploit this vulnerability by crafting a directory containing a symbolic link (symlink) and then using the privileged "Paste as owner" function. This allows for arbitrary file ownership changes outside the intended pasted…
Opis źródłowy NVD · ENCVSS 6,1 · EPSS 0,12 % · rekomendacja wg zapisanej polityki
AFFLIB through 3.7.22 contains a heap out-of-bounds write vulnerability in af_get_page() that allows attackers to corrupt heap memory by supplying crafted AFF images with mismatched page and sector sizes. Attackers can set a page size larger than and not a multiple of the sector size, causing the…
Opis źródłowy NVD · ENCVSS 6,1 · EPSS 0,12 % · rekomendacja wg zapisanej polityki
The interface of Foxit PDF Editor/Reader lacks the permission verification for secure reading mode, which allows specially crafted PDFs to trigger external SMB authentication without any security prompts and thereby leak the hash of the user's credentials.
Opis źródłowy NVD · ENCVSS 6,1 · EPSS 0,12 % · rekomendacja wg zapisanej polityki
llama.cpp before b2731 contains an out-of-bounds read vulnerability in llama_model_loader that allows attackers to read memory outside the mapped model file via crafted GGUF tensor offsets. Attackers can supply a crafted or truncated GGUF model file with arbitrary 64-bit tensor offsets to crash…
Opis źródłowy NVD · ENCVSS 6,1 · EPSS 0,12 % · rekomendacja wg zapisanej polityki
CImg through 4.0.6 contains a heap out-of-bounds read vulnerability in the _load_bmp() function of CImg.h caused by an integer overflow in the row byte count. Attackers can supply a crafted BMP file with a large header width that wraps dx_bytes, causing crashes or heap memory disclosure into the…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,1 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
libical through 4.0.6 contains a heap-based out-of-bounds read in icalvalue_decode_ical_string() in src/libical/icalvalue.c when decoding input ending in a backslash. Attackers can supply escaped iCalendar text with a trailing backslash, causing the loop to read past the terminator and crash the…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,1 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
libewf through 20260924 contains a heap out-of-bounds read vulnerability in libewf_lef_extended_attribute_read_data() because UTF-16 name and value sizes are validated before being doubled. Attackers can supply a crafted .L01/.Lx01 file with oversized 'ea' metadata counts to crash the application…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,1 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
FreeImage (danoli3 fork) through 3.19.23 contains a heap out-of-bounds read vulnerability in Unpack32Bits() in PluginPICT.cpp because rowBytes is never checked against the file-controlled PixMap width. Attackers can supply a crafted PICT file with a truncated or undersized rowBytes to over-read up…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,1 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
libfwsi through 20260522 contains a heap out-of-bounds read vulnerability in libfwsi_mtp_file_entry_values_read_data() that allows attackers to read past buffer bounds via crafted MTP file entry shell items. Attackers can embed a 10 to 73 byte shell item with item data size of 44 or more in .lnk…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,1 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
GitPython from 3.1.62 before 3.2.0 contains a symlink-following flaw in Submodule.move(), which checks the destination only lexically and does not reject symbolic links in intermediate path components. An untrusted repository can commit a symlink such as vendor pointing outside the worktree, so an…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,1 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
libpff through 20260926 contains an off-by-one bounds check in libpff_table_read_6c_record_entries that allows attackers to trigger a heap out-of-bounds read via crafted 6c table record entries. Attackers can supply crafted PST, OST or PAB files to applications like pffexport or pypff to read…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,1 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
libphdi through 20260902 contains a heap out-of-bounds read vulnerability in libphdi_data_files_get_extent_data_file_path that uses the directory prefix length instead of the basename length. Attackers can supply a crafted Parallels disk image descriptor with a long directory prefix and short…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,1 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
nono is software that allows users to run AI agents in a zero-latency sandbox. Prior to version 0.55.0, the nono Landlock/seccomp policies allow access to local Unix domain sockets (concrete and abstract). This allows an easy sandbox escape by talking to the per-user systemd dbus socket. Version…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,1 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
The Visit Counter plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.0. This is due to missing or incorrect nonce validation on the widgets.php page. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,1 · EPSS 0,12 % · rekomendacja wg zapisanej polityki
A flaw was found in cockpit-files. A low-privileged local user can exploit this vulnerability by crafting a directory containing a symbolic link (symlink) and then using the privileged "Paste as owner" function. This allows for arbitrary file ownership changes outside the intended pasted…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,1 · EPSS 0,12 % · rekomendacja wg zapisanej polityki
AFFLIB through 3.7.22 contains a heap out-of-bounds write vulnerability in af_get_page() that allows attackers to corrupt heap memory by supplying crafted AFF images with mismatched page and sector sizes. Attackers can set a page size larger than and not a multiple of the sector size, causing the…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,1 · EPSS 0,12 % · rekomendacja wg zapisanej polityki
The interface of Foxit PDF Editor/Reader lacks the permission verification for secure reading mode, which allows specially crafted PDFs to trigger external SMB authentication without any security prompts and thereby leak the hash of the user's credentials.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,1 · EPSS 0,12 % · rekomendacja wg zapisanej polityki
llama.cpp before b2731 contains an out-of-bounds read vulnerability in llama_model_loader that allows attackers to read memory outside the mapped model file via crafted GGUF tensor offsets. Attackers can supply a crafted or truncated GGUF model file with arbitrary 64-bit tensor offsets to crash…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,1 · EPSS 0,12 % · rekomendacja wg zapisanej polityki