yun2026 发表于 3 天前

加拿大国民银行将以2.26亿加元收购教育储蓄服务公司Embark

加拿大国民银行将以2.26亿加元收购教育储蓄服务公司Embark

imgproxy:ICO图片尺寸计算可能溢出

11月8日公开的漏洞记录CVE-2026-123614涉及imgproxy。问题出在图像代理读取ICO图标时。一项尺寸数据先参与整数运算,再用于申请内存。如果计算结果回绕,实际留出的缓冲区就可能小于后续写入的数据量。接收外部提交图片的服务可能因此崩溃,公告还列出在进程中执行代码的风险。版本清单标出的受影响范围包括4.0.0起至4.0.16之前。记录另将4.0.16列为不受影响的版本。

这条记录给出的CVSS 3.1基础评分为9.8分,分级为严重。按照评分列出的条件,利用者可通过网络接触相关功能,不以事先取得系统权限为必要条件,并且无需另一名用户进行额外交互。数据保密性、内容完整性和服务可用性三项的影响等级分别为高、高、高。评分把利用复杂度列为较低,所反映的是触发这一缺陷需要满足的技术条件。

https://lightroom.adobe.com/shares/ffc5cfc57ebcfe47acda5bad53907bb3
https://lightroom.adobe.com/shares/9707fb5288629d46bb2084d08aef05b1
https://lightroom.adobe.com/shares/a5689b5ba6b142418d865ada46eb46f1
https://lightroom.adobe.com/shares/8f80b58ce21d9f4e97523925d127274f
https://lightroom.adobe.com/shares/a6277f347838434abfb027ed12c1da85
https://lightroom.adobe.com/shares/d5239e27b9bc8c4cab9d4ac89a6304ff
https://lightroom.adobe.com/shares/1c69b923978ed74f85e841a8167f0666
https://lightroom.adobe.com/shares/c4cb30a3e361d440a6d0e0a11fcd0f06
https://lightroom.adobe.com/shares/e88317fa5e849f4f918b872b5c386e33
https://lightroom.adobe.com/shares/b99f7e59cb97b14d9c0999d69e29f756
https://lightroom.adobe.com/shares/e7d427467ee8594f9d6c64b8ba783e21
https://lightroom.adobe.com/shares/1884ded53583d548915bcc0f8001b65b
https://lightroom.adobe.com/shares/7cf1feb0b76c254ca74649cab77ce2ec
https://lightroom.adobe.com/shares/7ae1a37156f78a4d94ab61d634130fe6
https://lightroom.adobe.com/shares/e7a9d06ec50c924eae6c02e6cb872a34
https://lightroom.adobe.com/shares/898a8fbaf8e3b3478b577e8a9309bf26
https://lightroom.adobe.com/shares/f8f25f887e155c41ba9a645184488afa
https://lightroom.adobe.com/shares/a43ff5ebec345a48bc71498c6613ccb4
https://lightroom.adobe.com/shares/2089ff180047df4ba883b8459e716549
https://lightroom.adobe.com/shares/ccb888500c64f344a8519f6bd4ea7c9b
https://lightroom.adobe.com/shares/57660ef0d0e5ca4e9e67e10c79c39ffd
https://lightroom.adobe.com/shares/832ab428c057df488c8b00eca9dcce62
https://lightroom.adobe.com/shares/9da007db902fc7499f141bf9bb98c902
https://lightroom.adobe.com/shares/862921c9172815438933430945d5e2eb
https://lightroom.adobe.com/shares/a9c79f4a52165148a38f4e363860b145
https://lightroom.adobe.com/shares/f1e133339e5d4c40b830592c0a0ef81e
https://lightroom.adobe.com/shares/28675f795eabd94c810b7d0c6377c31e
https://lightroom.adobe.com/shares/464775eab4b4f24f974910abe6306e4e
https://lightroom.adobe.com/shares/7fd8041d134a284d9c318aa8400f416b
https://lightroom.adobe.com/shares/f3977cf80f3f324cba27baac9db2e50b
https://lightroom.adobe.com/shares/2b40241fbf5c0c498e64a830367c741b
https://lightroom.adobe.com/shares/5c7efdf968717a408a653b2092efd05f
https://lightroom.adobe.com/shares/56d18173cac81349a1991fa725fbb836
https://lightroom.adobe.com/shares/be8237d054350d43aff641415fb36964
https://lightroom.adobe.com/shares/a5de181baa48d349b90425dafb9552e0
https://lightroom.adobe.com/shares/d3838bc49314214e865bb150f236375d
https://lightroom.adobe.com/shares/dcecee76322b4342895d076c18b263d3
https://lightroom.adobe.com/shares/2503e87236157b41bf45bc37c627f0cc
https://lightroom.adobe.com/shares/7f04b887fb935449a76a79239a362fe0
https://lightroom.adobe.com/shares/6bc8359887d2fc4b8e3301bfa587acbd
https://lightroom.adobe.com/shares/104184b69a6d53419d76683a76e75bc3
https://lightroom.adobe.com/shares/3dfc875337c3e14496f9308bcf6b758b
https://lightroom.adobe.com/shares/eecd0ee2d470c04ba5a54f1b98819be2
https://lightroom.adobe.com/shares/b9ac1984c2a05c4c8bf3cfa3556d8c46
https://lightroom.adobe.com/shares/b402bf8637ad034ba2271530453884ef
https://lightroom.adobe.com/shares/360ce0fe06c349479792274930c05fa7
https://lightroom.adobe.com/shares/e82fc571833cd0438cb52a0668b91a7d
https://lightroom.adobe.com/shares/f536d535360a53479b64d341867d1794
https://lightroom.adobe.com/shares/ab1151c47296674f8606f4038bbdb1a0
https://lightroom.adobe.com/shares/15a6ecbf8b742947b7f63d20f999ba08
页: [1]
查看完整版本: 加拿大国民银行将以2.26亿加元收购教育储蓄服务公司Embark