CVE ID :CVE-2026-111441 Published : Oct. 19, 2026, 3:16 a.m. | 46 minutes ago Description :在 openGauss-server 的 src/gausskernel/cbb/utils/hll/hll.cpp 中，内置函数 HllObjectUnpack() 存在长度校验缺陷。该函数从用户提供的 packed HLL 解析 lenUsed 与 lenTotal 后，仅检查输入长度足以覆盖 HLL_HEAD_SIZE + lenUsed，随后按 lenTotal 分配缓冲区、按 lenUsed...

#Sicherheitslücke #Linux

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-111441 - HLL 反序列化 lenTotal/lenUsed 校验缺失导致堆越界写

VERWANDTEARTIKEL

CVE-2026-16487 - Bootc: containers-common: bootc: automatic updates can apply unsigned mutable-tag content under default containers policy

CVE-2026-102503 - Missing Authentication on /libp2p-http Ingress in Google OSS Agent Mesh (SAM)

CVE-2026-103091 - Insecure Default Policy and Unrestricted OIDC Enrollment in Google OSS Agent Mesh (SAM)

CVE-2026-108983 - GV-ASManager Web Server Command Injection Vulnerability

16-Year-Old Broadcom Wi-Fi Bug Lets Attackers Take Over Routers Without a Password

CVE-2026-81376