CVE-2026-81693 - openssl_encrypt before 1.4.9 fails to validate the total field from QR JSON payloads before materializing ranges. Attackers can supply crafted QR images with extremely large total values to trigger unbounded memory allocation and cause denial of service through out-of-memory conditions. - 漏洞详情

漏洞描述

相关链接

相关漏洞

• CVE-2026-81693 [高危] CVE-2026-81693 - openssl_encrypt before 1.4.9 fails to validate the to…
• CVE-2026-81692 [高危] CVE-2026-81692 - openssl_encrypt (pip: openssl-encrypt) versions 1.4.8…
• CVE-2026-72687 [中危] CVE-2026-72687 - A flaw in Elasticsearch allows a low-privileged authe…
• CVE-2026-72678 [中危] CVE-2026-72678 - Elasticsearch does not validate a size value taken fr…
• CVE-2026-72656 [中危] CVE-2026-72656 - Memory Allocation with Excessive Size Value (CWE-789)…
• CVE-2026-72645 [中危] CVE-2026-72645 - Memory Allocation with Excessive Size Value (CWE-789)…
• CVE-2026-72639 [中危] CVE-2026-72639 - Elasticsearch does not enforce an upper bound on a us…
• CVE-2026-66485 [未知] CVE-2026-66485 - GNU cpio is vulnerable to an uncontrolled memory allo…