yun2025 发表于 2 小时前

谷歌在美国遭家长起诉:Gemini 被指协助 13 岁女孩制定轻生计划

谷歌在美国遭家长起诉:Gemini 被指协助 13 岁女孩制定轻生计划

imgproxy:ICO图片尺寸计算可能溢出

11月8日公开的漏洞记录CVE-2026-123614涉及imgproxy。问题出在图像代理读取ICO图标时。一项尺寸数据先参与整数运算,再用于申请内存。如果计算结果回绕,实际留出的缓冲区就可能小于后续写入的数据量。接收外部提交图片的服务可能因此崩溃,公告还列出在进程中执行代码的风险。版本清单标出的受影响范围包括4.0.0起至4.0.16之前。记录另将4.0.16列为不受影响的版本。

这条记录给出的CVSS 3.1基础评分为9.8分,分级为严重。按照评分列出的条件,利用者可通过网络接触相关功能,不以事先取得系统权限为必要条件,并且无需另一名用户进行额外交互。数据保密性、内容完整性和服务可用性三项的影响等级分别为高、高、高。评分把利用复杂度列为较低,所反映的是触发这一缺陷需要满足的技术条件。

https://lightroom.adobe.com/shares/a531b36e2a7fbc4dad4570b73428954b
https://lightroom.adobe.com/shares/18b7543ae397ef4f992c59c23d9afd7a
https://lightroom.adobe.com/shares/95ea55abbe4b11428a20951d1068419d
https://lightroom.adobe.com/shares/217d36eaa4bf1c4ba8c3bd1d449d7480
https://lightroom.adobe.com/shares/0990479b371c99429e03ac9526cec2d6
https://lightroom.adobe.com/shares/a3e79d1dd47d6f47b4d08448e0994365
https://lightroom.adobe.com/shares/40a9a0c764604a4d94e90a7b0ad26fe7
https://lightroom.adobe.com/shares/29f8fac3e0a9bb40af208c281bfa59a1
https://lightroom.adobe.com/shares/1baa29dfbe3cb04c9d7ce6f116ef6ff6
https://lightroom.adobe.com/shares/19b8c2bc47329f46b55e49d0c70f3120
https://lightroom.adobe.com/shares/47aa41198eeab64b94d6f293f95f80ac
https://lightroom.adobe.com/shares/9d3b5f814cfd5a46b4334d5001cf8fb0
https://lightroom.adobe.com/shares/335b0019a43bad439a9267fc27756e94
https://lightroom.adobe.com/shares/30bc3634eca98d4aad7659dab6b6925f
https://lightroom.adobe.com/shares/94b23360d2020b4483b42168e95475c2
https://lightroom.adobe.com/shares/92af2e42918b574f97c80558741e1c6f
https://lightroom.adobe.com/shares/196555631208db4c809b273c8d68cbdc
https://lightroom.adobe.com/shares/b0ec41215d6b0645a9f535d1a374d972
https://lightroom.adobe.com/shares/ba53c35f0710444aab6bbbaa93e0faa5
https://lightroom.adobe.com/shares/2b89f13e6e920e4bb1e9377b024da15d
https://lightroom.adobe.com/shares/0e5540d1e0c88a448e9fdeb780435f81
https://lightroom.adobe.com/shares/3b187558ebac594783e9498f8dbed07e
https://lightroom.adobe.com/shares/296c6d6847487242a6ec51f74c411d4d
https://lightroom.adobe.com/shares/0ffbdbebb31ebf4d9387f058ae4e3f44
https://lightroom.adobe.com/shares/b707ca8052c84b40a9aa8eaae7b65982
https://lightroom.adobe.com/shares/bcfdc044d01f154ea51dd47a3bc3df3d
https://lightroom.adobe.com/shares/7e1e3353f22a9d4a8da3ec51a196594d
https://lightroom.adobe.com/shares/32317e985a859b4c9427b0cad2a63b59
https://lightroom.adobe.com/shares/6c23f80f18edee40b1fe35f849e43f65
https://lightroom.adobe.com/shares/996864d982de5c41a21895cb79e89b6c
https://lightroom.adobe.com/shares/fe4dd38b703d8b49b825291daa576ca0
https://lightroom.adobe.com/shares/d73a33d7e3eea74d96cea37186609bd3
https://lightroom.adobe.com/shares/e1a1365d9d180c43824ed94e135a2e4c
https://lightroom.adobe.com/shares/42ab038c44be3444b4c071d17accab3c
https://lightroom.adobe.com/shares/286246023035dc44a851909e31951b49
https://lightroom.adobe.com/shares/bcc49de7a5b57a43bf345d4870f1e611
https://lightroom.adobe.com/shares/b8d9c559467d0f47baba5f166da19e1a
https://lightroom.adobe.com/shares/628d7af1b2b7844a9b097cf81120db64
https://lightroom.adobe.com/shares/7b6bc2377c35494cac6524c484e5276a
https://lightroom.adobe.com/shares/b2c33901240abc4d858bc686965140a1
https://lightroom.adobe.com/shares/9db3b1c37984b8438c111276bb9eb69e
https://lightroom.adobe.com/shares/d5e36ca95fa50e4bae0b72d929e8a4da
https://lightroom.adobe.com/shares/100f8275512eb9458732ec99c83a96da
https://lightroom.adobe.com/shares/4753d5d91a82df4b82684e9db6352888
https://lightroom.adobe.com/shares/6a08158f4df19347913faf7db607116e
https://lightroom.adobe.com/shares/96fb2e9f78d8be43810a307909a60060
https://lightroom.adobe.com/shares/d03aae3ce4ee3344a12b112b3bd52e13
https://lightroom.adobe.com/shares/7da62afda03ee5419f63b7596445120b
https://lightroom.adobe.com/shares/11107f47b5cf78439068a11e06711aab
https://lightroom.adobe.com/shares/3f23d03e6326a44185fb24956b052633

萨洛拉丝 发表于 1 小时前

路过,支持一下啦
页: [1]
查看完整版本: 谷歌在美国遭家长起诉:Gemini 被指协助 13 岁女孩制定轻生计划