GHSA-CCVP-8VXX-4M3M高危未审查

无摘要

OSV 1.4.0 · unreviewed · 修改于 2026-08-27 20:30

发布时间

2026-08-27 20:30

GitHub 审查时间

—

NVD 发布时间

2026-08-27 18:16

源文件

advisories/unreviewed/2026/08/GHSA-ccvp-8vxx-4m3m/GHSA-ccvp-8vxx-4m3m.json

公告说明

If configured as a server, CodeMeter Runtime before versions 8.41a and 9.10 accepts requests with opcode 0x5e, which contain the data length and the data itself. Missing bounds checking on the data length value can lead to out of bounds reads, causing a segmentation fault that ultimately crashes the CodeMeter Runtime.

受影响的软件包

该公告没有提供结构化的受影响软件包信息。

参考链接

ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2026-81575

标识信息

别名 / CVE

CVE-2026-81575

CWE

CWE-130

软件生态

无

扩展资料

暂无扩展资料。

CVSS 评分

CVSS_V3

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

原始 OSV JSON

{
  "id": "GHSA-ccvp-8vxx-4m3m",
  "aliases": [
    "CVE-2026-81575"
  ],
  "details": "If configured as a server, CodeMeter Runtime before versions 8.41a and 9.10 accepts requests with opcode 0x5e, which contain the data length and\nthe data itself. Missing bounds checking on the data length value can lead to out of bounds reads, causing a\nsegmentation fault that ultimately crashes the CodeMeter Runtime.",
  "affected": [],
  "modified": "2026-08-27T12:30:26Z",
  "severity": [
    {
      "type": "CVSS_V3",
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
    }
  ],
  "published": "2026-08-27T12:30:26Z",
  "references": [
    {
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-81575",
      "type": "ADVISORY"
    },
    {
      "url": "https://cdn.wibu.com/fileadmin/wibu_downloads/security_advisories/AdvisoryWIBU-103401.pdf",
      "type": "WEB"
    }
  ],
  "schema_version": "1.4.0",
  "database_specific": {
    "cwe_ids": [
      "CWE-130"
    ],
    "severity": "HIGH",
    "github_reviewed": false,
    "nvd_published_at": "2026-08-27T10:16:40Z",
    "github_reviewed_at": null
  }
}