CWE-125 · Out-of-bounds Read (page 24)
Page 24 of 94 — CVEs classified under CWE-125, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-53147 | High | 7.8 | 2024-12-24 | In the Linux kernel, the following vulnerability has been resolved: exfat: fix out-of-bounds access of directory entries In the case of the directory size is… |
CVE-2024-56378 | Medium | 4.3 | 2024-12-23 | libpoppler.so in Poppler through 24.12.0 has an out-of-bounds read vulnerability within the JBIG2Bitmap::combine function in JBIG2Stream.cc. |
CVE-2024-51471 | Medium | 5.3 | 2024-12-19 | IBM MQ Appliance 9.3 LTS, 9.3 CD, and 9.4 LTS web console could allow an authenticated user to cause a denial-of-service when trace is enabled due to informati… |
CVE-2024-11616 | | 2024-12-19 | Netskope was made aware of a security vulnerability in Netskope Endpoint DLP’s Content Control Driver where a double-fetch issue leads to heap overflow. The vu… | |
CVE-2022-44517 | Medium | 5.5 | 2024-12-19 | Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by an out-of-bounds read vulnerabi… |
CVE-2022-44516 | Medium | 5.5 | 2024-12-19 | Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by an out-of-bounds read vulnerabi… |
CVE-2022-44515 | Medium | 5.5 | 2024-12-19 | Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by an out-of-bounds read vulnerabi… |
CVE-2024-12693 | High | 8.8 | 2024-12-18 | Out of bounds memory access in V8 in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted H… |
CVE-2024-47039 | Medium | 5.5 | 2024-12-18 | In isSlotMarkedSuccessful of BootControl.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information discl… |
CVE-2024-11614 | High | 7.4 | 2024-12-18 | An out-of-bounds read vulnerability was found in DPDK's Vhost library checksum offload feature. This issue enables an untrusted or compromised guest to crash t… |
CVE-2024-56083 | High | 8.1 | 2024-12-16 | Cognition Devin before 2024-12-12 provides write access to code by an attacker who discovers the https://vscode-randomly_generated_string.devinapps.com URL (ak… |
CVE-2024-9508 | High | 7.8 | 2024-12-13 | Horner Automation Cscape contains a memory corruption vulnerability, which could allow an attacker to disclose information and execute arbitrary code. |
CVE-2024-12212 | High | 7.8 | 2024-12-13 | The vulnerability occurs in the parsing of CSP files. The issues result from the lack of proper validation of user-supplied data, which could allow reading p… |
CVE-2024-54116 | Medium | 4.3 | 2024-12-12 | Out-of-bounds read vulnerability in the M3U8 module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally. |
CVE-2024-54115 | Medium | 4.3 | 2024-12-12 | Out-of-bounds read vulnerability in the DASH module Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2024-54114 | Medium | 4.4 | 2024-12-12 | Out-of-bounds access vulnerability in playback in the DASH module Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2024-54109 | Medium | 6.5 | 2024-12-12 | Read/Write vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2024-54108 | Medium | 6.5 | 2024-12-12 | Read/Write vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2024-54107 | High | 7.1 | 2024-12-12 | Read/Write vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2024-54508 | High | 7.5 | 2024-12-12 | The issue was addressed with improved memory handling. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.6, macOS Sequoia 15.2, tvOS 18… |
CVE-2024-54506 | Critical | 9.8 | 2024-12-12 | An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.2. An attacker may be able to cause unexpect… |
CVE-2024-54502 | Medium | 6.5 | 2024-12-12 | The issue was addressed with improved checks. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.6, macOS Sequoia 15.2, tvOS 18.2, visio… |
CVE-2024-44246 | Medium | 5.3 | 2024-12-12 | The issue was addressed with improved routing of Safari-originated requests. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS… |
CVE-2024-49113 | High | 7.5 | 2024-12-12 | Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability |
CVE-2024-49111 | Medium | 6.6 | 2024-12-12 | Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability |
CVE-2024-49110 | Medium | 6.8 | 2024-12-12 | Windows Mobile Broadband Driver Elevation of Privilege Vulnerability |
CVE-2024-49109 | Medium | 6.6 | 2024-12-12 | Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability |
CVE-2024-49103 | Medium | 4.3 | 2024-12-12 | Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability |
CVE-2024-49101 | Medium | 6.6 | 2024-12-12 | Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability |
CVE-2024-49099 | Medium | 4.3 | 2024-12-12 | Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability |
CVE-2024-49098 | Medium | 4.3 | 2024-12-12 | Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability |
CVE-2024-49092 | Medium | 6.8 | 2024-12-12 | Windows Mobile Broadband Driver Elevation of Privilege Vulnerability |
CVE-2024-49083 | Medium | 6.8 | 2024-12-12 | Windows Mobile Broadband Driver Elevation of Privilege Vulnerability |
CVE-2024-49078 | Medium | 6.8 | 2024-12-12 | Windows Mobile Broadband Driver Elevation of Privilege Vulnerability |
CVE-2024-49077 | Medium | 6.8 | 2024-12-12 | Windows Mobile Broadband Driver Elevation of Privilege Vulnerability |
CVE-2024-49065 | Medium | 5.5 | 2024-12-12 | Microsoft Office Remote Code Execution Vulnerability |
CVE-2024-47778 | High | 7.5 | 2024-12-12 | GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been discovered in gst_wavparse_adtl_chunk within gs… |
CVE-2024-47777 | Critical | 9.1 | 2024-12-12 | GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been identified in the gst_wavparse_smpl_chunk funct… |
CVE-2024-47776 | Critical | 9.1 | 2024-12-12 | GStreamer is a library for constructing graphs of media-handling components. An OOB-read has been discovered in gst_wavparse_cue_chunk within gstwavparse.c. Th… |
CVE-2024-47775 | Critical | 9.1 | 2024-12-12 | GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been found in the parse_ds64 function within gstwavp… |
CVE-2024-47774 | Critical | 9.1 | 2024-12-12 | GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been identified in the gst_avi_subtitle_parse_gab2_c… |
CVE-2024-47602 | High | 7.5 | 2024-12-12 | GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been discovered in the gst_matroska_d… |
CVE-2024-47600 | Critical | 9.1 | 2024-12-12 | GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been detected in the format_channel_mask function in… |
CVE-2024-47598 | Critical | 9.1 | 2024-12-12 | GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been discovered in the qtdemux_merge_sample_table fu… |
CVE-2024-47597 | Critical | 9.1 | 2024-12-12 | GStreamer is a library for constructing graphs of media-handling components. An OOB-read has been detected in the function qtdemux_parse_samples within qtdemux… |
CVE-2024-47596 | High | 7.5 | 2024-12-12 | GStreamer is a library for constructing graphs of media-handling components. An OOB-read has been discovered in the qtdemux_parse_svq3_stsd_data function withi… |
CVE-2024-47543 | High | 7.5 | 2024-12-12 | GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been discovered in qtdemux_parse_container function… |
CVE-2024-47542 | High | 7.5 | 2024-12-12 | GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference has been discovered in the id3v2_read_synch_uint functi… |
CVE-2024-37401 | High | 7.5 | 2024-12-12 | An out-of-bounds read in IPsec of Ivanti Connect Secure before version 22.7R2.1 allows a remote unauthenticated attacker to cause a denial of service. |
CVE-2024-53005 | Medium | 5.5 | 2024-12-10 | Substance3D - Modeler versions 1.14.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An att… |
CVE-2024-53004 | Medium | 5.5 | 2024-12-10 | Substance3D - Modeler versions 1.14.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An att… |
CVE-2024-53951 | Medium | 5.5 | 2024-12-10 | InDesign Desktop versions ID19.5, ID18.5.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. A… |
CVE-2024-49549 | Medium | 5.5 | 2024-12-10 | InDesign Desktop versions ID19.5, ID18.5.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. A… |
CVE-2024-49548 | Medium | 5.5 | 2024-12-10 | InDesign Desktop versions ID19.5, ID18.5.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. A… |
CVE-2024-49547 | Medium | 5.5 | 2024-12-10 | InDesign Desktop versions ID19.5, ID18.5.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. A… |
CVE-2024-49546 | Medium | 5.5 | 2024-12-10 | InDesign Desktop versions ID19.5, ID18.5.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. A… |
CVE-2024-49541 | Medium | 5.5 | 2024-12-10 | Illustrator versions 29.0.0, 28.7.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attac… |
CVE-2024-49534 | Medium | 5.5 | 2024-12-10 | Acrobat Reader versions 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier are affected by an out-of-bounds read vulnerability th… |
CVE-2024-49533 | Medium | 5.5 | 2024-12-10 | Acrobat Reader versions 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier are affected by an out-of-bounds read vulnerability th… |
CVE-2024-49532 | Medium | 5.5 | 2024-12-10 | Acrobat Reader versions 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier are affected by an out-of-bounds read vulnerability th… |
CVE-2024-10496 | High | 7.8 | 2024-12-10 | An out of bounds read due to improper input validation in BuildFontMap in fontmgr.cpp in NI LabVIEW may disclose information or result in arbitrary code execut… |
CVE-2024-10495 | High | 7.8 | 2024-12-10 | An out of bounds read due to improper input validation when loading the font table in fontmgr.cpp in NI LabVIEW may disclose information or result in arbitrary… |
CVE-2024-10494 | High | 7.8 | 2024-12-10 | An out of bounds read due to improper input validation in HeapObjMapImpl.cpp in NI LabVIEW may disclose information or result in arbitrary code execution. Suc… |
CVE-2024-53242 | High | 7.8 | 2024-12-10 | A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14.3.0.12)… |
CVE-2024-54938 | High | 7.5 | 2024-12-09 | A Directory Listing issue was found in Kashipara E-Learning Management System v1.0, which allows remote attackers to access sensitive files and directories via… |
CVE-2024-11268 | Medium | 5.5 | 2024-12-09 | A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read. A malicious actor can leverage this vulnerability to cause… |
CVE-2024-53450 | High | 7.5 | 2024-12-09 | RAGFlow 0.13.0 suffers from improper access control in document-hooks.ts, allowing unauthorized access to user documents. |
CVE-2024-54937 | Medium | 5.3 | 2024-12-09 | A Directory Listing issue was found in Kashipara E-Learning Management System v1.0, which allows remote attackers to access sensitive files and directories via… |
CVE-2018-9390 | Medium | 6.7 | 2024-12-05 | In procfile_write of gl_proc.c, there is a possible out of bounds read of a function pointer due to an incorrect bounds check. This could lead to local … |
CVE-2024-12130 | High | 7.8 | 2024-12-05 | An “out of bounds read” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to craft a DOE file and force t… |
CVE-2018-9408 | Medium | 4.4 | 2024-12-05 | In m3326_gps_write and m3326_gps_read of gps.s, there is a possible Out Of Bounds Read due to a missing bounds check. This could lead to a local inform… |
CVE-2018-9407 | Medium | 5.5 | 2024-12-05 | In emmc_rpmb_ioctl of emmc_rpmb.c, there is an Information Disclosure due to a Missing Bounds Check. This could lead to Information Disclosure of kernel data. |
CVE-2024-51210 | Medium | 5.3 | 2024-12-04 | Firepad through 1.5.11 allows remote attackers, who have knowledge of a pad ID, to retrieve both the current text of a document and all content that has previo… |
CVE-2024-52545 | Medium | 6.5 | 2024-12-03 | An unauthenticated attacker can perform an out of bounds heap read in the IQ Service (TCP port 9876). This vulnerability has been resolved in firmware version… |
CVE-2024-9978 | Medium | 5.5 | 2024-12-03 | in OpenHarmony v4.1.1 and prior versions allow a local attacker cause information leak through out-of-bounds Read. |
CVE-2024-12082 | Medium | 5.5 | 2024-12-03 | in OpenHarmony v4.0.0 and prior versions allow a local attacker cause information leak through out-of-bounds Read. |
CVE-2018-9449 | Medium | 5.5 | 2024-12-03 | In process_service_search_attr_rsp of sdp_discovery.cc, there is a possible out of bound read due to a missing bounds check. This could lead to local informati… |
CVE-2018-9441 | Medium | 5.5 | 2024-12-03 | In sdp_copy_raw_data of sdp_discovery.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclos… |
CVE-2018-9435 | Medium | 5.5 | 2024-12-02 | In gatt_process_error_rsp of gatt_cl.cc, there is a possible out of bound read due to a missing bounds check. This could lead to local information disclosure w… |
CVE-2018-9430 | Critical | 9.8 | 2024-12-02 | In prop2cfg of btif_storage.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no addi… |
CVE-2018-9429 | Medium | 6.5 | 2024-12-02 | In buildImageItemsIfPossible of ItemTable.cpp there is a possible out of bound read due to uninitialized data. This could lead to information disclosure with n… |
CVE-2018-9423 | Medium | 6.5 | 2024-12-02 | In ihevcd_parse_slice_header of ihevcd_parse_slice_header.c there is a possible out of bound read due to missing bounds check. This could lead to denial of ser… |
CVE-2024-53108 | High | 7.3 | 2024-12-02 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Adjust VSDB parser for replay feature At some point, the IEEE ID identif… |
CVE-2024-33056 | High | 8.4 | 2024-12-02 | Memory corruption when allocating and accessing an entry in an SMEM partition continuously. |
CVE-2024-20138 | High | 7.5 | 2024-12-02 | In wlan driver, there is a possible out of bound read due to improper input validation. This could lead to remote information disclosure with no additional exe… |
CVE-2024-20136 | Medium | 6.2 | 2024-12-02 | In da, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privi… |
CVE-2024-20129 | High | 7.5 | 2024-12-02 | In Telephony, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution pr… |
CVE-2024-20128 | High | 7.5 | 2024-12-02 | In Telephony, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution pr… |
CVE-2024-20127 | High | 7.5 | 2024-12-02 | In Telephony, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution pr… |
CVE-2024-20116 | Medium | 4.4 | 2024-12-02 | In cmdq, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges… |
CVE-2024-45520 | High | 7.5 | 2024-12-01 | WithSecure Atlant (formerly F-Secure Atlant) 1.0.35-1 allows a remote Denial of Service because of memory corruption during scanning of a PE32 file. |
CVE-2024-36612 | High | 7.5 | 2024-11-29 | Zulip from 8.0 to 8.3 contains a memory leak vulnerability in the handling of popovers. |
CVE-2024-35371 | High | 7.5 | 2024-11-29 | Ant-Media-Serverv2.8.2 is affected by Improper Output Neutralization for Logs. The vulnerability stems from insufficient input sanitization in the logging mech… |
CVE-2024-35367 | Critical | 9.1 | 2024-11-29 | FFmpeg n6.1.1 has an Out-of-bounds Read via libavcodec/ppc/vp8dsp_altivec.c, static const vec_s8 h_subpel_filters_outer |
CVE-2024-38658 | High | 7.8 | 2024-11-28 | There is an Out-of-bounds read vulnerability in V-Server (v4.0.19.0 and earlier) and V-Server Lite (v4.0.19.0 and earlier). If a user opens a specially crafted… |
CVE-2024-38389 | High | 7.8 | 2024-11-28 | There is an Out-of-bounds read vulnerability in TELLUS (v4.0.19.0 and earlier) and TELLUS Lite (v4.0.19.0 and earlier). If a user opens a specially crafted fil… |
CVE-2018-9353 | Medium | 6.5 | 2024-11-27 | In ihevcd_parse_slice_data of ihevcd_parse_slice.c there is a possible heap buffer out of bound read due to a missing bounds check. This could lead to remote d… |
CVE-2018-9351 | Medium | 6.5 | 2024-11-27 | In ih264e_fmt_conv_420p_to_420sp of ih264e_fmt_conv.c there is a possible out of bound read due to missing bounds check. This could lead to remote denial of se… |
CVE-2018-9350 | Medium | 6.5 | 2024-11-27 | In ih264d_assign_pic_num of ih264d_utils.c there is a possible out of bound read due to missing bounds check. This could lead to a denial of service with no ad… |
CVE-2018-9349 | Medium | 6.5 | 2024-11-27 | In mv_err_cost of mcomp.c there is a possible out of bounds read due to missing bounds check. This could lead to denial of service with no additional execution… |