CWE-125 · Out-of-bounds Read (page 26)
Page 26 of 94 — CVEs classified under CWE-125, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-9456 | High | 7.5 | 2024-11-19 | In sdpu_extract_attr_seq of sdp_utils.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of service… |
CVE-2018-9419 | High | 7.5 | 2024-11-19 | In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure… |
CVE-2018-9410 | Medium | 5.5 | 2024-11-19 | In analyzeAxes of FontUtils.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no… |
CVE-2018-9365 | High | 8.8 | 2024-11-19 | In smp_data_received of smp_l2c.cc, there is a possible out of bounds read followed by code execution due to a missing bounds check. This could lead to remote… |
CVE-2018-9371 | Medium | 6.4 | 2024-11-19 | In the Mediatek Preloader, there are out of bounds reads and writes due to an exposed interface that allows arbitrary peripheral memory mapping with insufficie… |
CVE-2018-9340 | Medium | 5.5 | 2024-11-19 | In ResStringPool::setTo of ResourceTypes.cpp, it's possible for an attacker to control the value of mStringPoolSize to be out of bounds, causing information di… |
CVE-2024-53082 | High | 8.4 | 2024-11-19 | In the Linux kernel, the following vulnerability has been resolved: virtio_net: Add hash_key_length check Add hash_key_length check in virtnet_probe() to avo… |
CVE-2024-50301 | High | 7.8 | 2024-11-19 | In the Linux kernel, the following vulnerability has been resolved: security/keys: fix slab-out-of-bounds in key_task_permission KASAN reports an out of boun… |
CVE-2024-50279 | High | 7.1 | 2024-11-19 | In the Linux kernel, the following vulnerability has been resolved: dm cache: fix out-of-bounds access to the dirty bitset when resizing dm-cache checks the… |
CVE-2024-50278 | High | 7.1 | 2024-11-19 | In the Linux kernel, the following vulnerability has been resolved: dm cache: fix potential out-of-bounds access on the first resume Out-of-bounds access occ… |
CVE-2024-50268 | High | 7.8 | 2024-11-19 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd() The "*cmd" v… |
CVE-2024-52574 | High | 7.8 | 2024-11-18 | A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14.3.0.12)… |
CVE-2024-52567 | High | 7.8 | 2024-11-18 | A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14.3.0.12)… |
CVE-2023-39180 | Medium | 4.0 | 2024-11-18 | A flaw was found within the handling of SMB2_READ commands in the kernel ksmbd module. The issue results from not releasing memory after its effective lifetime… |
CVE-2023-39179 | High | 7.5 | 2024-11-18 | A flaw was found within the handling of SMB2 read requests in the kernel ksmbd module. The issue results from the lack of proper validation of user-supplied da… |
CVE-2023-39176 | Medium | 5.8 | 2024-11-18 | A flaw was found within the parsing of SMB2 requests that have a transform header in the kernel ksmbd module. The issue results from the lack of proper validat… |
CVE-2024-52876 | High | 7.5 | 2024-11-17 | Holy Stone Remote ID Module HSRID01, firmware distributed with the Drone Go2 mobile application before 1.1.8, allows unauthenticated "remote power off" actions… |
CVE-2024-49536 | Medium | 5.5 | 2024-11-15 | Audition versions 23.6.9, 24.4.6 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker… |
CVE-2024-24459 | Medium | 5.9 | 2024-11-15 | An invalid memory access when handling the ProtocolIE_ID field of S1Setup Request messages in Athonet vEPC MME v11.4.0 allows attackers to cause a Denial of Se… |
CVE-2024-24458 | Medium | 5.9 | 2024-11-15 | An invalid memory access when handling the ENB Configuration Transfer messages containing invalid PLMN Identities in Athonet vEPC MME v11.4.0 allows attackers… |
CVE-2024-24457 | Medium | 5.9 | 2024-11-15 | An invalid memory access when handling the ProtocolIE_ID field of E-RAB Setup List Context SURes messages in Athonet vEPC MME v11.4.0 allows attackers to cause… |
CVE-2024-24455 | Medium | 5.9 | 2024-11-15 | An invalid memory access when handling a UE Context Release message containing an invalid UE identifier in Athonet vEPC MME v11.4.0 allows attackers to cause a… |
CVE-2024-24454 | Medium | 5.9 | 2024-11-15 | An invalid memory access when handling the ProtocolIE_ID field of E-RAB Modify Request messages in Athonet vEPC MME v11.4.0 allows attackers to cause a Denial… |
CVE-2024-24453 | Medium | 5.9 | 2024-11-15 | An invalid memory access when handling the ProtocolIE_ID field of E-RAB NotToBeModifiedBearerModInd information element in Athonet vEPC MME v11.4.0 allows atta… |
CVE-2024-24452 | Medium | 5.9 | 2024-11-15 | An invalid memory access when handling the ProtocolIE_ID field of E-RAB Release Indication messages in Athonet vEPC MME v11.4.0 allows attackers to cause a Den… |
CVE-2024-24425 | Medium | 6.5 | 2024-11-15 | Magma v1.8.0 and OAI EPC Federation v1.20 were discovered to contain an out-of-bounds read in the amf_as_establish_req function at /tasks/amf/amf_as.cpp. This… |
CVE-2024-52523 | Medium | 4.6 | 2024-11-15 | Nextcloud Server is a self hosted personal cloud system. After setting up a user or administrator defined external storage with fixed credentials, the API retu… |
CVE-2023-20094 | Medium | 4.3 | 2024-11-15 | A vulnerability in Cisco TelePresence CE and RoomOS could allow an unauthenticated, adjacent attacker to view sensitive information on an affected device. T… |
CVE-2022-20766 | Medium | 5.3 | 2024-11-15 | A vulnerability in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Adaptive Telephone Adapter firmware could allow an unauthentica… |
CVE-2024-52613 | Medium | 5.5 | 2024-11-14 | A heap-based buffer under-read in tsMuxer version nightly-2024-05-12-02-01-18 allows attackers to cause Denial of Service (DoS) via a crafted MOV video file. |
CVE-2023-4458 | Medium | 4.0 | 2024-11-14 | A flaw was found within the parsing of extended attributes in the kernel ksmbd module. The issue results from the lack of proper validation of user-supplied da… |
CVE-2024-32667 | Low | 3.9 | 2024-11-13 | Out-of-bounds read for some OpenCL(TM) software may allow an authenticated user to potentially enable denial of service via local access. |
CVE-2024-28051 | Low | 2.2 | 2024-11-13 | Out-of-bounds read in some Intel(R) VPL software before version 24.1.4 may allow an authenticated user to potentially enable information disclosure via local a… |
CVE-2024-43082 | Medium | 5.5 | 2024-11-13 | In onActivityResult of EditUserPhotoController.java, there is a possible cross-user media read due to a confused deputy. This could lead to local information d… |
CVE-2024-38654 | Medium | 4.4 | 2024-11-13 | Improper bounds checking in Ivanti Secure Access Client before version 22.7R3 allows a local authenticated attacker with admin privileges to cause a denial of… |
CVE-2024-38649 | High | 7.5 | 2024-11-13 | An out-of-bounds write in IPsec of Ivanti Connect Secure before version 22.7R2.1(Not Applicable to 9.1Rx) allows a remote unauthenticated attacker to cause a d… |
CVE-2024-37400 | High | 7.5 | 2024-11-13 | An out of bounds read in Ivanti Connect Secure before version 22.7R2.3 allows a remote unauthenticated attacker to trigger an infinite loop, causing a denial o… |
CVE-2024-49512 | Medium | 5.5 | 2024-11-12 | InDesign Desktop versions ID18.5.3, ID19.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. A… |
CVE-2024-49511 | Medium | 5.5 | 2024-11-12 | InDesign Desktop versions ID18.5.3, ID19.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. A… |
CVE-2024-49510 | Medium | 5.5 | 2024-11-12 | InDesign Desktop versions ID18.5.3, ID19.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. A… |
CVE-2024-47440 | Medium | 5.5 | 2024-11-12 | Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An att… |
CVE-2024-47437 | Medium | 5.5 | 2024-11-12 | Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An att… |
CVE-2024-47436 | Medium | 5.5 | 2024-11-12 | Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An att… |
CVE-2024-47435 | Medium | 5.5 | 2024-11-12 | Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An att… |
CVE-2024-47456 | Medium | 5.5 | 2024-11-12 | Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker coul… |
CVE-2024-47455 | Medium | 5.5 | 2024-11-12 | Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker coul… |
CVE-2024-47454 | Medium | 5.5 | 2024-11-12 | Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker coul… |
CVE-2024-47453 | Medium | 5.5 | 2024-11-12 | Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker coul… |
CVE-2024-47449 | Medium | 5.5 | 2024-11-12 | Audition versions 23.6.9, 24.4.6 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker… |
CVE-2024-47446 | Medium | 5.5 | 2024-11-12 | After Effects versions 23.6.9, 24.6.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An att… |
CVE-2024-47445 | Medium | 5.5 | 2024-11-12 | After Effects versions 23.6.9, 24.6.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An att… |
CVE-2024-47444 | Medium | 5.5 | 2024-11-12 | After Effects versions 23.6.9, 24.6.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An att… |
CVE-2024-45147 | Medium | 5.5 | 2024-11-12 | Bridge versions 13.0.9, 14.1.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker c… |
CVE-2024-49028 | High | 7.8 | 2024-11-12 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2024-43644 | High | 7.8 | 2024-11-12 | Windows Client-Side Caching Elevation of Privilege Vulnerability |
CVE-2024-43643 | Medium | 6.8 | 2024-11-12 | Windows USB Video Class System Driver Elevation of Privilege Vulnerability |
CVE-2024-43638 | Medium | 6.8 | 2024-11-12 | Windows USB Video Class System Driver Elevation of Privilege Vulnerability |
CVE-2024-43637 | Medium | 6.8 | 2024-11-12 | Windows USB Video Class System Driver Elevation of Privilege Vulnerability |
CVE-2024-43634 | Medium | 6.8 | 2024-11-12 | Windows USB Video Class System Driver Elevation of Privilege Vulnerability |
CVE-2024-43449 | Medium | 6.8 | 2024-11-12 | Windows USB Video Class System Driver Elevation of Privilege Vulnerability |
CVE-2024-9843 | Medium | 5.0 | 2024-11-12 | A buffer over-read in Ivanti Secure Access Client before 22.7R4 allows a local unauthenticated attacker to cause a denial of service. |
CVE-2024-49527 | Medium | 5.5 | 2024-11-12 | Animate versions 23.0.7, 24.0.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker… |
CVE-2024-50331 | High | 7.5 | 2024-11-12 | An out-of-bounds read vulnerability in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to leak sensitive information in memory. |
CVE-2024-51565 | Medium | 6.5 | 2024-11-12 | The hda driver is vulnerable to a buffer over-read from a guest-controlled value. |
CVE-2024-51562 | Medium | 6.5 | 2024-11-12 | The NVMe driver function nvme_opc_get_log_page is vulnerable to a buffer over-read from a guest-controlled value. |
CVE-2024-47941 | High | 7.8 | 2024-11-12 | A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 9). The affected applications contain an out of bounds read past the end… |
CVE-2024-47940 | High | 7.8 | 2024-11-12 | A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 9). The affected applications contain an out of bounds read past the end… |
CVE-2024-46891 | Medium | 5.3 | 2024-11-12 | A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3). The affected application does not properly restrict the size of generated… |
CVE-2024-46956 | High | 7.8 | 2024-11-10 | An issue was discovered in psi/zfile.c in Artifex Ghostscript before 10.04.0. Out-of-bounds data access in filenameforall can lead to arbitrary code execution. |
CVE-2024-46955 | Medium | 5.5 | 2024-11-10 | An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. There is an out-of-bounds read when reading color in Indexed color space. |
CVE-2024-50259 | Medium | 5.5 | 2024-11-09 | In the Linux kernel, the following vulnerability has been resolved: netdevsim: Add trailing zero to terminate the string in nsim_nexthop_bucket_activity_write… |
CVE-2024-50247 | High | 7.3 | 2024-11-09 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Check if more than chunk-size bytes are written A incorrectly formatted chunk m… |
CVE-2024-50227 | High | 7.1 | 2024-11-09 | In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Fix KASAN reported stack out-of-bounds read in tb_retimer_scan() KASAN repor… |
CVE-2024-35423 | High | 7.8 | 2024-11-08 | vmir e8117 was discovered to contain a heap buffer overflow via the wasm_parse_section_functions function at /src/vmir_wasm_parser.c. |
CVE-2024-27529 | High | 8.4 | 2024-11-08 | wasm3 139076a contains memory leaks in Read_utf8. |
CVE-2024-27528 | High | 8.4 | 2024-11-08 | wasm3 139076a suffers from Invalid Memory Read, leading to DoS and potential Code Execution. |
CVE-2024-25431 | High | 7.8 | 2024-11-08 | An issue in bytecodealliance wasm-micro-runtime before v.b3f728c and fixed in commit 06df58f allows a remote attacker to escalate privileges via a crafted file… |
CVE-2024-50208 | High | 7.8 | 2024-11-08 | In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages Avoid memory corruption while… |
CVE-2024-50158 | High | 7.8 | 2024-11-07 | In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Fix out of bound check Driver exports pacing stats only on GenP5 and P7 ada… |
CVE-2024-50128 | High | 7.8 | 2024-11-05 | In the Linux kernel, the following vulnerability has been resolved: net: wwan: fix global oob in wwan_rtnl_policy The variable wwan_rtnl_link_ops assign a *b… |
CVE-2024-50123 | High | 7.1 | 2024-11-05 | In the Linux kernel, the following vulnerability has been resolved: bpf: Add the missing BPF_LINK_TYPE invocation for sockmap There is an out-of-bounds read… |
CVE-2024-50115 | High | 8.4 | 2024-11-05 | In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory Ignore nCR3[4:0] when loading… |
CVE-2024-47402 | Low | 3.3 | 2024-11-05 | in OpenHarmony v4.0.0 and prior versions allow a local attacker cause DOS through out-of-bounds read. |
CVE-2024-38405 | High | 7.5 | 2024-11-04 | Transient DOS while processing the CU information from RNR IE. |
CVE-2024-38403 | High | 7.5 | 2024-11-04 | Transient DOS while parsing BTM ML IE when per STA profile is not included. |
CVE-2024-20124 | Medium | 4.4 | 2024-11-04 | In vdec, there is a possible out of bounds read due to improper structure design. This could lead to local information disclosure with System execution privile… |
CVE-2024-20123 | Medium | 4.4 | 2024-11-04 | In vdec, there is a possible out of bounds read due to improper structure design. This could lead to local information disclosure with System execution privile… |
CVE-2024-20122 | Medium | 4.4 | 2024-11-04 | In vdec, there is a possible out of bounds read due to improper structure design. This could lead to local information disclosure with System execution privile… |
CVE-2024-20117 | Medium | 4.4 | 2024-11-04 | In vdec, there is a possible out of bounds read due to improper structure design. This could lead to local information disclosure with System execution privile… |
CVE-2024-20112 | Medium | 4.4 | 2024-11-04 | In isp, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges neede… |
CVE-2024-20107 | Medium | 6.2 | 2024-11-04 | In da, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privi… |
CVE-2024-39720 | High | 8.2 | 2024-10-31 | An issue was discovered in Ollama before 0.1.46. An attacker can use two HTTP requests to upload a malformed GGUF file containing just 4 bytes starting with th… |
CVE-2024-9827 | High | 7.8 | 2024-10-29 | A maliciously crafted CATPART file when parsed in CC5Dll.dll through Autodesk AutoCAD can force an Out-of-Bounds Read vulnerability. A malicious actor can lev… |
CVE-2024-8589 | High | 7.8 | 2024-10-29 | A maliciously crafted SLDPRT file when parsed in odxsw_dll.dll through Autodesk AutoCAD can force a Out-of-Bounds Read vulnerability. A malicious actor can le… |
CVE-2024-8588 | High | 7.8 | 2024-10-29 | A maliciously crafted SLDPRT file when parsed in odxsw_dll.dll through Autodesk AutoCAD can force a Out-of-Bounds Read vulnerability. A malicious actor can le… |
CVE-2024-10467 | High | 8.8 | 2024-10-29 | Memory safety bugs present in Firefox 131, Firefox ESR 128.3, and Thunderbird 128.3. Some of these bugs showed evidence of memory corruption and we presume tha… |
CVE-2024-10464 | Medium | 6.5 | 2024-10-29 | Repeated writes to history interface attributes could have been used to cause a Denial of Service condition in the browser. This was addressed by introducing r… |
CVE-2024-50074 | High | 7.8 | 2024-10-29 | In the Linux kernel, the following vulnerability has been resolved: parport: Proper fix for array out-of-bounds access The recent fix for array out-of-bounds… |
CVE-2024-44283 | Medium | 5.5 | 2024-10-28 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. Parsin… |
CVE-2024-44237 | Medium | 5.5 | 2024-10-28 | An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1… |