CWE-125 · Out-of-bounds Read (page 29)
Page 29 of 94 — CVEs classified under CWE-125, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-41860 | Medium | 5.5 | 2024-08-14 | Substance3D - Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attack… |
CVE-2024-38214 | Medium | 6.5 | 2024-08-13 | Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
CVE-2024-38184 | High | 7.8 | 2024-08-13 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability |
CVE-2024-38155 | Medium | 5.5 | 2024-08-13 | Security Center Broker Information Disclosure Vulnerability |
CVE-2024-38151 | Medium | 5.5 | 2024-08-13 | Windows Kernel Information Disclosure Vulnerability |
CVE-2024-38148 | High | 7.5 | 2024-08-13 | Windows Secure Channel Denial of Service Vulnerability |
CVE-2024-38134 | High | 7.8 | 2024-08-13 | Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability |
CVE-2024-38132 | High | 7.5 | 2024-08-13 | Windows Network Address Translation (NAT) Denial of Service Vulnerability |
CVE-2024-38123 | Medium | 4.4 | 2024-08-13 | Windows Bluetooth Driver Information Disclosure Vulnerability |
CVE-2024-38117 | High | 7.8 | 2024-08-13 | NTFS Elevation of Privilege Vulnerability |
CVE-2023-31339 | Medium | 4.8 | 2024-08-13 | Improper input validation in ARM® Trusted Firmware used in AMD’s Zynq™ UltraScale+™) MPSoC/RFSoC may allow a privileged attacker to perform out of bound reads… |
CVE-2023-20509 | Medium | 5.2 | 2024-08-13 | An insufficient DRAM address validation in PMFW may allow a privileged attacker to perform a DMA read from an invalid DRAM address to SRAM, potentially resulti… |
CVE-2021-46772 | Low | 3.9 | 2024-08-13 | Insufficient input validation in the ABL may allow a privileged attacker with access to the BIOS menu or UEFI shell to tamper with the structure headers in SPI… |
CVE-2024-41908 | High | 7.8 | 2024-08-13 | A vulnerability has been identified in NX (All versions < V2406.3000). The affected applications contains an out of bounds read vulnerability while parsing spe… |
CVE-2023-7066 | High | 7.8 | 2024-08-12 | The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PDF files. This could allow an… |
CVE-2024-42478 | Medium | 5.3 | 2024-08-12 | llama.cpp provides LLM inference in C/C++. The unsafe `data` pointer member in the `rpc_tensor` structure can cause arbitrary address reading. This vulnerabili… |
CVE-2024-42477 | Medium | 5.3 | 2024-08-12 | llama.cpp provides LLM inference in C/C++. The unsafe `type` member in the `rpc_tensor` structure can cause `global-buffer-overflow`. This vulnerability may le… |
CVE-2024-0107 | High | 7.8 | 2024-08-08 | NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular user can cause an out-of-bounds read. A su… |
CVE-2024-0102 | Low | 3.3 | 2024-08-08 | NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvdisasm, where an attacker can cause an out-of-bounds read issue by deceiving a user into re… |
CVE-2024-34635 | Medium | 4.0 | 2024-08-07 | Out-of-bounds read in parsing textbox object in Samsung Notes prior to version 4.4.21.62 allows local attacker to access unauthorized memory. |
CVE-2024-34634 | Medium | 4.0 | 2024-08-07 | Out-of-bounds read in parsing connected object list in Samsung Notes prior to version 4.4.21.62 allows local attacker to access unauthorized memory. |
CVE-2024-34633 | Medium | 4.0 | 2024-08-07 | Out-of-bounds read in parsing object header in Samsung Notes prior to version 4.4.21.62 allows local attacker to access unauthorized memory. |
CVE-2024-34632 | Medium | 4.0 | 2024-08-07 | Out-of-bounds read in uuid parsing in Samsung Notes prior to version 4.4.21.62 allows local attacker to access unauthorized memory. |
CVE-2024-34631 | Medium | 5.5 | 2024-08-07 | Out-of-bounds read in applying new binary in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory. |
CVE-2024-34630 | Medium | 5.5 | 2024-08-07 | Out-of-bounds read in applying own binary with textbox in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory. |
CVE-2024-34629 | Medium | 5.5 | 2024-08-07 | Out-of-bounds read in applying binary with text common object in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory. |
CVE-2024-34628 | Medium | 5.5 | 2024-08-07 | Out-of-bounds read in applying binary with path in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory. |
CVE-2024-34627 | Medium | 5.5 | 2024-08-07 | Out-of-bounds read in parsing implemention in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory. |
CVE-2024-34626 | Medium | 5.5 | 2024-08-07 | Out-of-bounds read in applying own binary in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory. |
CVE-2024-34625 | Medium | 5.5 | 2024-08-07 | Out-of-bounds read in applying connection point in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory. |
CVE-2024-34624 | Medium | 5.5 | 2024-08-07 | Out-of-bounds read in applying paragraphs in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory. |
CVE-2024-34621 | Medium | 5.5 | 2024-08-07 | Out-of-bounds read in applying binary with data in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory. |
CVE-2024-7522 | High | 8.8 | 2024-08-06 | Editor code failed to check an attribute value. This could have led to an out-of-bounds read. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, F… |
CVE-2024-7537 | Medium | 5.5 | 2024-08-06 | oFono QMI SMS Handling Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive information on… |
CVE-2024-33026 | High | 7.5 | 2024-08-05 | Transient DOS while parsing probe response and assoc response frame when received frame length is less than max size of timestamp. |
CVE-2024-33025 | High | 7.5 | 2024-08-05 | Transient DOS while parsing the BSS parameter change count or MLD capabilities fields of the ML IE. |
CVE-2024-33020 | High | 7.5 | 2024-08-05 | Transient DOS while processing TID-to-link mapping IE elements. |
CVE-2024-33019 | High | 7.5 | 2024-08-05 | Transient DOS while parsing the received TID-to-link mapping action frame. |
CVE-2024-33018 | High | 7.5 | 2024-08-05 | Transient DOS while parsing the received TID-to-link mapping element of the TID-to-link mapping action frame. |
CVE-2024-33015 | High | 7.5 | 2024-08-05 | Transient DOS while parsing SCAN RNR IE when bytes received from AP is such that the size of the last param of IE is less than neighbor report. |
CVE-2024-33014 | High | 7.5 | 2024-08-05 | Transient DOS while parsing ESP IE from beacon/probe response frame. |
CVE-2024-33013 | High | 7.5 | 2024-08-05 | Transient DOS when driver accesses the ML IE memory and offset value is incremented beyond ML IE length. |
CVE-2024-33012 | High | 7.5 | 2024-08-05 | Transient DOS while parsing the multiple MBSSID IEs from the beacon, when the tag length is non-zero value but with end of beacon. |
CVE-2024-33011 | High | 7.5 | 2024-08-05 | Transient DOS while parsing the MBSSID IE from the beacons, when the MBSSID IE length is zero. |
CVE-2024-23353 | High | 7.5 | 2024-08-05 | Transient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI. |
CVE-2024-21479 | High | 7.5 | 2024-08-05 | Transient DOS during music playback of ALAC content. |
CVE-2024-21467 | Medium | 6.5 | 2024-08-05 | Information disclosure while handling beacon probe frame during scan entry generation in client side. |
CVE-2024-21459 | Medium | 6.5 | 2024-08-05 | Information disclosure while handling beacon or probe response frame in STA. |
CVE-2024-39396 | Medium | 5.5 | 2024-08-02 | InDesign Desktop versions ID18.5.2, ID19.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. A… |
CVE-2024-7255 | High | 8.8 | 2024-08-01 | Out of bounds read in WebTransport in Google Chrome prior to 127.0.6533.88 allowed a remote attacker to potentially perform out of bounds memory access via a c… |
CVE-2024-38481 | Medium | 4.8 | 2024-08-01 | Dell iDRAC Service Module version 5.3.0.0 and prior, contain a Out of bound Read Vulnerability. A privileged local attacker could execute arbitrary code potent… |
CVE-2024-39379 | Medium | 5.5 | 2024-07-31 | Acrobat for Edge versions 126.0.2592.81 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An a… |
CVE-2024-7264 | Medium | 6.5 | 2024-07-31 | libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an ASN.1 Generalized Time field. If given an syntactically incorrect field, the par… |
CVE-2023-28074 | Medium | 6.2 | 2024-07-31 | Dell BSAFE Crypto-C Micro Edition, version 4.1.5, and Dell BSAFE Micro Edition Suite, versions 4.0 through 4.6.1 and version 5.0, contains an Out-of-bounds Rea… |
CVE-2024-42118 | High | 7.8 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Do not return negative stream id for array [WHY] resource_stream_to_stre… |
CVE-2024-42111 | High | 7.8 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: btrfs: always do the basic checks for btrfs_qgroup_inherit structure [BUG] Syzbot reports… |
CVE-2024-40816 | Medium | 5.5 | 2024-07-29 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. A lo… |
CVE-2024-40806 | Medium | 5.5 | 2024-07-29 | An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS… |
CVE-2024-40799 | High | 7.1 | 2024-07-29 | An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS… |
CVE-2024-40789 | Medium | 6.5 | 2024-07-29 | An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 17.6, iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadO… |
CVE-2024-40780 | Medium | 5.5 | 2024-07-29 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 17.6, iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6… |
CVE-2024-40779 | Medium | 5.5 | 2024-07-29 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 17.6, iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6… |
CVE-2024-40777 | Medium | 5.5 | 2024-07-29 | An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, visio… |
CVE-2023-42943 | Medium | 5.5 | 2024-07-29 | A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sonoma 14. An app may be able to read sensitiv… |
CVE-2024-41091 | High | 8.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: tun: add missing verification for short frame The cited commit missed to check against th… |
CVE-2024-41090 | High | 8.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: tap: add missing verification for short frame The cited commit missed to check against th… |
CVE-2024-41019 | High | 7.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Validate ff offset This adds sanity checks for ff offset. There is a check on r… |
CVE-2024-41014 | High | 7.1 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: xfs: add bounds checking to xlog_recover_process_data There is a lack of verification of… |
CVE-2024-41013 | High | 7.1 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: xfs: don't walk off the end of a directory data block This adds sanity checks for xfs_dir… |
CVE-2024-6874 | Medium | 4.3 | 2024-07-24 | libcurl's URL API function [curl_url_get()](https://curl.se/libcurl/c/curl_url_get.html) offers punycode conversions, to and from IDN. Asking to convert a name… |
CVE-2023-32471 | Medium | 6.0 | 2024-07-24 | Dell Edge Gateway BIOS, versions 3200 and 5200, contains an out-of-bounds read vulnerability. A local authenticated malicious user with high privileges could p… |
CVE-2024-4079 | High | 7.8 | 2024-07-23 | An out of bounds read due to a missing bounds check in LabVIEW may disclose information or result in arbitrary code execution. Successful exploitation require… |
CVE-2024-2884 | Medium | 6.5 | 2024-07-16 | Out of bounds read in V8 in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HT… |
CVE-2024-21164 | Low | 2.5 | 2024-07-16 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.20. Diffic… |
CVE-2024-21143 | Medium | 5.3 | 2024-07-16 | Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: User Management). Supported versions that are affected are 12.2.3-12.2.13. E… |
CVE-2024-6779 | Critical | 9.6 | 2024-07-16 | Out of bounds memory access in V8 in Google Chrome prior to 126.0.6478.182 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML… |
CVE-2022-48866 | High | 7.1 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts Syzbot reported an slab-ou… |
CVE-2022-48839 | High | 7.8 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: net/packet: fix slab-out-of-bounds access in packet_recvmsg() syzbot found that when an A… |
CVE-2022-48827 | High | 7.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix the behavior of READ near OFFSET_MAX Dan Aloni reports: > Due to commit 8cfb901… |
CVE-2022-48805 | High | 7.8 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup ax88179_rx_fixup() contain… |
CVE-2022-48803 | High | 7.3 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: phy: ti: Fix missing sentinel for clk_div_table _get_table_maxdiv() tries to access "clk_… |
CVE-2023-52886 | Medium | 6.4 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix race by not overwriting udev->descriptor in hub_port_init() Syzbot reporte… |
CVE-2024-40630 | Medium | 4.3 | 2024-07-15 | OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation via a format-agnostic API with… |
CVE-2024-40978 | High | 7.1 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: scsi: qedi: Fix crash while reading debugfs attribute The qedi_dbg_do_not_recover_cmd_rea… |
CVE-2024-40929 | High | 7.1 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: check n_ssids before accessing the ssids In some versions of cfg80211… |
CVE-2024-21524 | High | 8.2 | 2024-07-10 | All versions of the package node-stringbuilder are vulnerable to Out-of-bounds Read due to incorrect memory length calculation, by calling ToBuffer, ToString… |
CVE-2024-39882 | High | 8.8 | 2024-07-09 | Delta Electronics CNCSoft-G2 lacks proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. If a target visits… |
CVE-2024-34140 | Medium | 5.5 | 2024-07-09 | Bridge versions 14.0.4, 13.0.7, 14.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An atta… |
CVE-2023-50806 | High | 8.4 | 2024-07-09 | A vulnerability was discovered in Samsung Mobile Processor, Wearable Processor, and Modems with versions Exynos 9820, Exynos 9825, Exynos 980, Exynos 990, Exyn… |
CVE-2024-38102 | Medium | 6.5 | 2024-07-09 | Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability |
CVE-2024-38101 | Medium | 6.5 | 2024-07-09 | Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability |
CVE-2024-38073 | High | 7.5 | 2024-07-09 | Windows Remote Desktop Licensing Service Denial of Service Vulnerability |
CVE-2024-38062 | High | 7.8 | 2024-07-09 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability |
CVE-2024-38057 | High | 7.8 | 2024-07-09 | Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability |
CVE-2024-38056 | Medium | 5.5 | 2024-07-09 | Microsoft Windows Codecs Library Information Disclosure Vulnerability |
CVE-2024-38048 | Medium | 6.5 | 2024-07-09 | Windows Network Driver Interface Specification (NDIS) Denial of Service Vulnerability |
CVE-2024-38028 | High | 7.2 | 2024-07-09 | Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability |
CVE-2024-6606 | High | 8.2 | 2024-07-09 | Clipboard code failed to check the index on an array access. This could have led to an out-of-bounds read. This vulnerability affects Firefox < 128 and Thunder… |
CVE-2024-33654 | High | 7.8 | 2024-07-09 | A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out of bounds read past the end of an alloc… |
CVE-2024-33653 | High | 7.8 | 2024-07-09 | A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out of bounds read past the end of an alloc… |