CWE-125 · Out-of-bounds Read (page 30)
Page 30 of 94 — CVEs classified under CWE-125, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-33653 | High | 7.8 | 2024-07-09 | A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out of bounds read past the end of an alloc… |
CVE-2024-39487 | High | 7.1 | 2024-07-09 | In the Linux kernel, the following vulnerability has been resolved: bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() In function bond_opti… |
CVE-2024-39695 | Medium | 5.3 | 2024-07-08 | Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in E… |
CVE-2024-6505 | Medium | 6.8 | 2024-07-05 | A flaw was found in the virtio-net device in QEMU. When enabling the RSS feature on the virtio-net network card, the indirections_table data within RSS becomes… |
CVE-2023-52169 | High | 8.2 | 2024-07-03 | The NtfsHandler.cpp NTFS handler in 7-Zip before 24.01 (for 7zz) contains an out-of-bounds read that allows an attacker to read beyond the intended buffer. The… |
CVE-2024-34122 | High | 7.8 | 2024-07-02 | Acrobat for Edge versions 126.0.2592.68 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a re… |
CVE-2024-36243 | High | 8.2 | 2024-07-02 | in OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through out-of-bounds read and write. |
CVE-2024-21465 | High | 7.8 | 2024-07-01 | Memory corruption while processing key blob passed by the user. |
CVE-2024-21462 | High | 7.1 | 2024-07-01 | Transient DOS while loading the TA ELF file. |
CVE-2024-21458 | Medium | 6.5 | 2024-07-01 | Information disclosure while handling SA query action frame. |
CVE-2024-21457 | Medium | 6.5 | 2024-07-01 | INformation disclosure while handling Multi-link IE in beacon frame. |
CVE-2024-21456 | Medium | 6.5 | 2024-07-01 | Information Disclosure while parsing beacon frame in STA. |
CVE-2024-37371 | Critical | 9.1 | 2024-06-28 | In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by sending message tokens with invalid… |
CVE-2016-20022 | High | 8.4 | 2024-06-27 | In the Linux kernel before 4.8, usb_parse_endpoint in drivers/usb/core/config.c does not validate the wMaxPacketSize field of an endpoint descriptor. NOTE: Thi… |
CVE-2024-3017 | Medium | 6.5 | 2024-06-27 | In a Silicon Labs multi-protocol gateway, a corrupt pointer to buffered data on a multi-protocol radio co-processor (RCP) causes the OpenThread Border Route… |
CVE-2024-28820 | Medium | 6.3 | 2024-06-27 | Buffer overflow in the extract_openvpn_cr function in openvpn-cr.c in openvpn-auth-ldap (aka the Three Rings Auth-LDAP plugin for OpenVPN) 2.0.4 allows attacke… |
CVE-2024-5535 | Critical | 9.1 | 2024-06-27 | Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an empty supported client protocols buffer may cause a crash or memory contents to b… |
CVE-2024-39471 | High | 7.8 | 2024-06-25 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: add error handle to avoid out-of-bounds if the sdma_v4_0_irq_id_to_seq return… |
CVE-2024-39467 | High | 7.8 | 2024-06-25 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode() syzbot reports a kern… |
CVE-2024-37086 | Medium | 6.8 | 2024-06-25 | VMware ESXi contains an out-of-bounds read vulnerability. A malicious actor with local administrative privileges on a virtual machine with an existing snapsh… |
CVE-2024-37005 | High | 7.8 | 2024-06-25 | A maliciously crafted X_B file, when parsed in pskernel.DLL through Autodesk applications, can force an Out-of-Bound Read. A malicious actor can leverage this… |
CVE-2024-36999 | High | 7.8 | 2024-06-25 | A maliciously crafted 3DM file, when parsed in opennurbs.dll through Autodesk applications, can force an Out-of-Bounds Write. A malicious actor can leverage th… |
CVE-2024-23153 | High | 7.8 | 2024-06-25 | A maliciously crafted MODEL file, when parsed in libodx.dll through Autodesk applications, can force an Out-of-Bounds Read. A malicious actor can leverage this… |
CVE-2024-23152 | High | 7.8 | 2024-06-25 | A maliciously crafted 3DM file, when parsed in opennurbs.dll through Autodesk applications, can force an Out-of-Bounds Read. A malicious actor can leverage thi… |
CVE-2024-23149 | High | 7.8 | 2024-06-25 | A maliciously crafted SLDDRW file, when parsed in ODXSW_DLL.dll through Autodesk applications, can force an Out-of-Bound Read. A malicious actor can leverage t… |
CVE-2024-23145 | High | 7.8 | 2024-06-25 | A maliciously crafted PRT file, when parsed in opennurbs.dll through Autodesk applications, can force an Out-of-Bound Read. A malicious actor can leverage this… |
CVE-2024-23143 | High | 7.8 | 2024-06-25 | A maliciously crafted 3DM, MODEL and X_B file, when parsed in ASMkern229A.dll and ASMBASE229A.dll through Autodesk applications, can force an Out-of-Bound Read… |
CVE-2024-23140 | High | 7.8 | 2024-06-25 | A maliciously crafted 3DM and MODEL file, when parsed in opennurbs.dll and atf_api.dll through Autodesk applications, can force an Out-of-Bound Read. A malicio… |
CVE-2024-38373 | Critical | 9.6 | 2024-06-24 | FreeRTOS-Plus-TCP is a lightweight TCP/IP stack for FreeRTOS. FreeRTOS-Plus-TCP versions 4.0.0 through 4.1.0 contain a buffer over-read issue in the DNS Respon… |
CVE-2024-39277 | High | 7.8 | 2024-06-21 | In the Linux kernel, the following vulnerability has been resolved: dma-mapping: benchmark: handle NUMA_NO_NODE correctly cpumask_of_node() can be called for… |
CVE-2024-36477 | High | 7.8 | 2024-06-21 | In the Linux kernel, the following vulnerability has been resolved: tpm_tis_spi: Account for SPI header when allocating TPM SPI xfer buffer The TPM SPI trans… |
CVE-2024-34777 | High | 7.1 | 2024-06-21 | In the Linux kernel, the following vulnerability has been resolved: dma-mapping: benchmark: fix node id validation While validating node ids in map_benchmark… |
CVE-2024-38635 | High | 7.8 | 2024-06-21 | In the Linux kernel, the following vulnerability has been resolved: soundwire: cadence: fix invalid PDI offset For some reason, we add an offset to the PDI… |
CVE-2022-48739 | High | 7.1 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: ASoC: hdmi-codec: Fix OOB memory accesses Correct size of iec_status array by changing it… |
CVE-2022-48738 | High | 7.1 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: ASoC: ops: Reject out of bounds values in snd_soc_put_volsw() We don't currently validate… |
CVE-2022-48714 | High | 7.1 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: bpf: Use VM_MAP instead of VM_ALLOC for ringbuf After commit 2fd3fb0be1d1 ("kasan, vmallo… |
CVE-2021-47620 | High | 8.1 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: refactor malicious adv data check Check for out-of-bound read was being perfor… |
CVE-2024-6102 | High | 8.8 | 2024-06-20 | Out of bounds memory access in Dawn in Google Chrome prior to 126.0.6478.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTM… |
CVE-2021-47604 | High | 7.1 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: vduse: check that offset is within bounds in get_config() This condition checks "len" but… |
CVE-2021-47586 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: net: stmmac: dwmac-rk: fix oob read in rk_gmac_setup KASAN reports an out-of-bounds read… |
CVE-2024-38606 | High | 7.1 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: crypto: qat - validate slices count returned by FW The function adf_send_admin_tl_start()… |
CVE-2024-38599 | High | 7.8 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: jffs2: prevent xattr node from overflowing the eraseblock Add a check to make sure that t… |
CVE-2024-38585 | High | 7.1 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: tools/nolibc/stdlib: fix memory error in realloc() Pass user_p_len to memcpy() instead of… |
CVE-2024-38572 | High | 7.8 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix out-of-bound access of qmi_invoke_handler() Currently, there is no term… |
CVE-2024-38560 | High | 7.1 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: scsi: bfa: Ensure the copied buf is NUL terminated Currently, we allocate a nbytes-sized… |
CVE-2024-37795 | High | 7.5 | 2024-06-17 | A segmentation fault in CVC5 Solver v1.1.3 allows attackers to cause a Denial of Service (DoS) via a crafted SMT-LIB input file containing the `set-logic` comm… |
CVE-2024-36502 | High | 7.9 | 2024-06-14 | Out-of-bounds read vulnerability in the audio module Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2024-32920 | High | 7.1 | 2024-06-13 | In set_secure_reg of sac_handler.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure of 4… |
CVE-2024-32915 | Medium | 4.3 | 2024-06-13 | In CellInfoListParserV2::FillCellInfo() of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to loc… |
CVE-2024-32914 | Medium | 5.5 | 2024-06-13 | In tpu_get_int_state of tpu.c, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with no ad… |
CVE-2024-32904 | Medium | 4.7 | 2024-06-13 | In ProtocolVsimOperationAdapter() of protocolvsimadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local in… |
CVE-2024-32898 | Medium | 4.7 | 2024-06-13 | In ProtocolCellIdentityParserV4::Parse() of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to lo… |
CVE-2024-32897 | Medium | 5.9 | 2024-06-13 | In ProtocolCdmaCallWaitingIndAdapter::GetCwInfo() of protocolsmsadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could l… |
CVE-2024-32894 | High | 7.5 | 2024-06-13 | In bc_get_converted_received_bearer of bc_utilities.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informat… |
CVE-2024-32893 | Medium | 5.5 | 2024-06-13 | In _s5e9865_mif_set_rate of exynos_dvfs.c, there is a possible out of bounds read due to improper casting. This could lead to local information disclosure with… |
CVE-2024-29781 | High | 7.5 | 2024-06-13 | In ss_AnalyzeOssReturnResUssdArgIe of ss_OssAsnManagement.c, there is a possible out of bounds read due to improper input validation. This could lead to remote… |
CVE-2024-29778 | Medium | 4.7 | 2024-06-13 | In ProtocolPsDedicatedBearInfoAdapter::processQosSession of protocolpsadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This c… |
CVE-2024-37877 | Medium | 5.5 | 2024-06-13 | UERANSIM before 3.2.6 allows out-of-bounds read when a RLS packet is sent to gNodeB with malformed PDU length. This occurs in function readOctetString in src/u… |
CVE-2024-20753 | High | 7.8 | 2024-06-13 | Photoshop Desktop versions 24.7.3, 25.7 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a re… |
CVE-2024-30278 | Medium | 5.5 | 2024-06-13 | Media Encoder versions 23.6.5, 24.3 and earlier Answer: are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory… |
CVE-2024-30276 | Medium | 5.5 | 2024-06-13 | Audition versions 24.2, 23.6.4 and earlier Answer: are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An at… |
CVE-2024-5560 | Medium | 5.3 | 2024-06-12 | CWE-125: Out-of-bounds Read vulnerability exists that could cause denial of service of the device’s web interface when an attacker sends a specially crafted HT… |
CVE-2024-30069 | Medium | 4.7 | 2024-06-11 | Windows Remote Access Connection Manager Information Disclosure Vulnerability |
CVE-2024-30068 | High | 8.8 | 2024-06-11 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2024-27802 | High | 7.8 | 2024-06-10 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Monter… |
CVE-2022-48578 | High | 7.1 | 2024-06-10 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.5. Processing an AppleScript may result in unexpect… |
CVE-2024-37407 | Critical | 9.1 | 2024-06-08 | Libarchive before 3.7.4 allows name out-of-bounds access when a ZIP archive has an empty-name file and mac-ext is enabled. This occurs in slurp_central_directo… |
CVE-2024-24192 | Critical | 9.1 | 2024-06-06 | robdns commit d76d2e6 was discovered to contain a heap overflow via the component block->filename at /src/zonefile-insertion.c. |
CVE-2024-5307 | Low | 3.3 | 2024-06-06 | Kofax Power PDF AcroForm Annotation Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive i… |
CVE-2024-5268 | Medium | 6.5 | 2024-06-06 | Sonos Era 100 SMB2 Message Handling Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose s… |
CVE-2024-27382 | Medium | 6.0 | 2024-06-05 | An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_send_action_frame()… |
CVE-2024-27381 | Medium | 6.0 | 2024-06-05 | An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_send_action_frame_u… |
CVE-2024-27380 | Medium | 6.0 | 2024-06-05 | An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_set_delayed_wakeup_… |
CVE-2024-27378 | Medium | 6.0 | 2024-06-05 | An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_send_action_frame_c… |
CVE-2024-5629 | Medium | 4.7 | 2024-06-05 | An out-of-bounds read in the 'bson' module of PyMongo 4.6.2 or earlier allows deserialization of malformed BSON provided by a Server to raise an exception whic… |
CVE-2024-20882 | Medium | 4.6 | 2024-06-04 | Out-of-bounds read vulnerability in bootloader prior to SMR June-2024 Release 1 allows physical attackers to arbitrary data access. |
CVE-2024-36124 | Medium | 5.3 | 2024-06-03 | iq80 Snappy is a compression/decompression library. When uncompressing certain data, Snappy tries to read outside the bounds of the given byte arrays. Because… |
CVE-2024-23363 | High | 7.5 | 2024-06-03 | Transient DOS while processing an improperly formatted Fine Time Measurement (FTM) management frame. |
CVE-2023-43555 | High | 8.2 | 2024-06-03 | Information disclosure in Video while parsing mp2 clip with invalid section length. |
CVE-2023-43537 | Medium | 6.5 | 2024-06-03 | Information disclosure while handling T2LM Action Frame in WLAN Host. |
CVE-2024-36960 | High | 7.1 | 2024-06-03 | In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix invalid reads in fence signaled events Correctly set the length of the dr… |
CVE-2024-20071 | Medium | 4.4 | 2024-06-03 | In wlan driver, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution… |
CVE-2024-5497 | High | 8.8 | 2024-05-30 | Out of bounds memory access in Browser UI in Google Chrome prior to 125.0.6422.141 allowed a remote attacker who convinced a user to engage in specific UI gest… |
CVE-2024-36935 | High | 7.1 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: ice: ensure the copied buf is NUL terminated Currently, we allocate a count-sized kernel… |
CVE-2024-36931 | High | 7.1 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: s390/cio: Ensure the copied buf is NUL terminated Currently, we allocate a lbuf-sized ker… |
CVE-2024-36916 | High | 7.1 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: blk-iocost: avoid out of bounds shift UBSAN catches undefined behavior in blk-iocost, whe… |
CVE-2024-36915 | High | 7.1 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies syzbot reported unsafe calls to copy_f… |
CVE-2024-36883 | High | 7.8 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: net: fix out-of-bounds access in ops_init net_alloc_generic is called by net_alloc, which… |
CVE-2024-36019 | High | 7.8 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: regmap: maple: Fix cache corruption in regcache_maple_drop() When keeping the upper end o… |
CVE-2024-36114 | High | 8.6 | 2024-05-29 | Aircompressor is a library with ports of the Snappy, LZO, LZ4, and Zstandard compression algorithms to Java. All decompressor implementations of Aircompressor… |
CVE-2024-36016 | High | 7.8 | 2024-05-29 | In the Linux kernel, the following vulnerability has been resolved: tty: n_gsm: fix possible out-of-bounds in gsm0_receive() Assuming the following: - side A… |
CVE-2023-43843 | High | 7.3 | 2024-05-28 | Incorrect access control in the account management function of web interface in Aten PE6208 2.3.228 and 2.4.232 allows remote authenticated users to read user… |
CVE-2024-24584 | Medium | 4.3 | 2024-05-28 | Multiple out-of-bounds read vulnerabilities exist in the readMSH functionality of libigl v2.5.0. A specially crafted .msh file can lead to an out-of-bounds rea… |
CVE-2024-24583 | Medium | 4.3 | 2024-05-28 | Multiple out-of-bounds read vulnerabilities exist in the readMSH functionality of libigl v2.5.0. A specially crafted .msh file can lead to an out-of-bounds rea… |
CVE-2024-3933 | Medium | 5.3 | 2024-05-27 | In Eclipse OpenJ9 release versions prior to 0.44.0 and after 0.13.0, when running with JVM option -Xgc:concurrentScavenge, the sequence generated for System.ar… |
CVE-2024-36054 | High | 7.4 | 2024-05-26 | Hw64.sys in Marvin Test HW.exe before 5.0.5.0 allows unprivileged user-mode processes to arbitrarily read kernel memory (and consequently gain all privileges)… |
CVE-2024-30280 | High | 7.8 | 2024-05-23 | Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could res… |
CVE-2024-5159 | High | 8.8 | 2024-05-22 | Heap buffer overflow in ANGLE in Google Chrome prior to 125.0.6422.76 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page… |
CVE-2021-47478 | Critical | 9.1 | 2024-05-22 | In the Linux kernel, the following vulnerability has been resolved: isofs: Fix out of bound access for corrupted isofs image When isofs image is suitably cor… |
CVE-2024-22273 | High | 8.1 | 2024-05-21 | The storage controllers on VMware ESXi, Workstation, and Fusion have out-of-bounds read/write vulnerability. A malicious actor with access to a virtual machine… |