CWE-125 · Out-of-bounds Read (page 31)
Page 31 of 94 — CVEs classified under CWE-125, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-52878 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of… |
CVE-2023-52866 | High | 7.1 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: HID: uclogic: Fix user-memory-access bug in uclogic_params_ugee_v2_init_event_hooks() Whe… |
CVE-2023-52827 | High | 7.7 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix possible out-of-bound read in ath12k_htt_pull_ppdu_stats() len is extra… |
CVE-2023-52794 | High | 7.1 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: thermal: intel: powerclamp: fix mismatch in get function for max_idle KASAN reported this… |
CVE-2023-52766 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: i3c: mipi-i3c-hci: Fix out of bounds access in hci_dma_irq_handler Do not loop over ring… |
CVE-2023-52731 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: fbdev: Fix invalid page access after closing deferred I/O devices When a fbdev with defer… |
CVE-2021-47393 | High | 7.1 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs F… |
CVE-2021-47390 | High | 8.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fix stack-out-of-bounds memory access from ioapic_write_indirect() KASAN report… |
CVE-2021-47383 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: tty: Fix out-of-bound vmalloc access in imageblit This issue happens when a userspace pro… |
CVE-2021-47346 | High | 7.1 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: coresight: tmc-etf: Fix global-out-of-bounds in tmc_update_etf_buffer() commit 6f755e85c3… |
CVE-2021-47309 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: net: validate lwtstate->data before returning from skb_tunnel_info() skb_tunnel_info() re… |
CVE-2021-47308 | High | 8.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: scsi: libfc: Fix array index out of bound exception Fix array index out of bound exceptio… |
CVE-2021-47300 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix tail_call_reachable rejection for interpreter when jit failed During testing of… |
CVE-2021-47291 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: ipv6: fix another slab-out-of-bounds in fib6_nh_flush_exceptions While running the self-t… |
CVE-2021-47288 | High | 7.1 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: media: ngene: Fix out-of-bounds bug in ngene_command_config_free_buf() Fix an 11-year old… |
CVE-2021-47277 | High | 7.1 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: kvm: avoid speculation-based attacks from out-of-range memslot accesses KVM's mechanism f… |
CVE-2021-47274 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: tracing: Correct the length check which causes memory corruption We've suffered from seve… |
CVE-2021-47245 | High | 8.2 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: netfilter: synproxy: Fix out of bounds when parsing TCP options The TCP option parser in… |
CVE-2021-47244 | High | 8.2 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: mptcp: Fix out of bounds when parsing TCP options The TCP option parser in mptcp (mptcp_g… |
CVE-2021-47243 | High | 7.1 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: sch_cake: Fix out of bounds when parsing TCP options and header The TCP option parser in… |
CVE-2021-47240 | High | 8.4 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: net: qrtr: fix OOB Read in qrtr_endpoint_post Syzbot reported slab-out-of-bounds Read in … |
CVE-2024-35385 | Medium | 4.3 | 2024-05-21 | An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_mk_ffi_sig function in the mjs.c file. |
CVE-2024-31714 | High | 7.5 | 2024-05-20 | Buffer Overflow vulnerability in Waxlab wax v.0.9-3 and before allows an attacker to cause a denial of service via the Lua library component. |
CVE-2024-35992 | Medium | 5.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: phy: marvell: a3700-comphy: Fix out of bounds read There is an out of bounds read access… |
CVE-2024-35967 | High | 7.1 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: Fix not validating setsockopt user input syzbot reported sco_sock_setsock… |
CVE-2024-35966 | High | 7.1 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: Fix not validating setsockopt user input syzbot reported rfcomm_sock_s… |
CVE-2024-35937 | High | 8.1 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: check A-MSDU format more carefully If it looks like there's another subfr… |
CVE-2024-35896 | High | 7.1 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: netfilter: validate user input for expected length I got multiple syzbot reports showing… |
CVE-2023-52682 | High | 7.1 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to wait on block writeback for post_read case If inode is compressed, but not e… |
CVE-2024-22384 | Low | 2.8 | 2024-05-16 | Out-of-bounds read for some Intel(R) Trace Analyzer and Collector software before version 2022.0.0 published Nov 2023 may allow an authenticated user to potent… |
CVE-2023-22656 | Low | 3.9 | 2024-05-16 | Out-of-bounds read in Intel(R) Media SDK and some Intel(R) oneVPL software before version 23.3.5 may allow an authenticated user to potentially enable escalati… |
CVE-2024-30287 | Medium | 5.5 | 2024-05-16 | Adobe Framemaker versions 2020.5, 2022.3 and earlier Answer: are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive mem… |
CVE-2024-30286 | Medium | 5.5 | 2024-05-16 | Adobe Framemaker versions 2020.5, 2022.3 and earlier Answer: are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive mem… |
CVE-2024-30283 | Medium | 5.5 | 2024-05-16 | Adobe Framemaker versions 2020.5, 2022.3 and earlier Answer: are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive mem… |
CVE-2024-30309 | Medium | 5.5 | 2024-05-16 | Substance3D - Painter versions 9.1.2 and earlier Answer: are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory… |
CVE-2024-30308 | Medium | 5.5 | 2024-05-16 | Substance3D - Painter versions 9.1.2 and earlier Answer: are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory… |
CVE-2024-30298 | Medium | 5.5 | 2024-05-16 | Animate versions 24.0.2, 23.0.5 and earlier Answer: are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An a… |
CVE-2024-30281 | Medium | 5.5 | 2024-05-16 | Substance3D - Designer versions 13.1.1 and earlier Answer: are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memor… |
CVE-2024-20793 | Medium | 5.5 | 2024-05-16 | Illustrator versions 28.4, 27.9.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacke… |
CVE-2024-20791 | High | 7.8 | 2024-05-16 | Illustrator versions 28.4, 27.9.3 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read pas… |
CVE-2024-34101 | Medium | 5.5 | 2024-05-15 | Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier Answer: are affected by an out-of-bounds read vulnerability that could lead to disclosure of sen… |
CVE-2024-30312 | Medium | 5.5 | 2024-05-15 | Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier Answer: are affected by an out-of-bounds read vulnerability that could lead to disclosure of sen… |
CVE-2024-30311 | Medium | 5.5 | 2024-05-15 | Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier Answer: are affected by an out-of-bounds read vulnerability that could lead to disclosure of sen… |
CVE-2020-26312 | High | 8.1 | 2024-05-14 | Dotmesh is a git-like command-line interface for capturing, organizing and sharing application states. In versions 0.8.1 and prior, the unsafe handling of symb… |
CVE-2024-30037 | Medium | 5.5 | 2024-05-14 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
CVE-2024-30025 | High | 7.8 | 2024-05-14 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
CVE-2024-30016 | Medium | 5.5 | 2024-05-14 | Windows Cryptographic Services Information Disclosure Vulnerability |
CVE-2024-29996 | High | 7.8 | 2024-05-14 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
CVE-2024-29994 | High | 7.8 | 2024-05-14 | Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability |
CVE-2024-34950 | High | 7.5 | 2024-05-14 | D-Link DIR-822+ v1.0.5 was discovered to contain a stack-based buffer overflow vulnerability in the SetNetworkTomographySettings module. |
CVE-2024-34772 | High | 7.8 | 2024-05-14 | A vulnerability has been identified in Solid Edge (All versions < V224.0 Update 4). The affected applications contain an out of bounds read past the end of an… |
CVE-2024-33493 | High | 7.8 | 2024-05-14 | A vulnerability has been identified in Solid Edge (All versions < V224.0 Update 5). The affected applications contain an out of bounds read past the end of an… |
CVE-2024-33492 | High | 7.8 | 2024-05-14 | A vulnerability has been identified in Solid Edge (All versions < V224.0 Update 5). The affected applications contain an out of bounds read past the end of an… |
CVE-2024-33491 | High | 7.8 | 2024-05-14 | A vulnerability has been identified in Solid Edge (All versions < V224.0 Update 5). The affected applications contain an out of bounds read past the end of an… |
CVE-2024-33490 | High | 7.8 | 2024-05-14 | A vulnerability has been identified in Solid Edge (All versions < V224.0 Update 5). The affected applications contain an out of bounds read past the end of an… |
CVE-2024-32636 | High | 7.8 | 2024-05-14 | A vulnerability has been identified in JT2Go (All versions < V2312.0005), Teamcenter Visualization V14.2 (All versions < V14.2.0.12), Teamcenter Visualization… |
CVE-2024-32635 | High | 7.8 | 2024-05-14 | A vulnerability has been identified in JT2Go (All versions < V2312.0005), Teamcenter Visualization V14.2 (All versions < V14.2.0.12), Teamcenter Visualization… |
CVE-2024-32066 | High | 7.8 | 2024-05-14 | A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out of bounds read past the end of an alloc… |
CVE-2024-32065 | High | 7.8 | 2024-05-14 | A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out of bounds read past the end of an alloc… |
CVE-2024-32064 | High | 7.8 | 2024-05-14 | A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out of bounds read past the end of an alloc… |
CVE-2024-32061 | High | 7.8 | 2024-05-14 | A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out of bounds read past the end of an alloc… |
CVE-2024-32060 | High | 7.8 | 2024-05-14 | A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out of bounds read past the end of an alloc… |
CVE-2024-32059 | High | 7.8 | 2024-05-14 | A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out of bounds read past the end of an alloc… |
CVE-2024-32055 | High | 7.8 | 2024-05-14 | A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out of bounds read past the end of an alloc… |
CVE-2023-46280 | Medium | 6.5 | 2024-05-14 | A vulnerability has been identified in Security Configuration Tool (SCT) (All versions), SIMATIC Automation Tool (All versions < V5.0 SP2), SIMATIC BATCH V9.1… |
CVE-2024-34974 | High | 8.2 | 2024-05-14 | Tenda AC18 v15.03.05.19 is vulnerable to Buffer Overflow in the formSetPPTPServer function via the endIp parameter. |
CVE-2024-34200 | High | 8.8 | 2024-05-14 | TOTOLINK CPE CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the setIpQosRules function. |
CVE-2024-32669 | Medium | 5.3 | 2024-05-14 | Improper Input Validation vulnerability in Samsung Open Source escargot JavaScript engine allows Overflow Buffers. However, it occurs in the test code and doe… |
CVE-2024-32622 | Critical | 9.1 | 2024-05-14 | HDF5 Library through 1.14.3 contains a out-of-bounds read operation in H5FL_arr_malloc in H5FL.c (called from H5S_set_extent_simple in H5S.c). |
CVE-2024-32614 | High | 8.8 | 2024-05-14 | HDF5 Library through 1.14.3 has a SEGV in H5VM_memcpyvv in H5VM.c. |
CVE-2024-32607 | Medium | 5.7 | 2024-05-14 | HDF5 Library through 1.14.3 has a SEGV in H5A__close in H5Aint.c, resulting in the corruption of the instruction pointer. |
CVE-2024-29857 | High | 7.5 | 2024-05-14 | An issue was discovered in ECCurve.java and ECCurve.cs in Bouncy Castle Java (BC Java) before 1.78, BC Java LTS before 2.73.6, BC-FJA before 1.0.2.5, and BC C#… |
CVE-2024-27282 | Medium | 6.6 | 2024-05-14 | An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the Ruby regex compiler, it is possible to extract arbitrary heap d… |
CVE-2024-34244 | High | 7.5 | 2024-05-08 | libmodbus v3.1.10 is vulnerable to Buffer Overflow via the modbus_write_bits function. This issue can be triggered when the function is fed with specially craf… |
CVE-2022-43656 | Medium | 5.5 | 2024-05-07 | Bentley View FBX File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive informa… |
CVE-2021-34950 | High | 7.8 | 2024-05-07 | Foxit PDF Reader Annotation Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on aff… |
CVE-2021-34949 | Medium | 5.5 | 2024-05-07 | Foxit PDF Reader Annotation Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive informati… |
CVE-2024-33781 | High | 7.5 | 2024-05-07 | MP-SPDZ v0.3.8 was discovered to contain a stack overflow via the function octetStream::get_bytes in /Tools/octetStream.cpp. This vulnerability allows attacker… |
CVE-2024-23808 | Medium | 5.2 | 2024-05-07 | in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free or cause DOS through NULL… |
CVE-2024-34251 | High | 7.5 | 2024-05-06 | An out-of-bound memory read vulnerability was discovered in Bytecode Alliance wasm-micro-runtime v2.0.0 which allows a remote attacker to cause a denial of ser… |
CVE-2024-34246 | High | 7.5 | 2024-05-06 | wasm3 v0.5.0 was discovered to contain an out-of-bound memory read which leads to segmentation fault via the function "main" in wasm3/platforms/app/main.c. |
CVE-2024-21477 | High | 7.5 | 2024-05-06 | Transient DOS while parsing a protected 802.11az Fine Time Measurement (FTM) frame. |
CVE-2023-43528 | Medium | 6.1 | 2024-05-06 | Information disclosure when the ADSP payload size received in HLOS in response to Audio Stream Manager matrix session is less than this expected size. |
CVE-2023-43527 | Medium | 6.8 | 2024-05-06 | Information disclosure while parsing dts header atom in Video. |
CVE-2024-20058 | Medium | 4.4 | 2024-05-06 | In keyInstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution priv… |
CVE-2022-48701 | High | 7.1 | 2024-05-03 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface() There may… |
CVE-2022-48687 | Medium | 5.5 | 2024-05-03 | In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix out-of-bounds read when setting HMAC data. The SRv6 layer allows defining H… |
CVE-2024-23912 | Medium | 4.0 | 2024-05-03 | Out-of-bounds Read vulnerability in Merge DICOM Toolkit C/C++ on Windows. When MC_Open_File() function is used to read a malformed DICOM data, it might result… |
CVE-2023-51611 | Medium | 5.5 | 2024-05-03 | Kofax Power PDF JP2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive info… |
CVE-2023-51609 | Medium | 5.5 | 2024-05-03 | Kofax Power PDF JP2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive info… |
CVE-2023-51607 | Medium | 5.5 | 2024-05-03 | Kofax Power PDF PNG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive info… |
CVE-2023-51606 | High | 7.8 | 2024-05-03 | Kofax Power PDF U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code o… |
CVE-2023-51594 | Medium | 5.7 | 2024-05-03 | BlueZ OBEX Library Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive informat… |
CVE-2023-51592 | Medium | 5.7 | 2024-05-03 | BlueZ Audio Profile AVRCP parse_media_folder Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to d… |
CVE-2023-51589 | Medium | 5.7 | 2024-05-03 | BlueZ Audio Profile AVRCP parse_media_element Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to… |
CVE-2023-51580 | Medium | 5.7 | 2024-05-03 | BlueZ Audio Profile AVRCP avrcp_parse_attribute_list Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attack… |
CVE-2023-51567 | Medium | 5.5 | 2024-05-03 | Kofax Power PDF OXPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive inf… |
CVE-2023-51564 | Medium | 5.5 | 2024-05-03 | Kofax Power PDF PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive info… |
CVE-2023-51562 | Low | 3.3 | 2024-05-03 | Foxit PDF Reader AcroForm Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information… |
CVE-2023-51561 | Medium | 5.5 | 2024-05-03 | Foxit PDF Reader PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive inf… |