CWE-125 · Out-of-bounds Read (page 32)
Page 32 of 99 — CVEs classified under CWE-125, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-47449 | Medium | 5.5 | 2024-11-12 | Audition versions 23.6.9, 24.4.6 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker… |
CVE-2024-47446 | Medium | 5.5 | 2024-11-12 | After Effects versions 23.6.9, 24.6.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An att… |
CVE-2024-47445 | Medium | 5.5 | 2024-11-12 | After Effects versions 23.6.9, 24.6.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An att… |
CVE-2024-47444 | Medium | 5.5 | 2024-11-12 | After Effects versions 23.6.9, 24.6.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An att… |
CVE-2024-45147 | Medium | 5.5 | 2024-11-12 | Bridge versions 13.0.9, 14.1.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker c… |
CVE-2024-49028 | High | 7.8 | 2024-11-12 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2024-43644 | High | 7.8 | 2024-11-12 | Windows Client-Side Caching Elevation of Privilege Vulnerability |
CVE-2024-43643 | Medium | 6.8 | 2024-11-12 | Windows USB Video Class System Driver Elevation of Privilege Vulnerability |
CVE-2024-43638 | Medium | 6.8 | 2024-11-12 | Windows USB Video Class System Driver Elevation of Privilege Vulnerability |
CVE-2024-43637 | Medium | 6.8 | 2024-11-12 | Windows USB Video Class System Driver Elevation of Privilege Vulnerability |
CVE-2024-43634 | Medium | 6.8 | 2024-11-12 | Windows USB Video Class System Driver Elevation of Privilege Vulnerability |
CVE-2024-43449 | Medium | 6.8 | 2024-11-12 | Windows USB Video Class System Driver Elevation of Privilege Vulnerability |
CVE-2024-9843 | Medium | 5.0 | 2024-11-12 | A buffer over-read in Ivanti Secure Access Client before 22.7R4 allows a local unauthenticated attacker to cause a denial of service. |
CVE-2024-49527 | Medium | 5.5 | 2024-11-12 | Animate versions 23.0.7, 24.0.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker… |
CVE-2024-50331 | High | 7.5 | 2024-11-12 | An out-of-bounds read vulnerability in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to leak sensitive information in memory. |
CVE-2024-51565 | Medium | 6.5 | 2024-11-12 | The hda driver is vulnerable to a buffer over-read from a guest-controlled value. |
CVE-2024-51562 | Medium | 6.5 | 2024-11-12 | The NVMe driver function nvme_opc_get_log_page is vulnerable to a buffer over-read from a guest-controlled value. |
CVE-2024-47941 | High | 7.8 | 2024-11-12 | A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 9). The affected applications contain an out of bounds read past the end… |
CVE-2024-47940 | High | 7.8 | 2024-11-12 | A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 9). The affected applications contain an out of bounds read past the end… |
CVE-2024-46891 | Medium | 5.3 | 2024-11-12 | A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3). The affected application does not properly restrict the size of generated… |
CVE-2024-46956 | High | 7.8 | 2024-11-10 | An issue was discovered in psi/zfile.c in Artifex Ghostscript before 10.04.0. Out-of-bounds data access in filenameforall can lead to arbitrary code execution. |
CVE-2024-46955 | Medium | 5.5 | 2024-11-10 | An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. There is an out-of-bounds read when reading color in Indexed color space. |
CVE-2024-50259 | Medium | 5.5 | 2024-11-09 | In the Linux kernel, the following vulnerability has been resolved: netdevsim: Add trailing zero to terminate the string in nsim_nexthop_bucket_activity_write… |
CVE-2024-50247 | High | 7.3 | 2024-11-09 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Check if more than chunk-size bytes are written A incorrectly formatted chunk m… |
CVE-2024-50227 | High | 7.1 | 2024-11-09 | In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Fix KASAN reported stack out-of-bounds read in tb_retimer_scan() KASAN repor… |
CVE-2024-35423 | High | 7.8 | 2024-11-08 | vmir e8117 was discovered to contain a heap buffer overflow via the wasm_parse_section_functions function at /src/vmir_wasm_parser.c. |
CVE-2024-27529 | High | 8.4 | 2024-11-08 | wasm3 139076a contains memory leaks in Read_utf8. |
CVE-2024-27528 | High | 8.4 | 2024-11-08 | wasm3 139076a suffers from Invalid Memory Read, leading to DoS and potential Code Execution. |
CVE-2024-25431 | High | 7.8 | 2024-11-08 | An issue in bytecodealliance wasm-micro-runtime before v.b3f728c and fixed in commit 06df58f allows a remote attacker to escalate privileges via a crafted file… |
CVE-2024-50208 | High | 7.8 | 2024-11-08 | In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages Avoid memory corruption while… |
CVE-2024-50158 | High | 7.8 | 2024-11-07 | In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Fix out of bound check Driver exports pacing stats only on GenP5 and P7 ada… |
CVE-2024-50128 | High | 7.8 | 2024-11-05 | In the Linux kernel, the following vulnerability has been resolved: net: wwan: fix global oob in wwan_rtnl_policy The variable wwan_rtnl_link_ops assign a *b… |
CVE-2024-50123 | High | 7.1 | 2024-11-05 | In the Linux kernel, the following vulnerability has been resolved: bpf: Add the missing BPF_LINK_TYPE invocation for sockmap There is an out-of-bounds read… |
CVE-2024-50115 | High | 8.4 | 2024-11-05 | In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory Ignore nCR3[4:0] when loading… |
CVE-2024-47402 | Low | 3.3 | 2024-11-05 | in OpenHarmony v4.0.0 and prior versions allow a local attacker cause DOS through out-of-bounds read. |
CVE-2024-38405 | High | 7.5 | 2024-11-04 | Transient DOS while processing the CU information from RNR IE. |
CVE-2024-38403 | High | 7.5 | 2024-11-04 | Transient DOS while parsing BTM ML IE when per STA profile is not included. |
CVE-2024-20124 | Medium | 4.4 | 2024-11-04 | In vdec, there is a possible out of bounds read due to improper structure design. This could lead to local information disclosure with System execution privile… |
CVE-2024-20123 | Medium | 4.4 | 2024-11-04 | In vdec, there is a possible out of bounds read due to improper structure design. This could lead to local information disclosure with System execution privile… |
CVE-2024-20122 | Medium | 4.4 | 2024-11-04 | In vdec, there is a possible out of bounds read due to improper structure design. This could lead to local information disclosure with System execution privile… |
CVE-2024-20117 | Medium | 4.4 | 2024-11-04 | In vdec, there is a possible out of bounds read due to improper structure design. This could lead to local information disclosure with System execution privile… |
CVE-2024-20112 | Medium | 4.4 | 2024-11-04 | In isp, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges neede… |
CVE-2024-20107 | Medium | 6.2 | 2024-11-04 | In da, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privi… |
CVE-2024-39720 | High | 8.2 | 2024-10-31 | An issue was discovered in Ollama before 0.1.46. An attacker can use two HTTP requests to upload a malformed GGUF file containing just 4 bytes starting with th… |
CVE-2024-9827 | High | 7.8 | 2024-10-29 | A maliciously crafted CATPART file when parsed in CC5Dll.dll through Autodesk AutoCAD can force an Out-of-Bounds Read vulnerability. A malicious actor can lev… |
CVE-2024-8589 | High | 7.8 | 2024-10-29 | A maliciously crafted SLDPRT file when parsed in odxsw_dll.dll through Autodesk AutoCAD can force a Out-of-Bounds Read vulnerability. A malicious actor can le… |
CVE-2024-8588 | High | 7.8 | 2024-10-29 | A maliciously crafted SLDPRT file when parsed in odxsw_dll.dll through Autodesk AutoCAD can force a Out-of-Bounds Read vulnerability. A malicious actor can le… |
CVE-2024-10467 | High | 8.8 | 2024-10-29 | Memory safety bugs present in Firefox 131, Firefox ESR 128.3, and Thunderbird 128.3. Some of these bugs showed evidence of memory corruption and we presume tha… |
CVE-2024-10464 | Medium | 6.5 | 2024-10-29 | Repeated writes to history interface attributes could have been used to cause a Denial of Service condition in the browser. This was addressed by introducing r… |
CVE-2024-50074 | High | 7.8 | 2024-10-29 | In the Linux kernel, the following vulnerability has been resolved: parport: Proper fix for array out-of-bounds access The recent fix for array out-of-bounds… |
CVE-2024-44283 | Medium | 5.5 | 2024-10-28 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. Parsin… |
CVE-2024-44237 | Medium | 5.5 | 2024-10-28 | An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1… |
CVE-2024-44282 | Medium | 5.5 | 2024-10-28 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, macOS Sequoi… |
CVE-2024-44281 | Medium | 5.5 | 2024-10-28 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. Parsi… |
CVE-2024-44279 | Medium | 5.5 | 2024-10-28 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. Parsi… |
CVE-2024-44236 | Medium | 5.5 | 2024-10-28 | An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1… |
CVE-2024-50612 | Medium | 5.5 | 2024-10-27 | libsndfile through 1.2.2 has an ogg_vorbis.c vorbis_analysis_wrote out-of-bounds read. |
CVE-2024-0121 | High | 7.8 | 2024-10-26 | NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular user can cause an out-of-bounds read. A su… |
CVE-2024-0120 | High | 7.8 | 2024-10-26 | NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular user can cause an out-of-bounds read. A su… |
CVE-2024-0119 | High | 7.8 | 2024-10-26 | NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular user can cause an out-of-bounds read. A su… |
CVE-2024-0118 | High | 7.8 | 2024-10-26 | NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular user can cause an out-of-bounds read. A su… |
CVE-2024-0117 | High | 7.8 | 2024-10-26 | NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular user can cause an out-of-bounds read. A su… |
CVE-2024-10387 | High | 7.5 | 2024-10-25 | CVE-2024-10387 IMPACT A Denial-of-Service vulnerability exists in the affected product. The vulnerability could allow a threat actor with network access to… |
CVE-2024-47041 | High | 7.8 | 2024-10-25 | In valid_address of syscall.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with n… |
CVE-2024-47034 | Medium | 5.5 | 2024-10-25 | there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges n… |
CVE-2024-47029 | Medium | 5.5 | 2024-10-25 | In TrustySharedMemoryManager::GetSharedMemory of ondevice/trusty/trusty_shared_memory_manager.cc, there is a possible out of bounds read due to an incorrect bo… |
CVE-2024-47028 | Medium | 4.4 | 2024-10-25 | In ffu_flash_pack of ffu.c, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System exec… |
CVE-2024-47026 | Medium | 5.5 | 2024-10-25 | In gsc_gsa_rescue of gsc_gsa.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with n… |
CVE-2024-47021 | High | 7.5 | 2024-10-25 | In sms_ExtractCbLanguage of sms_CellBroadcast.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information di… |
CVE-2024-47019 | Medium | 5.5 | 2024-10-25 | In ProtocolEmbmsSaiListAdapter::Init() of protocolembmsadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to lo… |
CVE-2024-47018 | Medium | 5.5 | 2024-10-25 | In pmucal_rae_handle_seq_int of flexpmu_cal_rae.c, there is a possible out of bounds read due to a buffer overflow. This could lead to local information disclo… |
CVE-2024-47015 | Medium | 5.5 | 2024-10-25 | In ProtocolMiscHwConfigChangeAdapter::GetData() of protocolmiscadapter.cpp, there is a possible out-of-bounds read due to a missing bounds check. This could le… |
CVE-2024-45829 | Medium | 4.9 | 2024-10-25 | Sharp and Toshiba Tec MFPs provide the web page to download data, where query parameters in HTTP requests are improperly processed and resulting in an Out-of-b… |
CVE-2024-43424 | High | 7.5 | 2024-10-25 | Sharp and Toshiba Tec MFPs improperly process HTTP request headers, resulting in an Out-of-bounds Read vulnerability. Crafted HTTP requests may cause affected… |
CVE-2024-42420 | High | 7.5 | 2024-10-25 | Sharp and Toshiba Tec MFPs contain multiple Out-of-bounds Read vulnerabilities, due to improper processing of keyword search input and improper processing of S… |
CVE-2024-48208 | High | 8.6 | 2024-10-24 | pure-ftpd before 1.0.52 is vulnerable to Buffer Overflow. There is an out of bounds read in the domlsd() function of the ls.c file. |
CVE-2024-31029 | High | 8.2 | 2024-10-22 | An issue in the server_handle_regular function of the test_coap_server.c file within the FreeCoAP project allows remote attackers to cause a Denial of Service… |
CVE-2024-50042 | High | 7.1 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: ice: Fix increasing MSI-X on VF Increasing MSI-X value on a VF leads to invalid memory op… |
CVE-2022-49032 | High | 7.1 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw KASAN report out-of-bounds… |
CVE-2022-49031 | High | 7.1 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: iio: health: afe4403: Fix oob read in afe4403_read_raw KASAN report out-of-bounds read as… |
CVE-2022-48999 | High | 7.1 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: ipv4: Handle attempt to delete multipath route when fib_info contains an nh reference Gwa… |
CVE-2022-48966 | High | 7.1 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: net: mvneta: Prevent out of bounds read in mvneta_config_rss() The pp->indir[0] value com… |
CVE-2024-49928 | High | 7.1 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: avoid reading out of bounds when loading TX power FW elements Because the lo… |
CVE-2024-47757 | High | 7.1 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential oob read in nilfs_btree_check_delete() The function nilfs_btree_che… |
CVE-2024-47723 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: jfs: fix out-of-bounds in dbNextAG() and diAlloc() In dbNextAG() , there is no check for… |
CVE-2024-47721 | High | 8.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: remove unused C2H event ID RTW89_MAC_C2H_FUNC_READ_WOW_CAM to prevent out-of-… |
CVE-2024-9143 | Medium | 4.3 | 2024-10-16 | Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted explicit values for the field polynomial can lead to out-of-bounds memory reads … |
CVE-2023-32190 | High | 7.8 | 2024-10-16 | mlocate's %post script allows RUN_UPDATEDB_AS user to make arbitrary files world readable by abusing insecure file operations that run with root privileges. |
CVE-2024-41311 | High | 8.1 | 2024-10-15 | In Libheif 1.17.6, insufficient checks in ImageOverlay::parse() decoding a heif file containing an overlay image with forged offsets can lead to an out-of-boun… |
CVE-2024-47965 | High | 7.8 | 2024-10-10 | Delta Electronics CNCSoft-G2 lacks proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can man… |
CVE-2024-48958 | High | 7.8 | 2024-10-10 | execute_filter_delta in archive_read_support_format_rar.c in libarchive before 3.7.5 allows out-of-bounds access via a crafted archive file because src can mov… |
CVE-2024-48957 | High | 7.8 | 2024-10-10 | execute_filter_audio in archive_read_support_format_rar.c in libarchive before 3.7.5 allows out-of-bounds access via a crafted archive file because src can mov… |
CVE-2024-39516 | High | 7.5 | 2024-10-09 | An Out-of-Bounds Read vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated networ… |
CVE-2024-47421 | High | 7.8 | 2024-10-09 | Adobe Framemaker versions 2020.6, 2022.4 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a r… |
CVE-2024-47420 | Medium | 5.5 | 2024-10-09 | Animate versions 23.0.7, 24.0.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker… |
CVE-2024-47419 | Medium | 5.5 | 2024-10-09 | Animate versions 23.0.7, 24.0.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker… |
CVE-2024-45145 | Medium | 5.5 | 2024-10-09 | Lightroom Desktop versions 7.4.1, 13.5, 12.5.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memor… |
CVE-2024-20787 | Medium | 5.5 | 2024-10-09 | Substance3D - Painter versions 10.0.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An att… |
CVE-2024-43565 | High | 7.5 | 2024-10-08 | Windows Network Address Translation (NAT) Denial of Service Vulnerability |
CVE-2024-43562 | High | 7.5 | 2024-10-08 | Windows Network Address Translation (NAT) Denial of Service Vulnerability |