CWE-125 · Out-of-bounds Read (page 34)
Page 34 of 99 — CVEs classified under CWE-125, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-27366 | Medium | 4.4 | 2024-09-09 | An issue was discovered in Samsung Mobile Processor, Wearable Processor Exynos Exynos 980, Exynos 850, Exynos 1080, Exynos 1280, Exynos 1380, Exynos 1330, Exyn… |
CVE-2024-27364 | Medium | 4.4 | 2024-09-09 | An issue was discovered in Mobile Processor, Wearable Processor Exynos 980, Exynos 850, Exynos 1080, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 1480, Exynos… |
CVE-2024-43110 | High | 8.8 | 2024-09-05 | The ctl_request_sense function could expose up to three bytes of the kernel heap to userspace. Malicious software running in a guest VM that exposes virtio_sc… |
CVE-2024-41928 | High | 8.4 | 2024-09-05 | Malicious software running in a guest VM can exploit the buffer overflow to achieve code execution on the host in the bhyve userspace process, which typically… |
CVE-2024-20505 | Medium | 4.0 | 2024-09-04 | A vulnerability in the PDF parsing module of Clam AntiVirus (ClamAV) versions 1.4.0, 1.3.2 and prior versions, all 1.2.x versions, 1.0.6 and prior versions, al… |
CVE-2024-44993 | High | 7.1 | 2024-09-04 | In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Fix out-of-bounds read in `v3d_csd_job_run()` When enabling UBSAN on Raspberry P… |
CVE-2024-34658 | Medium | 4.0 | 2024-09-04 | Out-of-bounds read in Samsung Notes allows local attackers to bypass ASLR. |
CVE-2024-33057 | High | 7.5 | 2024-09-02 | Transient DOS while parsing the multi-link element Control field when common information length check is missing before updating the location. |
CVE-2024-33051 | High | 7.5 | 2024-09-02 | Transient DOS while processing TIM IE from beacon frame as there is no check for IE length. |
CVE-2024-33050 | High | 7.5 | 2024-09-02 | Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper. |
CVE-2024-33048 | High | 7.5 | 2024-09-02 | Transient DOS while parsing the received TID-to-link mapping element of beacon/probe response frame. |
CVE-2024-33047 | High | 8.4 | 2024-09-02 | Memory corruption when the captureRead QDCM command is invoked from user-space. |
CVE-2024-33043 | Medium | 5.5 | 2024-09-02 | Transient DOS while handling PS event when Program Service name length offset value is set to 255. |
CVE-2024-39775 | Medium | 6.5 | 2024-09-02 | in OpenHarmony v4.1.0 and prior versions allow a remote attacker cause information leak through out-of-bounds Read. |
CVE-2024-39612 | Medium | 5.5 | 2024-09-02 | in OpenHarmony v4.0.0 and prior versions allow a local attacker cause information leak through out-of-bounds Read. |
CVE-2024-38382 | Medium | 5.5 | 2024-09-02 | in OpenHarmony v4.0.0 and prior versions allow a local attacker cause information leak through out-of-bounds Read. |
CVE-2024-20088 | Medium | 4.4 | 2024-09-02 | In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution priv… |
CVE-2024-20085 | Medium | 4.4 | 2024-09-02 | In power, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privilege… |
CVE-2024-20084 | Medium | 4.4 | 2024-09-02 | In power, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privilege… |
CVE-2024-0109 | Low | 3.3 | 2024-08-31 | NVIDIA CUDA Toolkit contains a vulnerability in command `cuobjdump` where a user may cause a crash by passing in a malformed ELF file. A successful exploit of… |
CVE-2024-5991 | High | 7.5 | 2024-08-27 | In function MatchDomainName(), input param str is treated as a NULL terminated string despite being user provided and unchecked. Specifically, the function X50… |
CVE-2024-38210 | High | 7.8 | 2024-08-22 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
CVE-2022-48932 | High | 7.8 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: DR, Fix slab-out-of-bounds in mlx5_cmd_dr_create_fte When adding a rule with 32… |
CVE-2022-48929 | Medium | 5.5 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix crash due to out of bounds access into reg2btf_ids. When commit e6ac2450d6de ("b… |
CVE-2024-7966 | High | 8.8 | 2024-08-21 | Out of bounds memory access in Skia in Google Chrome prior to 128.0.6613.84 allowed a remote attacker who had compromised the renderer process to perform out o… |
CVE-2022-48871 | High | 8.8 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer Driver's probe al… |
CVE-2024-43878 | High | 8.1 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: xfrm: Fix input error path memory access When there is a misconfiguration of input state… |
CVE-2024-43877 | High | 7.8 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: media: pci: ivtv: Add check for DMA map result In case DMA fails, 'dma->SG_length' is 0… |
CVE-2024-42305 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: ext4: check dot and dotdot of dx_root before making dir indexed Syzbot reports a issue as… |
CVE-2024-42293 | High | 7.8 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: arm64: mm: Fix lockless walks with static and dynamic page-table folding Lina reports ran… |
CVE-2024-42292 | High | 7.1 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: kobject_uevent: Fix OOB access within zap_modalias_env() zap_modalias_env() wrongly calcu… |
CVE-2024-42264 | High | 7.8 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Prevent out of bounds access in performance query extensions Check that the numb… |
CVE-2024-7347 | Medium | 4.7 | 2024-08-14 | NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_mp4_module, which might allow an attacker to over-read NGINX worker memory resulting in i… |
CVE-2024-41854 | Medium | 5.5 | 2024-08-14 | InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. A… |
CVE-2024-41835 | Medium | 5.5 | 2024-08-14 | Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by an out-of-bounds read vulnerability that could lead… |
CVE-2024-41834 | Medium | 5.5 | 2024-08-14 | Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by an out-of-bounds read vulnerability that could lead… |
CVE-2024-41833 | Medium | 5.5 | 2024-08-14 | Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by an out-of-bounds read vulnerability that could lead… |
CVE-2024-41832 | Medium | 5.5 | 2024-08-14 | Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by an out-of-bounds read vulnerability that could lead… |
CVE-2024-39426 | High | 7.8 | 2024-08-14 | Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by an out-of-bounds read vulnerability when parsing a c… |
CVE-2024-39393 | High | 7.8 | 2024-08-14 | InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a… |
CVE-2024-39387 | Medium | 5.5 | 2024-08-14 | Bridge versions 13.0.8, 14.1.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker c… |
CVE-2024-34135 | Medium | 5.5 | 2024-08-14 | Illustrator versions 28.5, 27.9.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacke… |
CVE-2024-34134 | Medium | 5.5 | 2024-08-14 | Illustrator versions 28.5, 27.9.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacke… |
CVE-2024-34127 | Medium | 5.5 | 2024-08-14 | InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. A… |
CVE-2024-34126 | Medium | 5.5 | 2024-08-14 | Dimension versions 3.4.11 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could… |
CVE-2024-34125 | Medium | 5.5 | 2024-08-14 | Dimension versions 3.4.11 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could… |
CVE-2024-20790 | Medium | 5.5 | 2024-08-14 | Dimension versions 3.4.11 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could… |
CVE-2023-49144 | Medium | 6.7 | 2024-08-14 | Out of bounds read in OpenBMC Firmware for some Intel(R) Server Platforms before versions egs-1.15-0, bhs-0.27 may allow a privileged user to potentially enabl… |
CVE-2024-41863 | Medium | 5.5 | 2024-08-14 | Substance3D - Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attack… |
CVE-2024-41862 | Medium | 5.5 | 2024-08-14 | Substance3D - Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attack… |
CVE-2024-41861 | Medium | 5.5 | 2024-08-14 | Substance3D - Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attack… |
CVE-2024-41860 | Medium | 5.5 | 2024-08-14 | Substance3D - Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attack… |
CVE-2024-38214 | Medium | 6.5 | 2024-08-13 | Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
CVE-2024-38184 | High | 7.8 | 2024-08-13 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability |
CVE-2024-38155 | Medium | 5.5 | 2024-08-13 | Security Center Broker Information Disclosure Vulnerability |
CVE-2024-38151 | Medium | 5.5 | 2024-08-13 | Windows Kernel Information Disclosure Vulnerability |
CVE-2024-38148 | High | 7.5 | 2024-08-13 | Windows Secure Channel Denial of Service Vulnerability |
CVE-2024-38134 | High | 7.8 | 2024-08-13 | Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability |
CVE-2024-38132 | High | 7.5 | 2024-08-13 | Windows Network Address Translation (NAT) Denial of Service Vulnerability |
CVE-2024-38123 | Medium | 4.4 | 2024-08-13 | Windows Bluetooth Driver Information Disclosure Vulnerability |
CVE-2024-38117 | High | 7.8 | 2024-08-13 | NTFS Elevation of Privilege Vulnerability |
CVE-2023-31339 | Medium | 4.8 | 2024-08-13 | Improper input validation in ARM® Trusted Firmware used in AMD’s Zynq™ UltraScale+™) MPSoC/RFSoC may allow a privileged attacker to perform out of bound reads… |
CVE-2023-20509 | Medium | 5.2 | 2024-08-13 | An insufficient DRAM address validation in PMFW may allow a privileged attacker to perform a DMA read from an invalid DRAM address to SRAM, potentially resulti… |
CVE-2021-46772 | Low | 3.9 | 2024-08-13 | Insufficient input validation in the ABL may allow a privileged attacker with access to the BIOS menu or UEFI shell to tamper with the structure headers in SPI… |
CVE-2024-41908 | High | 7.8 | 2024-08-13 | A vulnerability has been identified in NX (All versions < V2406.3000). The affected applications contains an out of bounds read vulnerability while parsing spe… |
CVE-2023-7066 | High | 7.8 | 2024-08-12 | The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PDF files. This could allow an… |
CVE-2024-42478 | Medium | 5.3 | 2024-08-12 | llama.cpp provides LLM inference in C/C++. The unsafe `data` pointer member in the `rpc_tensor` structure can cause arbitrary address reading. This vulnerabili… |
CVE-2024-42477 | Medium | 5.3 | 2024-08-12 | llama.cpp provides LLM inference in C/C++. The unsafe `type` member in the `rpc_tensor` structure can cause `global-buffer-overflow`. This vulnerability may le… |
CVE-2024-0107 | High | 7.8 | 2024-08-08 | NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular user can cause an out-of-bounds read. A su… |
CVE-2024-0102 | Low | 3.3 | 2024-08-08 | NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvdisasm, where an attacker can cause an out-of-bounds read issue by deceiving a user into re… |
CVE-2024-34635 | Medium | 4.0 | 2024-08-07 | Out-of-bounds read in parsing textbox object in Samsung Notes prior to version 4.4.21.62 allows local attacker to access unauthorized memory. |
CVE-2024-34634 | Medium | 4.0 | 2024-08-07 | Out-of-bounds read in parsing connected object list in Samsung Notes prior to version 4.4.21.62 allows local attacker to access unauthorized memory. |
CVE-2024-34633 | Medium | 4.0 | 2024-08-07 | Out-of-bounds read in parsing object header in Samsung Notes prior to version 4.4.21.62 allows local attacker to access unauthorized memory. |
CVE-2024-34632 | Medium | 4.0 | 2024-08-07 | Out-of-bounds read in uuid parsing in Samsung Notes prior to version 4.4.21.62 allows local attacker to access unauthorized memory. |
CVE-2024-34631 | Medium | 5.5 | 2024-08-07 | Out-of-bounds read in applying new binary in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory. |
CVE-2024-34630 | Medium | 5.5 | 2024-08-07 | Out-of-bounds read in applying own binary with textbox in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory. |
CVE-2024-34629 | Medium | 5.5 | 2024-08-07 | Out-of-bounds read in applying binary with text common object in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory. |
CVE-2024-34628 | Medium | 5.5 | 2024-08-07 | Out-of-bounds read in applying binary with path in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory. |
CVE-2024-34627 | Medium | 5.5 | 2024-08-07 | Out-of-bounds read in parsing implemention in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory. |
CVE-2024-34626 | Medium | 5.5 | 2024-08-07 | Out-of-bounds read in applying own binary in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory. |
CVE-2024-34625 | Medium | 5.5 | 2024-08-07 | Out-of-bounds read in applying connection point in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory. |
CVE-2024-34624 | Medium | 5.5 | 2024-08-07 | Out-of-bounds read in applying paragraphs in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory. |
CVE-2024-34621 | Medium | 5.5 | 2024-08-07 | Out-of-bounds read in applying binary with data in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory. |
CVE-2024-7522 | High | 8.8 | 2024-08-06 | Editor code failed to check an attribute value. This could have led to an out-of-bounds read. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, F… |
CVE-2024-7537 | Medium | 5.5 | 2024-08-06 | oFono QMI SMS Handling Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive information on… |
CVE-2024-33026 | High | 7.5 | 2024-08-05 | Transient DOS while parsing probe response and assoc response frame when received frame length is less than max size of timestamp. |
CVE-2024-33025 | High | 7.5 | 2024-08-05 | Transient DOS while parsing the BSS parameter change count or MLD capabilities fields of the ML IE. |
CVE-2024-33020 | High | 7.5 | 2024-08-05 | Transient DOS while processing TID-to-link mapping IE elements. |
CVE-2024-33019 | High | 7.5 | 2024-08-05 | Transient DOS while parsing the received TID-to-link mapping action frame. |
CVE-2024-33018 | High | 7.5 | 2024-08-05 | Transient DOS while parsing the received TID-to-link mapping element of the TID-to-link mapping action frame. |
CVE-2024-33015 | High | 7.5 | 2024-08-05 | Transient DOS while parsing SCAN RNR IE when bytes received from AP is such that the size of the last param of IE is less than neighbor report. |
CVE-2024-33014 | High | 7.5 | 2024-08-05 | Transient DOS while parsing ESP IE from beacon/probe response frame. |
CVE-2024-33013 | High | 7.5 | 2024-08-05 | Transient DOS when driver accesses the ML IE memory and offset value is incremented beyond ML IE length. |
CVE-2024-33012 | High | 7.5 | 2024-08-05 | Transient DOS while parsing the multiple MBSSID IEs from the beacon, when the tag length is non-zero value but with end of beacon. |
CVE-2024-33011 | High | 7.5 | 2024-08-05 | Transient DOS while parsing the MBSSID IE from the beacons, when the MBSSID IE length is zero. |
CVE-2024-23353 | High | 7.5 | 2024-08-05 | Transient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI. |
CVE-2024-21479 | High | 7.5 | 2024-08-05 | Transient DOS during music playback of ALAC content. |
CVE-2024-21467 | Medium | 6.5 | 2024-08-05 | Information disclosure while handling beacon probe frame during scan entry generation in client side. |
CVE-2024-21459 | Medium | 6.5 | 2024-08-05 | Information disclosure while handling beacon or probe response frame in STA. |
CVE-2024-39396 | Medium | 5.5 | 2024-08-02 | InDesign Desktop versions ID18.5.2, ID19.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. A… |