CWE-125 · Out-of-bounds Read (page 34)
Page 34 of 94 — CVEs classified under CWE-125, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-27333 | Medium | 5.5 | 2024-04-01 | Kofax Power PDF GIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive info… |
CVE-2024-27332 | Low | 3.3 | 2024-04-01 | PDF-XChange Editor JPG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive i… |
CVE-2024-27331 | Low | 3.3 | 2024-04-01 | PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive i… |
CVE-2024-27330 | Low | 3.3 | 2024-04-01 | PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive i… |
CVE-2024-27329 | Medium | 5.5 | 2024-04-01 | PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive i… |
CVE-2024-27328 | Medium | 5.5 | 2024-04-01 | PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive i… |
CVE-2024-27326 | Medium | 5.5 | 2024-04-01 | PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive i… |
CVE-2024-27325 | Medium | 5.5 | 2024-04-01 | PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive i… |
CVE-2024-27324 | Medium | 5.5 | 2024-04-01 | PDF-XChange Editor TIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive i… |
CVE-2023-33115 | High | 7.8 | 2024-04-01 | Memory corruption while processing buffer initialization, when trusted report for certain report types are generated. |
CVE-2024-20055 | Medium | 6.3 | 2024-04-01 | In imgsys, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution priv… |
CVE-2024-20045 | Low | 2.3 | 2024-04-01 | In audio, there is a possible out of bounds read due to an incorrect calculation of buffer size. This could lead to local information disclosure with System ex… |
CVE-2024-20041 | Medium | 4.4 | 2024-04-01 | In da, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges n… |
CVE-2024-30630 | Critical | 9.8 | 2024-03-29 | Tenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the time parameter from saveParentControlInfo function. |
CVE-2024-30604 | High | 7.5 | 2024-03-28 | Tenda FH1203 v2.0.1.6 has a stack overflow vulnerability in the list1 parameter of the fromDhcpListClient function. |
CVE-2024-30587 | Critical | 9.8 | 2024-03-28 | Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the urls parameter of the saveParentControlInfo function. |
CVE-2024-30596 | Critical | 9.8 | 2024-03-28 | Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the deviceId parameter of the formSetDeviceName function. |
CVE-2024-0071 | High | 7.8 | 2024-03-27 | NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular user can cause an out-of-bounds write. A s… |
CVE-2024-25392 | Medium | 5.9 | 2024-03-27 | An out-of-bounds access occurs in utilities/var_export/var_export.c in RT-Thread through 5.0.2. |
CVE-2023-52626 | High | 7.1 | 2024-03-26 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context Indirectio… |
CVE-2024-21920 | Medium | 4.4 | 2024-03-26 | A memory buffer vulnerability in Rockwell Automation Arena Simulation could potentially let a threat actor read beyond the intended memory boundaries. This… |
CVE-2021-47175 | High | 7.8 | 2024-03-25 | In the Linux kernel, the following vulnerability has been resolved: net/sched: fq_pie: fix OOB access in the traffic path the following script: # tc qdisc… |
CVE-2021-47153 | High | 7.8 | 2024-03-25 | In the Linux kernel, the following vulnerability has been resolved: i2c: i801: Don't generate an interrupt on bus reset Now that the i2c-i801 driver supports… |
CVE-2024-29943 | Critical | 9.8 | 2024-03-22 | An attacker was able to perform an out-of-bounds read or write on a JavaScript object by fooling range-based bounds check elimination. This vulnerability affec… |
CVE-2024-1848 | High | 7.8 | 2024-03-22 | Heap-based Buffer Overflow, Memory Corruption, Out-Of-Bounds Read, Out-Of-Bounds Write, Stack-based Buffer Overflow, Type Confusion, Uninitialized Variable, Us… |
CVE-2024-28756 | Medium | 5.9 | 2024-03-21 | The SolarEdge mySolarEdge application before 2.20.1 for Android has a certificate verification issue that allows a Machine-in-the-middle (MitM) attacker to rea… |
CVE-2024-27094 | Medium | 6.5 | 2024-03-21 | OpenZeppelin Contracts is a library for secure smart contract development. The `Base64.encode` function encodes a `bytes` input by iterating over it in chunks… |
CVE-2024-2626 | Medium | 6.5 | 2024-03-20 | Out of bounds read in Swiftshader in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to perform out of bounds memory access via a crafted HTML p… |
CVE-2024-28579 | Medium | 6.2 | 2024-03-20 | Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the FreeImage_Unload() f… |
CVE-2024-28578 | High | 8.4 | 2024-03-20 | Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary code via the Load() function when reading… |
CVE-2024-28571 | Medium | 5.5 | 2024-03-20 | Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the fill_input_buffer()… |
CVE-2024-20764 | Medium | 5.5 | 2024-03-18 | Animate versions 24.0, 23.0.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker co… |
CVE-2024-20763 | Medium | 5.5 | 2024-03-18 | Animate versions 24.0, 23.0.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker co… |
CVE-2024-20762 | Medium | 5.5 | 2024-03-18 | Animate versions 24.0, 23.0.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker co… |
CVE-2024-20757 | Medium | 5.5 | 2024-03-18 | Bridge versions 13.0.5, 14.0.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker c… |
CVE-2024-28537 | Critical | 9.8 | 2024-03-18 | Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the page parameter of fromNatStaticSetting function. |
CVE-2024-28640 | High | 7.5 | 2024-03-16 | Buffer Overflow vulnerability in TOTOLink X5000R V9.1.0u.6118-B20201102 and A7000R V9.1.0u.6115-B20201022 allows a remote attacker to cause a denial of service… |
CVE-2021-47126 | High | 7.8 | 2024-03-15 | In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix KASAN: slab-out-of-bounds Read in fib6_nh_flush_exceptions Reported by syzbot: … |
CVE-2024-28319 | Medium | 6.2 | 2024-03-15 | gpac 2.3-DEV-rev921-g422b78ecf-master was discovered to contain an out of boundary read vulnerability via gf_dash_setup_period media_tools/dash_client.c:6374 |
CVE-2024-0173 | Low | 3.8 | 2024-03-13 | Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper parameter initialization vulnerability. A local low privileged attacker could poten… |
CVE-2024-0154 | Low | 3.8 | 2024-03-13 | Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper parameter initialization vulnerability. A local low privileged attacker could poten… |
CVE-2024-26174 | Medium | 5.5 | 2024-03-12 | Windows Kernel Information Disclosure Vulnerability |
CVE-2024-21430 | Medium | 5.7 | 2024-03-12 | Windows USB Attached SCSI (UAS) Protocol Remote Code Execution Vulnerability |
CVE-2024-22040 | High | 7.5 | 2024-03-12 | A vulnerability has been identified in Cerberus PRO EN Engineering Tool (All versions), Cerberus PRO EN Fire Panel FC72x IP6 (All versions), Cerberus PRO EN Fi… |
CVE-2024-26003 | High | 7.5 | 2024-03-12 | An unauthenticated remote attacker can DoS the control agent due to a out-of-bounds read which may prevent or disrupt the charging functionality. |
CVE-2024-26000 | Medium | 5.9 | 2024-03-12 | An unauthenticated remote attacker can read memory out of bounds due to improper input validation in the MQTT stack. The brute force attack is not always succe… |
CVE-2024-27235 | Medium | 5.5 | 2024-03-11 | In plugin_extern_func of , there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additi… |
CVE-2024-27234 | Medium | 5.9 | 2024-03-11 | In fvp_set_target of fvp.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no addit… |
CVE-2024-27230 | Medium | 5.1 | 2024-03-11 | In ProtocolPsKeepAliveStatusAdapter::getCode() of protocolpsadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead… |
CVE-2024-27225 | Medium | 4.4 | 2024-03-11 | In sendHciCommand of bluetooth_hci.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure wi… |
CVE-2024-27223 | Medium | 5.1 | 2024-03-11 | In EUTRAN_LCS_DecodeFacilityInformationElement of LPP_LcsManagement.c, there is a possible out of bounds read due to a missing bounds check. This could lead to… |
CVE-2024-27220 | High | 8.4 | 2024-03-11 | In lpm_req_handler of , there is a possible out of bounds memory access due to a missing bounds check. This could lead to local escalation of privilege with no… |
CVE-2024-27218 | Medium | 5.5 | 2024-03-11 | In update_freq_data of , there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no addition… |
CVE-2024-27206 | High | 7.5 | 2024-03-11 | there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges… |
CVE-2024-25992 | High | 7.8 | 2024-03-11 | In tmu_tz_control of tmu.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with no addi… |
CVE-2024-25991 | Low | 3.3 | 2024-03-11 | In acpm_tmu_ipc_handler of tmu_plugin.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure… |
CVE-2024-25989 | Medium | 5.9 | 2024-03-11 | In gpu_slc_liveness_update of pixel_gpu_slc.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information discl… |
CVE-2024-25988 | High | 8.4 | 2024-03-11 | In SAEMM_DiscloseGuti of SAEMM_RadioMessageCodec.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information… |
CVE-2024-22011 | High | 7.5 | 2024-03-11 | In ss_ProcessRejectComponent of ss_MmConManagement.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informati… |
CVE-2024-22010 | Medium | 5.5 | 2024-03-11 | In dvfs_plugin_caller of fvp.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no a… |
CVE-2024-22007 | Medium | 6.2 | 2024-03-11 | In constraint_check of fvp.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no add… |
CVE-2024-22006 | Medium | 5.3 | 2024-03-11 | OOB read in the TMU plugin that allows for memory disclosure in the power management subsystem of the device. |
CVE-2024-26608 | High | 7.8 | 2024-03-11 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix global oob in ksmbd_nl_policy Similar to a reported issue (check the commit b3… |
CVE-2024-0045 | Medium | 6.5 | 2024-03-11 | In smp_proc_sec_req of smp_act.cc, there is a possible out of bounds read due to improper input validation. This could lead to remote (proximal/adjacent) infor… |
CVE-2024-23264 | Medium | 5.5 | 2024-03-08 | A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Montere… |
CVE-2024-23258 | High | 7.8 | 2024-03-08 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Sonoma 14.4, visionOS 1.1. Processing an image may lead to arb… |
CVE-2023-51395 | High | 8.8 | 2024-03-07 | The vulnerability described by CVE-2023-0972 has been additionally discovered in Silicon Labs Z-Wave end devices. This vulnerability may allow an unauthenticat… |
CVE-2023-52598 | High | 7.1 | 2024-03-06 | In the Linux kernel, the following vulnerability has been resolved: s390/ptrace: handle setting of fpc register correctly If the content of the floating poin… |
CVE-2024-26334 | Medium | 6.2 | 2024-03-05 | swftools v0.9.2 was discovered to contain a segmentation violation via the function compileSWFActionCode at swftools/lib/action/actioncompiler.c. |
CVE-2024-20836 | Low | 3.3 | 2024-03-05 | Out of bounds Read vulnerability in ssmis_get_frm in libsubextractor.so prior to SMR Mar-2024 Release 1 allows local attackers to read out of bounds memory. |
CVE-2021-47102 | High | 7.1 | 2024-03-04 | In the Linux kernel, the following vulnerability has been resolved: net: marvell: prestera: fix incorrect structure access In line: upper = info->upper_dev… |
CVE-2021-47097 | High | 7.1 | 2024-03-04 | In the Linux kernel, the following vulnerability has been resolved: Input: elantech - fix stack out of bound access in elantech_change_report_id() The array… |
CVE-2021-47083 | High | 7.1 | 2024-03-04 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: mediatek: fix global-out-of-bounds issue When eint virtual eint number is greate… |
CVE-2023-43539 | High | 7.5 | 2024-03-04 | Transient DOS while processing an improperly formatted 802.11az Fine Time Measurement protocol frame. |
CVE-2023-33090 | Medium | 5.5 | 2024-03-04 | Transient DOS while processing channel information for speaker protection v2 module in ADSP. |
CVE-2023-33078 | Medium | 5.1 | 2024-03-04 | Information Disclosure while processing IOCTL request in FastRPC. |
CVE-2023-49602 | Low | 2.9 | 2024-03-04 | in OpenHarmony v3.2.4 and prior versions allow a local attacker cause apps crash through type confusion. |
CVE-2023-25176 | Low | 2.9 | 2024-03-04 | in OpenHarmony v3.2.4 and prior versions allow a local attacker cause information leak through out-of-bounds Read. |
CVE-2024-20038 | Low | 3.4 | 2024-03-04 | In pq, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privilege… |
CVE-2024-20022 | Medium | 6.7 | 2024-03-04 | In lk, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with System execution privil… |
CVE-2023-52565 | High | 7.1 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix OOB read If the index provided by the user is bigger than the mask s… |
CVE-2023-52525 | High | 7.1 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet Only skip the code pa… |
CVE-2023-52519 | High | 7.1 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: HID: intel-ish-hid: ipc: Disable and reenable ACPI GPE bit The EHL (Elkhart Lake) based p… |
CVE-2023-52507 | High | 7.1 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: nfc: nci: assert requested protocol is valid The protocol is used in a bit mask to determ… |
CVE-2023-52504 | High | 7.1 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: x86/alternatives: Disable KASAN in apply_alternatives() Fei has reported that KASAN trigg… |
CVE-2023-52501 | High | 7.1 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Do not attempt to read past "commit" When iterating over the ring buffer whi… |
CVE-2024-1869 | High | 7.5 | 2024-03-01 | Certain HP DesignJet print products are potentially vulnerable to information disclosure related to accessing memory out-of-bounds when using the general-purpo… |
CVE-2023-7242 | High | 8.2 | 2024-03-01 | Industrial Control Systems Network Protocol Parsers (ICSNPP) - Ethercat Zeek Plugin versions d78dda6 and prior are vulnerable to out-of-bounds read during… |
CVE-2024-1453 | High | 7.8 | 2024-03-01 | In Sante DICOM Viewer Pro versions 14.0.3 and prior, a user must open a malicious DICOM file, which could allow a local attacker to disclose information or ex… |
CVE-2024-22251 | Medium | 5.9 | 2024-02-29 | VMware Workstation and Fusion contain an out-of-bounds read vulnerability in the USB CCID (chip card interface device). A malicious actor with local administra… |
CVE-2023-44346 | Medium | 5.5 | 2024-02-29 | Adobe InDesign versions ID18.5 (and earlier) and ID17.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of se… |
CVE-2023-44344 | Medium | 5.5 | 2024-02-29 | Adobe InDesign versions ID18.5 (and earlier) and ID17.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of se… |
CVE-2023-44343 | Medium | 5.5 | 2024-02-29 | Adobe InDesign versions ID18.5 (and earlier) and ID17.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of se… |
CVE-2023-44342 | Medium | 5.5 | 2024-02-29 | Adobe InDesign versions ID18.5 (and earlier) and ID17.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of se… |
CVE-2024-1847 | High | 7.8 | 2024-02-28 | Heap-based Buffer Overflow, Memory Corruption, Out-Of-Bounds Read, Out-Of-Bounds Write, Stack-based Buffer Overflow, Type Confusion, Uninitialized Variable, Us… |
CVE-2021-47044 | High | 7.7 | 2024-02-28 | In the Linux kernel, the following vulnerability has been resolved: sched/fair: Fix shift-out-of-bounds in load_balance() Syzbot reported a handful of occurr… |
CVE-2021-47039 | High | 7.1 | 2024-02-28 | In the Linux kernel, the following vulnerability has been resolved: ataflop: potential out of bounds in do_format() The function uses "type" as an array inde… |
CVE-2021-46993 | High | 7.8 | 2024-02-28 | In the Linux kernel, the following vulnerability has been resolved: sched: Fix out-of-bound access in uclamp Util-clamp places tasks in different buckets bas… |
CVE-2021-46992 | High | 7.8 | 2024-02-28 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: avoid overflows in nft_hash_buckets() Number of buckets being stored… |
CVE-2021-46980 | High | 7.1 | 2024-02-28 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Retrieve all the PDOs instead of just the first 4 commit 4dbc6a4ef06d (… |