CWE-125 · Out-of-bounds Read (page 35)
Page 35 of 99 — CVEs classified under CWE-125, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-7255 | High | 8.8 | 2024-08-01 | Out of bounds read in WebTransport in Google Chrome prior to 127.0.6533.88 allowed a remote attacker to potentially perform out of bounds memory access via a c… |
CVE-2024-38481 | Medium | 4.8 | 2024-08-01 | Dell iDRAC Service Module version 5.3.0.0 and prior, contain a Out of bound Read Vulnerability. A privileged local attacker could execute arbitrary code potent… |
CVE-2024-39379 | Medium | 5.5 | 2024-07-31 | Acrobat for Edge versions 126.0.2592.81 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An a… |
CVE-2024-7264 | Medium | 6.5 | 2024-07-31 | libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an ASN.1 Generalized Time field. If given an syntactically incorrect field, the par… |
CVE-2023-28074 | Medium | 6.2 | 2024-07-31 | Dell BSAFE Crypto-C Micro Edition, version 4.1.5, and Dell BSAFE Micro Edition Suite, versions 4.0 through 4.6.1 and version 5.0, contains an Out-of-bounds Rea… |
CVE-2024-42118 | High | 7.8 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Do not return negative stream id for array [WHY] resource_stream_to_stre… |
CVE-2024-42111 | High | 7.8 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: btrfs: always do the basic checks for btrfs_qgroup_inherit structure [BUG] Syzbot reports… |
CVE-2024-40816 | Medium | 5.5 | 2024-07-29 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. A lo… |
CVE-2024-40806 | Medium | 5.5 | 2024-07-29 | An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS… |
CVE-2024-40799 | High | 7.1 | 2024-07-29 | An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS… |
CVE-2024-40789 | Medium | 6.5 | 2024-07-29 | An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 17.6, iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadO… |
CVE-2024-40780 | Medium | 5.5 | 2024-07-29 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 17.6, iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6… |
CVE-2024-40779 | Medium | 5.5 | 2024-07-29 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 17.6, iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6… |
CVE-2024-40777 | Medium | 5.5 | 2024-07-29 | An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, visio… |
CVE-2023-42943 | Medium | 5.5 | 2024-07-29 | A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sonoma 14. An app may be able to read sensitiv… |
CVE-2024-41091 | High | 8.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: tun: add missing verification for short frame The cited commit missed to check against th… |
CVE-2024-41090 | High | 8.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: tap: add missing verification for short frame The cited commit missed to check against th… |
CVE-2024-41019 | High | 7.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Validate ff offset This adds sanity checks for ff offset. There is a check on r… |
CVE-2024-41014 | High | 7.1 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: xfs: add bounds checking to xlog_recover_process_data There is a lack of verification of… |
CVE-2024-41013 | High | 7.1 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: xfs: don't walk off the end of a directory data block This adds sanity checks for xfs_dir… |
CVE-2024-6874 | Medium | 4.3 | 2024-07-24 | libcurl's URL API function [curl_url_get()](https://curl.se/libcurl/c/curl_url_get.html) offers punycode conversions, to and from IDN. Asking to convert a name… |
CVE-2023-32471 | Medium | 6.0 | 2024-07-24 | Dell Edge Gateway BIOS, versions 3200 and 5200, contains an out-of-bounds read vulnerability. A local authenticated malicious user with high privileges could p… |
CVE-2024-4079 | High | 7.8 | 2024-07-23 | An out of bounds read due to a missing bounds check in LabVIEW may disclose information or result in arbitrary code execution. Successful exploitation require… |
CVE-2024-2884 | Medium | 6.5 | 2024-07-16 | Out of bounds read in V8 in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HT… |
CVE-2024-21164 | Low | 2.5 | 2024-07-16 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.20. Diffic… |
CVE-2024-21143 | Medium | 5.3 | 2024-07-16 | Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: User Management). Supported versions that are affected are 12.2.3-12.2.13. E… |
CVE-2024-6779 | Critical | 9.6 | 2024-07-16 | Out of bounds memory access in V8 in Google Chrome prior to 126.0.6478.182 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML… |
CVE-2022-48866 | High | 7.1 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts Syzbot reported an slab-ou… |
CVE-2022-48839 | High | 7.8 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: net/packet: fix slab-out-of-bounds access in packet_recvmsg() syzbot found that when an A… |
CVE-2022-48827 | High | 7.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix the behavior of READ near OFFSET_MAX Dan Aloni reports: > Due to commit 8cfb901… |
CVE-2022-48805 | High | 7.8 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup ax88179_rx_fixup() contain… |
CVE-2022-48803 | High | 7.3 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: phy: ti: Fix missing sentinel for clk_div_table _get_table_maxdiv() tries to access "clk_… |
CVE-2023-52886 | Medium | 6.4 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix race by not overwriting udev->descriptor in hub_port_init() Syzbot reporte… |
CVE-2024-40630 | Medium | 4.3 | 2024-07-15 | OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation via a format-agnostic API with… |
CVE-2024-40978 | High | 7.1 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: scsi: qedi: Fix crash while reading debugfs attribute The qedi_dbg_do_not_recover_cmd_rea… |
CVE-2024-40929 | High | 7.1 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: check n_ssids before accessing the ssids In some versions of cfg80211… |
CVE-2024-21524 | High | 8.2 | 2024-07-10 | All versions of the package node-stringbuilder are vulnerable to Out-of-bounds Read due to incorrect memory length calculation, by calling ToBuffer, ToString… |
CVE-2024-39882 | High | 8.8 | 2024-07-09 | Delta Electronics CNCSoft-G2 lacks proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. If a target visits… |
CVE-2024-34140 | Medium | 5.5 | 2024-07-09 | Bridge versions 14.0.4, 13.0.7, 14.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An atta… |
CVE-2023-50806 | High | 8.4 | 2024-07-09 | A vulnerability was discovered in Samsung Mobile Processor, Wearable Processor, and Modems with versions Exynos 9820, Exynos 9825, Exynos 980, Exynos 990, Exyn… |
CVE-2024-38102 | Medium | 6.5 | 2024-07-09 | Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability |
CVE-2024-38101 | Medium | 6.5 | 2024-07-09 | Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability |
CVE-2024-38073 | High | 7.5 | 2024-07-09 | Windows Remote Desktop Licensing Service Denial of Service Vulnerability |
CVE-2024-38062 | High | 7.8 | 2024-07-09 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability |
CVE-2024-38057 | High | 7.8 | 2024-07-09 | Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability |
CVE-2024-38056 | Medium | 5.5 | 2024-07-09 | Microsoft Windows Codecs Library Information Disclosure Vulnerability |
CVE-2024-38048 | Medium | 6.5 | 2024-07-09 | Windows Network Driver Interface Specification (NDIS) Denial of Service Vulnerability |
CVE-2024-38028 | High | 7.2 | 2024-07-09 | Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability |
CVE-2024-6606 | High | 8.2 | 2024-07-09 | Clipboard code failed to check the index on an array access. This could have led to an out-of-bounds read. This vulnerability affects Firefox < 128 and Thunder… |
CVE-2024-33654 | High | 7.8 | 2024-07-09 | A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out of bounds read past the end of an alloc… |
CVE-2024-33653 | High | 7.8 | 2024-07-09 | A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out of bounds read past the end of an alloc… |
CVE-2024-39487 | High | 7.1 | 2024-07-09 | In the Linux kernel, the following vulnerability has been resolved: bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() In function bond_opti… |
CVE-2024-39695 | Medium | 5.3 | 2024-07-08 | Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in E… |
CVE-2024-6505 | Medium | 6.8 | 2024-07-05 | A flaw was found in the virtio-net device in QEMU. When enabling the RSS feature on the virtio-net network card, the indirections_table data within RSS becomes… |
CVE-2023-52169 | High | 8.2 | 2024-07-03 | The NtfsHandler.cpp NTFS handler in 7-Zip before 24.01 (for 7zz) contains an out-of-bounds read that allows an attacker to read beyond the intended buffer. The… |
CVE-2024-34122 | High | 7.8 | 2024-07-02 | Acrobat for Edge versions 126.0.2592.68 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a re… |
CVE-2024-36243 | High | 8.2 | 2024-07-02 | in OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through out-of-bounds read and write. |
CVE-2024-21465 | High | 7.8 | 2024-07-01 | Memory corruption while processing key blob passed by the user. |
CVE-2024-21462 | High | 7.1 | 2024-07-01 | Transient DOS while loading the TA ELF file. |
CVE-2024-21458 | Medium | 6.5 | 2024-07-01 | Information disclosure while handling SA query action frame. |
CVE-2024-21457 | Medium | 6.5 | 2024-07-01 | INformation disclosure while handling Multi-link IE in beacon frame. |
CVE-2024-21456 | Medium | 6.5 | 2024-07-01 | Information Disclosure while parsing beacon frame in STA. |
CVE-2024-37371 | Critical | 9.1 | 2024-06-28 | In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by sending message tokens with invalid… |
CVE-2016-20022 | High | 8.4 | 2024-06-27 | In the Linux kernel before 4.8, usb_parse_endpoint in drivers/usb/core/config.c does not validate the wMaxPacketSize field of an endpoint descriptor. NOTE: Thi… |
CVE-2024-3017 | Medium | 6.5 | 2024-06-27 | In a Silicon Labs multi-protocol gateway, a corrupt pointer to buffered data on a multi-protocol radio co-processor (RCP) causes the OpenThread Border Route… |
CVE-2024-28820 | Medium | 6.3 | 2024-06-27 | Buffer overflow in the extract_openvpn_cr function in openvpn-cr.c in openvpn-auth-ldap (aka the Three Rings Auth-LDAP plugin for OpenVPN) 2.0.4 allows attacke… |
CVE-2024-5535 | Critical | 9.1 | 2024-06-27 | Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an empty supported client protocols buffer may cause a crash or memory contents to b… |
CVE-2024-39471 | High | 7.8 | 2024-06-25 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: add error handle to avoid out-of-bounds if the sdma_v4_0_irq_id_to_seq return… |
CVE-2024-39467 | High | 7.8 | 2024-06-25 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode() syzbot reports a kern… |
CVE-2024-37086 | Medium | 6.8 | 2024-06-25 | VMware ESXi contains an out-of-bounds read vulnerability. A malicious actor with local administrative privileges on a virtual machine with an existing snapsh… |
CVE-2024-37005 | High | 7.8 | 2024-06-25 | A maliciously crafted X_B file, when parsed in pskernel.DLL through Autodesk applications, can force an Out-of-Bound Read. A malicious actor can leverage this… |
CVE-2024-36999 | High | 7.8 | 2024-06-25 | A maliciously crafted 3DM file, when parsed in opennurbs.dll through Autodesk applications, can force an Out-of-Bounds Write. A malicious actor can leverage th… |
CVE-2024-23153 | High | 7.8 | 2024-06-25 | A maliciously crafted MODEL file, when parsed in libodx.dll through Autodesk applications, can force an Out-of-Bounds Read. A malicious actor can leverage this… |
CVE-2024-23152 | High | 7.8 | 2024-06-25 | A maliciously crafted 3DM file, when parsed in opennurbs.dll through Autodesk applications, can force an Out-of-Bounds Read. A malicious actor can leverage thi… |
CVE-2024-23149 | High | 7.8 | 2024-06-25 | A maliciously crafted SLDDRW file, when parsed in ODXSW_DLL.dll through Autodesk applications, can force an Out-of-Bound Read. A malicious actor can leverage t… |
CVE-2024-23145 | High | 7.8 | 2024-06-25 | A maliciously crafted PRT file, when parsed in opennurbs.dll through Autodesk applications, can force an Out-of-Bound Read. A malicious actor can leverage this… |
CVE-2024-23143 | High | 7.8 | 2024-06-25 | A maliciously crafted 3DM, MODEL and X_B file, when parsed in ASMkern229A.dll and ASMBASE229A.dll through Autodesk applications, can force an Out-of-Bound Read… |
CVE-2024-23140 | High | 7.8 | 2024-06-25 | A maliciously crafted 3DM and MODEL file, when parsed in opennurbs.dll and atf_api.dll through Autodesk applications, can force an Out-of-Bound Read. A malicio… |
CVE-2024-38373 | Critical | 9.6 | 2024-06-24 | FreeRTOS-Plus-TCP is a lightweight TCP/IP stack for FreeRTOS. FreeRTOS-Plus-TCP versions 4.0.0 through 4.1.0 contain a buffer over-read issue in the DNS Respon… |
CVE-2024-39277 | High | 7.8 | 2024-06-21 | In the Linux kernel, the following vulnerability has been resolved: dma-mapping: benchmark: handle NUMA_NO_NODE correctly cpumask_of_node() can be called for… |
CVE-2024-36477 | High | 7.8 | 2024-06-21 | In the Linux kernel, the following vulnerability has been resolved: tpm_tis_spi: Account for SPI header when allocating TPM SPI xfer buffer The TPM SPI trans… |
CVE-2024-34777 | High | 7.1 | 2024-06-21 | In the Linux kernel, the following vulnerability has been resolved: dma-mapping: benchmark: fix node id validation While validating node ids in map_benchmark… |
CVE-2024-38635 | High | 7.8 | 2024-06-21 | In the Linux kernel, the following vulnerability has been resolved: soundwire: cadence: fix invalid PDI offset For some reason, we add an offset to the PDI… |
CVE-2022-48739 | High | 7.1 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: ASoC: hdmi-codec: Fix OOB memory accesses Correct size of iec_status array by changing it… |
CVE-2022-48738 | High | 7.1 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: ASoC: ops: Reject out of bounds values in snd_soc_put_volsw() We don't currently validate… |
CVE-2022-48714 | High | 7.1 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: bpf: Use VM_MAP instead of VM_ALLOC for ringbuf After commit 2fd3fb0be1d1 ("kasan, vmallo… |
CVE-2021-47620 | High | 8.1 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: refactor malicious adv data check Check for out-of-bound read was being perfor… |
CVE-2024-6102 | High | 8.8 | 2024-06-20 | Out of bounds memory access in Dawn in Google Chrome prior to 126.0.6478.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTM… |
CVE-2021-47604 | High | 7.1 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: vduse: check that offset is within bounds in get_config() This condition checks "len" but… |
CVE-2021-47586 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: net: stmmac: dwmac-rk: fix oob read in rk_gmac_setup KASAN reports an out-of-bounds read… |
CVE-2024-38606 | High | 7.1 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: crypto: qat - validate slices count returned by FW The function adf_send_admin_tl_start()… |
CVE-2024-38599 | High | 7.8 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: jffs2: prevent xattr node from overflowing the eraseblock Add a check to make sure that t… |
CVE-2024-38585 | High | 7.1 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: tools/nolibc/stdlib: fix memory error in realloc() Pass user_p_len to memcpy() instead of… |
CVE-2024-38572 | High | 7.8 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix out-of-bound access of qmi_invoke_handler() Currently, there is no term… |
CVE-2024-38560 | High | 7.1 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: scsi: bfa: Ensure the copied buf is NUL terminated Currently, we allocate a nbytes-sized… |
CVE-2024-37795 | High | 7.5 | 2024-06-17 | A segmentation fault in CVC5 Solver v1.1.3 allows attackers to cause a Denial of Service (DoS) via a crafted SMT-LIB input file containing the `set-logic` comm… |
CVE-2024-36502 | High | 7.9 | 2024-06-14 | Out-of-bounds read vulnerability in the audio module Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2024-32920 | High | 7.1 | 2024-06-13 | In set_secure_reg of sac_handler.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure of 4… |
CVE-2024-32915 | Medium | 4.3 | 2024-06-13 | In CellInfoListParserV2::FillCellInfo() of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to loc… |
CVE-2024-32914 | Medium | 5.5 | 2024-06-13 | In tpu_get_int_state of tpu.c, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with no ad… |