CWE-125 · Out-of-bounds Read (page 36)
Page 36 of 99 — CVEs classified under CWE-125, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-32915 | Medium | 4.3 | 2024-06-13 | In CellInfoListParserV2::FillCellInfo() of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to loc… |
CVE-2024-32914 | Medium | 5.5 | 2024-06-13 | In tpu_get_int_state of tpu.c, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with no ad… |
CVE-2024-32904 | Medium | 4.7 | 2024-06-13 | In ProtocolVsimOperationAdapter() of protocolvsimadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local in… |
CVE-2024-32898 | Medium | 4.7 | 2024-06-13 | In ProtocolCellIdentityParserV4::Parse() of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to lo… |
CVE-2024-32897 | Medium | 5.9 | 2024-06-13 | In ProtocolCdmaCallWaitingIndAdapter::GetCwInfo() of protocolsmsadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could l… |
CVE-2024-32894 | High | 7.5 | 2024-06-13 | In bc_get_converted_received_bearer of bc_utilities.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informat… |
CVE-2024-32893 | Medium | 5.5 | 2024-06-13 | In _s5e9865_mif_set_rate of exynos_dvfs.c, there is a possible out of bounds read due to improper casting. This could lead to local information disclosure with… |
CVE-2024-29781 | High | 7.5 | 2024-06-13 | In ss_AnalyzeOssReturnResUssdArgIe of ss_OssAsnManagement.c, there is a possible out of bounds read due to improper input validation. This could lead to remote… |
CVE-2024-29778 | Medium | 4.7 | 2024-06-13 | In ProtocolPsDedicatedBearInfoAdapter::processQosSession of protocolpsadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This c… |
CVE-2024-37877 | Medium | 5.5 | 2024-06-13 | UERANSIM before 3.2.6 allows out-of-bounds read when a RLS packet is sent to gNodeB with malformed PDU length. This occurs in function readOctetString in src/u… |
CVE-2024-20753 | High | 7.8 | 2024-06-13 | Photoshop Desktop versions 24.7.3, 25.7 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a re… |
CVE-2024-30278 | Medium | 5.5 | 2024-06-13 | Media Encoder versions 23.6.5, 24.3 and earlier Answer: are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory… |
CVE-2024-30276 | Medium | 5.5 | 2024-06-13 | Audition versions 24.2, 23.6.4 and earlier Answer: are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An at… |
CVE-2024-5560 | Medium | 5.3 | 2024-06-12 | CWE-125: Out-of-bounds Read vulnerability exists that could cause denial of service of the device’s web interface when an attacker sends a specially crafted HT… |
CVE-2024-30069 | Medium | 4.7 | 2024-06-11 | Windows Remote Access Connection Manager Information Disclosure Vulnerability |
CVE-2024-30068 | High | 8.8 | 2024-06-11 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2024-27802 | High | 7.8 | 2024-06-10 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Monter… |
CVE-2022-48578 | High | 7.1 | 2024-06-10 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.5. Processing an AppleScript may result in unexpect… |
CVE-2024-37407 | Critical | 9.1 | 2024-06-08 | Libarchive before 3.7.4 allows name out-of-bounds access when a ZIP archive has an empty-name file and mac-ext is enabled. This occurs in slurp_central_directo… |
CVE-2024-24192 | Critical | 9.1 | 2024-06-06 | robdns commit d76d2e6 was discovered to contain a heap overflow via the component block->filename at /src/zonefile-insertion.c. |
CVE-2024-5307 | Low | 3.3 | 2024-06-06 | Kofax Power PDF AcroForm Annotation Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive i… |
CVE-2024-5268 | Medium | 6.5 | 2024-06-06 | Sonos Era 100 SMB2 Message Handling Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose s… |
CVE-2024-27382 | Medium | 6.0 | 2024-06-05 | An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_send_action_frame()… |
CVE-2024-27381 | Medium | 6.0 | 2024-06-05 | An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_send_action_frame_u… |
CVE-2024-27380 | Medium | 6.0 | 2024-06-05 | An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_set_delayed_wakeup_… |
CVE-2024-27378 | Medium | 6.0 | 2024-06-05 | An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_send_action_frame_c… |
CVE-2024-5629 | Medium | 4.7 | 2024-06-05 | An out-of-bounds read in the 'bson' module of PyMongo 4.6.2 or earlier allows deserialization of malformed BSON provided by a Server to raise an exception whic… |
CVE-2024-20882 | Medium | 4.6 | 2024-06-04 | Out-of-bounds read vulnerability in bootloader prior to SMR June-2024 Release 1 allows physical attackers to arbitrary data access. |
CVE-2024-36124 | Medium | 5.3 | 2024-06-03 | iq80 Snappy is a compression/decompression library. When uncompressing certain data, Snappy tries to read outside the bounds of the given byte arrays. Because… |
CVE-2024-23363 | High | 7.5 | 2024-06-03 | Transient DOS while processing an improperly formatted Fine Time Measurement (FTM) management frame. |
CVE-2023-43555 | High | 8.2 | 2024-06-03 | Information disclosure in Video while parsing mp2 clip with invalid section length. |
CVE-2023-43537 | Medium | 6.5 | 2024-06-03 | Information disclosure while handling T2LM Action Frame in WLAN Host. |
CVE-2024-36960 | High | 7.1 | 2024-06-03 | In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix invalid reads in fence signaled events Correctly set the length of the dr… |
CVE-2024-20071 | Medium | 4.4 | 2024-06-03 | In wlan driver, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution… |
CVE-2024-5497 | High | 8.8 | 2024-05-30 | Out of bounds memory access in Browser UI in Google Chrome prior to 125.0.6422.141 allowed a remote attacker who convinced a user to engage in specific UI gest… |
CVE-2024-36935 | High | 7.1 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: ice: ensure the copied buf is NUL terminated Currently, we allocate a count-sized kernel… |
CVE-2024-36931 | High | 7.1 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: s390/cio: Ensure the copied buf is NUL terminated Currently, we allocate a lbuf-sized ker… |
CVE-2024-36916 | High | 7.1 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: blk-iocost: avoid out of bounds shift UBSAN catches undefined behavior in blk-iocost, whe… |
CVE-2024-36915 | High | 7.1 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies syzbot reported unsafe calls to copy_f… |
CVE-2024-36883 | High | 7.8 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: net: fix out-of-bounds access in ops_init net_alloc_generic is called by net_alloc, which… |
CVE-2024-36019 | High | 7.8 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: regmap: maple: Fix cache corruption in regcache_maple_drop() When keeping the upper end o… |
CVE-2024-36114 | High | 8.6 | 2024-05-29 | Aircompressor is a library with ports of the Snappy, LZO, LZ4, and Zstandard compression algorithms to Java. All decompressor implementations of Aircompressor… |
CVE-2024-36016 | High | 7.8 | 2024-05-29 | In the Linux kernel, the following vulnerability has been resolved: tty: n_gsm: fix possible out-of-bounds in gsm0_receive() Assuming the following: - side A… |
CVE-2023-43843 | High | 7.3 | 2024-05-28 | Incorrect access control in the account management function of web interface in Aten PE6208 2.3.228 and 2.4.232 allows remote authenticated users to read user… |
CVE-2024-24584 | Medium | 4.3 | 2024-05-28 | Multiple out-of-bounds read vulnerabilities exist in the readMSH functionality of libigl v2.5.0. A specially crafted .msh file can lead to an out-of-bounds rea… |
CVE-2024-24583 | Medium | 4.3 | 2024-05-28 | Multiple out-of-bounds read vulnerabilities exist in the readMSH functionality of libigl v2.5.0. A specially crafted .msh file can lead to an out-of-bounds rea… |
CVE-2024-3933 | Medium | 5.3 | 2024-05-27 | In Eclipse OpenJ9 release versions prior to 0.44.0 and after 0.13.0, when running with JVM option -Xgc:concurrentScavenge, the sequence generated for System.ar… |
CVE-2024-36054 | High | 7.4 | 2024-05-26 | Hw64.sys in Marvin Test HW.exe before 5.0.5.0 allows unprivileged user-mode processes to arbitrarily read kernel memory (and consequently gain all privileges)… |
CVE-2024-30280 | High | 7.8 | 2024-05-23 | Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could res… |
CVE-2024-5159 | High | 8.8 | 2024-05-22 | Heap buffer overflow in ANGLE in Google Chrome prior to 125.0.6422.76 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page… |
CVE-2021-47478 | Critical | 9.1 | 2024-05-22 | In the Linux kernel, the following vulnerability has been resolved: isofs: Fix out of bound access for corrupted isofs image When isofs image is suitably cor… |
CVE-2024-22273 | High | 8.1 | 2024-05-21 | The storage controllers on VMware ESXi, Workstation, and Fusion have out-of-bounds read/write vulnerability. A malicious actor with access to a virtual machine… |
CVE-2023-52878 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of… |
CVE-2023-52866 | High | 7.1 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: HID: uclogic: Fix user-memory-access bug in uclogic_params_ugee_v2_init_event_hooks() Whe… |
CVE-2023-52827 | High | 7.7 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix possible out-of-bound read in ath12k_htt_pull_ppdu_stats() len is extra… |
CVE-2023-52794 | High | 7.1 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: thermal: intel: powerclamp: fix mismatch in get function for max_idle KASAN reported this… |
CVE-2023-52766 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: i3c: mipi-i3c-hci: Fix out of bounds access in hci_dma_irq_handler Do not loop over ring… |
CVE-2023-52731 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: fbdev: Fix invalid page access after closing deferred I/O devices When a fbdev with defer… |
CVE-2021-47393 | High | 7.1 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs F… |
CVE-2021-47390 | High | 8.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fix stack-out-of-bounds memory access from ioapic_write_indirect() KASAN report… |
CVE-2021-47383 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: tty: Fix out-of-bound vmalloc access in imageblit This issue happens when a userspace pro… |
CVE-2021-47346 | High | 7.1 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: coresight: tmc-etf: Fix global-out-of-bounds in tmc_update_etf_buffer() commit 6f755e85c3… |
CVE-2021-47309 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: net: validate lwtstate->data before returning from skb_tunnel_info() skb_tunnel_info() re… |
CVE-2021-47308 | High | 8.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: scsi: libfc: Fix array index out of bound exception Fix array index out of bound exceptio… |
CVE-2021-47300 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix tail_call_reachable rejection for interpreter when jit failed During testing of… |
CVE-2021-47291 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: ipv6: fix another slab-out-of-bounds in fib6_nh_flush_exceptions While running the self-t… |
CVE-2021-47288 | High | 7.1 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: media: ngene: Fix out-of-bounds bug in ngene_command_config_free_buf() Fix an 11-year old… |
CVE-2021-47277 | High | 7.1 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: kvm: avoid speculation-based attacks from out-of-range memslot accesses KVM's mechanism f… |
CVE-2021-47274 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: tracing: Correct the length check which causes memory corruption We've suffered from seve… |
CVE-2021-47245 | High | 8.2 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: netfilter: synproxy: Fix out of bounds when parsing TCP options The TCP option parser in… |
CVE-2021-47244 | High | 8.2 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: mptcp: Fix out of bounds when parsing TCP options The TCP option parser in mptcp (mptcp_g… |
CVE-2021-47243 | High | 7.1 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: sch_cake: Fix out of bounds when parsing TCP options and header The TCP option parser in… |
CVE-2021-47240 | High | 8.4 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: net: qrtr: fix OOB Read in qrtr_endpoint_post Syzbot reported slab-out-of-bounds Read in … |
CVE-2024-35385 | Medium | 4.3 | 2024-05-21 | An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_mk_ffi_sig function in the mjs.c file. |
CVE-2024-31714 | High | 7.5 | 2024-05-20 | Buffer Overflow vulnerability in Waxlab wax v.0.9-3 and before allows an attacker to cause a denial of service via the Lua library component. |
CVE-2024-35992 | Medium | 5.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: phy: marvell: a3700-comphy: Fix out of bounds read There is an out of bounds read access… |
CVE-2024-35967 | High | 7.1 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: Fix not validating setsockopt user input syzbot reported sco_sock_setsock… |
CVE-2024-35966 | High | 7.1 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: Fix not validating setsockopt user input syzbot reported rfcomm_sock_s… |
CVE-2024-35937 | High | 8.1 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: check A-MSDU format more carefully If it looks like there's another subfr… |
CVE-2024-35896 | High | 7.1 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: netfilter: validate user input for expected length I got multiple syzbot reports showing… |
CVE-2023-52682 | High | 7.1 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to wait on block writeback for post_read case If inode is compressed, but not e… |
CVE-2024-22384 | Low | 2.8 | 2024-05-16 | Out-of-bounds read for some Intel(R) Trace Analyzer and Collector software before version 2022.0.0 published Nov 2023 may allow an authenticated user to potent… |
CVE-2023-22656 | Low | 3.9 | 2024-05-16 | Out-of-bounds read in Intel(R) Media SDK and some Intel(R) oneVPL software before version 23.3.5 may allow an authenticated user to potentially enable escalati… |
CVE-2024-30287 | Medium | 5.5 | 2024-05-16 | Adobe Framemaker versions 2020.5, 2022.3 and earlier Answer: are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive mem… |
CVE-2024-30286 | Medium | 5.5 | 2024-05-16 | Adobe Framemaker versions 2020.5, 2022.3 and earlier Answer: are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive mem… |
CVE-2024-30283 | Medium | 5.5 | 2024-05-16 | Adobe Framemaker versions 2020.5, 2022.3 and earlier Answer: are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive mem… |
CVE-2024-30309 | Medium | 5.5 | 2024-05-16 | Substance3D - Painter versions 9.1.2 and earlier Answer: are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory… |
CVE-2024-30308 | Medium | 5.5 | 2024-05-16 | Substance3D - Painter versions 9.1.2 and earlier Answer: are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory… |
CVE-2024-30298 | Medium | 5.5 | 2024-05-16 | Animate versions 24.0.2, 23.0.5 and earlier Answer: are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An a… |
CVE-2024-30281 | Medium | 5.5 | 2024-05-16 | Substance3D - Designer versions 13.1.1 and earlier Answer: are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memor… |
CVE-2024-20793 | Medium | 5.5 | 2024-05-16 | Illustrator versions 28.4, 27.9.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacke… |
CVE-2024-20791 | High | 7.8 | 2024-05-16 | Illustrator versions 28.4, 27.9.3 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read pas… |
CVE-2024-34101 | Medium | 5.5 | 2024-05-15 | Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier Answer: are affected by an out-of-bounds read vulnerability that could lead to disclosure of sen… |
CVE-2024-30312 | Medium | 5.5 | 2024-05-15 | Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier Answer: are affected by an out-of-bounds read vulnerability that could lead to disclosure of sen… |
CVE-2024-30311 | Medium | 5.5 | 2024-05-15 | Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier Answer: are affected by an out-of-bounds read vulnerability that could lead to disclosure of sen… |
CVE-2020-26312 | High | 8.1 | 2024-05-14 | Dotmesh is a git-like command-line interface for capturing, organizing and sharing application states. In versions 0.8.1 and prior, the unsafe handling of symb… |
CVE-2024-30037 | Medium | 5.5 | 2024-05-14 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
CVE-2024-30025 | High | 7.8 | 2024-05-14 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
CVE-2024-30016 | Medium | 5.5 | 2024-05-14 | Windows Cryptographic Services Information Disclosure Vulnerability |
CVE-2024-29996 | High | 7.8 | 2024-05-14 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |