CWE-125 · Out-of-bounds Read (page 37)
Page 37 of 94 — CVEs classified under CWE-125, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-47043 | High | 7.8 | 2023-11-16 | Adobe Media Encoder version 24.0.2 (and earlier) and 23.6 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which… |
CVE-2023-47040 | High | 7.8 | 2023-11-16 | Adobe Media Encoder version 24.0.2 (and earlier) and 23.6 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which… |
CVE-2023-44335 | Medium | 5.5 | 2023-11-16 | Adobe Photoshop versions 24.7.1 (and earlier) and 25.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensi… |
CVE-2023-44334 | Medium | 5.5 | 2023-11-16 | Adobe Photoshop versions 24.7.1 (and earlier) and 25.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensi… |
CVE-2023-44333 | Medium | 5.5 | 2023-11-16 | Adobe Photoshop versions 24.7.1 (and earlier) and 25.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensi… |
CVE-2023-44332 | Medium | 5.5 | 2023-11-16 | Adobe Photoshop versions 24.7.1 (and earlier) and 25.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensi… |
CVE-2023-44331 | Medium | 5.5 | 2023-11-16 | Adobe Photoshop versions 24.7.1 (and earlier) and 25.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensi… |
CVE-2023-6174 | Medium | 6.3 | 2023-11-16 | SSH dissector crash in Wireshark 4.0.0 to 4.0.10 allows denial of service via packet injection or crafted capture file |
CVE-2023-44360 | Medium | 5.5 | 2023-11-16 | Adobe Acrobat Reader versions 23.006.20360 (and earlier) and 20.005.30524 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to… |
CVE-2023-44358 | Medium | 5.5 | 2023-11-16 | Adobe Acrobat Reader versions 23.006.20360 (and earlier) and 20.005.30524 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to… |
CVE-2023-44357 | Medium | 5.5 | 2023-11-16 | Adobe Acrobat Reader versions 23.006.20360 (and earlier) and 20.005.30524 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to… |
CVE-2023-44356 | Medium | 5.5 | 2023-11-16 | Adobe Acrobat Reader versions 23.006.20360 (and earlier) and 20.005.30524 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to… |
CVE-2023-44348 | Medium | 5.5 | 2023-11-16 | Adobe Acrobat Reader versions 23.006.20360 (and earlier) and 20.005.30524 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to… |
CVE-2023-44340 | Medium | 5.5 | 2023-11-16 | Adobe Acrobat Reader versions 23.006.20360 (and earlier) and 20.005.30524 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to… |
CVE-2023-44339 | Medium | 5.5 | 2023-11-16 | Adobe Acrobat Reader versions 23.006.20360 (and earlier) and 20.005.30524 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to… |
CVE-2023-44338 | High | 7.8 | 2023-11-16 | Adobe Acrobat Reader versions 23.006.20360 (and earlier) and 20.005.30524 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a craf… |
CVE-2023-44337 | High | 7.8 | 2023-11-16 | Adobe Acrobat Reader versions 23.006.20360 (and earlier) and 20.005.30524 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a craf… |
CVE-2023-47264 | High | 7.5 | 2023-11-16 | Certain WithSecure products have a buffer over-read whereby processing certain fuzz file types may cause a denial of service (DoS). This affects WithSecure Cli… |
CVE-2023-47585 | High | 7.8 | 2023-11-15 | Out-of-bounds read vulnerability exists in V-Server V4.0.18.0 and earlier and V-Server Lite V4.0.18.0 and earlier. If a user opens a specially crafted VPR file… |
CVE-2023-47583 | High | 7.8 | 2023-11-15 | Multiple out-of-bounds read vulnerabilities exist in TELLUS Simulator V4.0.17.0 and earlier. If a user opens a specially crafted file (X1 or V9 file), informat… |
CVE-2023-47581 | High | 7.8 | 2023-11-15 | Out-of-bounds read vulnerability exists in TELLUS V4.0.17.0 and earlier and TELLUS Lite V4.0.17.0 and earlier. If a user opens a specially crafted file (X1, V8… |
CVE-2023-28404 | Low | 3.8 | 2023-11-14 | Out-of-bounds read in the Intel(R) Arc(TM) & Iris(R) Xe Graphics - WHQL - Windows drivers before version 31.0.101.4255 may allow an authenticated user to poten… |
CVE-2023-28376 | Medium | 6.5 | 2023-11-14 | Out-of-bounds read in the firmware for some Intel(R) E810 Ethernet Controllers and Adapters before version 1.7.1 may allow an unauthenticated user to potential… |
CVE-2023-25756 | Medium | 4.6 | 2023-11-14 | Out-of-bounds read in the BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via adjacent… |
CVE-2021-26345 | Low | 1.9 | 2023-11-14 | Failure to validate the value in APCB may allow a privileged attacker to tamper with the APCB token to force an out-of-bounds memory read potentially resulting… |
CVE-2023-36428 | Medium | 5.5 | 2023-11-14 | Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability |
CVE-2023-36424 | High | 7.8 | 2023-11-14 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
CVE-2023-45079 | Medium | 6.7 | 2023-11-08 | A memory leakage vulnerability was reported in the NvmramSmm SMM driver that may allow a local attacker with elevated privileges to write to NVRAM variables. |
CVE-2023-45078 | Medium | 6.7 | 2023-11-08 | A memory leakage vulnerability was reported in the DustFilterAlertSmm SMM driver that may allow a local attacker with elevated privileges to write to NVRAM var… |
CVE-2023-45077 | Medium | 6.7 | 2023-11-08 | A memory leakage vulnerability was reported in the 534D0740 DXE driver that may allow a local attacker with elevated privileges to write to NVRAM variables. |
CVE-2023-45076 | Medium | 6.7 | 2023-11-08 | A memory leakage vulnerability was reported in the 534D0140 DXE driver that may allow a local attacker with elevated privileges to write to NVRAM variables. |
CVE-2023-45075 | Medium | 6.7 | 2023-11-08 | A memory leakage vulnerability was reported in the SWSMI_Shadow DXE driver that may allow a local attacker with elevated privileges to write to NVRAM variables. |
CVE-2023-43574 | Medium | 4.4 | 2023-11-08 | A buffer over-read was reported in the LEMALLDriversConnectedEventHook module in some Lenovo Desktop products that may allow a local attacker with elevated pri… |
CVE-2023-43572 | Medium | 4.4 | 2023-11-08 | A buffer over-read was reported in the BiosExtensionLoader module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to d… |
CVE-2023-46767 | High | 7.5 | 2023-11-08 | Out-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this vulnerability may cause process exceptions. |
CVE-2023-46766 | High | 7.5 | 2023-11-08 | Out-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this vulnerability may cause process exceptions. |
CVE-2023-46762 | High | 7.5 | 2023-11-08 | Out-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this vulnerability may cause process exceptions. |
CVE-2023-5998 | High | 7.5 | 2023-11-07 | Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.3.0-DEV. |
CVE-2023-5179 | High | 7.8 | 2023-11-07 | An issue was discovered in Open Design Alliance Drawings SDK before 2024.10. A corrupted value for the start of MiniFat sector in a crafted DGN file leads to a… |
CVE-2023-47456 | Critical | 9.1 | 2023-11-07 | Tenda AX1806 V1.0.0.1 contains a stack overflow vulnerability in function sub_455D4, called by function fromSetWirelessRepeat. |
CVE-2023-42538 | Medium | 5.9 | 2023-11-07 | An improper input validation in saped_rec_silence in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write. |
CVE-2023-42537 | High | 8.4 | 2023-11-07 | An improper input validation in get_head_crc in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write. |
CVE-2023-42536 | High | 8.4 | 2023-11-07 | An improper input validation in saped_dec in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write. |
CVE-2023-33061 | High | 7.5 | 2023-11-07 | Transient DOS in WLAN Firmware while parsing WLAN beacon or probe-response frame. |
CVE-2023-33048 | High | 7.5 | 2023-11-07 | Transient DOS in WLAN Firmware while parsing t2lm buffers. |
CVE-2023-33047 | High | 7.5 | 2023-11-07 | Transient DOS in WLAN Firmware while parsing no-inherit IES. |
CVE-2023-4535 | Medium | 4.5 | 2023-11-06 | An out-of-bounds read vulnerability was found in OpenSC packages within the MyEID driver when handling symmetric key encryption. Exploiting this flaw requires… |
CVE-2023-32825 | Medium | 5.5 | 2023-11-06 | In bluethooth service, there is a possible out of bounds reads due to improper input validation. This could lead to local information disclosure with no additi… |
CVE-2023-1194 | High | 7.1 | 2023-11-03 | An out-of-bounds (OOB) memory read flaw was found in parse_lease_state in the KSMBD implementation of the in-kernel samba server and CIFS in the Linux kernel… |
CVE-2023-46724 | High | 8.6 | 2023-11-01 | Squid is a caching proxy for the Web. Due to an Improper Validation of Specified Index bug, Squid versions 3.3.0.1 through 5.9 and 6.0 prior to 6.4 compiled us… |
CVE-2023-40101 | Medium | 5.5 | 2023-10-30 | In collapse of canonicalize_md.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no… |
CVE-2023-21379 | Medium | 4.4 | 2023-10-30 | In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the Bluetooth server wit… |
CVE-2023-21372 | High | 7.8 | 2023-10-30 | In libdexfile, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with no additional execut… |
CVE-2023-21368 | Medium | 5.5 | 2023-10-30 | In Audio, there is a possible out of bounds read due to missing bounds check. This could lead to local information disclosure with no additional execution priv… |
CVE-2023-21359 | Medium | 4.4 | 2023-10-30 | In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the Bluetooth server wit… |
CVE-2023-21357 | Medium | 4.4 | 2023-10-30 | In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges… |
CVE-2023-21353 | High | 7.5 | 2023-10-30 | In NFA, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution pri… |
CVE-2023-21352 | Medium | 5.5 | 2023-10-30 | In NFA, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution priv… |
CVE-2023-21347 | High | 7.5 | 2023-10-30 | In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional executi… |
CVE-2023-21315 | Medium | 6.5 | 2023-10-30 | In Bluetooth, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote (proximal/adjacent) information disclosure with n… |
CVE-2023-21314 | Medium | 4.4 | 2023-10-30 | In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privi… |
CVE-2023-21309 | Medium | 5.5 | 2023-10-30 | In libcore, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution… |
CVE-2023-21308 | Medium | 5.5 | 2023-10-30 | In Composer, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with no additional executio… |
CVE-2023-45897 | Medium | 5.5 | 2023-10-28 | exfatprogs before 1.2.2 allows out-of-bounds memory access, such as in read_file_dentry_set. |
CVE-2023-46570 | Critical | 9.8 | 2023-10-28 | An out-of-bounds read in radare2 v.5.8.9 and before exists in the print_insn32 function of libr/arch/p/nds32/nds32-dis.h. |
CVE-2023-46569 | Critical | 9.8 | 2023-10-28 | An out-of-bounds read in radare2 v.5.8.9 and before exists in the print_insn32_fpu function of libr/arch/p/nds32/nds32-dis.h. |
CVE-2023-46407 | Medium | 5.5 | 2023-10-27 | FFmpeg prior to commit bf814 was discovered to contain an out of bounds read via the dist->alphabet_size variable in the read_vlc_prefix() function. |
CVE-2023-27854 | High | 7.8 | 2023-10-27 | An arbitrary code execution vulnerability was reported to Rockwell Automation in Arena Simulation that could potentially allow a malicious user to commit unau… |
CVE-2023-39936 | High | 7.8 | 2023-10-26 | In Ashlar-Vellum Graphite v13.0.48, the affected application lacks proper validation of user-supplied data when parsing VC6 files. This could lead to an out… |
CVE-2023-4693 | Medium | 5.3 | 2023-10-25 | An out-of-bounds read flaw was found on grub2's NTFS filesystem driver. This issue may allow a physically present attacker to present a specially crafted NTFS… |
CVE-2023-46603 | High | 8.8 | 2023-10-23 | In International Color Consortium DemoIccMAX 79ecb74, there is an out-of-bounds read in the CIccPRMG::GetChroma function in IccProfLib/IccPrmg.cpp in libSample… |
CVE-2023-46331 | Medium | 5.5 | 2023-10-23 | WebAssembly wabt 1.0.33 has an Out-of-Bound Memory Read in in DataSegment::IsValidRange(), which lead to segmentation fault. |
CVE-2023-31122 | High | 7.5 | 2023-10-23 | Out-of-bounds Read vulnerability in mod_macro of Apache HTTP Server.This issue affects Apache HTTP Server: through 2.4.57. |
CVE-2023-45682 | Medium | 5.3 | 2023-10-21 | stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of bounds read in `DECODE` macro when `var` is… |
CVE-2023-45662 | Medium | 6.5 | 2023-10-21 | stb_image is a single file MIT licensed library for processing images. When `stbi_set_flip_vertically_on_load` is set to `TRUE` and `req_comp` is set to a numb… |
CVE-2023-45661 | Medium | 6.5 | 2023-10-21 | stb_image is a single file MIT licensed library for processing images. A crafted image file may trigger out of bounds memcpy read in `stbi__gif_load_next`. Thi… |
CVE-2023-3487 | High | 7.7 | 2023-10-20 | An integer overflow in Silicon Labs Gecko Bootloader version 4.3.1 and earlier allows unbounded memory access when reading from or writing to storage slots. |
CVE-2023-34044 | High | 7.1 | 2023-10-20 | VMware Workstation( 17.x prior to 17.5) and Fusion(13.x prior to 13.5) contain an out-of-bounds read vulnerability that exists in the functionality for sharin… |
CVE-2023-5059 | High | 7.8 | 2023-10-19 | Santesoft Sante FFT Imaging lacks proper validation of user-supplied data when parsing DICOM files. This could lead to an out-of-bounds read. An attacker… |
CVE-2023-35663 | High | 7.5 | 2023-10-18 | In Init of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclo… |
CVE-2023-35656 | High | 7.5 | 2023-10-18 | In multiple functions of protocolembmsadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote inf… |
CVE-2023-22113 | Low | 2.7 | 2023-10-17 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are 8.0.33 and prior… |
CVE-2023-23581 | High | 7.5 | 2023-10-12 | A denial-of-service vulnerability exists in the vpnserver EnSafeHttpHeaderValueStr functionality of SoftEther VPN 5.01.9674 and 5.02. A specially crafted netwo… |
CVE-2023-43789 | Medium | 5.5 | 2023-10-12 | A vulnerability was found in libXpm where a vulnerability exists due to a boundary condition, a local user can trigger an out-of-bounds read error and read con… |
CVE-2023-35661 | High | 7.5 | 2023-10-11 | In ProfSixDecomTcpSACKoption of RohcPacketCommon.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informati… |
CVE-2023-35655 | Medium | 6.7 | 2023-10-11 | In CanConvertPadV2Op of darwinn_mlir_converter_aidl.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local escalati… |
CVE-2023-35654 | Medium | 6.7 | 2023-10-11 | In ctrl_roi of stmvl53l1_module.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege wi… |
CVE-2023-35652 | High | 7.5 | 2023-10-11 | In ProtocolEmergencyCallListIndAdapter::Init of protocolcalladapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead… |
CVE-2023-35648 | Critical | 9.8 | 2023-10-11 | In ProtocolMiscLceIndAdapter::GetConfLevel() of protocolmiscadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead… |
CVE-2023-35647 | Critical | 9.8 | 2023-10-11 | In ProtocolEmbmsGlobalCellIdAdapter::Init() of protocolembmsadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead… |
CVE-2023-44114 | High | 7.5 | 2023-10-11 | Out-of-bounds array vulnerability in the dataipa module.Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2023-5520 | High | 7.7 | 2023-10-11 | Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.2.2. |
CVE-2023-44103 | High | 7.5 | 2023-10-11 | Out-of-bounds read vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2023-38217 | Medium | 5.5 | 2023-10-11 | Adobe Bridge versions 12.0.4 (and earlier) and 13.0.3 (and earlier) are affected by an Out-of-bounds Read vulnerability that could lead to disclosure of sensit… |
CVE-2023-42138 | High | 7.8 | 2023-10-11 | Out-of-bounds read vulnerability exists in KV STUDIO Ver. 11.62 and earlier and KV REPLAY VIEWER Ver. 2.62 and earlier. If this vulnerability is exploited, inf… |
CVE-2023-36728 | Medium | 5.5 | 2023-10-10 | Microsoft SQL Server Denial of Service Vulnerability |
CVE-2023-36701 | High | 7.8 | 2023-10-10 | Microsoft Resilient File System (ReFS) Elevation of Privilege Vulnerability |
CVE-2023-43788 | Medium | 5.5 | 2023-10-10 | A vulnerability was found in libXpm due to a boundary condition within the XpmCreateXpmImageFromBuffer() function. This flaw allows a local attacker to trigger… |
CVE-2023-43785 | Medium | 6.5 | 2023-10-10 | A vulnerability was found in libX11 due to a boundary condition within the _XkbReadKeySyms() function. This flaw allows a local user to trigger an out-of-bound… |
CVE-2023-44087 | High | 7.8 | 2023-10-10 | A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0009), Tecnomatix Plant Simulation V2302 (All versions < V2302.0… |