CWE-125 · Out-of-bounds Read (page 38)
Page 38 of 99 — CVEs classified under CWE-125, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-40473 | Medium | 5.5 | 2024-05-03 | PDF-XChange Editor Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive informa… |
CVE-2023-40470 | Medium | 5.5 | 2024-05-03 | PDF-XChange Editor JP2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive i… |
CVE-2023-40469 | Medium | 5.5 | 2024-05-03 | PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive i… |
CVE-2023-40468 | Medium | 5.5 | 2024-05-03 | PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive i… |
CVE-2023-39504 | Medium | 5.5 | 2024-05-03 | PDF-XChange Editor OXPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive… |
CVE-2023-39503 | Medium | 5.5 | 2024-05-03 | PDF-XChange Editor OXPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive… |
CVE-2023-39496 | High | 7.8 | 2024-05-03 | PDF-XChange Editor TIF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary cod… |
CVE-2023-39487 | Medium | 5.5 | 2024-05-03 | PDF-XChange Editor util Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information o… |
CVE-2023-39483 | Medium | 5.5 | 2024-05-03 | PDF-XChange Editor J2K File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive i… |
CVE-2023-38119 | High | 7.8 | 2024-05-03 | Foxit PDF Reader AcroForm signature Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary cod… |
CVE-2023-38116 | Low | 3.3 | 2024-05-03 | Foxit PDF Reader Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive informati… |
CVE-2023-38115 | Low | 3.3 | 2024-05-03 | Foxit PDF Reader AcroForm Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information… |
CVE-2023-38110 | Low | 3.3 | 2024-05-03 | Foxit PDF Reader AcroForm Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive… |
CVE-2023-38109 | Low | 3.3 | 2024-05-03 | Foxit PDF Reader Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive informati… |
CVE-2023-38108 | Low | 3.3 | 2024-05-03 | Foxit PDF Reader PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive inf… |
CVE-2023-38106 | Low | 3.3 | 2024-05-03 | Foxit PDF Reader PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive inf… |
CVE-2023-38105 | Low | 3.3 | 2024-05-03 | Foxit PDF Reader PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive inf… |
CVE-2023-38086 | Medium | 5.5 | 2024-05-03 | Kofax Power PDF PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive info… |
CVE-2023-38085 | Medium | 5.5 | 2024-05-03 | Kofax Power PDF JP2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive info… |
CVE-2023-38077 | Medium | 5.5 | 2024-05-03 | Kofax Power PDF U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive info… |
CVE-2023-37359 | Medium | 5.5 | 2024-05-03 | Kofax Power PDF U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive info… |
CVE-2023-37358 | Medium | 5.5 | 2024-05-03 | Kofax Power PDF U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive info… |
CVE-2023-37357 | Medium | 5.5 | 2024-05-03 | Kofax Power PDF PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive info… |
CVE-2023-37356 | Medium | 5.5 | 2024-05-03 | Kofax Power PDF GIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive info… |
CVE-2023-37354 | High | 7.8 | 2024-05-03 | Kofax Power PDF PNG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code o… |
CVE-2023-37353 | Medium | 5.5 | 2024-05-03 | Kofax Power PDF JPG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive info… |
CVE-2023-37352 | Medium | 5.5 | 2024-05-03 | Kofax Power PDF JPG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive info… |
CVE-2023-37351 | Medium | 5.5 | 2024-05-03 | Kofax Power PDF PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive info… |
CVE-2023-37347 | High | 7.8 | 2024-05-03 | Kofax Power PDF U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code o… |
CVE-2023-35716 | High | 7.8 | 2024-05-03 | Ashlar-Vellum Cobalt AR File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary co… |
CVE-2023-35714 | High | 7.8 | 2024-05-03 | Ashlar-Vellum Cobalt IGS File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary c… |
CVE-2023-34303 | High | 7.8 | 2024-05-03 | Ashlar-Vellum Cobalt Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected i… |
CVE-2023-27337 | High | 7.8 | 2024-05-03 | PDF-XChange Editor PDF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary cod… |
CVE-2024-30306 | High | 7.8 | 2024-05-02 | Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could res… |
CVE-2024-4059 | Medium | 6.5 | 2024-05-01 | Out of bounds read in V8 API in Google Chrome prior to 124.0.6367.78 allowed a remote attacker to leak cross-site data via a crafted HTML page. (Chromium secur… |
CVE-2024-31412 | High | 7.8 | 2024-05-01 | Out-of-bounds read vulnerability exists in CX-Programmer included in CX-One CXONE-AL[][]D-V4 Ver. 9.81 or lower. Opening a specially crafted project file may l… |
CVE-2024-27029 | High | 7.1 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix mmhub client id out-of-bounds access Properly handle cid 0x140. |
CVE-2024-27008 | High | 7.8 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: drm: nv04: Fix out of bounds access When Output Resource (dcb->or) value is assigned in f… |
CVE-2024-26991 | Medium | 5.5 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: x86: Don't overflow lpage_info when checking attributes Fix KVM_SET_MEMORY_… |
CVE-2024-26982 | High | 7.1 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: Squashfs: check the inode number is not the invalid value of zero Syskiller has produced… |
CVE-2024-26980 | High | 8.2 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slab-out-of-bounds in smb2_allocate_rsp_buf If ->ProtocolId is SMB2_TRANSFORM_… |
CVE-2024-26970 | Medium | 5.5 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays The frequency table arr… |
CVE-2024-26954 | High | 8.1 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16() If ->NameOffset of smb2_create_… |
CVE-2024-26952 | High | 8.3 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix potencial out-of-bounds when buffer offset is invalid I found potencial out-of… |
CVE-2024-33767 | Medium | 5.0 | 2024-05-01 | lunasvg v2.3.9 was discovered to contain a segmentation violation via the component composition_solid_source. |
CVE-2024-33763 | High | 7.5 | 2024-05-01 | lunasvg v2.3.9 was discovered to contain a stack-buffer-underflow at lunasvg/source/layoutcontext.cpp. |
CVE-2024-33270 | High | 7.5 | 2024-04-30 | An issue in FME Modules fileuploads v.2.0.3 and before and fixed in v2.0.4 allows a remote attacker to obtain sensitive information via the uploadfiles.php com… |
CVE-2024-34049 | High | 7.5 | 2024-04-30 | Open Networking Foundation SD-RAN Rimedo rimedo-ts 0.1.1 has a slice bounds out-of-range panic in "return plmnIdString[0:3], plmnIdString[3:]" in reader.go. |
CVE-2023-52727 | High | 8.1 | 2024-04-30 | Open Networking Foundation SD-RAN ONOS onos-lib-go 0.10.25 allows an index out-of-range condition in parseAlignBits. |
CVE-2022-48655 | High | 7.8 | 2024-04-28 | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Harden accesses to the reset domains Accessing reset domains descript… |
CVE-2022-48651 | High | 7.7 | 2024-04-28 | In the Linux kernel, the following vulnerability has been resolved: ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header If an AF_PACKET socket is u… |
CVE-2024-25569 | Medium | 6.5 | 2024-04-25 | An out-of-bounds read vulnerability exists in the RAWCodec::DecodeBytes functionality of Mathieu Malaterre Grassroot DICOM 3.0.23. A specially crafted DICOM fi… |
CVE-2024-23527 | High | 7.5 | 2024-04-25 | An out-of-bounds read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3, in certain conditions can allow an unauthenticated remote… |
CVE-2024-32662 | High | 7.5 | 2024-04-23 | FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients prior to version 3.5.1 are vulnerable to out-of-bounds read. This occurs… |
CVE-2024-32659 | Critical | 9.8 | 2024-04-23 | FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients prior to version 3.5.1 are vulnerable to out-of-bounds read if `((nWidth… |
CVE-2024-32658 | Critical | 9.8 | 2024-04-23 | FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients prior to version 3.5.1 are vulnerable to out-of-bounds read. Version 3.5… |
CVE-2024-32482 | Low | 2.2 | 2024-04-23 | The Tillitis TKey signer device application is an ed25519 signing tool. A vulnerability has been found that makes it possible to disclose portions of the TKey’… |
CVE-2024-32460 | High | 8.1 | 2024-04-22 | FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based based clients using `/bpp:32` legacy `GDI` drawing path with a version of FreeRD… |
CVE-2024-32459 | Critical | 9.8 | 2024-04-22 | FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients and servers that use a version of FreeRDP prior to 3.5.0 or 2.11.6 are v… |
CVE-2024-32458 | Critical | 9.8 | 2024-04-22 | FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients that use a version of FreeRDP prior to 3.5.0 or 2.11.6 are vulnerable to… |
CVE-2024-32041 | Critical | 9.8 | 2024-04-22 | FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients that use a version of FreeRDP prior to 3.5.0 or 2.11.6 are vulnerable to… |
CVE-2024-31584 | Medium | 5.5 | 2024-04-19 | Pytorch before v2.2.0 has an Out-of-bounds Read vulnerability via the component torch/csrc/jit/mobile/flatbuffer_loader.cpp. |
CVE-2023-51791 | High | 7.8 | 2024-04-19 | Buffer Overflow vulenrability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via the libavcodec/jpegxl_parser.c in gen_alias… |
CVE-2024-23533 | Medium | 6.5 | 2024-04-19 | An out-of-bounds read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3, in certain conditions can allow an authenticated remote a… |
CVE-2024-23532 | High | 7.5 | 2024-04-19 | An out-of-bounds Read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3 allows an authenticated remote attacker to perform denial… |
CVE-2024-23530 | High | 7.5 | 2024-04-19 | An out-of-bounds read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3, in certain conditions can allow an unauthenticated remote… |
CVE-2024-23529 | High | 7.5 | 2024-04-19 | An out-of-bounds read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3, in certain conditions can allow an unauthenticated remote… |
CVE-2024-23528 | High | 7.5 | 2024-04-19 | An out-of-bounds read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3, in certain conditions can allow an unauthenticated remote… |
CVE-2024-23526 | High | 7.5 | 2024-04-19 | An out-of-bounds read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3, in certain conditions can allow an unauthenticated remote… |
CVE-2024-32286 | Critical | 9.8 | 2024-04-17 | Tenda W30E v1.0 V1.0.1.25(633) firmware has a stack overflow vulnerability located via the page parameter in the fromVirtualSer function. |
CVE-2024-32301 | Critical | 9.8 | 2024-04-17 | Tenda AC7V1.0 v15.03.06.44 firmware has a stack overflow vulnerability via the PPW parameter in the fromWizardHandle function. |
CVE-2024-26896 | Medium | 5.5 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: wifi: wfx: fix memory leak when starting AP Kmemleak reported this error: unreferenc… |
CVE-2024-26890 | High | 7.8 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btrtl: fix out of bounds memory access The problem is detected by KASAN. btrtl… |
CVE-2024-3839 | Medium | 6.5 | 2024-04-17 | Out of bounds read in Fonts in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to obtain potentially sensitive information from process memory v… |
CVE-2024-21099 | Medium | 4.3 | 2024-04-16 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Data Visualization). The supported version that… |
CVE-2023-51391 | High | 7.5 | 2024-04-16 | A bug in Micrium OS Network HTTP Server permits an invalid pointer dereference during header processing - potentially allowing a device crash and Denial of Ser… |
CVE-2024-3859 | Medium | 5.9 | 2024-04-16 | On 32-bit versions there were integer-overflows that led to an out-of-bounds-read that potentially could be triggered by a malformed OpenType font. This vulner… |
CVE-2024-3855 | Medium | 6.5 | 2024-04-16 | In certain cases the JIT incorrectly optimized MSubstr operations, which led to out-of-bounds reads. This vulnerability affects Firefox < 125. |
CVE-2024-3854 | High | 8.8 | 2024-04-16 | In some code patterns the JIT incorrectly optimized switch statements and generated code with out-of-bounds-reads. This vulnerability affects Firefox < 125, Fi… |
CVE-2024-32631 | High | 7.2 | 2024-04-16 | Out-of-Bounds read in ciCCIOTOPT in ASR180X will cause incorrect computations. |
CVE-2024-29219 | High | 7.8 | 2024-04-15 | Out-of-bounds read vulnerability exists in KV STUDIO Ver.11.64 and earlier and KV REPLAY VIEWER Ver.2.64 and earlier, and VT5-WX15/WX12 Ver.6.02 and earlier, w… |
CVE-2024-28894 | Medium | 5.3 | 2024-04-15 | Out-of-bounds read vulnerability caused by improper checking of the option length values in IPv6 headers exists in Cente middleware TCP/IP Network Series, whic… |
CVE-2024-23911 | High | 7.5 | 2024-04-15 | Out-of-bounds read vulnerability caused by improper checking of the option length values in IPv6 NDP packets exists in Cente middleware TCP/IP Network Series… |
CVE-2024-30401 | Medium | 5.9 | 2024-04-12 | An Out-of-bounds Read vulnerability in the advanced forwarding management process aftman of Juniper Networks Junos OS on MX Series with MPC10E, MPC11, MX10K-LC… |
CVE-2024-21618 | Medium | 6.5 | 2024-04-12 | An Access of Memory Location After End of Buffer vulnerability in the Layer-2 Control Protocols Daemon (l2cpd) of Juniper Networks Junos OS and Junos OS Evolve… |
CVE-2024-20797 | High | 7.8 | 2024-04-11 | Animate versions 23.0.4, 24.0.1 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past… |
CVE-2024-20796 | Medium | 5.5 | 2024-04-11 | Animate versions 23.0.4, 24.0.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker… |
CVE-2024-20798 | Medium | 5.5 | 2024-04-11 | Illustrator versions 28.3, 27.9.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacke… |
CVE-2024-20771 | Medium | 5.5 | 2024-04-11 | Bridge versions 13.0.6, 14.0.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker c… |
CVE-2023-52070 | High | 8.4 | 2024-04-10 | JFreeChart v1.5.4 was discovered to be vulnerable to ArrayIndexOutOfBounds via the 'setSeriesNeedle(int index, int type)' method. NOTE: this is disputed by mul… |
CVE-2021-47219 | High | 7.1 | 2024-04-10 | In the Linux kernel, the following vulnerability has been resolved: scsi: scsi_debug: Fix out-of-bound read in resp_report_tgtpgs() The following issue was o… |
CVE-2021-47210 | Medium | 5.5 | 2024-04-10 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: tipd: Remove WARN_ON in tps6598x_block_read Calling tps6598x_block_read with… |
CVE-2021-47191 | High | 7.1 | 2024-04-10 | In the Linux kernel, the following vulnerability has been resolved: scsi: scsi_debug: Fix out-of-bound read in resp_readcap16() The following warning was obs… |
CVE-2024-20770 | Medium | 5.5 | 2024-04-10 | Photoshop Desktop versions 24.7.2, 25.3.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An… |
CVE-2024-20766 | Medium | 5.5 | 2024-04-10 | InDesign Desktop versions 18.5.1, 19.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An at… |
CVE-2024-20737 | Medium | 5.5 | 2024-04-10 | After Effects versions 24.1, 23.6.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attac… |
CVE-2024-28938 | High | 8.8 | 2024-04-09 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability |
CVE-2024-28902 | Medium | 5.5 | 2024-04-09 | Windows Remote Access Connection Manager Information Disclosure Vulnerability |
CVE-2024-28901 | Medium | 5.5 | 2024-04-09 | Windows Remote Access Connection Manager Information Disclosure Vulnerability |
CVE-2024-28900 | Medium | 5.5 | 2024-04-09 | Windows Remote Access Connection Manager Information Disclosure Vulnerability |