CWE-125 · Out-of-bounds Read (page 40)
Page 40 of 94 — CVEs classified under CWE-125, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-35318 | Medium | 6.5 | 2023-07-11 | Remote Procedure Call Runtime Denial of Service Vulnerability |
CVE-2023-35316 | Medium | 6.5 | 2023-07-11 | Remote Procedure Call Runtime Information Disclosure Vulnerability |
CVE-2023-35314 | Medium | 6.5 | 2023-07-11 | Remote Procedure Call Runtime Denial of Service Vulnerability |
CVE-2023-35299 | High | 7.8 | 2023-07-11 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
CVE-2023-35296 | Medium | 6.5 | 2023-07-11 | Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability |
CVE-2023-33164 | Medium | 6.5 | 2023-07-11 | Remote Procedure Call Runtime Denial of Service Vulnerability |
CVE-2023-33162 | Medium | 5.5 | 2023-07-11 | Microsoft Excel Information Disclosure Vulnerability |
CVE-2023-32045 | High | 7.5 | 2023-07-11 | Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
CVE-2023-32044 | High | 7.5 | 2023-07-11 | Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
CVE-2023-32039 | Medium | 5.5 | 2023-07-11 | Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability |
CVE-2023-32035 | Medium | 6.5 | 2023-07-11 | Remote Procedure Call Runtime Denial of Service Vulnerability |
CVE-2023-32034 | Medium | 6.5 | 2023-07-11 | Remote Procedure Call Runtime Denial of Service Vulnerability |
CVE-2023-36201 | High | 7.5 | 2023-07-07 | An issue in JerryscriptProject jerryscript v.3.0.0 allows an attacker to obtain sensitive information via a crafted script to the arrays. |
CVE-2023-37453 | Medium | 4.6 | 2023-07-06 | An issue was discovered in the USB subsystem in the Linux kernel through 6.4.2. There is an out-of-bounds and crash in read_descriptors in drivers/usb/core/sys… |
CVE-2023-37240 | Critical | 9.1 | 2023-07-06 | Vulnerability of missing input length verification in the distributed file system. Successful exploitation of this vulnerability may cause out-of-bounds read… |
CVE-2023-3523 | High | 7.1 | 2023-07-06 | Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.2.2. |
CVE-2023-30665 | Medium | 4.4 | 2023-07-06 | Improper input validation vulnerability in OnOemServiceMode in libsec-ril prior to SMR Jul-2023 Release 1 allows local attackers to cause an Out-Of-Bounds read. |
CVE-2023-28542 | High | 7.8 | 2023-07-04 | Memory Corruption in WLAN HOST while fetching TX status information. |
CVE-2023-28541 | High | 7.8 | 2023-07-04 | Memory Corruption in Data Modem while processing DMA buffer release event about CFR data. |
CVE-2023-20774 | Medium | 6.7 | 2023-07-04 | In display, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution privil… |
CVE-2023-20748 | Medium | 4.4 | 2023-07-04 | In display, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privile… |
CVE-2023-3497 | Medium | 4.6 | 2023-07-03 | Out of bounds read in Google Security Processor firmware in Google Chrome on Chrome OS prior to 114.0.5735.90 allowed a local attacker to perform denial of ser… |
CVE-2023-26085 | High | 7.8 | 2023-06-29 | A possible out-of-bounds read and write (due to an improper length check of shared memory) was discovered in Arm NN Android-NN-Driver before 23.02. |
CVE-2023-21226 | High | 7.5 | 2023-06-28 | In SAEMM_RetrieveTaiList of SAEMM_ContextManagement.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote infor… |
CVE-2023-21224 | High | 7.5 | 2023-06-28 | In ss_ProcessReturnResultComponent of ss_MmConManagement.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote inf… |
CVE-2023-21223 | High | 7.5 | 2023-06-28 | In LPP_ConvertGNSS_DataBitAssistance of LPP_CommonUtil.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote infor… |
CVE-2023-21214 | Medium | 4.4 | 2023-06-28 | In addGroupWithConfigInternal of p2p_iface.cpp, there is a possible out of bounds read due to unsafe deserialization. This could lead to local information disc… |
CVE-2023-21213 | Medium | 4.4 | 2023-06-28 | In initiateTdlsTeardownInternal of sta_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information di… |
CVE-2023-21212 | Medium | 4.4 | 2023-06-28 | In multiple files, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the wifi server wit… |
CVE-2023-21211 | Medium | 5.5 | 2023-06-28 | In multiple files, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional exe… |
CVE-2023-21210 | Medium | 4.4 | 2023-06-28 | In initiateHs20IconQueryInternal of sta_iface.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local informatio… |
CVE-2023-21208 | Medium | 4.4 | 2023-06-28 | In setCountryCodeInternal of sta_iface.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local information discl… |
CVE-2023-21207 | Medium | 6.7 | 2023-06-28 | In initiateTdlsSetupInternal of sta_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of pri… |
CVE-2023-21206 | Medium | 4.4 | 2023-06-28 | In initiateVenueUrlAnqpQueryInternal of sta_iface.cpp, there is a possible out of bounds read due to unsafe deserialization. This could lead to local informati… |
CVE-2023-21204 | Medium | 4.4 | 2023-06-28 | In multiple files, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the wifi server wit… |
CVE-2023-21203 | Medium | 6.7 | 2023-06-28 | In startWpsPbcInternal of sta_iface.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local escalation of privil… |
CVE-2023-21202 | Medium | 4.5 | 2023-06-28 | In btm_delete_stored_link_key_complete of btm_devctl.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local informa… |
CVE-2023-21201 | High | 7.5 | 2023-06-28 | In on_create_record_event of btif_sdp_server.cc, there is a possible out of bounds read due to a missing null check. This could lead to remote denial of servic… |
CVE-2023-21200 | Medium | 5.5 | 2023-06-28 | In on_remove_iso_data_path of btm_iso_impl.h, there is a possible out of bounds read due to improper input validation. This could lead to local information dis… |
CVE-2023-21199 | Medium | 4.4 | 2023-06-28 | In btu_ble_proc_ltk_req of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure w… |
CVE-2023-21198 | Medium | 5.5 | 2023-06-28 | In remove_sdp_record of btif_sdp_server.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosu… |
CVE-2023-21197 | High | 7.5 | 2023-06-28 | In btm_acl_process_sca_cmpl_pkt of btm_acl.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information d… |
CVE-2023-21196 | Medium | 4.4 | 2023-06-28 | In btm_ble_batchscan_filter_track_adv_vse_cback of btm_ble_batchscan.cc, there is a possible out of bounds read due to a missing bounds check. This could lead… |
CVE-2023-21195 | Medium | 4.5 | 2023-06-28 | In btm_ble_periodic_adv_sync_tx_rcvd of btm_ble_gap.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local infor… |
CVE-2023-21194 | Medium | 4.4 | 2023-06-28 | In gatt_dbg_op_name of gatt_utils.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in… |
CVE-2023-21188 | Medium | 4.4 | 2023-06-28 | In btm_ble_update_inq_result of btm_ble_gap.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disc… |
CVE-2023-21186 | High | 7.5 | 2023-06-28 | In LogResponse of Dns.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional… |
CVE-2023-21182 | Medium | 4.4 | 2023-06-28 | In Exynos_parsing_user_data_registered_itu_t_t35 of VendorVideoAPI.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead t… |
CVE-2023-21181 | Medium | 4.4 | 2023-06-28 | In btm_ble_update_inq_result of btm_ble_gap.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disc… |
CVE-2023-21180 | High | 7.5 | 2023-06-28 | In xmlParseTryOrFinish of parser.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with… |
CVE-2023-21170 | Medium | 4.4 | 2023-06-28 | In executeSetClientTarget of ComposerCommandEngine.h, there is a possible out of bounds read due to a missing bounds check. This could lead to local informatio… |
CVE-2023-21169 | Medium | 4.4 | 2023-06-28 | In inviteInternal of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with… |
CVE-2023-21168 | Medium | 5.5 | 2023-06-28 | In convertCbYCrY of ColorConverter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure w… |
CVE-2023-21160 | Medium | 5.5 | 2023-06-28 | In BuildSetTcsFci of protocolmiscbuilder.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclo… |
CVE-2023-21158 | Medium | 4.4 | 2023-06-28 | In encode of miscdata.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with System ex… |
CVE-2023-21156 | Medium | 4.4 | 2023-06-28 | In BuildGetRadioNode of protocolmiscbulider.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local information… |
CVE-2023-21155 | Medium | 5.5 | 2023-06-28 | In BuildSetRadioNode of protocolmiscbuilder.cpp, there is a possible out of bounds read due to a missing null check. This could lead to local information discl… |
CVE-2023-21154 | Medium | 4.4 | 2023-06-28 | In StoreAdbSerialNumber of protocolmiscbuilder.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information… |
CVE-2023-21153 | Medium | 6.7 | 2023-06-28 | In Do_AIMS_SET_CALL_WAITING of imsservice.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of pri… |
CVE-2023-21152 | Medium | 5.5 | 2023-06-28 | In FaceStatsAnalyzer::InterpolateWeightList of face_stats_analyzer.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to… |
CVE-2023-21150 | Medium | 4.4 | 2023-06-28 | In handle_set_parameters_ctrl of hal_socket.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information di… |
CVE-2023-21148 | Medium | 4.4 | 2023-06-28 | In BuildSetConfig of protocolimsbuilder.cpp, there is a possible out of bounds read due to a missing null check. This could lead to local information disclosur… |
CVE-2023-30259 | Medium | 5.5 | 2023-06-28 | A Buffer Overflow vulnerability in importshp plugin in LibreCAD 2.2.0 allows attackers to obtain sensitive information via a crafted DBF file. |
CVE-2023-25003 | High | 7.8 | 2023-06-23 | A maliciously crafted pskernel.dll file in Autodesk AutoCAD 2023 and Maya 2022 may be used to trigger out-of-bound read write / read vulnerabilities. Exploitat… |
CVE-2023-32420 | High | 7.1 | 2023-06-23 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, tvOS 16.5, macOS Ventura 13.4… |
CVE-2023-32410 | Medium | 5.5 | 2023-06-23 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 15.7.6 and iPadOS 15.7.6, macOS Big Sur 11.7.7, macOS Monterey 1… |
CVE-2023-32403 | Medium | 5.5 | 2023-06-23 | This issue was addressed with improved redaction of sensitive information. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and i… |
CVE-2023-32402 | Medium | 6.5 | 2023-06-23 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, Safari 16.5, iOS 16.5 an… |
CVE-2023-32391 | Medium | 4.6 | 2023-06-23 | The issue was addressed with improved checks. This issue is fixed in iOS 15.7.6 and iPadOS 15.7.6, watchOS 9.5, iOS 16.5 and iPadOS 16.5, macOS Ventura 13.4. A… |
CVE-2023-32390 | Low | 2.4 | 2023-06-23 | The issue was addressed with improved checks. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, macOS Ventura 13.4. Photos belonging to the Hidden… |
CVE-2023-32389 | Medium | 5.5 | 2023-06-23 | This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, tvOS 16.5, macOS Vent… |
CVE-2023-32386 | Low | 3.3 | 2023-06-23 | A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey 12.6.6, macOS Ventura 13.4… |
CVE-2023-32382 | Medium | 5.5 | 2023-06-23 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey 12.6.6, macOS Ventura 13.4. Pro… |
CVE-2023-32375 | Medium | 5.5 | 2023-06-23 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Monterey 12.6.6, macOS Ventura 13.4. Processing a 3D model may… |
CVE-2023-32372 | Medium | 5.5 | 2023-06-23 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, tvOS 16.5, macOS Ventura 13.4… |
CVE-2023-32368 | Medium | 5.5 | 2023-06-23 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, macOS Monterey 12.6.6, i… |
CVE-2023-32363 | Medium | 5.5 | 2023-06-23 | A permissions issue was addressed by removing vulnerable code and adding additional checks. This issue is fixed in macOS Ventura 13.4. An app may be able to by… |
CVE-2023-32360 | Medium | 5.5 | 2023-06-23 | An authentication issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey 12.6.6, macOS Ventura 13.4. A… |
CVE-2023-32357 | High | 7.1 | 2023-06-23 | An authorization issue was addressed with improved state management. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, macOS Big Sur 11.7.7, m… |
CVE-2023-32354 | Medium | 5.5 | 2023-06-23 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9.5, tvOS 16.5, iOS 16.5 and iPadOS 16.5. An app may be able… |
CVE-2023-28204 | Medium | 6.5 | 2023-06-23 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15… |
CVE-2023-30362 | High | 7.5 | 2023-06-23 | Buffer Overflow vulnerability in coap_send function in libcoap library 4.3.1-103-g52cfd56 fixed in 4.3.1-120-ge242200 allows attackers to obtain sensitive info… |
CVE-2023-36356 | High | 7.7 | 2023-06-22 | TP-Link TL-WR940N V2/V4/V6, TL-WR841N V8, TL-WR941ND V5, and TL-WR740N V1/V2 were discovered to contain a buffer read out-of-bounds via the component /userRpm/… |
CVE-2023-2989 | Critical | 9.1 | 2023-06-22 | Fortra Globalscape EFT versions before 8.1.0.16 suffer from an out of bounds memory read in their administration server, which can allow an attacker to crash t… |
CVE-2023-20896 | Medium | 5.9 | 2023-06-22 | The VMware vCenter Server contains an out-of-bounds read vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to v… |
CVE-2023-3110 | Critical | 9.6 | 2023-06-21 | Description: A vulnerability in SiLabs Unify Gateway 1.3.1 and earlier allows an unauthenticated attacker within Z-Wave range to overflow a stack buffer, leadi… |
CVE-2023-0972 | Critical | 9.6 | 2023-06-21 | Description: A vulnerability in SiLabs Z/IP Gateway 7.18.01 and earlier allows an unauthenticated attacker within Z-Wave range to overflow a stack buffer, lead… |
CVE-2023-0970 | High | 7.1 | 2023-06-21 | Multiple buffer overflow vulnerabilities in SiLabs Z/IP Gateway SDK version 7.18.01 and earlier allow an attacker with invasive physical access to a Z-Wave con… |
CVE-2023-0969 | Low | 3.5 | 2023-06-21 | A vulnerability in SiLabs Z/IP Gateway 7.18.01 and earlier allows an authenticated attacker within Z-Wave range to manipulate an array pointer to disclose the… |
CVE-2023-35862 | Medium | 6.5 | 2023-06-19 | libcoap 4.3.1 contains a buffer over-read via the function coap_parse_oscore_conf_mem at coap_oscore.c. |
CVE-2023-32542 | High | 7.8 | 2023-06-19 | Out-of-bounds read vulnerability exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted V8 file may lead to information disclosure a… |
CVE-2023-32288 | High | 7.8 | 2023-06-19 | Out-of-bounds read vulnerability exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted SIM file may lead to information disclosure… |
CVE-2023-32270 | High | 7.8 | 2023-06-19 | Access of memory location after end of buffer issue exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted V8 file may lead to infor… |
CVE-2023-31239 | High | 7.8 | 2023-06-19 | Stack-based buffer overflow vulnerability in V-Server v4.0.15.0 and V-Server Lite v4.0.15.0 and earlier allows an attacker to execute arbitrary code by having… |
CVE-2023-3268 | High | 7.1 | 2023-06-16 | An out of bounds (OOB) memory access flaw was found in the Linux kernel in relay_file_read_start_pos in kernel/relay.c in the relayfs. This flaw could allow a… |
CVE-2023-21130 | Critical | 9.8 | 2023-06-15 | In btm_ble_periodic_adv_sync_lost of btm_ble_gap.cc, there is a possible remote code execution due to a buffer overflow. This could lead to remote code executi… |
CVE-2023-34101 | High | 7.3 | 2023-06-14 | Contiki-NG is an operating system for internet of things devices. In version 4.8 and prior, when processing ICMP DAO packets in the `dao_input_storing` functio… |
CVE-2023-3040 | Low | 3.7 | 2023-06-14 | A debug function in the lua-resty-json package, up to commit id 3ef9492bd3a44d9e51301d6adc3cd1789c8f534a (merged in PR #14) contained an out of bounds access b… |
CVE-2023-3036 | High | 8.6 | 2023-06-14 | An unchecked read in NTP server in github.com/cloudflare/cfnts prior to commit 783490b https://github.com/cloudflare/cfnts/commit/783490b913f05e508a492cd7b02e… |
CVE-2023-33139 | Medium | 5.5 | 2023-06-14 | Visual Studio Information Disclosure Vulnerability |