CWE-125 · Out-of-bounds Read (page 40)
Page 40 of 99 — CVEs classified under CWE-125, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-27234 | Medium | 5.9 | 2024-03-11 | In fvp_set_target of fvp.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no addit… |
CVE-2024-27230 | Medium | 5.1 | 2024-03-11 | In ProtocolPsKeepAliveStatusAdapter::getCode() of protocolpsadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead… |
CVE-2024-27225 | Medium | 4.4 | 2024-03-11 | In sendHciCommand of bluetooth_hci.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure wi… |
CVE-2024-27223 | Medium | 5.1 | 2024-03-11 | In EUTRAN_LCS_DecodeFacilityInformationElement of LPP_LcsManagement.c, there is a possible out of bounds read due to a missing bounds check. This could lead to… |
CVE-2024-27220 | High | 8.4 | 2024-03-11 | In lpm_req_handler of , there is a possible out of bounds memory access due to a missing bounds check. This could lead to local escalation of privilege with no… |
CVE-2024-27218 | Medium | 5.5 | 2024-03-11 | In update_freq_data of , there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no addition… |
CVE-2024-27206 | High | 7.5 | 2024-03-11 | there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges… |
CVE-2024-25992 | High | 7.8 | 2024-03-11 | In tmu_tz_control of tmu.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with no addi… |
CVE-2024-25991 | Low | 3.3 | 2024-03-11 | In acpm_tmu_ipc_handler of tmu_plugin.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure… |
CVE-2024-25989 | Medium | 5.9 | 2024-03-11 | In gpu_slc_liveness_update of pixel_gpu_slc.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information discl… |
CVE-2024-25988 | High | 8.4 | 2024-03-11 | In SAEMM_DiscloseGuti of SAEMM_RadioMessageCodec.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information… |
CVE-2024-22011 | High | 7.5 | 2024-03-11 | In ss_ProcessRejectComponent of ss_MmConManagement.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informati… |
CVE-2024-22010 | Medium | 5.5 | 2024-03-11 | In dvfs_plugin_caller of fvp.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no a… |
CVE-2024-22007 | Medium | 6.2 | 2024-03-11 | In constraint_check of fvp.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no add… |
CVE-2024-22006 | Medium | 5.3 | 2024-03-11 | OOB read in the TMU plugin that allows for memory disclosure in the power management subsystem of the device. |
CVE-2024-26608 | High | 7.8 | 2024-03-11 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix global oob in ksmbd_nl_policy Similar to a reported issue (check the commit b3… |
CVE-2024-0045 | Medium | 6.5 | 2024-03-11 | In smp_proc_sec_req of smp_act.cc, there is a possible out of bounds read due to improper input validation. This could lead to remote (proximal/adjacent) infor… |
CVE-2024-23264 | Medium | 5.5 | 2024-03-08 | A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Montere… |
CVE-2024-23258 | High | 7.8 | 2024-03-08 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Sonoma 14.4, visionOS 1.1. Processing an image may lead to arb… |
CVE-2023-51395 | High | 8.8 | 2024-03-07 | The vulnerability described by CVE-2023-0972 has been additionally discovered in Silicon Labs Z-Wave end devices. This vulnerability may allow an unauthenticat… |
CVE-2023-52598 | High | 7.1 | 2024-03-06 | In the Linux kernel, the following vulnerability has been resolved: s390/ptrace: handle setting of fpc register correctly If the content of the floating poin… |
CVE-2024-26334 | Medium | 6.2 | 2024-03-05 | swftools v0.9.2 was discovered to contain a segmentation violation via the function compileSWFActionCode at swftools/lib/action/actioncompiler.c. |
CVE-2024-20836 | Low | 3.3 | 2024-03-05 | Out of bounds Read vulnerability in ssmis_get_frm in libsubextractor.so prior to SMR Mar-2024 Release 1 allows local attackers to read out of bounds memory. |
CVE-2021-47102 | High | 7.1 | 2024-03-04 | In the Linux kernel, the following vulnerability has been resolved: net: marvell: prestera: fix incorrect structure access In line: upper = info->upper_dev… |
CVE-2021-47097 | High | 7.1 | 2024-03-04 | In the Linux kernel, the following vulnerability has been resolved: Input: elantech - fix stack out of bound access in elantech_change_report_id() The array… |
CVE-2021-47083 | High | 7.1 | 2024-03-04 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: mediatek: fix global-out-of-bounds issue When eint virtual eint number is greate… |
CVE-2023-43539 | High | 7.5 | 2024-03-04 | Transient DOS while processing an improperly formatted 802.11az Fine Time Measurement protocol frame. |
CVE-2023-33090 | Medium | 5.5 | 2024-03-04 | Transient DOS while processing channel information for speaker protection v2 module in ADSP. |
CVE-2023-33078 | Medium | 5.1 | 2024-03-04 | Information Disclosure while processing IOCTL request in FastRPC. |
CVE-2023-49602 | Low | 2.9 | 2024-03-04 | in OpenHarmony v3.2.4 and prior versions allow a local attacker cause apps crash through type confusion. |
CVE-2023-25176 | Low | 2.9 | 2024-03-04 | in OpenHarmony v3.2.4 and prior versions allow a local attacker cause information leak through out-of-bounds Read. |
CVE-2024-20038 | Low | 3.4 | 2024-03-04 | In pq, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privilege… |
CVE-2024-20022 | Medium | 6.7 | 2024-03-04 | In lk, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with System execution privil… |
CVE-2023-52565 | High | 7.1 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix OOB read If the index provided by the user is bigger than the mask s… |
CVE-2023-52525 | High | 7.1 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet Only skip the code pa… |
CVE-2023-52519 | High | 7.1 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: HID: intel-ish-hid: ipc: Disable and reenable ACPI GPE bit The EHL (Elkhart Lake) based p… |
CVE-2023-52507 | High | 7.1 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: nfc: nci: assert requested protocol is valid The protocol is used in a bit mask to determ… |
CVE-2023-52504 | High | 7.1 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: x86/alternatives: Disable KASAN in apply_alternatives() Fei has reported that KASAN trigg… |
CVE-2023-52501 | High | 7.1 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Do not attempt to read past "commit" When iterating over the ring buffer whi… |
CVE-2024-1869 | High | 7.5 | 2024-03-01 | Certain HP DesignJet print products are potentially vulnerable to information disclosure related to accessing memory out-of-bounds when using the general-purpo… |
CVE-2023-7242 | High | 8.2 | 2024-03-01 | Industrial Control Systems Network Protocol Parsers (ICSNPP) - Ethercat Zeek Plugin versions d78dda6 and prior are vulnerable to out-of-bounds read during… |
CVE-2024-1453 | High | 7.8 | 2024-03-01 | In Sante DICOM Viewer Pro versions 14.0.3 and prior, a user must open a malicious DICOM file, which could allow a local attacker to disclose information or ex… |
CVE-2024-22251 | Medium | 5.9 | 2024-02-29 | VMware Workstation and Fusion contain an out-of-bounds read vulnerability in the USB CCID (chip card interface device). A malicious actor with local administra… |
CVE-2023-44346 | Medium | 5.5 | 2024-02-29 | Adobe InDesign versions ID18.5 (and earlier) and ID17.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of se… |
CVE-2023-44344 | Medium | 5.5 | 2024-02-29 | Adobe InDesign versions ID18.5 (and earlier) and ID17.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of se… |
CVE-2023-44343 | Medium | 5.5 | 2024-02-29 | Adobe InDesign versions ID18.5 (and earlier) and ID17.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of se… |
CVE-2023-44342 | Medium | 5.5 | 2024-02-29 | Adobe InDesign versions ID18.5 (and earlier) and ID17.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of se… |
CVE-2024-1847 | High | 7.8 | 2024-02-28 | Heap-based Buffer Overflow, Memory Corruption, Out-Of-Bounds Read, Out-Of-Bounds Write, Stack-based Buffer Overflow, Type Confusion, Uninitialized Variable, Us… |
CVE-2021-47044 | High | 7.7 | 2024-02-28 | In the Linux kernel, the following vulnerability has been resolved: sched/fair: Fix shift-out-of-bounds in load_balance() Syzbot reported a handful of occurr… |
CVE-2021-47039 | High | 7.1 | 2024-02-28 | In the Linux kernel, the following vulnerability has been resolved: ataflop: potential out of bounds in do_format() The function uses "type" as an array inde… |
CVE-2021-46993 | High | 7.8 | 2024-02-28 | In the Linux kernel, the following vulnerability has been resolved: sched: Fix out-of-bound access in uclamp Util-clamp places tasks in different buckets bas… |
CVE-2021-46992 | High | 7.8 | 2024-02-28 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: avoid overflows in nft_hash_buckets() Number of buckets being stored… |
CVE-2021-46980 | High | 7.1 | 2024-02-28 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Retrieve all the PDOs instead of just the first 4 commit 4dbc6a4ef06d (… |
CVE-2021-46965 | High | 7.1 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: mtd: physmap: physmap-bt1-rom: Fix unintentional stack access Cast &data to (char *) in o… |
CVE-2021-46955 | High | 8.2 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix stack OOB read while fragmenting IPv4 packets running openvswitch on ker… |
CVE-2021-46954 | High | 7.1 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets when 'act_mirred'… |
CVE-2021-46952 | High | 7.1 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: NFS: fs_context: validate UDP retrans to prevent shift out-of-bounds Fix shift out-of-bou… |
CVE-2024-24564 | Low | 3.7 | 2024-02-26 | Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. When using the built-in `extract32(b, start)`, if the `start` index provided has… |
CVE-2019-25160 | Critical | 9.1 | 2024-02-26 | In the Linux kernel, the following vulnerability has been resolved: netlabel: fix out-of-bounds memory accesses There are two array out-of-bounds memory acce… |
CVE-2024-27319 | Medium | 4.4 | 2024-02-23 | Versions of the package onnx before and including 1.15.0 are vulnerable to Out-of-bounds Read as the ONNX_ASSERT and ONNX_ASSERTM functions have an off by one… |
CVE-2024-26597 | High | 7.8 | 2024-02-23 | In the Linux kernel, the following vulnerability has been resolved: net: qualcomm: rmnet: fix global oob in rmnet_policy The variable rmnet_link_ops assign a… |
CVE-2024-25629 | Medium | 4.4 | 2024-02-23 | c-ares is a C library for asynchronous DNS requests. `ares__read_line()` is used to parse local configuration files such as `/etc/resolv.conf`, `/etc/nsswitch… |
CVE-2024-26594 | Critical | 9.1 | 2024-02-23 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate mech token in session setup If client send invalid mech token in session… |
CVE-2024-26593 | High | 7.1 | 2024-02-23 | In the Linux kernel, the following vulnerability has been resolved: i2c: i801: Fix block process call transactions According to the Intel datasheets, softwar… |
CVE-2024-26588 | High | 7.8 | 2024-02-22 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Prevent out-of-bounds memory access The test_tag test triggers an unhandl… |
CVE-2023-49100 | Medium | 4.4 | 2024-02-21 | Trusted Firmware-A (TF-A) before 2.10 has a potential read out-of-bounds in the SDEI service. The input parameter passed in register x1 is not validated well e… |
CVE-2024-1669 | High | 8.8 | 2024-02-21 | Out of bounds memory access in Blink in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to perform out of bounds memory access via a crafted HTM… |
CVE-2023-6936 | Medium | 5.3 | 2024-02-20 | In wolfSSL prior to 5.6.6, if callback functions are enabled (via the WOLFSSL_CALLBACKS flag), then a malicious TLS client or network attacker can trigger a bu… |
CVE-2024-0794 | Critical | 9.8 | 2024-02-20 | Certain HP LaserJet Pro, HP Enterprise LaserJet, and HP LaserJet Managed Printers are potentially vulnerable to Remote Code Execution due to buffer overflow wh… |
CVE-2023-39541 | Medium | 5.9 | 2024-02-20 | A denial of service vulnerability exists in the ICMP and ICMPv6 parsing functionality of Weston Embedded uC-TCP-IP v3.06.01. A specially crafted network packet… |
CVE-2023-39540 | Medium | 5.9 | 2024-02-20 | A denial of service vulnerability exists in the ICMP and ICMPv6 parsing functionality of Weston Embedded uC-TCP-IP v3.06.01. A specially crafted network packet… |
CVE-2024-1546 | High | 7.5 | 2024-02-20 | When storing and re-accessing data on a networking channel, the length of buffers may have been confused, resulting in an out-of-bounds memory read. This vulne… |
CVE-2023-52377 | High | 7.4 | 2024-02-18 | Vulnerability of input data not being verified in the cellular data module.Successful exploitation of this vulnerability may cause out-of-bounds access. |
CVE-2023-52365 | Medium | 5.3 | 2024-02-18 | Out-of-bounds read vulnerability in the smart activity recognition module.Successful exploitation of this vulnerability may cause features to perform abnormall… |
CVE-2024-20949 | Medium | 6.1 | 2024-02-17 | Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite (component: Outcome-Result). Supported versions that are affected… |
CVE-2024-20941 | Medium | 6.1 | 2024-02-17 | Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: HTML UI). Supported versions that are affected are 12.2.3-12.2.13. E… |
CVE-2024-0016 | Medium | 5.3 | 2024-02-16 | In multiple locations, there is a possible out of bounds read due to a missing bounds check. This could lead to paired device information disclosure with no ad… |
CVE-2023-40085 | Medium | 5.5 | 2024-02-16 | In convertSubgraphFromHAL of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disc… |
CVE-2024-0030 | Medium | 5.5 | 2024-02-16 | In btif_to_bta_response of btif_gatt_util.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information dis… |
CVE-2023-40124 | Medium | 5.5 | 2024-02-15 | In multiple locations, there is a possible cross-user read due to a confused deputy. This could lead to local information disclosure of photos or other images… |
CVE-2023-40112 | Medium | 5.5 | 2024-02-15 | In ippSetValueTag of ipp.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure of past print… |
CVE-2024-20750 | High | 7.8 | 2024-02-15 | Substance3D - Designer versions 13.1.0 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a rea… |
CVE-2024-20749 | Medium | 5.5 | 2024-02-15 | Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive m… |
CVE-2024-20748 | Medium | 5.5 | 2024-02-15 | Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive m… |
CVE-2024-20747 | Medium | 5.5 | 2024-02-15 | Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive m… |
CVE-2024-20736 | Medium | 5.5 | 2024-02-15 | Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive m… |
CVE-2024-20735 | Medium | 5.5 | 2024-02-15 | Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive m… |
CVE-2024-20742 | High | 7.8 | 2024-02-15 | Substance3D - Painter versions 9.1.1 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read… |
CVE-2024-20725 | Medium | 5.5 | 2024-02-15 | Substance3D - Painter versions 9.1.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An atta… |
CVE-2024-20724 | Medium | 5.5 | 2024-02-15 | Substance3D - Painter versions 9.1.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An atta… |
CVE-2024-20722 | Medium | 5.5 | 2024-02-15 | Substance3D - Painter versions 9.1.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An atta… |
CVE-2022-23089 | Medium | 4.7 | 2024-02-15 | When dumping core and saving process information, proc_getargv() might return an sbuf which have a sbuf_len() of 0 or -1, which is not properly handled. An ou… |
CVE-2023-50927 | High | 8.6 | 2024-02-14 | Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. An attacker can trigger out-of-bounds reads in the RPL-Lite impl… |
CVE-2023-50926 | High | 7.5 | 2024-02-14 | Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. An out-of-bounds read can be caused by an incoming DIO message w… |
CVE-2023-41252 | Medium | 6.5 | 2024-02-14 | Out-of-bounds read in some Intel(R) QAT software drivers for Windows before version QAT1.7-W-1.11.0 may allow an authenticated user to potentially enable denia… |
CVE-2024-21344 | Medium | 5.9 | 2024-02-13 | Windows Network Address Translation (NAT) Denial of Service Vulnerability |
CVE-2024-21343 | Medium | 5.9 | 2024-02-13 | Windows Network Address Translation (NAT) Denial of Service Vulnerability |
CVE-2024-23440 | High | 7.1 | 2024-02-13 | Vba32 Antivirus v3.36.0 is vulnerable to an Arbitrary Memory Read vulnerability. The 0x22200B IOCTL code of the Vba32m64.sys driver allows to read up to 0x802… |
CVE-2024-23439 | High | 7.1 | 2024-02-13 | Vba32 Antivirus v3.36.0 is vulnerable to an Arbitrary Memory Read vulnerability by triggering the 0x22201B, 0x22201F, 0x222023, 0x222027 ,0x22202B, 0x22202F, 0… |
CVE-2024-1140 | Medium | 6.1 | 2024-02-13 | Twister Antivirus v8.17 is vulnerable to an Out-of-bounds Read vulnerability by triggering the 0x801120B8 IOCTL code of the filmfd.sys driver. |