CWE-125 · Out-of-bounds Read (page 41)
Page 41 of 99 — CVEs classified under CWE-125, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-24923 | High | 7.8 | 2024-02-13 | A vulnerability has been identified in Simcenter Femap (All versions < V2401.0000), Simcenter Femap (All versions < V2306.0001). The affected applications cont… |
CVE-2024-23802 | High | 7.8 | 2024-02-13 | A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0012), Tecnomatix Plant Simulation V2302 (All versions < V2302.0… |
CVE-2023-49125 | High | 7.8 | 2024-02-13 | A vulnerability has been identified in Parasolid V35.0 (All versions < V35.0.263), Parasolid V35.1 (All versions < V35.1.252), Parasolid V36.0 (All versions <… |
CVE-2022-48623 | Critical | 9.1 | 2024-02-13 | The Cpanel::JSON::XS package before 4.33 for Perl performs out-of-bounds accesses in a way that allows attackers to obtain sensitive information or cause a den… |
CVE-2024-24826 | Medium | 5.5 | 2024-02-12 | Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in E… |
CVE-2024-20290 | High | 7.5 | 2024-02-07 | A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an aff… |
CVE-2024-25201 | High | 7.5 | 2024-02-07 | Espruino 2v20 (commit fcc9ba4) was discovered to contain an Out-of-bounds Read via jsvStringIteratorPrintfCallback at src/jsvar.c. |
CVE-2023-43533 | High | 7.5 | 2024-02-06 | Transient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame. |
CVE-2023-33065 | Medium | 6.1 | 2024-02-06 | Information disclosure in Audio while accessing AVCS services from ADSP payload. |
CVE-2023-33064 | Medium | 5.5 | 2024-02-06 | Transient DOS in Audio when invoking callback function of ASM driver. |
CVE-2023-33060 | High | 7.1 | 2024-02-06 | Transient DOS in Core when DDR memory check is called while DDR is not initialized. |
CVE-2023-33058 | High | 8.2 | 2024-02-06 | Information disclosure in Modem while processing SIB5. |
CVE-2024-20820 | Medium | 4.4 | 2024-02-06 | Improper input validation in bootloader prior to SMR Feb-2024 Release 1 allows local privileged attackers to cause an Out-Of-Bounds read. |
CVE-2024-20814 | Medium | 4.0 | 2024-02-06 | Out-of-bounds Read in padmd_vld_ac_prog_refine of libpadm.so prior to SMR Feb-2024 Release 1 allows local attackers access unauthorized information. |
CVE-2023-6387 | High | 7.5 | 2024-02-02 | A potential buffer overflow exists in the Bluetooth LE HCI CPC sample application in the Gecko SDK which may result in a denial of service or remote code execu… |
CVE-2023-49118 | Low | 2.9 | 2024-02-02 | in OpenHarmony v3.2.4 and prior versions allow a local attacker causes information leak through out-of-bounds Read. |
CVE-2023-43756 | Low | 2.9 | 2024-02-02 | in OpenHarmony v3.2.4 and prior versions allow a local attacker causes information leak through out-of-bounds Read. |
CVE-2023-46045 | High | 7.8 | 2024-02-02 | Graphviz 2.36.0 through 9.x before 10.0.1 has an out-of-bounds read via a crafted config6a file. NOTE: exploitability may be uncommon because this file is typi… |
CVE-2023-40551 | Medium | 5.1 | 2024-01-29 | A flaw was found in the MZ binary format in Shim. An out-of-bounds read may occur, leading to a crash or possible exposure of sensitive data during the system'… |
CVE-2023-40550 | Medium | 5.5 | 2024-01-29 | An out-of-bounds read flaw was found in Shim when it tried to validate the SBAT information. This issue may expose sensitive data during the system's boot phas… |
CVE-2023-40549 | Medium | 6.2 | 2024-01-29 | An out-of-bounds read flaw was found in Shim due to the lack of proper boundary verification during the load of a PE binary. This flaw allows an attacker to lo… |
CVE-2021-42147 | Critical | 9.1 | 2024-01-24 | Buffer over-read vulnerability in the dtls_sha256_update function in Contiki-NG tinyDTLS through master branch 53a0d97 allows remote attackers to cause a denia… |
CVE-2021-42144 | Critical | 9.8 | 2024-01-24 | Buffer over-read vulnerability in Contiki-NG tinyDTLS through master branch 53a0d97 allows attackers obtain sensitive information via crafted input to dtls_ccm… |
CVE-2024-22705 | High | 7.8 | 2024-01-23 | An issue was discovered in ksmbd in the Linux kernel before 6.6.10. smb2_get_data_area_len in fs/smb/server/smb2misc.c can cause an smb_strndup_from_utf16 out-… |
CVE-2023-39197 | Medium | 4.0 | 2024-01-23 | An out-of-bounds read vulnerability was found in Netfilter Connection Tracking (conntrack) in the Linux kernel. This flaw allows a remote user to disclose sens… |
CVE-2024-22957 | Medium | 5.5 | 2024-01-19 | swftools 0.9.2 was discovered to contain an Out-of-bounds Read vulnerability via the function dict_do_lookup in swftools/lib/q.c:1190. |
CVE-2023-48347 | Medium | 5.5 | 2024-01-18 | In video decoder, there is a possible out of bounds read due to improper input validation. This could lead to local denial of service with no additional execut… |
CVE-2023-48345 | Medium | 5.5 | 2024-01-18 | In video decoder, there is a possible out of bounds read due to improper input validation. This could lead to local denial of service with no additional execut… |
CVE-2023-48344 | Medium | 5.5 | 2024-01-18 | In video decoder, there is a possible out of bounds read due to improper input validation. This could lead to local denial of service with no additional execut… |
CVE-2023-48341 | Medium | 5.5 | 2024-01-18 | In video decoder, there is a possible out of bounds read due to improper input validation. This could lead to local denial of service with no additional execut… |
CVE-2024-0519 | High | 8.8 | 2024-01-16 | Out of bounds memory access in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… |
CVE-2023-45231 | Medium | 6.5 | 2024-01-16 | EDK2's Network Package is susceptible to an out-of-bounds read vulnerability when processing Neighbor Discovery Redirect message. This vulnerability can be… |
CVE-2023-45229 | Medium | 6.5 | 2024-01-16 | EDK2's Network Package is susceptible to an out-of-bounds read vulnerability when processing the IA_NA or IA_TA option in a DHCPv6 Advertise message. This vu… |
CVE-2023-44112 | High | 7.5 | 2024-01-16 | Out-of-bounds access vulnerability in the device authentication module. Successful exploitation of this vulnerability may affect confidentiality. |
CVE-2024-21640 | Medium | 5.4 | 2024-01-13 | Chromium Embedded Framework (CEF) is a simple framework for embedding Chromium-based browsers in other applications.`CefVideoConsumerOSR::OnFrameCaptured` does… |
CVE-2024-21639 | Medium | 5.3 | 2024-01-12 | CEF (Chromium Embedded Framework ) is a simple framework for embedding Chromium-based browsers in other applications. `CefLayeredWindowUpdaterOSR::OnAllocatedS… |
CVE-2023-6040 | High | 7.8 | 2024-01-12 | An out-of-bounds access vulnerability involving netfilter was reported and fixed as: f1082dd31fe4 (netfilter: nf_tables: Reject tables of unsupported family)… |
CVE-2023-42865 | Medium | 6.5 | 2024-01-10 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3, tvOS 16.4, iOS 16.4 and iPadOS 16.4, watchOS 9.4… |
CVE-2023-42862 | Medium | 6.5 | 2024-01-10 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3, tvOS 16.4, iOS 16.4 and iPadOS 16.4, watchOS 9.4… |
CVE-2024-20715 | Medium | 5.5 | 2024-01-10 | Adobe Substance 3D Stager versions 2.1.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An… |
CVE-2024-20714 | Medium | 5.5 | 2024-01-10 | Adobe Substance 3D Stager versions 2.1.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An… |
CVE-2024-20713 | Medium | 5.5 | 2024-01-10 | Adobe Substance 3D Stager versions 2.1.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An… |
CVE-2024-20712 | Medium | 5.5 | 2024-01-10 | Adobe Substance 3D Stager versions 2.1.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An… |
CVE-2024-20711 | Medium | 5.5 | 2024-01-10 | Adobe Substance 3D Stager versions 2.1.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An… |
CVE-2024-20710 | Medium | 5.5 | 2024-01-10 | Adobe Substance 3D Stager versions 2.1.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An… |
CVE-2023-47993 | Medium | 6.5 | 2024-01-09 | A Buffer out-of-bound read vulnerability in Exif.cpp::ReadInt32 in FreeImage 3.18.0 allows attackers to cause a denial-of-service. |
CVE-2024-21314 | Medium | 6.5 | 2024-01-09 | Microsoft Message Queuing Information Disclosure Vulnerability |
CVE-2024-21311 | Medium | 5.5 | 2024-01-09 | Windows Cryptographic Services Information Disclosure Vulnerability |
CVE-2024-20691 | Medium | 4.7 | 2024-01-09 | Windows Themes Information Disclosure Vulnerability |
CVE-2024-20687 | High | 7.5 | 2024-01-09 | Microsoft AllJoyn API Denial of Service Vulnerability |
CVE-2024-20660 | Medium | 6.5 | 2024-01-09 | Microsoft Message Queuing Information Disclosure Vulnerability |
CVE-2024-20658 | High | 7.8 | 2024-01-09 | Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability |
CVE-2024-20653 | High | 7.8 | 2024-01-09 | Microsoft Common Log File System Elevation of Privilege Vulnerability |
CVE-2023-51439 | High | 7.8 | 2024-01-09 | A vulnerability has been identified in JT2Go (All versions < V14.3.0.6), Teamcenter Visualization V13.3 (All versions < V13.3.0.13), Teamcenter Visualization V… |
CVE-2023-49127 | High | 7.8 | 2024-01-09 | A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The affected applications contain an out of bounds read past the en… |
CVE-2023-49126 | High | 7.8 | 2024-01-09 | A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The affected applications contain an out of bounds read past the en… |
CVE-2023-49124 | High | 7.8 | 2024-01-09 | A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The affected applications contain an out of bounds read past the en… |
CVE-2023-36629 | Medium | 5.5 | 2024-01-09 | The ST ST54-android-packages-apps-Nfc package before 130-20230215-23W07p0 for Android has an out-of-bounds read. |
CVE-2021-3600 | High | 7.8 | 2024-01-08 | It was discovered that the eBPF implementation in the Linux kernel did not properly track bounds information for 32 bit registers when performing div and mod o… |
CVE-2024-0322 | Critical | 9.1 | 2024-01-08 | Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.3-DEV. |
CVE-2023-38678 | Medium | 4.7 | 2024-01-03 | OOB access in paddle.mode in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service. |
CVE-2024-0207 | High | 7.8 | 2024-01-03 | HTTP3 dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file |
CVE-2023-49552 | High | 7.5 | 2024-01-02 | An Out of Bounds Write in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_op_json_stringify function in the msj.c file. |
CVE-2023-4280 | Critical | 9.3 | 2024-01-02 | An unvalidated input in Silicon Labs TrustZone implementation in v4.3.x and earlier of the Gecko SDK allows an attacker to access the trusted region of memory… |
CVE-2023-43512 | High | 7.5 | 2024-01-02 | Transient DOS while parsing GATT service data when the total amount of memory that is required by the multiple services is greater than the actual size of the… |
CVE-2023-33116 | High | 7.5 | 2024-01-02 | Transient DOS while parsing ieee80211_parse_mscs_ie in WIN WLAN driver. |
CVE-2023-26157 | Medium | 5.5 | 2024-01-02 | Versions of the package libredwg before 0.12.5.6384 are vulnerable to Denial of Service (DoS) due to an out-of-bounds read involving section->num_pages in deco… |
CVE-2023-32880 | Medium | 4.4 | 2024-01-02 | In battery, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution pri… |
CVE-2023-32878 | Medium | 4.4 | 2024-01-02 | In battery, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution pri… |
CVE-2023-32876 | Medium | 4.4 | 2024-01-02 | In keyInstall, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution… |
CVE-2023-32875 | Medium | 4.4 | 2024-01-02 | In keyInstall, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution… |
CVE-2023-52267 | High | 7.5 | 2023-12-31 | ehttp 1.0.6 before 17405b9 has a simple_log.cpp _log out-of-bounds-read during error logging for long strings. |
CVE-2023-51432 | Low | 3.2 | 2023-12-29 | Some Honor products are affected by out of bounds read vulnerability, successful exploitation could cause information leak. |
CVE-2023-23441 | Medium | 6.0 | 2023-12-29 | Some Honor products are affected by out of bounds read vulnerability, successful exploitation could cause information leak. |
CVE-2023-52152 | High | 7.5 | 2023-12-28 | mupnp/net/uri.c in mUPnP for C through 3.0.2 has an out-of-bounds read and application crash because it lacks a certain host length recalculation. |
CVE-2023-51713 | High | 7.5 | 2023-12-22 | make_ftp_cmd in main.c in ProFTPD before 1.3.8a has a one-byte out-of-bounds read, and daemon crash, because of mishandling of quote/backslash semantics. |
CVE-2023-6315 | High | 7.8 | 2023-12-19 | Out-of-bouds read vulnerability in FPWin Pro version 7.7.0.0 and all previous versions may allow attackers to execute arbitrary code via a specially crafted pr… |
CVE-2023-4020 | Critical | 9.0 | 2023-12-15 | An unvalidated input in a library function responsible for communicating between secure and non-secure memory in Silicon Labs TrustZone implementation allows r… |
CVE-2023-48638 | Medium | 5.5 | 2023-12-13 | Adobe Substance 3D Designer versions 13.0.0 (and earlier) and 13.1.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to discl… |
CVE-2023-48637 | Medium | 5.5 | 2023-12-13 | Adobe Substance 3D Designer versions 13.0.0 (and earlier) and 13.1.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to discl… |
CVE-2023-48636 | Medium | 5.5 | 2023-12-13 | Adobe Substance 3D Designer versions 13.0.0 (and earlier) and 13.1.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to discl… |
CVE-2023-48635 | Medium | 5.5 | 2023-12-13 | Adobe After Effects versions 24.0.3 (and earlier) and 23.6.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of… |
CVE-2023-47081 | Medium | 5.5 | 2023-12-13 | Adobe Substance 3D Stager versions 2.1.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An… |
CVE-2023-47080 | Medium | 5.5 | 2023-12-13 | Adobe Substance 3D Stager versions 2.1.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An… |
CVE-2023-47079 | Medium | 5.5 | 2023-12-13 | Adobe Dimension versions 3.4.10 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker… |
CVE-2023-47078 | Medium | 5.5 | 2023-12-13 | Adobe Dimension versions 3.4.10 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker… |
CVE-2023-47062 | Medium | 5.5 | 2023-12-13 | Adobe Dimension versions 3.4.10 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker… |
CVE-2023-47061 | Medium | 5.5 | 2023-12-13 | Adobe Dimension versions 3.4.10 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker… |
CVE-2023-47077 | Medium | 5.5 | 2023-12-13 | Adobe InDesign versions 19.0 (and earlier) and 17.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensit… |
CVE-2023-47074 | High | 7.8 | 2023-12-13 | Adobe Illustrator versions 28.0 (and earlier) and 27.9 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which cou… |
CVE-2023-6377 | High | 7.8 | 2023-12-13 | A flaw was found in xorg-server. Querying or changing XKB button actions such as moving from a touchpad to a mouse can result in out-of-bounds memory reads and… |
CVE-2023-36696 | High | 7.8 | 2023-12-12 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
CVE-2023-35635 | Medium | 5.5 | 2023-12-12 | Windows Kernel Denial of Service Vulnerability |
CVE-2023-35629 | Medium | 6.8 | 2023-12-12 | Microsoft USBHUB 3.0 Device Driver Remote Code Execution Vulnerability |
CVE-2023-42886 | High | 7.8 | 2023-12-12 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sonoma 14.2, macOS Ventura 13.6.3, macOS Monterey 12.7.2. A use… |
CVE-2023-6610 | High | 7.1 | 2023-12-08 | An out-of-bounds read vulnerability was found in smb2_dump_detail in fs/smb/client/smb2ops.c in the Linux Kernel. This issue could allow a local attacker to cr… |
CVE-2023-6606 | High | 7.1 | 2023-12-08 | An out-of-bounds read vulnerability was found in smbCalcSize in fs/smb/client/netmisc.c in the Linux Kernel. This issue could allow a local attacker to crash t… |
CVE-2023-48422 | Medium | 5.5 | 2023-12-08 | In Init of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with n… |
CVE-2023-48415 | Medium | 5.5 | 2023-12-08 | In Init of protocolembmsadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with… |
CVE-2023-48413 | Medium | 4.9 | 2023-12-08 | In Init of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with… |