CWE-125 · Out-of-bounds Read (page 41)
Page 41 of 94 — CVEs classified under CWE-125, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-32029 | High | 7.8 | 2023-06-14 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2023-32017 | High | 7.8 | 2023-06-14 | Microsoft PostScript Printer Driver Remote Code Execution Vulnerability |
CVE-2023-32011 | High | 7.5 | 2023-06-14 | Windows iSCSI Discovery Service Denial of Service Vulnerability |
CVE-2023-29373 | High | 8.8 | 2023-06-14 | Microsoft ODBC Driver Remote Code Execution Vulnerability |
CVE-2023-29167 | High | 7.8 | 2023-06-13 | Out-of-bound reads vulnerability exists in FRENIC RHC Loader v1.1.0.3. If a user opens a specially crafted FNE file, sensitive information on the system where… |
CVE-2023-33123 | High | 7.8 | 2023-06-13 | A vulnerability has been identified in JT2Go (All versions < V14.2.0.3), Teamcenter Visualization V13.2 (All versions < V13.2.0.13), Teamcenter Visualization V… |
CVE-2023-33122 | Low | 3.3 | 2023-06-13 | A vulnerability has been identified in JT2Go (All versions < V14.2.0.3), Teamcenter Visualization V13.2 (All versions < V13.2.0.13), Teamcenter Visualization V… |
CVE-2023-34100 | High | 7.3 | 2023-06-09 | Contiki-NG is an open-source, cross-platform operating system for IoT devices. When reading the TCP MSS option value from an incoming packet, the Contiki-NG OS… |
CVE-2023-24535 | High | 7.5 | 2023-06-08 | Parsing invalid messages can panic. Parsing a text-format message which contains a potential number consisting of a minus sign, one or more characters of white… |
CVE-2023-33537 | High | 8.1 | 2023-06-07 | TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a buffer overflow via the component /userRpm/FixMapCfgRpm. |
CVE-2023-33536 | High | 8.1 | 2023-06-07 | TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a buffer overflow via the component /userRpm/WlanMacFilterRpm. |
CVE-2023-0668 | Medium | 6.5 | 2023-06-07 | Due to failure in validating the length provided by an attacker-crafted IEEE-C37.118 packet, Wireshark version 4.0.5 and prior, by default, is susceptible to a… |
CVE-2023-31278 | High | 7.8 | 2023-06-06 | Horner Automation Cscape lacks proper validation of user-supplied data when parsing project files (e.g., HMI). This could lead to an out-of-bounds read. An att… |
CVE-2023-27916 | High | 7.8 | 2023-06-06 | The affected application lacks proper validation of user-supplied data when parsing font files (e.g., FNT). This could lead to an out-of-bounds… |
CVE-2023-32289 | High | 7.8 | 2023-06-06 | The affected application lacks proper validation of user-supplied data when parsing project files (e.g.., CSP). This could lead to an out-of-bounds… |
CVE-2023-32281 | High | 7.8 | 2023-06-06 | The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). This could lead to an out-of-bounds rea… |
CVE-2023-32545 | High | 7.8 | 2023-06-06 | The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). This could lead to an out-of-bounds… |
CVE-2023-20742 | Medium | 4.4 | 2023-06-06 | In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges… |
CVE-2023-20741 | Medium | 4.4 | 2023-06-06 | In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges… |
CVE-2023-20731 | Medium | 4.4 | 2023-06-06 | In wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges… |
CVE-2023-20730 | Medium | 4.4 | 2023-06-06 | In wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges… |
CVE-2023-20729 | Medium | 4.4 | 2023-06-06 | In wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges… |
CVE-2023-20728 | Medium | 4.4 | 2023-06-06 | In wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges… |
CVE-2023-20724 | Medium | 6.7 | 2023-06-06 | In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution priv… |
CVE-2023-20723 | Medium | 6.7 | 2023-06-06 | In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution priv… |
CVE-2023-20727 | Medium | 4.4 | 2023-06-06 | In wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges… |
CVE-2023-21669 | High | 8.2 | 2023-06-06 | Information Disclosure in WLAN HOST while sending DPP action frame to peer with an invalid source address. |
CVE-2023-21661 | High | 7.5 | 2023-06-06 | Transient DOS while parsing WLAN beacon or probe-response frame. |
CVE-2023-21660 | High | 7.5 | 2023-06-06 | Transient DOS in WLAN Firmware while parsing FT Information Elements. |
CVE-2023-21659 | High | 7.5 | 2023-06-06 | Transient DOS in WLAN Firmware while processing frames with missing header fields. |
CVE-2023-21658 | High | 7.5 | 2023-06-06 | Transient DOS in WLAN Firmware while processing the received beacon or probe response frame. |
CVE-2023-32206 | Medium | 6.5 | 2023-06-02 | An out-of-bound read could have led to a crash in the RLBox Expat driver. This vulnerability affects Firefox < 113, Firefox ESR < 102.11, and Thunderbird < 102… |
CVE-2023-25738 | Medium | 6.5 | 2023-06-02 | Members of the <code>DEVMODEW</code> struct set by the printer device driver weren't being validated and could have resulted in invalid values which in turn wo… |
CVE-2023-2977 | High | 7.1 | 2023-06-01 | A vulnerbility was found in OpenSC. This security flaw cause a buffer overrun vulnerability in pkcs15 cardos_have_verifyrc_package. The attacker can supply a s… |
CVE-2023-34256 | Medium | 5.5 | 2023-05-31 | An issue was discovered in the Linux kernel before 6.3.3. There is an out-of-bounds read in crc16 in lib/crc16.c when called from fs/ext4/super.c because ext4_… |
CVE-2022-48502 | High | 7.1 | 2023-05-31 | An issue was discovered in the Linux kernel before 6.2. The ntfs3 subsystem does not properly check for correctness during disk reads, leading to an out-of-bou… |
CVE-2022-48479 | Critical | 9.8 | 2023-05-26 | The facial recognition TA of some products has the out-of-bounds memory read vulnerability. Successful exploitation of this vulnerability may cause exceptions… |
CVE-2023-23301 | Critical | 9.8 | 2023-05-23 | The `news` MonkeyC operation code in CIQ API version 1.0.0 through 4.1.7 fails to check that string resources are not extending past the end of the expected se… |
CVE-2023-2838 | Critical | 9.1 | 2023-05-22 | Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.2.2. |
CVE-2023-2597 | High | 7.0 | 2023-05-22 | In Eclipse Openj9 before version 0.38.0, in the implementation of the shared cache (which is enabled by default in OpenJ9 builds) the size of a string is not p… |
CVE-2023-33285 | Medium | 5.3 | 2023-05-22 | An issue was discovered in Qt 5.x before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. QDnsLookup has a buffer over-read via a crafted reply… |
CVE-2023-21118 | Medium | 5.5 | 2023-05-15 | In unflattenString8 of Sensor.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with n… |
CVE-2023-21112 | Medium | 5.5 | 2023-05-15 | In AnalyzeMfcResp of NxpMfcReader.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure wit… |
CVE-2023-20719 | Medium | 4.4 | 2023-05-15 | In pqframework, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution pri… |
CVE-2023-20711 | Medium | 4.4 | 2023-05-15 | In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution priv… |
CVE-2023-20706 | Medium | 5.5 | 2023-05-15 | In apu, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution priv… |
CVE-2023-20703 | Medium | 5.5 | 2023-05-15 | In apu, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution priv… |
CVE-2023-20698 | Medium | 4.4 | 2023-05-15 | In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution priv… |
CVE-2023-20697 | Medium | 4.4 | 2023-05-15 | In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution priv… |
CVE-2023-25008 | High | 7.8 | 2023-05-12 | A malicious actor may convince a user to open a malicious USD file that may trigger an out-of-bounds read vulnerability which could result in code execution. |
CVE-2023-2512 | Medium | 6.5 | 2023-05-12 | Prior to version v1.20230419.0, the FormData API implementation was subject to an integer overflow. If a FormData instance contained more than 2^31 elements, t… |
CVE-2023-29281 | High | 7.8 | 2023-05-11 | Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a… |
CVE-2023-29280 | High | 7.8 | 2023-05-11 | Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a… |
CVE-2023-29279 | Medium | 5.5 | 2023-05-11 | Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. A… |
CVE-2023-29277 | Medium | 5.5 | 2023-05-11 | Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. A… |
CVE-2023-29275 | High | 7.8 | 2023-05-11 | Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a… |
CVE-2023-29274 | High | 7.8 | 2023-05-11 | Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a… |
CVE-2023-29273 | High | 7.8 | 2023-05-11 | Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a… |
CVE-2022-46378 | Medium | 6.5 | 2023-05-10 | An out-of-bounds read vulnerability exists in the PORT command parameter extraction functionality of Weston Embedded uC-FTPs v 1.98.00. A specially-crafted set… |
CVE-2022-46377 | Medium | 6.5 | 2023-05-10 | An out-of-bounds read vulnerability exists in the PORT command parameter extraction functionality of Weston Embedded uC-FTPs v 1.98.00. A specially-crafted set… |
CVE-2023-24475 | Medium | 6.0 | 2023-05-10 | Out of bounds read in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable information disclosure via local access. |
CVE-2023-23909 | Low | 2.8 | 2023-05-10 | Out-of-bounds read for some Intel(R) Trace Analyzer and Collector software before version 2021.8.0 published Dec 2022 may allow an authenticated user to potent… |
CVE-2022-21239 | Medium | 5.6 | 2023-05-10 | Out-of-bounds read in software for the Intel QAT Driver for Windows before version 1.9.0-0008 may allow an authenticated user to potentially enable information… |
CVE-2021-46794 | High | 7.5 | 2023-05-09 | Insufficient bounds checking in ASP (AMD Secure Processor) may allow for an out of bounds read in SMI (System Management Interface) mailbox checksum calculatio… |
CVE-2021-46765 | High | 7.5 | 2023-05-09 | Insufficient input validation in ASP may allow an attacker with a compromised SMM to induce out-of-bounds memory reads within the ASP, potentially leading to a… |
CVE-2021-46749 | High | 7.5 | 2023-05-09 | Insufficient bounds checking in ASP (AMD Secure Processor) may allow for an out of bounds read in SMI (System Management Interface) mailbox checksum calculatio… |
CVE-2021-26365 | High | 8.2 | 2023-05-09 | Certain size values in firmware binary headers could trigger out of bounds reads during signature validation, leading to denial of service or potentially limit… |
CVE-2023-24902 | High | 7.8 | 2023-05-09 | Win32k Elevation of Privilege Vulnerability |
CVE-2023-24900 | Medium | 5.9 | 2023-05-09 | Windows NTLM Security Support Provider Information Disclosure Vulnerability |
CVE-2023-30084 | Medium | 5.5 | 2023-05-09 | An issue found in libming swftophp v.0.4.8 allows a local attacker to cause a denial of service via the stackVal function in util/decompile.c. |
CVE-2023-29461 | High | 7.8 | 2023-05-09 | An arbitrary code execution vulnerability contained in Rockwell Automation's Arena Simulation software was reported that could potentially allow a malicious us… |
CVE-2023-29460 | High | 7.8 | 2023-05-09 | An arbitrary code execution vulnerability contained in Rockwell Automation's Arena Simulation software was reported that could potentially allow a malicious us… |
CVE-2023-30985 | Low | 3.3 | 2023-05-09 | A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 3), Solid Edge SE2023 (All versions < V223.0 Update 2). Affected applica… |
CVE-2022-48236 | Medium | 4.4 | 2023-05-09 | In MP3 encoder, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileg… |
CVE-2022-47334 | Medium | 4.4 | 2023-05-09 | In phasecheck server, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution pr… |
CVE-2022-39089 | Medium | 4.4 | 2023-05-09 | In mlog service, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privile… |
CVE-2021-31239 | High | 7.5 | 2023-05-09 | An issue found in SQLite SQLite3 v.3.35.4 that allows a remote attacker to cause a denial of service via the appendvfs.c function. |
CVE-2023-27949 | High | 7.8 | 2023-05-08 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, iOS 15.7.4 and iPadOS 15… |
CVE-2023-27946 | High | 7.8 | 2023-05-08 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Ventura 13.3, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6… |
CVE-2023-27945 | Medium | 6.3 | 2023-05-08 | This issue was addressed with improved entitlements. This issue is fixed in Xcode 14.3, macOS Big Sur 11.7.7, macOS Monterey 12.6.6. A sandboxed app may be abl… |
CVE-2023-27938 | High | 7.8 | 2023-05-08 | An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in GarageBand for macOS 10.4.8. Parsing a maliciously crafted MID… |
CVE-2023-27929 | Medium | 5.5 | 2023-05-08 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3, tvOS 16.4, iOS 16.4 and iPadOS 16.4, watchOS 9.4… |
CVE-2023-23528 | Medium | 6.5 | 2023-05-08 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in tvOS 16.4, iOS 16.4 and iPadOS 16.4. Processing a maliciously crafted… |
CVE-2023-29942 | Medium | 5.5 | 2023-05-05 | llvm-project commit a0138390 was discovered to contain a segmentation fault via the component mlir::Type::isa<mlir::LLVM::LLVMVoidType. |
CVE-2023-29941 | Medium | 5.5 | 2023-05-05 | llvm-project commit a0138390 was discovered to contain a segmentation fault via the component matchAndRewriteSortOp<mlir::sparse_tensor::SortOp>(mlir::sparse_t… |
CVE-2023-29939 | Medium | 5.5 | 2023-05-05 | llvm-project commit a0138390 was discovered to contain a segmentation fault via the component mlir::spirv::TargetEnv::TargetEnv(mlir::spirv::TargetEnvAttr). |
CVE-2023-29934 | Medium | 5.5 | 2023-05-05 | llvm-project commit 6c01b5c was discovered to contain a segmentation fault via the component mlir::Type::getDialect(). |
CVE-2023-29933 | Medium | 5.5 | 2023-05-05 | llvm-project commit bd456297 was discovered to contain a segmentation fault via the component mlir::Block::getArgument. |
CVE-2023-21511 | Medium | 4.4 | 2023-05-04 | Out-of-bounds Read vulnerability while processing CMD_COLDWALLET_BTC_SET_PRV_UTXO in bc_core trustlet from Samsung Blockchain Keystore prior to version 1.3.12… |
CVE-2023-21510 | Medium | 4.4 | 2023-05-04 | Out-of-bounds Read vulnerability while processing BC_TUI_CMD_UPDATE_SCREEN in bc_tui trustlet from Samsung Blockchain Keystore prior to version 1.3.12.1 allows… |
CVE-2023-21507 | Medium | 4.4 | 2023-05-04 | Out-of-bounds Read vulnerability while processing BC_TUI_CMD_SEND_RESOURCE_DATA_ARRAY command in bc_tui trustlet from Samsung Blockchain Keystore prior to vers… |
CVE-2022-43681 | Medium | 6.5 | 2023-05-03 | An out-of-bounds read exists in the BGP daemon of FRRouting FRR through 8.4. When sending a malformed BGP OPEN message that ends with the option length octet (… |
CVE-2022-40318 | Medium | 6.5 | 2023-05-03 | An issue was discovered in bgpd in FRRouting (FRR) through 8.4. By crafting a BGP OPEN message with an option of type 0xff (Extended Length from RFC 9072), att… |
CVE-2022-40302 | Medium | 6.5 | 2023-05-03 | An issue was discovered in bgpd in FRRouting (FRR) through 8.4. By crafting a BGP OPEN message with an option of type 0xff (Extended Length from RFC 9072), att… |
CVE-2023-27892 | Low | 3.8 | 2023-05-02 | Insufficient length checks in the ShapeShift KeepKey hardware wallet firmware before 7.7.0 allow a global buffer overflow via crafted messages. Flaws in cf_con… |
CVE-2022-33273 | High | 7.3 | 2023-05-02 | Information disclosure due to buffer over-read in Trusted Execution Environment while QRKS report generation. |
CVE-2022-40505 | High | 8.2 | 2023-05-02 | Information disclosure due to buffer over-read in Modem while parsing DNS hostname. |
CVE-2023-30546 | Critical | 9.8 | 2023-04-26 | Contiki-NG is an operating system for Internet of Things devices. An off-by-one error can be triggered in the Antelope database management system in the Contik… |
CVE-2023-20870 | Medium | 6.0 | 2023-04-25 | VMware Workstation and Fusion contain an out-of-bounds read vulnerability that exists in the functionality for sharing host Bluetooth devices with the virtual… |
CVE-2023-25514 | Medium | 5.3 | 2023-04-22 | NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in cuobjdump, where an attacker may cause an out-of-bounds read by tricking a user into runn… |