CWE-125 · Out-of-bounds Read (page 42)
Page 42 of 99 — CVEs classified under CWE-125, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-48413 | Medium | 4.9 | 2023-12-08 | In Init of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with… |
CVE-2023-48411 | Medium | 5.5 | 2023-12-08 | In SignalStrengthAdapter::FillGsmSignalStrength() of protocolmiscadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could… |
CVE-2023-48410 | High | 7.5 | 2023-12-08 | In cd_ParseMsg of cd_codec.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no ad… |
CVE-2023-48408 | Medium | 5.5 | 2023-12-08 | In ProtocolNetSimFileInfoAdapter() of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local in… |
CVE-2023-48404 | High | 7.5 | 2023-12-08 | In ProtocolMiscCarrierConfigSimInfoIndAdapter of protocolmiscadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead… |
CVE-2023-48401 | Medium | 5.5 | 2023-12-08 | In GetSizeOfEenlRecords of protocoladapter.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information d… |
CVE-2023-48399 | Medium | 5.5 | 2023-12-08 | In ProtocolMiscATCommandAdapter::Init() of protocolmiscadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to lo… |
CVE-2023-48398 | High | 7.5 | 2023-12-08 | In ProtocolNetAcBarringInfo::ProtocolNetAcBarringInfo() of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This c… |
CVE-2023-48397 | Medium | 4.9 | 2023-12-08 | In Init of protocolcalladapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with… |
CVE-2023-33098 | High | 7.5 | 2023-12-05 | Transient DOS while parsing WPA IES, when it is passed with length more than expected size. |
CVE-2023-33097 | High | 7.5 | 2023-12-05 | Transient DOS in WLAN Firmware while processing a FTMR frame. |
CVE-2023-33081 | High | 7.5 | 2023-12-05 | Transient DOS while converting TWT (Target Wake Time) frame parameters in the OTA broadcast. |
CVE-2023-33080 | High | 7.5 | 2023-12-05 | Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame. |
CVE-2023-49285 | High | 8.6 | 2023-12-04 | Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a Buffer Overread bug Squid is vulnerable to a Denial of Service attack agai… |
CVE-2023-45781 | Medium | 5.5 | 2023-12-04 | In parse_gap_data of utils.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with User… |
CVE-2023-40083 | Medium | 5.5 | 2023-12-04 | In parse_gap_data of utils.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with User… |
CVE-2023-32870 | Medium | 6.7 | 2023-12-04 | In display drm, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution pr… |
CVE-2023-32863 | Medium | 6.7 | 2023-12-04 | In display drm, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution pr… |
CVE-2023-32862 | Medium | 6.7 | 2023-12-04 | In display, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with System execution pri… |
CVE-2023-32861 | Medium | 6.7 | 2023-12-04 | In display, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with System execution pri… |
CVE-2023-32857 | Medium | 4.4 | 2023-12-04 | In display, there is a possible out of bounds read due to an incorrect status check. This could lead to local information disclosure with System execution priv… |
CVE-2023-32856 | Medium | 4.4 | 2023-12-04 | In display, there is a possible out of bounds read due to an incorrect status check. This could lead to local information disclosure with System execution priv… |
CVE-2023-42731 | Medium | 4.4 | 2023-12-04 | In Gnss service, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privile… |
CVE-2023-42728 | Medium | 5.5 | 2023-12-04 | In phasecheckserver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with no additional execut… |
CVE-2023-42726 | Medium | 4.4 | 2023-12-04 | In TeleService, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileg… |
CVE-2023-42725 | Medium | 4.4 | 2023-12-04 | In gpu driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privilege… |
CVE-2023-42724 | Medium | 4.4 | 2023-12-04 | In gpu driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privilege… |
CVE-2023-42723 | Medium | 5.5 | 2023-12-04 | In camera service, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with no additional executio… |
CVE-2023-42720 | Medium | 5.5 | 2023-12-04 | In video service, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with no additional execution… |
CVE-2023-42719 | Medium | 5.5 | 2023-12-04 | In video service, there is a possible out of bounds read due to a incorrect bounds check. This could lead to local denial of service with no additional executi… |
CVE-2023-42684 | Medium | 4.4 | 2023-12-04 | In gsp driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privilege… |
CVE-2023-42683 | Medium | 4.4 | 2023-12-04 | In gsp driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privilege… |
CVE-2023-42680 | Medium | 4.4 | 2023-12-04 | In gpu driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privilege… |
CVE-2023-42916 | Medium | 6.5 | 2023-11-30 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Pr… |
CVE-2023-20241 | Medium | 5.5 | 2023-11-22 | Multiple vulnerabilities in Cisco Secure Client Software, formerly AnyConnect Secure Mobility Client, could allow an authenticated, local attacker to cause a d… |
CVE-2023-20240 | Medium | 5.5 | 2023-11-22 | Multiple vulnerabilities in Cisco Secure Client Software, formerly AnyConnect Secure Mobility Client, could allow an authenticated, local attacker to cause a d… |
CVE-2023-6204 | Medium | 6.5 | 2023-11-21 | On some systems—depending on the graphics settings and drivers—it was possible to force an out-of-bounds read and leak memory data into the images created on t… |
CVE-2023-48736 | Medium | 6.5 | 2023-11-18 | In International Color Consortium DemoIccMAX 3e7948b, CIccCLUT::Interp2d in IccTagLut.cpp in libSampleICC.a has an out-of-bounds read. |
CVE-2023-48025 | High | 8.1 | 2023-11-17 | Liblisp through commit 4c65969 was discovered to contain a out-of-bounds-read vulnerability in unsigned get_length(lisp_cell_t * x) at eval.c |
CVE-2023-47071 | Medium | 5.5 | 2023-11-17 | Adobe After Effects version 24.0.2 (and earlier) and 23.6 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of se… |
CVE-2023-47069 | High | 7.8 | 2023-11-17 | Adobe After Effects version 24.0.2 (and earlier) and 23.6 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which… |
CVE-2023-47068 | High | 7.8 | 2023-11-17 | Adobe After Effects version 24.0.2 (and earlier) and 23.6 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which… |
CVE-2023-47067 | High | 7.8 | 2023-11-17 | Adobe After Effects version 24.0.2 (and earlier) and 23.6 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which… |
CVE-2023-47066 | High | 7.8 | 2023-11-17 | Adobe After Effects version 24.0.2 (and earlier) and 23.6 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which… |
CVE-2023-44326 | Medium | 5.5 | 2023-11-17 | Adobe Dimension versions 3.4.9 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker… |
CVE-2023-44325 | Medium | 5.5 | 2023-11-17 | Adobe Animate versions 23.0.2 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker c… |
CVE-2023-47059 | High | 7.8 | 2023-11-16 | Adobe Premiere Pro version 24.0 (and earlier) and 23.6 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which cou… |
CVE-2023-47058 | High | 7.8 | 2023-11-16 | Adobe Premiere Pro version 24.0 (and earlier) and 23.6 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which cou… |
CVE-2023-47052 | Medium | 5.5 | 2023-11-16 | Adobe Audition version 24.0 (and earlier) and 23.6.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensiti… |
CVE-2023-47050 | Medium | 5.5 | 2023-11-16 | Adobe Audition version 24.0 (and earlier) and 23.6.1 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could… |
CVE-2023-47049 | Medium | 5.5 | 2023-11-16 | Adobe Audition version 24.0 (and earlier) and 23.6.1 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could… |
CVE-2023-47048 | Medium | 5.5 | 2023-11-16 | Adobe Audition version 24.0 (and earlier) and 23.6.1 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could… |
CVE-2023-26368 | High | 7.8 | 2023-11-16 | Adobe InCopy versions 18.5 (and earlier) and 17.4.2 (and earlier) are affected by are affected by an out-of-bounds read vulnerability when parsing a crafted fi… |
CVE-2023-6121 | Medium | 4.3 | 2023-11-16 | An out-of-bounds read vulnerability was found in the NVMe-oF/TCP subsystem in the Linux kernel. This issue may allow a remote attacker to send a crafted TCP pa… |
CVE-2023-47043 | High | 7.8 | 2023-11-16 | Adobe Media Encoder version 24.0.2 (and earlier) and 23.6 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which… |
CVE-2023-47040 | High | 7.8 | 2023-11-16 | Adobe Media Encoder version 24.0.2 (and earlier) and 23.6 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which… |
CVE-2023-44335 | Medium | 5.5 | 2023-11-16 | Adobe Photoshop versions 24.7.1 (and earlier) and 25.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensi… |
CVE-2023-44334 | Medium | 5.5 | 2023-11-16 | Adobe Photoshop versions 24.7.1 (and earlier) and 25.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensi… |
CVE-2023-44333 | Medium | 5.5 | 2023-11-16 | Adobe Photoshop versions 24.7.1 (and earlier) and 25.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensi… |
CVE-2023-44332 | Medium | 5.5 | 2023-11-16 | Adobe Photoshop versions 24.7.1 (and earlier) and 25.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensi… |
CVE-2023-44331 | Medium | 5.5 | 2023-11-16 | Adobe Photoshop versions 24.7.1 (and earlier) and 25.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensi… |
CVE-2023-6174 | Medium | 6.3 | 2023-11-16 | SSH dissector crash in Wireshark 4.0.0 to 4.0.10 allows denial of service via packet injection or crafted capture file |
CVE-2023-44360 | Medium | 5.5 | 2023-11-16 | Adobe Acrobat Reader versions 23.006.20360 (and earlier) and 20.005.30524 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to… |
CVE-2023-44358 | Medium | 5.5 | 2023-11-16 | Adobe Acrobat Reader versions 23.006.20360 (and earlier) and 20.005.30524 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to… |
CVE-2023-44357 | Medium | 5.5 | 2023-11-16 | Adobe Acrobat Reader versions 23.006.20360 (and earlier) and 20.005.30524 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to… |
CVE-2023-44356 | Medium | 5.5 | 2023-11-16 | Adobe Acrobat Reader versions 23.006.20360 (and earlier) and 20.005.30524 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to… |
CVE-2023-44348 | Medium | 5.5 | 2023-11-16 | Adobe Acrobat Reader versions 23.006.20360 (and earlier) and 20.005.30524 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to… |
CVE-2023-44340 | Medium | 5.5 | 2023-11-16 | Adobe Acrobat Reader versions 23.006.20360 (and earlier) and 20.005.30524 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to… |
CVE-2023-44339 | Medium | 5.5 | 2023-11-16 | Adobe Acrobat Reader versions 23.006.20360 (and earlier) and 20.005.30524 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to… |
CVE-2023-44338 | High | 7.8 | 2023-11-16 | Adobe Acrobat Reader versions 23.006.20360 (and earlier) and 20.005.30524 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a craf… |
CVE-2023-44337 | High | 7.8 | 2023-11-16 | Adobe Acrobat Reader versions 23.006.20360 (and earlier) and 20.005.30524 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a craf… |
CVE-2023-47264 | High | 7.5 | 2023-11-16 | Certain WithSecure products have a buffer over-read whereby processing certain fuzz file types may cause a denial of service (DoS). This affects WithSecure Cli… |
CVE-2023-47585 | High | 7.8 | 2023-11-15 | Out-of-bounds read vulnerability exists in V-Server V4.0.18.0 and earlier and V-Server Lite V4.0.18.0 and earlier. If a user opens a specially crafted VPR file… |
CVE-2023-47583 | High | 7.8 | 2023-11-15 | Multiple out-of-bounds read vulnerabilities exist in TELLUS Simulator V4.0.17.0 and earlier. If a user opens a specially crafted file (X1 or V9 file), informat… |
CVE-2023-47581 | High | 7.8 | 2023-11-15 | Out-of-bounds read vulnerability exists in TELLUS V4.0.17.0 and earlier and TELLUS Lite V4.0.17.0 and earlier. If a user opens a specially crafted file (X1, V8… |
CVE-2023-28404 | Low | 3.8 | 2023-11-14 | Out-of-bounds read in the Intel(R) Arc(TM) & Iris(R) Xe Graphics - WHQL - Windows drivers before version 31.0.101.4255 may allow an authenticated user to poten… |
CVE-2023-28376 | Medium | 6.5 | 2023-11-14 | Out-of-bounds read in the firmware for some Intel(R) E810 Ethernet Controllers and Adapters before version 1.7.1 may allow an unauthenticated user to potential… |
CVE-2023-25756 | Medium | 4.6 | 2023-11-14 | Out-of-bounds read in the BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via adjacent… |
CVE-2021-26345 | Low | 1.9 | 2023-11-14 | Failure to validate the value in APCB may allow a privileged attacker to tamper with the APCB token to force an out-of-bounds memory read potentially resulting… |
CVE-2023-36428 | Medium | 5.5 | 2023-11-14 | Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability |
CVE-2023-36424 | High | 7.8 | 2023-11-14 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
CVE-2023-45079 | Medium | 6.7 | 2023-11-08 | A memory leakage vulnerability was reported in the NvmramSmm SMM driver that may allow a local attacker with elevated privileges to write to NVRAM variables. |
CVE-2023-45078 | Medium | 6.7 | 2023-11-08 | A memory leakage vulnerability was reported in the DustFilterAlertSmm SMM driver that may allow a local attacker with elevated privileges to write to NVRAM var… |
CVE-2023-45077 | Medium | 6.7 | 2023-11-08 | A memory leakage vulnerability was reported in the 534D0740 DXE driver that may allow a local attacker with elevated privileges to write to NVRAM variables. |
CVE-2023-45076 | Medium | 6.7 | 2023-11-08 | A memory leakage vulnerability was reported in the 534D0140 DXE driver that may allow a local attacker with elevated privileges to write to NVRAM variables. |
CVE-2023-45075 | Medium | 6.7 | 2023-11-08 | A memory leakage vulnerability was reported in the SWSMI_Shadow DXE driver that may allow a local attacker with elevated privileges to write to NVRAM variables. |
CVE-2023-43574 | Medium | 4.4 | 2023-11-08 | A buffer over-read was reported in the LEMALLDriversConnectedEventHook module in some Lenovo Desktop products that may allow a local attacker with elevated pri… |
CVE-2023-43572 | Medium | 4.4 | 2023-11-08 | A buffer over-read was reported in the BiosExtensionLoader module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to d… |
CVE-2023-46767 | High | 7.5 | 2023-11-08 | Out-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this vulnerability may cause process exceptions. |
CVE-2023-46766 | High | 7.5 | 2023-11-08 | Out-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this vulnerability may cause process exceptions. |
CVE-2023-46762 | High | 7.5 | 2023-11-08 | Out-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this vulnerability may cause process exceptions. |
CVE-2023-5998 | High | 7.5 | 2023-11-07 | Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.3.0-DEV. |
CVE-2023-5179 | High | 7.8 | 2023-11-07 | An issue was discovered in Open Design Alliance Drawings SDK before 2024.10. A corrupted value for the start of MiniFat sector in a crafted DGN file leads to a… |
CVE-2023-47456 | Critical | 9.1 | 2023-11-07 | Tenda AX1806 V1.0.0.1 contains a stack overflow vulnerability in function sub_455D4, called by function fromSetWirelessRepeat. |
CVE-2023-42538 | Medium | 5.9 | 2023-11-07 | An improper input validation in saped_rec_silence in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write. |
CVE-2023-42537 | High | 8.4 | 2023-11-07 | An improper input validation in get_head_crc in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write. |
CVE-2023-42536 | High | 8.4 | 2023-11-07 | An improper input validation in saped_dec in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write. |
CVE-2023-33061 | High | 7.5 | 2023-11-07 | Transient DOS in WLAN Firmware while parsing WLAN beacon or probe-response frame. |
CVE-2023-33048 | High | 7.5 | 2023-11-07 | Transient DOS in WLAN Firmware while parsing t2lm buffers. |
CVE-2023-33047 | High | 7.5 | 2023-11-07 | Transient DOS in WLAN Firmware while parsing no-inherit IES. |