CWE-125 · Out-of-bounds Read (page 43)
Page 43 of 99 — CVEs classified under CWE-125, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-4535 | Medium | 4.5 | 2023-11-06 | An out-of-bounds read vulnerability was found in OpenSC packages within the MyEID driver when handling symmetric key encryption. Exploiting this flaw requires… |
CVE-2023-32825 | Medium | 5.5 | 2023-11-06 | In bluethooth service, there is a possible out of bounds reads due to improper input validation. This could lead to local information disclosure with no additi… |
CVE-2023-1194 | High | 7.1 | 2023-11-03 | An out-of-bounds (OOB) memory read flaw was found in parse_lease_state in the KSMBD implementation of the in-kernel samba server and CIFS in the Linux kernel… |
CVE-2023-46724 | High | 8.6 | 2023-11-01 | Squid is a caching proxy for the Web. Due to an Improper Validation of Specified Index bug, Squid versions 3.3.0.1 through 5.9 and 6.0 prior to 6.4 compiled us… |
CVE-2023-40101 | Medium | 5.5 | 2023-10-30 | In collapse of canonicalize_md.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no… |
CVE-2023-21379 | Medium | 4.4 | 2023-10-30 | In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the Bluetooth server wit… |
CVE-2023-21372 | High | 7.8 | 2023-10-30 | In libdexfile, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with no additional execut… |
CVE-2023-21368 | Medium | 5.5 | 2023-10-30 | In Audio, there is a possible out of bounds read due to missing bounds check. This could lead to local information disclosure with no additional execution priv… |
CVE-2023-21359 | Medium | 4.4 | 2023-10-30 | In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the Bluetooth server wit… |
CVE-2023-21357 | Medium | 4.4 | 2023-10-30 | In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges… |
CVE-2023-21353 | High | 7.5 | 2023-10-30 | In NFA, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution pri… |
CVE-2023-21352 | Medium | 5.5 | 2023-10-30 | In NFA, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution priv… |
CVE-2023-21347 | High | 7.5 | 2023-10-30 | In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional executi… |
CVE-2023-21315 | Medium | 6.5 | 2023-10-30 | In Bluetooth, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote (proximal/adjacent) information disclosure with n… |
CVE-2023-21314 | Medium | 4.4 | 2023-10-30 | In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privi… |
CVE-2023-21309 | Medium | 5.5 | 2023-10-30 | In libcore, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution… |
CVE-2023-21308 | Medium | 5.5 | 2023-10-30 | In Composer, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with no additional executio… |
CVE-2023-45897 | Medium | 5.5 | 2023-10-28 | exfatprogs before 1.2.2 allows out-of-bounds memory access, such as in read_file_dentry_set. |
CVE-2023-46570 | Critical | 9.8 | 2023-10-28 | An out-of-bounds read in radare2 v.5.8.9 and before exists in the print_insn32 function of libr/arch/p/nds32/nds32-dis.h. |
CVE-2023-46569 | Critical | 9.8 | 2023-10-28 | An out-of-bounds read in radare2 v.5.8.9 and before exists in the print_insn32_fpu function of libr/arch/p/nds32/nds32-dis.h. |
CVE-2023-46407 | Medium | 5.5 | 2023-10-27 | FFmpeg prior to commit bf814 was discovered to contain an out of bounds read via the dist->alphabet_size variable in the read_vlc_prefix() function. |
CVE-2023-27854 | High | 7.8 | 2023-10-27 | An arbitrary code execution vulnerability was reported to Rockwell Automation in Arena Simulation that could potentially allow a malicious user to commit unau… |
CVE-2023-39936 | High | 7.8 | 2023-10-26 | In Ashlar-Vellum Graphite v13.0.48, the affected application lacks proper validation of user-supplied data when parsing VC6 files. This could lead to an out… |
CVE-2023-4693 | Medium | 5.3 | 2023-10-25 | An out-of-bounds read flaw was found on grub2's NTFS filesystem driver. This issue may allow a physically present attacker to present a specially crafted NTFS… |
CVE-2023-46603 | High | 8.8 | 2023-10-23 | In International Color Consortium DemoIccMAX 79ecb74, there is an out-of-bounds read in the CIccPRMG::GetChroma function in IccProfLib/IccPrmg.cpp in libSample… |
CVE-2023-46331 | Medium | 5.5 | 2023-10-23 | WebAssembly wabt 1.0.33 has an Out-of-Bound Memory Read in in DataSegment::IsValidRange(), which lead to segmentation fault. |
CVE-2023-31122 | High | 7.5 | 2023-10-23 | Out-of-bounds Read vulnerability in mod_macro of Apache HTTP Server.This issue affects Apache HTTP Server: through 2.4.57. |
CVE-2023-45682 | Medium | 5.3 | 2023-10-21 | stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of bounds read in `DECODE` macro when `var` is… |
CVE-2023-45662 | Medium | 6.5 | 2023-10-21 | stb_image is a single file MIT licensed library for processing images. When `stbi_set_flip_vertically_on_load` is set to `TRUE` and `req_comp` is set to a numb… |
CVE-2023-45661 | Medium | 6.5 | 2023-10-21 | stb_image is a single file MIT licensed library for processing images. A crafted image file may trigger out of bounds memcpy read in `stbi__gif_load_next`. Thi… |
CVE-2023-3487 | High | 7.7 | 2023-10-20 | An integer overflow in Silicon Labs Gecko Bootloader version 4.3.1 and earlier allows unbounded memory access when reading from or writing to storage slots. |
CVE-2023-34044 | High | 7.1 | 2023-10-20 | VMware Workstation( 17.x prior to 17.5) and Fusion(13.x prior to 13.5) contain an out-of-bounds read vulnerability that exists in the functionality for sharin… |
CVE-2023-5059 | High | 7.8 | 2023-10-19 | Santesoft Sante FFT Imaging lacks proper validation of user-supplied data when parsing DICOM files. This could lead to an out-of-bounds read. An attacker… |
CVE-2023-35663 | High | 7.5 | 2023-10-18 | In Init of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclo… |
CVE-2023-35656 | High | 7.5 | 2023-10-18 | In multiple functions of protocolembmsadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote inf… |
CVE-2023-22113 | Low | 2.7 | 2023-10-17 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are 8.0.33 and prior… |
CVE-2023-23581 | High | 7.5 | 2023-10-12 | A denial-of-service vulnerability exists in the vpnserver EnSafeHttpHeaderValueStr functionality of SoftEther VPN 5.01.9674 and 5.02. A specially crafted netwo… |
CVE-2023-43789 | Medium | 5.5 | 2023-10-12 | A vulnerability was found in libXpm where a vulnerability exists due to a boundary condition, a local user can trigger an out-of-bounds read error and read con… |
CVE-2023-35661 | High | 7.5 | 2023-10-11 | In ProfSixDecomTcpSACKoption of RohcPacketCommon.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informati… |
CVE-2023-35655 | Medium | 6.7 | 2023-10-11 | In CanConvertPadV2Op of darwinn_mlir_converter_aidl.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local escalati… |
CVE-2023-35654 | Medium | 6.7 | 2023-10-11 | In ctrl_roi of stmvl53l1_module.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege wi… |
CVE-2023-35652 | High | 7.5 | 2023-10-11 | In ProtocolEmergencyCallListIndAdapter::Init of protocolcalladapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead… |
CVE-2023-35648 | Critical | 9.8 | 2023-10-11 | In ProtocolMiscLceIndAdapter::GetConfLevel() of protocolmiscadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead… |
CVE-2023-35647 | Critical | 9.8 | 2023-10-11 | In ProtocolEmbmsGlobalCellIdAdapter::Init() of protocolembmsadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead… |
CVE-2023-44114 | High | 7.5 | 2023-10-11 | Out-of-bounds array vulnerability in the dataipa module.Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2023-5520 | High | 7.7 | 2023-10-11 | Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.2.2. |
CVE-2023-44103 | High | 7.5 | 2023-10-11 | Out-of-bounds read vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2023-38217 | Medium | 5.5 | 2023-10-11 | Adobe Bridge versions 12.0.4 (and earlier) and 13.0.3 (and earlier) are affected by an Out-of-bounds Read vulnerability that could lead to disclosure of sensit… |
CVE-2023-42138 | High | 7.8 | 2023-10-11 | Out-of-bounds read vulnerability exists in KV STUDIO Ver. 11.62 and earlier and KV REPLAY VIEWER Ver. 2.62 and earlier. If this vulnerability is exploited, inf… |
CVE-2023-36728 | Medium | 5.5 | 2023-10-10 | Microsoft SQL Server Denial of Service Vulnerability |
CVE-2023-36701 | High | 7.8 | 2023-10-10 | Microsoft Resilient File System (ReFS) Elevation of Privilege Vulnerability |
CVE-2023-43788 | Medium | 5.5 | 2023-10-10 | A vulnerability was found in libXpm due to a boundary condition within the XpmCreateXpmImageFromBuffer() function. This flaw allows a local attacker to trigger… |
CVE-2023-43785 | Medium | 6.5 | 2023-10-10 | A vulnerability was found in libX11 due to a boundary condition within the _XkbReadKeySyms() function. This flaw allows a local user to trigger an out-of-bound… |
CVE-2023-44087 | High | 7.8 | 2023-10-10 | A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0009), Tecnomatix Plant Simulation V2302 (All versions < V2302.0… |
CVE-2023-44086 | High | 7.8 | 2023-10-10 | A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0009), Tecnomatix Plant Simulation V2302 (All versions < V2302.0… |
CVE-2023-44085 | High | 7.8 | 2023-10-10 | A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0009), Tecnomatix Plant Simulation V2302 (All versions < V2302.0… |
CVE-2023-44084 | High | 7.8 | 2023-10-10 | A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0009), Tecnomatix Plant Simulation V2302 (All versions < V2302.0… |
CVE-2023-39194 | Low | 3.2 | 2023-10-09 | A flaw was found in the XFRM subsystem in the Linux kernel. The specific flaw exists within the processing of state filters, which can result in a read past th… |
CVE-2023-39193 | Medium | 6.1 | 2023-10-09 | A flaw was found in the Netfilter subsystem in the Linux kernel. The sctp_mt_check did not validate the flag_count field. This flaw allows a local privileged (… |
CVE-2023-39192 | Medium | 6.7 | 2023-10-09 | A flaw was found in the Netfilter subsystem in the Linux kernel. The xt_u32 module did not validate the fields in the xt_u32 structure. This flaw allows a loca… |
CVE-2023-39189 | Medium | 5.1 | 2023-10-09 | A flaw was found in the Netfilter subsystem in the Linux kernel. The nfnl_osf_add_callback function did not validate the user mode controlled opt_num field. Th… |
CVE-2023-42755 | Medium | 6.5 | 2023-10-05 | A flaw was found in the IPv4 Resource Reservation Protocol (RSVP) classifier in the Linux kernel. The xprt pointer may go beyond the linear part of the skb, le… |
CVE-2023-5377 | High | 7.1 | 2023-10-04 | Out-of-bounds Read in GitHub repository gpac/gpac prior to v2.2.2-DEV. |
CVE-2023-33027 | High | 7.5 | 2023-10-03 | Transient DOS in WLAN Firmware while parsing rsn ies. |
CVE-2023-28571 | Medium | 6.1 | 2023-10-03 | Information disclosure in WLAN HOST while processing the WLAN scan descriptor list during roaming scan. |
CVE-2023-42822 | Medium | 4.6 | 2023-09-27 | xrdp is an open source remote desktop protocol server. Access to the font glyphs in xrdp_painter.c is not bounds-checked . Since some of this data is controlla… |
CVE-2023-41232 | Medium | 5.5 | 2023-09-27 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.7, iOS 17 and iPadOS 17, macOS Ventura 13.6, iOS 16… |
CVE-2023-40436 | Critical | 9.1 | 2023-09-27 | The issue was addressed with improved bounds checks. This issue is fixed in macOS Sonoma 14. An attacker may be able to cause unexpected system termination or… |
CVE-2023-40410 | Medium | 5.5 | 2023-09-27 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.6, tvOS 17, macOS Monterey 12.7, watchOS 10, iOS 17… |
CVE-2023-4156 | Medium | 4.4 | 2023-09-25 | A heap out-of-bounds read flaw was found in builtin.c in the gawk package. This issue may lead to a crash and could be used to read sensitive information. |
CVE-2023-42821 | High | 7.5 | 2023-09-22 | The package `github.com/gomarkdown/markdown` is a Go library for parsing Markdown text and rendering as HTML. Prior to pseudoversion `0.0.0-20230922105210-14b1… |
CVE-2023-4527 | Medium | 6.5 | 2023-09-18 | A flaw was found in glibc. When the getaddrinfo function is called with the AF_UNSPEC address family and the system is configured with no-aaaa mode via /etc/re… |
CVE-2023-37459 | Medium | 5.3 | 2023-09-15 | Contiki-NG is an operating system for internet-of-things devices. In versions 4.9 and prior, when a packet is received, the Contiki-NG network stack attempts t… |
CVE-2023-37281 | Medium | 5.3 | 2023-09-15 | Contiki-NG is an operating system for internet-of-things devices. In versions 4.9 and prior, when processing the various IPv6 header fields during IPHC header… |
CVE-2023-25584 | Medium | 6.3 | 2023-09-14 | An out-of-bounds read flaw was found in the parse_module function in bfd/vms-alpha.c in Binutils. |
CVE-2023-36803 | Medium | 5.5 | 2023-09-12 | Windows Kernel Information Disclosure Vulnerability |
CVE-2023-36766 | High | 7.8 | 2023-09-12 | Microsoft Excel Information Disclosure Vulnerability |
CVE-2023-35679 | Medium | 5.5 | 2023-09-11 | In MtpPropertyValue of MtpProperty.h, there is a possible out of bounds read due to uninitialized data. This could lead to local information disclosure with no… |
CVE-2023-35664 | Medium | 5.5 | 2023-09-11 | In convertSubgraphFromHAL of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disc… |
CVE-2022-34238 | Medium | 5.5 | 2023-09-11 | Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 20.005.30334 (and earlier) are affected by an out-of-bounds read vulnerabili… |
CVE-2022-28832 | High | 7.8 | 2023-09-11 | Adobe InDesign versions 17.1 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which coul… |
CVE-2019-7819 | Medium | 5.5 | 2023-09-11 | Adobe Acrobat Reader versions 2019.010.20098 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory… |
CVE-2023-37377 | Low | 2.0 | 2023-09-08 | An issue was discovered in Samsung Exynos Mobile Processor and Wearable Processor (Exynos 980, Exynos 850, Exynos 2100, and Exynos W920). Improper handling of… |
CVE-2021-44195 | Low | 3.3 | 2023-09-07 | Adobe After Effects versions 22.0 (and earlier) and 18.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of s… |
CVE-2021-44194 | Low | 3.3 | 2023-09-07 | Adobe After Effects versions 22.0 (and earlier) and 18.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of s… |
CVE-2021-44193 | Low | 3.3 | 2023-09-07 | Adobe After Effects versions 22.0 (and earlier) and 18.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of s… |
CVE-2021-44192 | Low | 3.3 | 2023-09-07 | Adobe After Effects versions 22.0 (and earlier) and 18.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of s… |
CVE-2021-44191 | Low | 3.3 | 2023-09-07 | Adobe After Effects versions 22.0 (and earlier) and 18.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of s… |
CVE-2021-44190 | Low | 3.3 | 2023-09-07 | Adobe After Effects versions 22.0 (and earlier) and 18.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of s… |
CVE-2021-44188 | High | 7.8 | 2023-09-07 | Adobe After Effects versions 22.0 (and earlier) and 18.4.2 (and earlier) are affected by an out-of-bounds read vulnerability which could result in a read past… |
CVE-2021-43751 | Low | 3.3 | 2023-09-07 | Adobe Premiere Pro versions 22.0 (and earlier) and 15.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of se… |
CVE-2021-43027 | High | 7.8 | 2023-09-07 | Adobe After Effects versions 22.0 (and earlier) and 18.4.2 (and earlier) are affected by an out-of-bounds read vulnerability which could result in a read past… |
CVE-2021-42734 | Medium | 5.5 | 2023-09-07 | Adobe Photoshop version 22.5.1 and earlier versions are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. A… |
CVE-2021-42265 | Medium | 5.5 | 2023-09-07 | Adobe Premiere Pro versions 22.0 (and earlier) and 15.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of se… |
CVE-2021-40795 | High | 7.8 | 2023-09-07 | Adobe Premiere Pro versions 22.0 (and earlier) and 15.4.2 (and earlier) are affected by an out-of-bounds read vulnerability which could result in a read past t… |
CVE-2021-40791 | Medium | 5.5 | 2023-09-07 | Adobe Premiere Pro versions 22.0 (and earlier) and 15.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of se… |
CVE-2021-40723 | Medium | 5.5 | 2023-09-07 | Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by an out-of-bound… |
CVE-2021-36060 | Medium | 5.5 | 2023-09-06 | Adobe Media Encoder version 15.2 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacke… |
CVE-2023-27950 | Medium | 5.5 | 2023-09-06 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3. Processing an image may result in disclosure of… |
CVE-2023-4761 | High | 8.1 | 2023-09-05 | Out of bounds memory access in FedCM in Google Chrome prior to 116.0.5845.179 allowed a remote attacker who had compromised the renderer process to perform an… |