CWE-125 · Out-of-bounds Read (page 44)
Page 44 of 94 — CVEs classified under CWE-125, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-20989 | Medium | 4.4 | 2023-03-24 | In btm_ble_write_adv_enable_complete of btm_ble_gap.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local informat… |
CVE-2023-20988 | Medium | 4.5 | 2023-03-24 | In btm_read_rssi_complete of btm_acl.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure… |
CVE-2023-20987 | Medium | 4.5 | 2023-03-24 | In btm_read_link_quality_complete of btm_acl.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information dis… |
CVE-2023-20986 | Medium | 4.4 | 2023-03-24 | In btm_ble_clear_resolving_list_completecomplete of btm_ble_privacy.cc, there is a possible out of bounds read due to a missing bounds check. This could lead t… |
CVE-2023-20984 | Medium | 4.4 | 2023-03-24 | In ParseBqrLinkQualityEvt of btif_bqr.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure… |
CVE-2023-20983 | Medium | 4.4 | 2023-03-24 | In btm_ble_rand_enc_complete of btm_ble.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosu… |
CVE-2023-20982 | Medium | 4.4 | 2023-03-24 | In btm_read_tx_power_complete of btm_acl.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclos… |
CVE-2023-20981 | Medium | 4.4 | 2023-03-24 | In btu_ble_rc_param_req_evt of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosu… |
CVE-2023-20980 | Medium | 5.5 | 2023-03-24 | In btu_ble_ll_conn_param_upd_evt of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information dis… |
CVE-2023-20979 | Medium | 5.5 | 2023-03-24 | In GetNextSourceDataPacket of bta_av_co.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosu… |
CVE-2023-20977 | Medium | 4.4 | 2023-03-24 | In btm_ble_read_remote_features_complete of btm_ble_gap.cc, there is a possible out of bounds read due to improper input validation. This could lead to local i… |
CVE-2023-20974 | Medium | 5.5 | 2023-03-24 | In btm_ble_add_resolving_list_entry_complete of btm_ble_privacy.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to lo… |
CVE-2023-20973 | Medium | 5.5 | 2023-03-24 | In btm_create_conn_cancel_complete of btm_sec.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information di… |
CVE-2023-20970 | Medium | 4.4 | 2023-03-24 | In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure w… |
CVE-2023-20969 | Medium | 4.4 | 2023-03-24 | In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure w… |
CVE-2023-20968 | Medium | 4.4 | 2023-03-24 | In multiple functions of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure w… |
CVE-2023-20958 | High | 7.1 | 2023-03-24 | In read_paint of ttcolr.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additi… |
CVE-2021-3674 | High | 7.8 | 2023-03-24 | A flaw was found in rizin. The create_section_from_phdr function allocates space for ELF section data by processing the headers. Crafted values in the headers… |
CVE-2023-28445 | Critical | 9.9 | 2023-03-24 | Deno is a runtime for JavaScript and TypeScript that uses V8 and is built in Rust. Resizable ArrayBuffers passed to asynchronous functions that are shrunk duri… |
CVE-2023-1544 | Medium | 6.0 | 2023-03-23 | A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. This flaw allows a crafted guest driver to allocate and initialize a huge numb… |
CVE-2023-20112 | High | 7.4 | 2023-03-23 | A vulnerability in Cisco access point (AP) software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affect… |
CVE-2023-25862 | Medium | 5.5 | 2023-03-22 | Illustrator version 26.5.2 (and earlier) and 27.2.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitiv… |
CVE-2023-27857 | High | 7.5 | 2023-03-22 | In affected versions, a heap-based buffer over-read condition occurs when the message field indicates more data than is present in the message field in R… |
CVE-2023-1534 | High | 8.8 | 2023-03-21 | Out of bounds read in ANGLE in Google Chrome prior to 111.0.5563.110 allowed a remote attacker who had compromised the renderer process to potentially exploit… |
CVE-2023-1532 | High | 8.8 | 2023-03-21 | Out of bounds read in GPU Video in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa… |
CVE-2023-24872 | High | 8.8 | 2023-03-14 | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
CVE-2023-24862 | Medium | 5.5 | 2023-03-14 | Windows Secure Channel Denial of Service Vulnerability |
CVE-2023-23418 | High | 7.8 | 2023-03-14 | Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability |
CVE-2023-23399 | High | 7.8 | 2023-03-14 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2023-27405 | High | 7.8 | 2023-03-14 | A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected applications contain an out of bounds read past th… |
CVE-2023-27402 | High | 7.8 | 2023-03-14 | A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected applications contain an out of bounds read past th… |
CVE-2023-27401 | High | 7.8 | 2023-03-14 | A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected applications contain an out of bounds read past th… |
CVE-2023-0193 | Medium | 4.4 | 2023-03-10 | NVIDIA CUDA Toolkit SDK contains a vulnerability in cuobjdump, where a local user running the tool against a malicious binary may cause an out-of-bounds read… |
CVE-2022-47458 | Medium | 5.5 | 2023-03-10 | In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services. |
CVE-2022-47456 | Medium | 5.5 | 2023-03-10 | In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services. |
CVE-2022-47455 | Medium | 5.5 | 2023-03-10 | In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services. |
CVE-2022-40535 | High | 7.5 | 2023-03-10 | Transient DOS due to buffer over-read in WLAN while sending a packet to device. |
CVE-2022-33309 | High | 7.5 | 2023-03-10 | Transient DOS due to buffer over-read in WLAN Firmware while parsing secure FTMR frame with size lesser than 39 Bytes. |
CVE-2023-0621 | High | 7.8 | 2023-03-09 | Cscape Envision RV version 4.60 is vulnerable to an out-of-bounds read vulnerability when parsing project (i.e. HMI) files. The product lacks proper validation… |
CVE-2023-26489 | Critical | 9.9 | 2023-03-08 | wasmtime is a fast and secure runtime for WebAssembly. In affected versions wasmtime's code generator, Cranelift, has a bug on x86_64 targets where address-mod… |
CVE-2023-22421 | High | 7.8 | 2023-03-06 | Out-of-bounds read vulnerability exists in Kostac PLC Programming Software (Former name: Koyo PLC Programming Software) Version 1.6.9.0 and earlier. The insuff… |
CVE-2023-22419 | High | 7.8 | 2023-03-06 | Out-of-bounds read vulnerability exists in Kostac PLC Programming Software (Former name: Koyo PLC Programming Software) Version 1.6.9.0 and earlier. When proce… |
CVE-2022-4645 | Medium | 6.8 | 2023-03-03 | LibTIFF 4.4.0 has an out-of-bounds read in tiffcp in tools/tiffcp.c:948, allowing attackers to cause a denial-of-service via a crafted tiff file. For users tha… |
CVE-2023-27371 | Medium | 5.9 | 2023-02-28 | GNU libmicrohttpd before 0.9.76 allows remote DoS (Denial of Service) due to improper parsing of a multipart/form-data boundary in the postprocessor.c MHD_crea… |
CVE-2023-1018 | Medium | 5.5 | 2023-02-28 | An out-of-bounds read vulnerability exists in TPM2.0's Module Library allowing a 2-byte read past the end of a TPM2.0 command in the CryptParameterDecryption r… |
CVE-2023-20948 | High | 7.5 | 2023-02-28 | In dropFramesUntilIframe of AAVCAssembler.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disc… |
CVE-2023-23502 | Medium | 5.5 | 2023-02-27 | An information disclosure issue was addressed by removing the vulnerable code. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2, iOS 16.3 and i… |
CVE-2022-42833 | High | 7.8 | 2023-02-27 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13. An app may be able to execute arbitrary code with… |
CVE-2022-32830 | High | 7.5 | 2023-02-27 | An out-of-bounds read issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.6, iOS 15.6 and iPadOS 15.6. Processing a maliciously c… |
CVE-2023-26607 | High | 7.1 | 2023-02-26 | In the Linux kernel 6.0.8, there is an out-of-bounds read in ntfs_attr_find in fs/ntfs/attrib.c. |
CVE-2021-35369 | Medium | 6.5 | 2023-02-24 | Arbitrary File Read vulnerability found in Peacexie ImCat v.5.2 fixed in v.5.4 allows attackers to obtain sensitive information via the filtering_get_contents… |
CVE-2022-4203 | Medium | 4.9 | 2023-02-24 | A read buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate cha… |
CVE-2022-46440 | Medium | 5.5 | 2023-02-24 | ttftool v0.9.2 was discovered to contain a segmentation violation via the readU16 function at ttf.c. |
CVE-2021-33367 | Medium | 5.5 | 2023-02-22 | Buffer Overflow vulnerability in Freeimage v3.18.0 allows attacker to cause a denial of service via a crafted JXR file. |
CVE-2023-26253 | High | 7.5 | 2023-02-21 | In Gluster GlusterFS 11.0, there is an xlators/mount/fuse/src/fuse-bridge.c notify stack-based buffer over-read. |
CVE-2021-32847 | High | 7.1 | 2023-02-20 | HyperKit is a toolkit for embedding hypervisor capabilities in an application. In versions 0.20210107 and prior, a malicious guest can trigger a vulnerability… |
CVE-2023-22233 | Medium | 5.5 | 2023-02-17 | After Affects versions 23.1 (and earlier), 22.6.3 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive… |
CVE-2023-22231 | Medium | 5.5 | 2023-02-17 | Adobe Bridge versions 12.0.3 (and earlier) and 13.0.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensit… |
CVE-2023-21620 | Medium | 5.5 | 2023-02-17 | FrameMaker 2020 Update 4 (and earlier), 2022 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memor… |
CVE-2023-21583 | Medium | 5.5 | 2023-02-17 | Adobe Bridge versions 12.0.3 (and earlier) and 13.0.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensit… |
CVE-2023-21578 | Medium | 5.5 | 2023-02-17 | Photoshop version 23.5.3 (and earlier), 24.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memor… |
CVE-2023-21577 | Medium | 5.5 | 2023-02-17 | Photoshop version 23.5.3 (and earlier), 24.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memor… |
CVE-2022-35729 | High | 7.5 | 2023-02-16 | Out of bounds read in firmware for OpenBMC in some Intel(R) platforms before version 0.72 may allow unauthenticated user to potentially enable denial of servic… |
CVE-2022-34864 | Medium | 4.2 | 2023-02-16 | Out-of-bounds read in the Intel(R) Trace Analyzer and Collector software before version 2021.5 may allow an authenticated user to potentially enable escalation… |
CVE-2022-34346 | Medium | 4.8 | 2023-02-16 | Out-of-bounds read in the Intel(R) Media SDK software before version 22.2.2 may allow an authenticated user to potentially enable escalation of privilege via l… |
CVE-2022-30531 | Medium | 4.4 | 2023-02-16 | Out-of-bounds read in the Intel(R) Iris(R) Xe MAX drivers for Windows before version 100.0.5.1474 may allow a privileged user to potentially enable information… |
CVE-2022-30339 | Medium | 6.0 | 2023-02-16 | Out-of-bounds read in firmware for the Intel(R) Integrated Sensor Solution before versions 5.4.2.4579v3, 5.4.1.4479 and 5.0.0.4143 may allow a privileged user… |
CVE-2023-21819 | High | 7.5 | 2023-02-14 | Windows Secure Channel Denial of Service Vulnerability |
CVE-2023-21798 | High | 8.8 | 2023-02-14 | Microsoft ODBC Driver Remote Code Execution Vulnerability |
CVE-2023-21714 | Medium | 5.5 | 2023-02-14 | Microsoft Office Information Disclosure Vulnerability |
CVE-2023-21702 | High | 7.5 | 2023-02-14 | Windows iSCSI Service Denial of Service Vulnerability |
CVE-2023-21699 | Medium | 5.3 | 2023-02-14 | Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability |
CVE-2023-21693 | Medium | 5.7 | 2023-02-14 | Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability |
CVE-2023-21691 | High | 7.5 | 2023-02-14 | Microsoft Protected Extensible Authentication Protocol (PEAP) Information Disclosure Vulnerability |
CVE-2023-21687 | Medium | 5.5 | 2023-02-14 | HTTP.sys Information Disclosure Vulnerability |
CVE-2023-25567 | High | 7.5 | 2023-02-14 | GSS-NTLMSSP, a mechglue plugin for the GSSAPI library that implements NTLM authentication, has an out-of-bounds read when decoding target information prior to… |
CVE-2023-25563 | Medium | 5.9 | 2023-02-14 | GSS-NTLMSSP is a mechglue plugin for the GSSAPI library that implements NTLM authentication. Prior to version 1.2.0, multiple out-of-bounds reads when decoding… |
CVE-2023-25140 | High | 7.8 | 2023-02-14 | A vulnerability has been identified in Parasolid V34.0 (All versions < V34.0.254), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions <… |
CVE-2023-24565 | Low | 3.3 | 2023-02-14 | A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2022 (All versions), Solid Edge SE2023 (All versions < V223… |
CVE-2023-24559 | High | 7.8 | 2023-02-14 | A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected applicatio… |
CVE-2023-24558 | High | 7.8 | 2023-02-14 | A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected applicatio… |
CVE-2023-24557 | High | 7.8 | 2023-02-14 | A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected applicatio… |
CVE-2023-24556 | High | 7.8 | 2023-02-14 | A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected applicatio… |
CVE-2023-24555 | High | 7.8 | 2023-02-14 | A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected applicatio… |
CVE-2023-24554 | High | 7.8 | 2023-02-14 | A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected applicatio… |
CVE-2023-24553 | High | 7.8 | 2023-02-14 | A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected applicatio… |
CVE-2023-24552 | High | 7.8 | 2023-02-14 | A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected applicatio… |
CVE-2023-0798 | Medium | 6.8 | 2023-02-13 | LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3400, allowing attackers to cause a denial-of-service via a crafted tiff file. For user… |
CVE-2023-0797 | Medium | 6.8 | 2023-02-13 | LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6921, allowing attackers t… |
CVE-2023-0796 | Medium | 6.8 | 2023-02-13 | LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3592, allowing attackers to cause a denial-of-service via a crafted tiff file. For user… |
CVE-2023-0795 | Medium | 6.8 | 2023-02-13 | LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3488, allowing attackers to cause a denial-of-service via a crafted tiff file. For user… |
CVE-2023-0817 | High | 7.8 | 2023-02-13 | Buffer Over-read in GitHub repository gpac/gpac prior to v2.3.0-DEV. |
CVE-2023-22353 | High | 7.8 | 2023-02-13 | Out-of-bound read vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier because the end of data cannot be verified when processing c… |
CVE-2023-22350 | High | 7.8 | 2023-02-13 | Out-of-bound read vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier because the end of data cannot be verified when processing p… |
CVE-2023-22349 | High | 7.8 | 2023-02-13 | Out-of-bound read vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier because the end of data cannot be verified when processing s… |
CVE-2023-22347 | High | 7.8 | 2023-02-13 | Out-of-bound read vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier because the end of data cannot be verified when processing f… |
CVE-2023-22346 | High | 7.8 | 2023-02-13 | Out-of-bound read vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier because the end of data cannot be verified when processing t… |
CVE-2022-47363 | Medium | 5.5 | 2023-02-12 | In wlan driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service in wlan services. |
CVE-2022-47323 | Medium | 5.5 | 2023-02-12 | In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services. |
CVE-2022-40512 | High | 7.5 | 2023-02-12 | Transient DOS in WLAN Firmware due to buffer over-read while processing probe response or beacon. |