CWE-125 · Out-of-bounds Read (page 45)
Page 45 of 99 — CVEs classified under CWE-125, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-47351 | Medium | 4.4 | 2023-08-07 | In camera driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privil… |
CVE-2022-47350 | Medium | 4.4 | 2023-08-07 | In camera driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privil… |
CVE-2023-4135 | Medium | 6.0 | 2023-08-04 | A heap out-of-bounds memory read flaw was found in the virtual nvme device in QEMU. The QEMU process does not validate an offset provided by the guest before c… |
CVE-2023-25600 | High | 7.1 | 2023-08-03 | An issue was discovered in InsydeH2O. A malicious operating system can tamper with a runtime-writable EFI variable, leading to out-of-bounds memory reads and a… |
CVE-2023-38746 | High | 7.8 | 2023-08-03 | Out-of-bounds read vulnerability/issue exists in CX-Programmer Included in CX-One CXONE-AL[][]D-V4 V9.80 and earlier. By having a user open a specially crafted… |
CVE-2023-4072 | High | 8.8 | 2023-08-03 | Out of bounds read and write in WebGL in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted H… |
CVE-2023-33383 | Medium | 5.3 | 2023-08-02 | Shelly 4PM Pro four-channel smart switch 0.11.0 allows an attacker to trigger a BLE out of bounds read fault condition that results in a device reload. |
CVE-2023-38559 | Medium | 5.5 | 2023-08-01 | A buffer overflow flaw was found in base/gdevdevn.c:1973 in devn_pcx_write_rle() in ghostscript. This issue may allow a local attacker to cause a denial of ser… |
CVE-2023-4048 | High | 7.5 | 2023-08-01 | An out-of-bounds read could have led to an exploitable crash when parsing HTML with DOMParser in low memory situations. This vulnerability affects Firefox < 11… |
CVE-2023-34359 | High | 7.5 | 2023-07-31 | ASUS RT-AX88U's httpd is subject to an unauthenticated DoS condition. A remote attacker can send a specially crafted request to the device which causes the htt… |
CVE-2023-34358 | High | 7.5 | 2023-07-31 | ASUS RT-AX88U's httpd is subject to an unauthenticated DoS condition. A remote attacker can send a specially crafted request to a device which contains a speci… |
CVE-2023-37285 | Critical | 9.8 | 2023-07-28 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 15.7.8 and iPadOS 15.7.8, macOS Big Sur 11.7.9, macOS Monterey 12… |
CVE-2023-32443 | High | 8.1 | 2023-07-27 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Monterey 12.6.8, macOS Ventura 13.5, macOS Big Sur 11.7.9. Pro… |
CVE-2023-3773 | Medium | 5.5 | 2023-07-25 | A flaw was found in the Linux kernel’s IP framework for transforming packets (XFRM subsystem). This issue may allow a malicious user with CAP_NET_ADMIN privile… |
CVE-2023-3745 | Medium | 5.5 | 2023-07-24 | A heap-based buffer overflow issue was found in ImageMagick's PushCharPixel() function in quantum-private.h. This issue may allow a local attacker to trick the… |
CVE-2023-2860 | Medium | 4.4 | 2023-07-24 | An out-of-bounds read vulnerability was found in the SR-IPv6 implementation in the Linux kernel. The flaw exists within the processing of seg6 attributes. The… |
CVE-2022-2127 | Medium | 5.9 | 2023-07-20 | An out-of-bounds read vulnerability was found in Samba due to insufficient length checks in winbindd_pam_auth_crap.c. When performing NTLM authentication, the… |
CVE-2021-34121 | High | 7.8 | 2023-07-18 | An Out of Bounds flaw was discovered in htmodoc 1.9.12 in function parse_tree() in toc.cxx, this possibly leads to memory layout information leaking in the dat… |
CVE-2020-23909 | High | 7.1 | 2023-07-18 | Heap-based buffer over-read in function png_convert_4 in file pngex.cc in AdvanceMAME through 2.1. |
CVE-2023-38432 | Critical | 9.1 | 2023-07-18 | An issue was discovered in the Linux kernel before 6.3.10. fs/smb/server/smb2misc.c in ksmbd does not validate the relationship between the command payload siz… |
CVE-2023-38431 | Critical | 9.1 | 2023-07-18 | An issue was discovered in the Linux kernel before 6.3.8. fs/smb/server/connection.c in ksmbd does not validate the relationship between the NetBIOS header's l… |
CVE-2023-38430 | Critical | 9.1 | 2023-07-18 | An issue was discovered in the Linux kernel before 6.3.9. ksmbd does not validate the SMB request protocol ID, leading to an out-of-bounds read. |
CVE-2023-38428 | Critical | 9.1 | 2023-07-18 | An issue was discovered in the Linux kernel before 6.3.4. fs/ksmbd/smb2pdu.c in ksmbd does not properly check the UserName value because it does not consider t… |
CVE-2023-38427 | Critical | 9.8 | 2023-07-18 | An issue was discovered in the Linux kernel before 6.3.8. fs/smb/server/smb2pdu.c in ksmbd has an integer underflow and out-of-bounds read in deassemble_neg_co… |
CVE-2023-38426 | Critical | 9.1 | 2023-07-18 | An issue was discovered in the Linux kernel before 6.3.4. ksmbd has an out-of-bounds read in smb2_find_context_vals when create_context's name_len is larger th… |
CVE-2023-38253 | Medium | 4.7 | 2023-07-14 | An out-of-bounds read flaw was found in w3m, in the growbuf_to_Str function in indep.c. This issue may allow an attacker to cause a denial of service through a… |
CVE-2023-38252 | Medium | 4.7 | 2023-07-14 | An out-of-bounds read flaw was found in w3m, in the Strnew_size function in Str.c. This issue may allow an attacker to cause a denial of service through a craf… |
CVE-2023-36838 | Medium | 5.5 | 2023-07-14 | An Out-of-bounds Read vulnerability in the flow processing daemon (flowd) of Juniper Networks Junos OS on SRX Series allows a local, authenticated attacker wit… |
CVE-2023-3649 | Medium | 5.3 | 2023-07-14 | iSCSI dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file |
CVE-2023-35694 | High | 7.5 | 2023-07-13 | In DMPixelLogger_ProcessDmCommand of DMPixelLogger.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informa… |
CVE-2023-35691 | High | 7.2 | 2023-07-13 | there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with System execution privileges needed. User… |
CVE-2023-29319 | Medium | 5.5 | 2023-07-12 | Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of se… |
CVE-2023-29318 | Medium | 5.5 | 2023-07-12 | Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of se… |
CVE-2023-29317 | Medium | 5.5 | 2023-07-12 | Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of se… |
CVE-2023-29316 | Medium | 5.5 | 2023-07-12 | Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of se… |
CVE-2023-29315 | Medium | 5.5 | 2023-07-12 | Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of se… |
CVE-2023-29314 | Medium | 5.5 | 2023-07-12 | Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of se… |
CVE-2023-29313 | Medium | 5.5 | 2023-07-12 | Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of se… |
CVE-2023-29312 | Medium | 5.5 | 2023-07-12 | Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of se… |
CVE-2023-29311 | Medium | 5.5 | 2023-07-12 | Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of se… |
CVE-2023-29310 | Medium | 5.5 | 2023-07-12 | Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of se… |
CVE-2023-29309 | Medium | 5.5 | 2023-07-12 | Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of se… |
CVE-2021-44696 | Low | 3.3 | 2023-07-12 | Adobe Prelude version 22.1.1 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker co… |
CVE-2021-43760 | Low | 3.3 | 2023-07-12 | Adobe Media Encoder versions 22.0, 15.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory… |
CVE-2021-43759 | Low | 3.3 | 2023-07-12 | Adobe Media Encoder versions 22.0, 15.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory… |
CVE-2021-43758 | Low | 3.3 | 2023-07-12 | Adobe Media Encoder versions 22.0, 15.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory… |
CVE-2021-43757 | High | 7.8 | 2023-07-12 | Adobe Media Encoder versions 22.0, 15.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory… |
CVE-2023-33904 | Medium | 4.4 | 2023-07-12 | In hci_server, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileg… |
CVE-2023-35358 | High | 7.8 | 2023-07-11 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-35357 | High | 7.8 | 2023-07-11 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-35319 | Medium | 6.5 | 2023-07-11 | Remote Procedure Call Runtime Denial of Service Vulnerability |
CVE-2023-35318 | Medium | 6.5 | 2023-07-11 | Remote Procedure Call Runtime Denial of Service Vulnerability |
CVE-2023-35316 | Medium | 6.5 | 2023-07-11 | Remote Procedure Call Runtime Information Disclosure Vulnerability |
CVE-2023-35314 | Medium | 6.5 | 2023-07-11 | Remote Procedure Call Runtime Denial of Service Vulnerability |
CVE-2023-35299 | High | 7.8 | 2023-07-11 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
CVE-2023-35296 | Medium | 6.5 | 2023-07-11 | Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability |
CVE-2023-33164 | Medium | 6.5 | 2023-07-11 | Remote Procedure Call Runtime Denial of Service Vulnerability |
CVE-2023-33162 | Medium | 5.5 | 2023-07-11 | Microsoft Excel Information Disclosure Vulnerability |
CVE-2023-32045 | High | 7.5 | 2023-07-11 | Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
CVE-2023-32044 | High | 7.5 | 2023-07-11 | Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
CVE-2023-32039 | Medium | 5.5 | 2023-07-11 | Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability |
CVE-2023-32035 | Medium | 6.5 | 2023-07-11 | Remote Procedure Call Runtime Denial of Service Vulnerability |
CVE-2023-32034 | Medium | 6.5 | 2023-07-11 | Remote Procedure Call Runtime Denial of Service Vulnerability |
CVE-2023-36201 | High | 7.5 | 2023-07-07 | An issue in JerryscriptProject jerryscript v.3.0.0 allows an attacker to obtain sensitive information via a crafted script to the arrays. |
CVE-2023-37453 | Medium | 4.6 | 2023-07-06 | An issue was discovered in the USB subsystem in the Linux kernel through 6.4.2. There is an out-of-bounds and crash in read_descriptors in drivers/usb/core/sys… |
CVE-2023-37240 | Critical | 9.1 | 2023-07-06 | Vulnerability of missing input length verification in the distributed file system. Successful exploitation of this vulnerability may cause out-of-bounds read… |
CVE-2023-3523 | High | 7.1 | 2023-07-06 | Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.2.2. |
CVE-2023-30665 | Medium | 4.4 | 2023-07-06 | Improper input validation vulnerability in OnOemServiceMode in libsec-ril prior to SMR Jul-2023 Release 1 allows local attackers to cause an Out-Of-Bounds read. |
CVE-2023-28542 | High | 7.8 | 2023-07-04 | Memory Corruption in WLAN HOST while fetching TX status information. |
CVE-2023-28541 | High | 7.8 | 2023-07-04 | Memory Corruption in Data Modem while processing DMA buffer release event about CFR data. |
CVE-2023-20774 | Medium | 6.7 | 2023-07-04 | In display, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution privil… |
CVE-2023-20748 | Medium | 4.4 | 2023-07-04 | In display, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privile… |
CVE-2023-3497 | Medium | 4.6 | 2023-07-03 | Out of bounds read in Google Security Processor firmware in Google Chrome on Chrome OS prior to 114.0.5735.90 allowed a local attacker to perform denial of ser… |
CVE-2023-26085 | High | 7.8 | 2023-06-29 | A possible out-of-bounds read and write (due to an improper length check of shared memory) was discovered in Arm NN Android-NN-Driver before 23.02. |
CVE-2023-21226 | High | 7.5 | 2023-06-28 | In SAEMM_RetrieveTaiList of SAEMM_ContextManagement.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote infor… |
CVE-2023-21224 | High | 7.5 | 2023-06-28 | In ss_ProcessReturnResultComponent of ss_MmConManagement.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote inf… |
CVE-2023-21223 | High | 7.5 | 2023-06-28 | In LPP_ConvertGNSS_DataBitAssistance of LPP_CommonUtil.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote infor… |
CVE-2023-21214 | Medium | 4.4 | 2023-06-28 | In addGroupWithConfigInternal of p2p_iface.cpp, there is a possible out of bounds read due to unsafe deserialization. This could lead to local information disc… |
CVE-2023-21213 | Medium | 4.4 | 2023-06-28 | In initiateTdlsTeardownInternal of sta_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information di… |
CVE-2023-21212 | Medium | 4.4 | 2023-06-28 | In multiple files, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the wifi server wit… |
CVE-2023-21211 | Medium | 5.5 | 2023-06-28 | In multiple files, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional exe… |
CVE-2023-21210 | Medium | 4.4 | 2023-06-28 | In initiateHs20IconQueryInternal of sta_iface.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local informatio… |
CVE-2023-21208 | Medium | 4.4 | 2023-06-28 | In setCountryCodeInternal of sta_iface.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local information discl… |
CVE-2023-21207 | Medium | 6.7 | 2023-06-28 | In initiateTdlsSetupInternal of sta_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of pri… |
CVE-2023-21206 | Medium | 4.4 | 2023-06-28 | In initiateVenueUrlAnqpQueryInternal of sta_iface.cpp, there is a possible out of bounds read due to unsafe deserialization. This could lead to local informati… |
CVE-2023-21204 | Medium | 4.4 | 2023-06-28 | In multiple files, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the wifi server wit… |
CVE-2023-21203 | Medium | 6.7 | 2023-06-28 | In startWpsPbcInternal of sta_iface.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local escalation of privil… |
CVE-2023-21202 | Medium | 4.5 | 2023-06-28 | In btm_delete_stored_link_key_complete of btm_devctl.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local informa… |
CVE-2023-21201 | High | 7.5 | 2023-06-28 | In on_create_record_event of btif_sdp_server.cc, there is a possible out of bounds read due to a missing null check. This could lead to remote denial of servic… |
CVE-2023-21200 | Medium | 5.5 | 2023-06-28 | In on_remove_iso_data_path of btm_iso_impl.h, there is a possible out of bounds read due to improper input validation. This could lead to local information dis… |
CVE-2023-21199 | Medium | 4.4 | 2023-06-28 | In btu_ble_proc_ltk_req of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure w… |
CVE-2023-21198 | Medium | 5.5 | 2023-06-28 | In remove_sdp_record of btif_sdp_server.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosu… |
CVE-2023-21197 | High | 7.5 | 2023-06-28 | In btm_acl_process_sca_cmpl_pkt of btm_acl.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information d… |
CVE-2023-21196 | Medium | 4.4 | 2023-06-28 | In btm_ble_batchscan_filter_track_adv_vse_cback of btm_ble_batchscan.cc, there is a possible out of bounds read due to a missing bounds check. This could lead… |
CVE-2023-21195 | Medium | 4.5 | 2023-06-28 | In btm_ble_periodic_adv_sync_tx_rcvd of btm_ble_gap.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local infor… |
CVE-2023-21194 | Medium | 4.4 | 2023-06-28 | In gatt_dbg_op_name of gatt_utils.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in… |
CVE-2023-21188 | Medium | 4.4 | 2023-06-28 | In btm_ble_update_inq_result of btm_ble_gap.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disc… |
CVE-2023-21186 | High | 7.5 | 2023-06-28 | In LogResponse of Dns.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional… |
CVE-2023-21182 | Medium | 4.4 | 2023-06-28 | In Exynos_parsing_user_data_registered_itu_t_t35 of VendorVideoAPI.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead t… |
CVE-2023-21181 | Medium | 4.4 | 2023-06-28 | In btm_ble_update_inq_result of btm_ble_gap.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disc… |