CWE-125 · Out-of-bounds Read (page 47)
Page 47 of 94 — CVEs classified under CWE-125, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-46741 | High | 7.1 | 2022-12-07 | Out-of-bounds read in gather_tree in PaddlePaddle before 2.4. |
CVE-2022-41910 | Medium | 4.8 | 2022-12-06 | TensorFlow is an open source platform for machine learning. The function MakeGrapplerFunctionItem takes arguments that determine the sizes of inputs and output… |
CVE-2022-41902 | High | 7.1 | 2022-12-06 | TensorFlow is an open source platform for machine learning. The function MakeGrapplerFunctionItem takes arguments that determine the sizes of inputs and output… |
CVE-2022-42781 | Medium | 5.5 | 2022-12-06 | In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services. |
CVE-2022-42780 | Medium | 5.5 | 2022-12-06 | In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services. |
CVE-2022-42779 | Medium | 5.5 | 2022-12-06 | In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services. |
CVE-2022-42774 | Medium | 5.5 | 2022-12-06 | In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services. |
CVE-2022-42773 | Medium | 5.5 | 2022-12-06 | In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services. |
CVE-2022-42769 | Low | 3.3 | 2022-12-06 | In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services. |
CVE-2022-42768 | Medium | 4.3 | 2022-12-06 | In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services. |
CVE-2022-42762 | Medium | 5.5 | 2022-12-06 | In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services. |
CVE-2022-42761 | Medium | 5.5 | 2022-12-06 | In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services. |
CVE-2022-42759 | Medium | 5.5 | 2022-12-06 | In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services. |
CVE-2022-42758 | Low | 3.3 | 2022-12-06 | In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services. |
CVE-2022-42757 | Low | 3.3 | 2022-12-06 | In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services. |
CVE-2022-39130 | Medium | 5.5 | 2022-12-06 | In face detect driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. |
CVE-2022-35260 | Medium | 6.5 | 2022-12-05 | curl can be told to parse a `.netrc` file for credentials. If that file endsin a line with 4095 consecutive non-white space letters and no newline, curlwould f… |
CVE-2022-23467 | Medium | 4.4 | 2022-12-05 | OpenRazer is an open source driver and user-space daemon to control Razer device lighting and other features on GNU/Linux. Using a modified USB device an attac… |
CVE-2022-45315 | Medium | 6.4 | 2022-12-05 | Mikrotik RouterOs before stable v7.6 was discovered to contain an out-of-bounds read in the snmp process. This vulnerability allows authenticated attackers to… |
CVE-2022-45313 | High | 8.8 | 2022-12-05 | Mikrotik RouterOs before stable v7.5 was discovered to contain an out-of-bounds read in the hotspot process. This vulnerability allows attackers to execute arb… |
CVE-2022-46149 | Medium | 5.4 | 2022-11-30 | Cap'n Proto is a data interchange format and remote procedure call (RPC) system. Cap'n Proro prior to versions 0.7.1, 0.8.1, 0.9.2, and 0.10.3, as well as vers… |
CVE-2022-4144 | Medium | 6.5 | 2022-11-29 | An out-of-bounds read flaw was found in the QXL display device emulation in QEMU. The qxl_phys2virt() function does not check the size of the structure pointed… |
CVE-2022-45909 | Critical | 9.1 | 2022-11-26 | drachtio-server before 0.8.19 has a heap-based buffer over-read via a long Request-URI in an INVITE request. |
CVE-2022-31617 | High | 7.8 | 2022-11-19 | NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys), where a local user with basic capabilities can cause an… |
CVE-2022-31616 | Medium | 6.1 | 2022-11-19 | NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where a local user with basic… |
CVE-2022-31612 | High | 7.1 | 2022-11-19 | NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where a local user with basic… |
CVE-2022-41900 | High | 7.1 | 2022-11-18 | TensorFlow is an open source platform for machine learning. The security vulnerability results in FractionalMax(AVG)Pool with illegal pooling_ratio. Attackers… |
CVE-2022-41897 | Medium | 4.8 | 2022-11-18 | TensorFlow is an open source platform for machine learning. If `FractionMaxPoolGrad` is given outsize inputs `row_pooling_sequence` and `col_pooling_sequence`… |
CVE-2022-41895 | Medium | 4.8 | 2022-11-18 | TensorFlow is an open source platform for machine learning. If `MirrorPadGrad` is given outsize input `paddings`, TensorFlow will give a heap OOB error. We hav… |
CVE-2022-41880 | Medium | 6.8 | 2022-11-18 | TensorFlow is an open source platform for machine learning. When the `BaseCandidateSamplerOp` function receives a value in `true_classes` larger than `range_ma… |
CVE-2022-41883 | Medium | 6.8 | 2022-11-18 | TensorFlow is an open source platform for machine learning. When ops that have specified input sizes receive a differing number of inputs, the executor will cr… |
CVE-2022-39319 | Medium | 4.6 | 2022-11-16 | FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing input length validation in the `urbdrc` channel. A mali… |
CVE-2022-39317 | Medium | 4.6 | 2022-11-16 | FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing a range check for input offset index in ZGFX decoder. A… |
CVE-2022-39320 | Medium | 5.5 | 2022-11-16 | FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP may attempt integer addition on too narrow types leads to allocatio… |
CVE-2022-39316 | Medium | 4.8 | 2022-11-16 | FreeRDP is a free remote desktop protocol library and clients. In affected versions there is an out of bound read in ZGFX decoder component of FreeRDP. A malic… |
CVE-2022-3737 | High | 7.8 | 2022-11-15 | In PHOENIX CONTACT Automationworx Software Suite up to version 1.89 memory can be read beyond the intended scope due to insufficient validation of input data… |
CVE-2022-33237 | High | 7.5 | 2022-11-15 | Transient DOS due to buffer over-read in WLAN firmware while processing PPE threshold. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdra… |
CVE-2022-33236 | High | 7.5 | 2022-11-15 | Transient DOS due to buffer over-read in WLAN firmware while parsing cipher suite info attributes. in Snapdragon Compute, Snapdragon Connectivity, Snapdragon M… |
CVE-2022-25676 | Medium | 6.8 | 2022-11-15 | Information disclosure in video due to buffer over-read while parsing avi files in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Ind… |
CVE-2022-31630 | Medium | 6.5 | 2022-11-14 | In PHP versions prior to 7.4.33, 8.0.25 and 8.1.12, when using imageloadfont() function in gd extension, it is possible to supply a specially crafted font file… |
CVE-2022-26369 | Medium | 6.2 | 2022-11-11 | Out-of-bounds read in some Intel(R) XMM(TM) 7560 Modem software before version M2_7560_R_01.2146.00 may allow a privileged user to potentially enable escalatio… |
CVE-2022-41873 | Medium | 4.2 | 2022-11-11 | Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. Versions prior to 4.9 are vulnerable to an Out-of-bounds read. W… |
CVE-2022-36938 | Critical | 9.8 | 2022-11-11 | DexLoader function get_stringidx_fromdex() in Redex prior to commit 3b44c64 can load an out of bound address when loading the string index table, potentially a… |
CVE-2022-39392 | Medium | 5.9 | 2022-11-10 | Wasmtime is a standalone runtime for WebAssembly. Prior to version 2.0.2, there is a bug in Wasmtime's implementation of its pooling instance allocator when th… |
CVE-2022-39891 | Medium | 4.3 | 2022-11-09 | Heap overflow vulnerability in parse_pce function in libsavsaudio.so in Editor Lite prior to version 4.0.41.3 allows attacker to get information. |
CVE-2022-39881 | Medium | 5.3 | 2022-11-09 | Improper input validation vulnerability for processing SIB12 PDU in Exynos modems prior to SMR Sep-2022 Release allows remote attacker to read out of bounds me… |
CVE-2022-3447 | Medium | 4.3 | 2022-11-09 | Inappropriate implementation in Custom Tabs in Google Chrome on Android prior to 106.0.5249.119 allowed a remote attacker to spoof the contents of the Omnibox… |
CVE-2021-34567 | High | 8.2 | 2022-11-09 | In WAGO I/O-Check Service in multiple products an unauthenticated remote attacker can send a specially crafted packet containing OS commands to provoke a denia… |
CVE-2022-32602 | Medium | 5.5 | 2022-11-08 | In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional executi… |
CVE-2022-21778 | Medium | 6.7 | 2022-11-08 | In vpu, there is a possible information disclosure due to an incorrect bounds check. This could lead to local escalation of privilege with System execution pri… |
CVE-2022-44311 | High | 8.1 | 2022-11-08 | html2xhtml v1.3 was discovered to contain an Out-Of-Bounds read in the function static void elm_close(tree_node_t *nodo) at procesador.c. This vulnerability al… |
CVE-2022-41662 | High | 7.8 | 2022-11-08 | A vulnerability has been identified in JT2Go (All versions < V14.1.0.4), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), Teamcenter Visualization… |
CVE-2022-41661 | High | 7.8 | 2022-11-08 | A vulnerability has been identified in JT2Go (All versions < V14.1.0.4), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), Teamcenter Visualization… |
CVE-2022-39157 | High | 7.8 | 2022-11-08 | A vulnerability has been identified in Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.0 (All versions >= V34.0.252 < V34.0.254), Parasolid V34.1 (Al… |
CVE-2022-43359 | High | 7.8 | 2022-11-07 | Gifdec commit 1dcbae19363597314f6623010cc80abad4e47f7c was discovered to contain an out-of-bounds read in the function read_image_data. This vulnerability is t… |
CVE-2022-42905 | Critical | 9.1 | 2022-11-07 | In wolfSSL before 5.5.2, if callback functions are enabled (via the WOLFSSL_CALLBACKS flag), then a malicious TLS 1.3 client or network attacker can trigger a… |
CVE-2022-43995 | High | 7.1 | 2022-11-02 | Sudo 1.8.0 through 1.9.12, with the crypt() password backend, contains a plugins/sudoers/auth/passwd.c array-out-of-bounds error that can result in a heap-base… |
CVE-2022-32936 | Medium | 5.5 | 2022-11-01 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13. An app may be able to disclose kernel memory. |
CVE-2022-44081 | Medium | 5.5 | 2022-10-31 | Lodepng v20220717 was discovered to contain a segmentation fault via the function pngdetail. |
CVE-2022-43282 | High | 7.1 | 2022-10-28 | wasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component OnReturnCallIndirectExpr->GetReturnCallDropKeepCount. |
CVE-2022-43280 | High | 7.1 | 2022-10-28 | wasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component OnReturnCallExpr->GetReturnCallDropKeepCount. |
CVE-2022-39836 | Medium | 5.5 | 2022-10-25 | An issue was discovered in Connected Vehicle Systems Alliance (COVESA) dlt-daemon through 2.18.8. Due to a faulty DLT file parser, a crafted DLT file that cras… |
CVE-2022-38436 | High | 7.8 | 2022-10-25 | Adobe Illustrator versions 26.4 (and earlier) and 25.4.7 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which c… |
CVE-2022-35271 | High | 7.5 | 2022-10-25 | A denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted network request can… |
CVE-2022-35270 | High | 7.5 | 2022-10-25 | A denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted network request can… |
CVE-2022-35269 | High | 7.5 | 2022-10-25 | A denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted network request can… |
CVE-2022-35268 | High | 7.5 | 2022-10-25 | A denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted network request can… |
CVE-2022-35267 | High | 7.5 | 2022-10-25 | A denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted network request can… |
CVE-2022-35266 | High | 7.5 | 2022-10-25 | A denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted network request can… |
CVE-2022-35265 | High | 7.5 | 2022-10-25 | A denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted network request can… |
CVE-2022-35264 | High | 7.5 | 2022-10-25 | A denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted network request can… |
CVE-2022-35263 | High | 7.5 | 2022-10-25 | A denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted network request can… |
CVE-2022-35262 | High | 7.5 | 2022-10-25 | A denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted network request can… |
CVE-2022-35261 | High | 7.5 | 2022-10-25 | A denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted network request can… |
CVE-2022-3599 | Medium | 5.5 | 2022-10-21 | LibTIFF 4.4.0 has an out-of-bounds read in writeSingleSection in tools/tiffcrop.c:7345, allowing attackers to cause a denial-of-service via a crafted tiff file… |
CVE-2022-3576 | Medium | 5.3 | 2022-10-20 | A vulnerability regarding out-of-bounds read is found in the session processing functionality of Out-of-Band (OOB) Management. This allows remote attackers to… |
CVE-2022-1738 | High | 8.7 | 2022-10-19 | Fuji Electric D300win prior to version 3.7.1.17 is vulnerable to an out-of-bounds read, which could allow an attacker to leak sensitive data from the process m… |
CVE-2022-43043 | Medium | 5.5 | 2022-10-19 | GPAC 2.1-DEV-rev368-gfd054169b-master was discovered to contain a segmentation violation via the function BD_CheckSFTimeOffset at /bifs/field_decode.c. |
CVE-2022-25749 | High | 7.5 | 2022-10-19 | Transient Denial-of-Service in WLAN due to buffer over-read while parsing MDNS frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdra… |
CVE-2022-25736 | High | 7.5 | 2022-10-19 | Denial of service in WLAN due to out-of-bound read happens while processing VHT action frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, S… |
CVE-2022-25719 | High | 8.2 | 2022-10-19 | Information disclosure in WLAN due to improper length check while processing authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon C… |
CVE-2022-25665 | Medium | 6.8 | 2022-10-19 | Information disclosure due to buffer over read in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile |
CVE-2022-25663 | Medium | 5.5 | 2022-10-19 | Possible buffer overflow due to lack of buffer length check during management frame Rx handling lead to denial of service in Snapdragon Compute, Snapdragon Con… |
CVE-2022-42342 | Medium | 5.5 | 2022-10-14 | Adobe Acrobat Reader versions 22.002.20212 (and earlier) and 20.005.30381 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to… |
CVE-2022-38449 | Medium | 5.5 | 2022-10-14 | Adobe Acrobat Reader versions 22.002.20212 (and earlier) and 20.005.30381 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to… |
CVE-2022-38443 | Medium | 5.5 | 2022-10-14 | Adobe Dimension versions 3.4.5 is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage… |
CVE-2022-38441 | High | 7.8 | 2022-10-14 | Adobe Dimension versions 3.4.5 is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an… |
CVE-2022-38440 | High | 7.8 | 2022-10-14 | Adobe Dimension versions 3.4.5 is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an… |
CVE-2022-41302 | High | 7.8 | 2022-10-14 | An Out-Of-Bounds Read Vulnerability in Autodesk FBX SDK version 2020. and prior may lead to code execution or information disclosure through maliciously crafte… |
CVE-2022-41603 | Low | 3.4 | 2022-10-14 | The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of… |
CVE-2022-41602 | Low | 3.4 | 2022-10-14 | The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of… |
CVE-2022-41601 | Low | 3.4 | 2022-10-14 | The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of… |
CVE-2022-41600 | Low | 3.4 | 2022-10-14 | The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of… |
CVE-2022-41598 | Low | 3.4 | 2022-10-14 | The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of… |
CVE-2022-41597 | Low | 3.4 | 2022-10-14 | The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of… |
CVE-2022-41595 | Low | 3.4 | 2022-10-14 | The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of… |
CVE-2022-41594 | Low | 3.4 | 2022-10-14 | The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of… |
CVE-2022-41593 | Low | 3.4 | 2022-10-14 | The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of… |
CVE-2022-41592 | Low | 3.4 | 2022-10-14 | The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of… |
CVE-2022-41585 | High | 7.8 | 2022-10-14 | The kernel module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerability may cause memory overwriting. |