CWE-125 · Out-of-bounds Read (page 54)
Page 54 of 94 — CVEs classified under CWE-125, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-23560 | High | 8.8 | 2022-02-04 | Tensorflow is an Open Source Machine Learning Framework. An attacker can craft a TFLite model that would allow limited reads and writes outside of arrays in TF… |
CVE-2021-46671 | Medium | 5.3 | 2022-02-04 | options.c in atftp before 0.7.5 reads past the end of an array, and consequently discloses server-side /etc/group data to a remote client. |
CVE-2022-21730 | High | 8.1 | 2022-02-03 | Tensorflow is an Open Source Machine Learning Framework. The implementation of `FractionalAvgPoolGrad` does not consider cases where the input tensors are inva… |
CVE-2022-21728 | High | 8.1 | 2022-02-03 | Tensorflow is an Open Source Machine Learning Framework. The implementation of shape inference for `ReverseSequence` does not fully validate the value of `batc… |
CVE-2022-21726 | High | 8.1 | 2022-02-03 | Tensorflow is an Open Source Machine Learning Framework. The implementation of `Dequantize` does not fully validate the value of `axis` and can result in heap… |
CVE-2021-24043 | Critical | 9.1 | 2022-02-02 | A missing bound check in RTCP flag parsing code prior to WhatsApp for Android v2.21.23.2, WhatsApp Business for Android v2.21.23.2, WhatsApp for iOS v2.21.230… |
CVE-2022-24198 | Medium | 6.5 | 2022-02-01 | iText v7.1.17 was discovered to contain an out-of-bounds exception via the component ARCFOUREncryption.encryptARCFOUR, which allows attackers to cause a Denial… |
CVE-2021-41040 | High | 7.5 | 2022-02-01 | In Eclipse Wakaama, ever since its inception until 2021-01-14, the CoAP parsing code does not properly sanitize network-received data. |
CVE-2022-0393 | High | 7.1 | 2022-01-28 | Out-of-bounds Read in GitHub repository vim/vim prior to 8.2. |
CVE-2021-4034 | High | 7.8 | 2022-01-28 | A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users t… |
CVE-2021-22809 | Medium | 5.5 | 2022-01-28 | A CWE-125:Out-of-Bounds Read vulnerability exists that could cause unintended data disclosure when a malicious *.gd1 configuration file is loaded into the GUIc… |
CVE-2022-23097 | Critical | 9.1 | 2022-01-28 | An issue was discovered in the DNS proxy in Connman through 1.40. forward_dns_reply mishandles a strnlen call, leading to an out-of-bounds read. |
CVE-2022-23096 | Critical | 9.1 | 2022-01-28 | An issue was discovered in the DNS proxy in Connman through 1.40. The TCP server reply implementation lacks a check for the presence of sufficient Header Data… |
CVE-2022-21723 | Critical | 9.1 | 2022-01-27 | PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN… |
CVE-2022-21722 | Critical | 9.1 | 2022-01-27 | PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN… |
CVE-2022-0368 | High | 7.8 | 2022-01-26 | Out-of-bounds Read in GitHub repository vim/vim prior to 8.2. |
CVE-2021-40167 | High | 7.8 | 2022-01-25 | A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation… |
CVE-2021-40158 | High | 7.8 | 2022-01-25 | A maliciously crafted JT file in Autodesk Inventor 2022, 2021, 2020, 2019 and AutoCAD 2022 may be forced to read beyond allocated boundaries when parsing the J… |
CVE-2022-21711 | High | 7.1 | 2022-01-24 | elfspirit is an ELF static analysis and injection framework that parses, manipulates, and camouflages ELF files. When analyzing the ELF file format in versions… |
CVE-2021-35005 | Low | 3.3 | 2022-01-24 | This vulnerability allows local attackers to disclose sensitive information on affected installations of TeamViewer. An attacker must first obtain the ability… |
CVE-2022-23130 | Medium | 5.9 | 2022-01-21 | Buffer Over-read vulnerability in Mitsubishi Electric MC Works64 versions 4.00A to 4.04E, Mitsubishi Electric GENESIS64 versions 10.97 and prior, Mitsubishi El… |
CVE-2020-19861 | High | 7.5 | 2022-01-21 | When a zone file in ldns 1.7.1 is parsed, the function ldns_nsec3_salt_data is too trusted for the length value obtained from the zone file. When the memcpy is… |
CVE-2022-0319 | Medium | 5.5 | 2022-01-21 | Out-of-bounds Read in vim/vim prior to 8.2. |
CVE-2020-19860 | Medium | 6.5 | 2022-01-21 | When ldns version 1.7.1 verifies a zone file, the ldns_rr_new_frm_str_internal function has a heap out of bounds read vulnerability. An attacker can leak infor… |
CVE-2022-21688 | High | 7.5 | 2022-01-18 | OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. Affected vers… |
CVE-2021-34402 | Medium | 6.7 | 2022-01-18 | NVIDIA Tegra kernel driver contains a vulnerability in NVIDIA NVDEC, where a user with high privileges might be able to read from or write to a memory location… |
CVE-2021-45060 | High | 7.8 | 2022-01-14 | Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by an out-of-bounds read vulnerabi… |
CVE-2021-45052 | Low | 3.3 | 2022-01-14 | Adobe Bridge version 11.1.2 (and earlier) and version 12.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of s… |
CVE-2021-44742 | Low | 3.3 | 2022-01-14 | Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by an out-of-bounds read vulnerabi… |
CVE-2021-44715 | Low | 3.3 | 2022-01-14 | Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by an out-of-bounds read vulnerabi… |
CVE-2021-44700 | Medium | 5.5 | 2022-01-14 | Adobe Illustrator versions 25.4.2 (and earlier) and 26.0.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of s… |
CVE-2021-43752 | Low | 3.3 | 2022-01-14 | Adobe Illustrator versions 25.4.2 (and earlier) and 26.0.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of s… |
CVE-2022-20698 | High | 7.5 | 2022-01-14 | A vulnerability in the OOXML parsing module in Clam AntiVirus (ClamAV) Software version 0.104.1 and LTS version 0.103.4 and prior versions could allow an unaut… |
CVE-2021-34985 | Medium | 5.5 | 2022-01-13 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley ContextCapture 10.18.0.232. User interaction… |
CVE-2021-34984 | Medium | 5.5 | 2022-01-13 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley ContextCapture 10.18.0.232. User interaction… |
CVE-2021-34946 | High | 7.8 | 2022-01-13 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to expl… |
CVE-2021-34944 | Low | 3.3 | 2022-01-13 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required… |
CVE-2021-34943 | Low | 3.3 | 2022-01-13 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required… |
CVE-2021-34942 | High | 7.8 | 2022-01-13 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to expl… |
CVE-2021-34930 | High | 7.8 | 2022-01-13 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to expl… |
CVE-2021-34927 | High | 7.8 | 2022-01-13 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to expl… |
CVE-2021-34916 | Low | 3.3 | 2022-01-13 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required… |
CVE-2021-34913 | High | 7.8 | 2022-01-13 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to expl… |
CVE-2021-34912 | High | 7.8 | 2022-01-13 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to expl… |
CVE-2021-34910 | Low | 3.3 | 2022-01-13 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required… |
CVE-2021-34902 | Low | 3.3 | 2022-01-13 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required… |
CVE-2021-34901 | Low | 3.3 | 2022-01-13 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required… |
CVE-2021-34890 | Low | 3.3 | 2022-01-13 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required… |
CVE-2021-34889 | Low | 3.3 | 2022-01-13 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required… |
CVE-2021-34888 | Low | 3.3 | 2022-01-13 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required… |
CVE-2021-34887 | Low | 3.3 | 2022-01-13 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required… |
CVE-2021-34885 | High | 7.8 | 2022-01-13 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to expl… |
CVE-2021-34883 | Low | 3.3 | 2022-01-13 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required… |
CVE-2021-34882 | Low | 3.3 | 2022-01-13 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required… |
CVE-2021-34881 | Low | 3.3 | 2022-01-13 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required… |
CVE-2021-34880 | High | 7.8 | 2022-01-13 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to expl… |
CVE-2021-34858 | High | 7.8 | 2022-01-13 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of TeamViewer. User interaction is required to exploit this vuln… |
CVE-2021-45055 | High | 7.8 | 2022-01-13 | Adobe InCopy version 16.4 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the e… |
CVE-2022-21877 | Medium | 5.5 | 2022-01-11 | Storage Spaces Controller Information Disclosure Vulnerability |
CVE-2022-21876 | Medium | 5.5 | 2022-01-11 | Win32k Information Disclosure Vulnerability |
CVE-2022-0173 | Medium | 5.5 | 2022-01-11 | radare2 is vulnerable to Out-of-bounds Read |
CVE-2021-36411 | Medium | 5.5 | 2022-01-10 | An issue has been found in libde265 v1.0.8 due to incorrect access control. A SEGV caused by a READ memory access in function derive_boundaryStrength of debloc… |
CVE-2021-35452 | Medium | 6.5 | 2022-01-10 | An Incorrect Access Control vulnerability exists in libde265 v1.0.8 due to a SEGV in slice.cc. |
CVE-2022-22844 | Medium | 5.5 | 2022-01-10 | LibTIFF 4.3.0 has an out-of-bounds read in _TIFFmemcpy in tif_unix.c in certain situations involving a custom tag and 0x0200 as the second word of the DE field. |
CVE-2022-22816 | Medium | 6.5 | 2022-01-10 | path_getbbox in path.c in Pillow before 9.0.0 has a buffer over-read during initialization of ImagePath.Path. |
CVE-2022-22271 | Medium | 5.5 | 2022-01-10 | A missing input validation before memory copy in TIMA trustlet prior to SMR Jan-2022 Release 1 allows attackers to copy data from arbitrary memory. |
CVE-2021-40020 | High | 7.5 | 2022-01-10 | There is an Out-of-bounds array read vulnerability in the security storage module in smartphones. Successful exploitation of this vulnerability may affect serv… |
CVE-2022-0128 | High | 7.8 | 2022-01-06 | vim is vulnerable to Out-of-bounds Read |
CVE-2021-39984 | High | 7.5 | 2022-01-03 | Huawei idap module has a Out-of-bounds Read vulnerability.Successful exploitation of this vulnerability may cause Denial of Service. |
CVE-2021-39974 | High | 7.5 | 2022-01-03 | There is an Out-of-bounds read in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2021-37114 | Medium | 5.3 | 2022-01-03 | There is an Out-of-bounds read vulnerability in Smartphone.Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2021-30336 | High | 8.4 | 2022-01-03 | Possible out of bound read due to lack of domain input validation while processing APK close session request in Snapdragon Auto, Snapdragon Compute, Snapdragon… |
CVE-2021-4193 | Medium | 5.5 | 2021-12-31 | vim is vulnerable to Out-of-bounds Read |
CVE-2021-4183 | Medium | 5.5 | 2021-12-30 | Crash in the pcapng file parser in Wireshark 3.6.0 allows denial of service via crafted capture file |
CVE-2021-4181 | High | 7.5 | 2021-12-30 | Crash in the Sysdig Event dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file |
CVE-2021-43845 | High | 8.2 | 2021-12-27 | PJSIP is a free and open source multimedia communication library. In version 2.11.1 and prior, if incoming RTCP XR message contain block, the data field is not… |
CVE-2021-37570 | High | 8.2 | 2021-12-26 | MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7613, MT7615… |
CVE-2021-37567 | High | 8.2 | 2021-12-26 | MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7613, MT7615… |
CVE-2021-37565 | High | 8.2 | 2021-12-26 | MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7613, MT7615… |
CVE-2021-37564 | High | 8.2 | 2021-12-26 | MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7613, MT7615… |
CVE-2021-37562 | High | 8.2 | 2021-12-26 | MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected Chipsets MT… |
CVE-2021-32469 | High | 8.2 | 2021-12-26 | MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected Chipsets MT… |
CVE-2021-32468 | High | 8.2 | 2021-12-26 | MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected Chipsets MT… |
CVE-2021-32467 | High | 8.2 | 2021-12-26 | MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected Chipsets MT… |
CVE-2021-4166 | High | 7.1 | 2021-12-25 | vim is vulnerable to Out-of-bounds Read |
CVE-2021-45469 | High | 7.8 | 2021-12-23 | In __f2fs_setxattr in fs/f2fs/xattr.c in the Linux kernel through 5.15.11, there is an out-of-bounds memory access when an inode has an invalid last xattr entr… |
CVE-2021-40160 | High | 7.8 | 2021-12-23 | PDFTron prior to 9.0.7 version may be forced to read beyond allocated boundaries when parsing a maliciously crafted PDF file. This vulnerability can be exploit… |
CVE-2021-43804 | High | 7.3 | 2021-12-22 | PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN… |
CVE-2021-44860 | High | 7.8 | 2021-12-21 | An out-of-bounds read vulnerability exists when reading a TIF file using Open Design Alliance Drawings SDK before 2022.12. The specific issue exists after load… |
CVE-2021-44859 | High | 7.8 | 2021-12-21 | An out-of-bounds read vulnerability exists when reading a TGA file using Open Design Alliance Drawings SDK before 2022.12. The specific issue exists after load… |
CVE-2021-44423 | High | 7.8 | 2021-12-21 | An out-of-bounds read vulnerability exists when reading a BMP file using Open Design Alliance (ODA) Drawings Explorer before 2022.12. The specific issue exists… |
CVE-2021-44699 | Low | 3.3 | 2021-12-20 | Adobe Audition versions 14.4 (and earlier), and 22.0 (and earlier)are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitiv… |
CVE-2021-44698 | Low | 3.3 | 2021-12-20 | Adobe Audition versions 14.4 (and earlier), and 22.0 (and earlier)are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitiv… |
CVE-2021-44697 | Low | 3.3 | 2021-12-20 | Adobe Audition versions 14.4 (and earlier), and 22.0 (and earlier)are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitiv… |
CVE-2021-44183 | Low | 3.3 | 2021-12-20 | Adobe Dimension versions 3.4.3 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker… |
CVE-2021-44182 | Low | 3.3 | 2021-12-20 | Adobe Dimension versions 3.4.3 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker… |
CVE-2021-43763 | Low | 3.3 | 2021-12-20 | Adobe Dimension versions 3.4.3 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker… |
CVE-2021-38421 | High | 7.8 | 2021-12-20 | Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable to an out-of-bounds read, which may allow an attacker to read sensitiv… |
CVE-2021-20606 | Medium | 5.5 | 2021-12-17 | Out-of-bounds Read vulnerability in Mitsubishi Electric GX Works2 versions 1.606G and prior, Mitsubishi Electric MELSOFT Navigator versions 2.84N and prior and… |
CVE-2021-0902 | Medium | 4.4 | 2021-12-17 | In apusys, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privi… |