CWE-125 · Out-of-bounds Read (page 54)
Page 54 of 99 — CVEs classified under CWE-125, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-35938 | High | 7.0 | 2022-09-16 | TensorFlow is an open source platform for machine learning. The `GatherNd` function takes arguments that determine the sizes of inputs and outputs. If the inpu… |
CVE-2022-35937 | High | 7.0 | 2022-09-16 | TensorFlow is an open source platform for machine learning. The `GatherNd` function takes arguments that determine the sizes of inputs and outputs. If the inpu… |
CVE-2022-38431 | High | 7.8 | 2022-09-16 | Adobe Photoshop versions 22.5.8 (and earlier) and 23.4.2 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which c… |
CVE-2022-38430 | High | 7.8 | 2022-09-16 | Adobe Photoshop versions 22.5.8 (and earlier) and 23.4.2 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which c… |
CVE-2022-38429 | High | 7.8 | 2022-09-16 | Adobe Photoshop versions 22.5.8 (and earlier) and 23.4.2 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which c… |
CVE-2022-38417 | High | 7.8 | 2022-09-16 | Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which coul… |
CVE-2022-38416 | High | 7.8 | 2022-09-16 | Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which coul… |
CVE-2022-38407 | Medium | 5.5 | 2022-09-16 | Adobe InCopy version 17.3 (and earlier) and 16.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive… |
CVE-2022-38406 | Medium | 5.5 | 2022-09-16 | Adobe InCopy version 17.3 (and earlier) and 16.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive… |
CVE-2022-38403 | High | 7.8 | 2022-09-16 | Adobe InCopy version 17.3 (and earlier) and 16.4.2 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code… |
CVE-2022-38402 | High | 7.8 | 2022-09-16 | Adobe InCopy version 17.3 (and earlier) and 16.4.2 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code… |
CVE-2022-30676 | Medium | 5.5 | 2022-09-16 | Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensit… |
CVE-2022-30675 | Medium | 5.5 | 2022-09-16 | Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensit… |
CVE-2022-30674 | Medium | 5.5 | 2022-09-16 | Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensit… |
CVE-2022-30673 | Medium | 5.5 | 2022-09-16 | Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensit… |
CVE-2022-30672 | Medium | 5.5 | 2022-09-16 | Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensit… |
CVE-2022-30671 | Medium | 5.5 | 2022-09-16 | Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensit… |
CVE-2022-28857 | Medium | 5.5 | 2022-09-16 | Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensit… |
CVE-2022-28856 | Medium | 5.5 | 2022-09-16 | Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensit… |
CVE-2022-28855 | Medium | 5.5 | 2022-09-16 | Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensit… |
CVE-2022-28854 | Medium | 5.5 | 2022-09-16 | Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensit… |
CVE-2021-40019 | Critical | 9.1 | 2022-09-16 | Out-of-bounds heap read vulnerability in the HW_KEYMASTER module. Successful exploitation of this vulnerability may cause out-of-bounds access. |
CVE-2022-38412 | High | 7.8 | 2022-09-16 | Adobe Animate version 21.0.11 (and earlier) and 22.0.7 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which cou… |
CVE-2022-38410 | Medium | 5.5 | 2022-09-16 | Adobe Illustrator versions 26.4 (and earlier) and 25.4.7 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sen… |
CVE-2022-38409 | Medium | 5.5 | 2022-09-16 | Adobe Illustrator versions 26.4 (and earlier) and 25.4.7 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sen… |
CVE-2022-25706 | High | 8.2 | 2022-09-16 | Information disclosure in Bluetooth driver due to buffer over-read while reading l2cap length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity… |
CVE-2022-25670 | High | 7.5 | 2022-09-16 | Denial of service in WLAN HOST due to buffer over read while unpacking frames in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consu… |
CVE-2022-25669 | High | 7.5 | 2022-09-16 | Denial of service in video due to buffer over read while parsing MP4 clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… |
CVE-2022-25653 | Medium | 6.8 | 2022-09-16 | Information disclosure in video due to buffer over-read while processing avi file in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snap… |
CVE-2022-22066 | High | 8.4 | 2022-09-16 | Memory corruption occurs while processing command received from HLOS due to improper length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivi… |
CVE-2022-39213 | High | 7.5 | 2022-09-15 | go-cvss is a Go module to manipulate Common Vulnerability Scoring System (CVSS). In affected versions when a full CVSS v2.0 vector string is parsed using `Pars… |
CVE-2022-40663 | High | 7.8 | 2022-09-15 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Viewer 1.2100.1483.0. User interaction is… |
CVE-2022-40662 | High | 7.8 | 2022-09-15 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Viewer 1.2100.1483.0. User interaction is… |
CVE-2022-40656 | High | 7.8 | 2022-09-15 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Viewer 13.2.0.21165. User interaction is r… |
CVE-2022-40647 | High | 7.8 | 2022-09-15 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exp… |
CVE-2022-40640 | High | 7.8 | 2022-09-15 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exp… |
CVE-2022-40636 | High | 7.8 | 2022-09-15 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exp… |
CVE-2022-38890 | Medium | 5.5 | 2022-09-15 | Nginx NJS v0.7.7 was discovered to contain a segmentation violation via njs_utf8_next at src/njs_utf8.h |
CVE-2022-38851 | Medium | 5.5 | 2022-09-15 | Certain The MPlayer Project products are vulnerable to Out-of-bounds Read via function read_meta_record() of mplayer/libmpdemux/asfheader.c. This affects mplay… |
CVE-2022-40737 | Medium | 6.5 | 2022-09-15 | An issue was discovered in Bento4 through 1.6.0-639. A buffer over-read exists in the function AP4_StdcFileByteStream::WritePartial located in System/StdC/Ap4S… |
CVE-2021-0942 | Critical | 9.8 | 2022-09-13 | The path in this case is a little bit convoluted. The end result is that via an ioctl an untrusted app can control the ui32PageIndex offset in the expression:s… |
CVE-2022-35831 | Medium | 5.5 | 2022-09-13 | Windows Remote Access Connection Manager Information Disclosure Vulnerability |
CVE-2022-3170 | High | 7.8 | 2022-09-13 | An out-of-bounds access issue was found in the Linux kernel sound subsystem. It could occur when the 'id->name' provided by the user did not end with '\0'. A p… |
CVE-2022-39156 | High | 7.8 | 2022-09-13 | A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Parasolid V34.0 (Al… |
CVE-2022-39153 | High | 7.8 | 2022-09-13 | A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Parasolid V34.0 (Al… |
CVE-2022-39145 | High | 7.8 | 2022-09-13 | A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Parasolid V34.0 (Al… |
CVE-2022-39141 | High | 7.8 | 2022-09-13 | A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions <… |
CVE-2022-39137 | High | 7.8 | 2022-09-13 | A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions <… |
CVE-2022-3178 | High | 7.8 | 2022-09-12 | Buffer Over-read in GitHub repository gpac/gpac prior to 2.1.0-DEV. |
CVE-2022-40320 | High | 8.8 | 2022-09-09 | cfg_tilde_expand in confuse.c in libConfuse 3.3 has a heap-based buffer over-read. |
CVE-2022-36854 | Medium | 4.0 | 2022-09-09 | Out of bound read in libapexjni.media.samsung.so prior to SMR Sep-2022 Release 1 allows attacker access unauthorized information. |
CVE-2022-2905 | Medium | 5.5 | 2022-09-09 | An out-of-bounds memory read flaw was found in the Linux kernel's BPF subsystem in how a user calls the bpf_tail_call function with a key larger than the max_e… |
CVE-2022-38528 | Medium | 6.5 | 2022-09-06 | Open Asset Import Library (assimp) commit 3c253ca was discovered to contain a segmentation violation via the component Assimp::XFileImporter::CreateMeshes. |
CVE-2022-26463 | Medium | 4.4 | 2022-09-06 | In vow, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileg… |
CVE-2022-26462 | Medium | 4.4 | 2022-09-06 | In vow, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileg… |
CVE-2022-22062 | High | 8.2 | 2022-09-02 | An out-of-bounds read can occur while parsing a server certificate due to improper length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity… |
CVE-2022-22059 | High | 8.4 | 2022-09-02 | Memory corruption due to out of bound read while parsing a video file in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IO… |
CVE-2020-35535 | Medium | 5.5 | 2022-09-01 | In LibRaw, there is an out-of-bounds read vulnerability within the "LibRaw::parseSonySRF()" function (libraw\src\metadata\sony.cpp) when processing srf files. |
CVE-2020-35533 | Medium | 5.5 | 2022-09-01 | In LibRaw, an out-of-bounds read vulnerability exists within the "LibRaw::adobe_copy_pixel()" function (libraw\src\decoders\dng.cpp) when reading data from the… |
CVE-2020-35532 | Medium | 5.5 | 2022-09-01 | In LibRaw, an out-of-bounds read vulnerability exists within the "simple_decode_row()" function (libraw\src\x3f\x3f_utils_patched.cpp) which can be triggered v… |
CVE-2020-35531 | Medium | 5.5 | 2022-09-01 | In LibRaw, an out-of-bounds read vulnerability exists within the get_huffman_diff() function (libraw\src\x3f\x3f_utils_patched.cpp) when reading data from an i… |
CVE-2022-36053 | Medium | 5.9 | 2022-09-01 | Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. The low-power IPv6 network stack of Contiki-NG has a buffer modu… |
CVE-2022-36052 | Medium | 5.9 | 2022-09-01 | Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. The 6LoWPAN implementation in Contiki-NG may cast a UDP header s… |
CVE-2022-1508 | Medium | 6.1 | 2022-08-31 | An out-of-bounds read flaw was found in the Linux kernel’s io_uring module in the way a user triggers the io_read() function with some special parameters. This… |
CVE-2022-1404 | Low | 3.3 | 2022-08-31 | Delta Electronics CNCSoft (All versions prior to 1.01.32) does not properly sanitize input while processing a specific project file, allowing a possible out-of… |
CVE-2022-1354 | Medium | 5.5 | 2022-08-31 | A heap buffer overflow flaw was found in Libtiffs' tiffinfo.c in TIFFReadRawDataStriped() function. This flaw allows an attacker to pass a crafted TIFF file to… |
CVE-2022-2953 | Medium | 5.5 | 2022-08-29 | LibTIFF 4.4.0 has an out-of-bounds read in extractImageSection in tools/tiffcrop.c:6905, allowing attackers to cause a denial-of-service via a crafted tiff fil… |
CVE-2022-0497 | High | 7.1 | 2022-08-29 | A vulnerbiility was found in Openscad, where a .scad file with no trailing newline could cause an out-of-bounds read during parsing of annotations. |
CVE-2022-0496 | Medium | 5.5 | 2022-08-29 | A vulnerbiility was found in Openscad, where a DXF-format drawing with particular (not necessarily malformed!) properties may cause an out-of-bounds memory acc… |
CVE-2022-0400 | High | 7.5 | 2022-08-29 | An out-of-bounds read vulnerability was discovered in linux kernel in the smc protocol stack, causing remote dos. |
CVE-2022-0284 | High | 7.1 | 2022-08-29 | A heap-based-buffer-over-read flaw was found in ImageMagick's GetPixelAlpha() function of 'pixel-accessor.h'. This vulnerability is triggered when an attacker… |
CVE-2019-15167 | Critical | 9.1 | 2022-08-27 | The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrp_print() for VRRP version 3, a different vulnerability than CVE-2018-14463. |
CVE-2020-27801 | High | 7.8 | 2022-08-25 | A heap-based buffer over-read was discovered in the get_le64 function in bele.h in UPX 4.0.0 via a crafted Mach-O file. |
CVE-2020-27800 | High | 7.8 | 2022-08-25 | A heap-based buffer over-read was discovered in the get_le32 function in bele.h in UPX 4.0.0 via a crafted Mach-O file. |
CVE-2020-27799 | High | 7.8 | 2022-08-25 | A heap-based buffer over-read was discovered in the acc_ua_get_be32 function in miniacc.h in UPX 4.0.0 via a crafted Mach-O file. |
CVE-2020-27796 | High | 7.8 | 2022-08-25 | A heap-based buffer over-read was discovered in the invert_pt_dynamic function in p_lx_elf.cpp in UPX 4.0.0 via a crafted Mach-O file. |
CVE-2022-20823 | High | 8.6 | 2022-08-25 | A vulnerability in the OSPF version 3 (OSPFv3) feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (Do… |
CVE-2022-32745 | High | 8.1 | 2022-08-25 | A flaw was found in Samba. Samba AD users can cause the server to access uninitialized data with an LDAP add or modify the request, usually resulting in a segm… |
CVE-2021-3998 | High | 7.5 | 2022-08-24 | A flaw was found in glibc. The realpath() function can mistakenly return an unexpected value, potentially leading to information leakage and disclosure of sens… |
CVE-2021-3839 | High | 7.5 | 2022-08-23 | A flaw was found in the vhost library in DPDK. Function vhost_user_set_inflight_fd() does not validate `msg->payload.inflight.num_queues`, possibly causing out… |
CVE-2022-25942 | High | 7.8 | 2022-08-22 | An out-of-bounds read vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. A… |
CVE-2021-3481 | High | 7.1 | 2022-08-22 | A flaw was found in Qt. An out-of-bounds read vulnerability was found in QRadialFetchSimd in qt/qtbase/src/gui/painting/qdrawhelper_p.h in Qt/Qtbase. While ren… |
CVE-2022-21240 | Medium | 4.4 | 2022-08-18 | Out of bounds read for some Intel(R) PROSet/Wireless WiFi products may allow a privileged user to potentially enable information disclosure via local access. |
CVE-2021-26950 | Medium | 5.5 | 2022-08-18 | Out of bounds read in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22.120 may allow an authenticated us… |
CVE-2021-26254 | Medium | 5.5 | 2022-08-18 | Out of bounds read for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user to potentially enable denial of service via… |
CVE-2021-23179 | High | 7.1 | 2022-08-18 | Out of bounds read in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22.120 may allow a privileged user t… |
CVE-2021-23168 | Medium | 6.5 | 2022-08-18 | Out of bounds read for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow an unauthenticated user to potentially enable denial of servic… |
CVE-2020-27788 | Medium | 5.5 | 2022-08-18 | An out-of-bounds read access vulnerability was discovered in UPX in PackLinuxElf64::canPack() function of p_lx_elf.cpp file. An attacker with a crafted input f… |
CVE-2022-2869 | Medium | 5.5 | 2022-08-17 | libtiff's tiffcrop tool has a uint32_t underflow which leads to out of bounds read and write in the extractContigSamples8bits routine. An attacker who supplies… |
CVE-2022-2867 | Medium | 5.5 | 2022-08-17 | libtiff's tiffcrop utility has a uint32_t underflow that can lead to out of bounds read and write. An attacker who supplies a crafted file to tiffcrop (likely… |
CVE-2022-1069 | High | 7.5 | 2022-08-17 | A crafted HTTP packet with a large content-length header can create a denial-of-service condition in Softing Secure Integration Server V1.22. |
CVE-2022-35485 | Medium | 6.5 | 2022-08-16 | OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x703969. |
CVE-2022-35483 | Medium | 6.5 | 2022-08-16 | OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x5266a8. |
CVE-2022-35482 | Medium | 6.5 | 2022-08-16 | OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x65f724. |
CVE-2022-35481 | Medium | 6.5 | 2022-08-16 | OTFCC v0.10.4 was discovered to contain a segmentation violation via /multiarch/memmove-vec-unaligned-erms.S. |
CVE-2022-35479 | Medium | 6.5 | 2022-08-16 | OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x4fbbb6. |
CVE-2022-35478 | Medium | 6.5 | 2022-08-16 | OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x6babea. |
CVE-2022-35477 | Medium | 6.5 | 2022-08-16 | OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x4fe954. |
CVE-2022-35476 | Medium | 6.5 | 2022-08-16 | OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x4fbc0b. |
CVE-2022-35114 | Medium | 5.5 | 2022-08-16 | SWFTools commit 772e55a2 was discovered to contain a segmentation violation via extractFrame at /readers/swf.c. |