CWE-125 · Out-of-bounds Read (page 55)
Page 55 of 94 — CVEs classified under CWE-125, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-0900 | Medium | 4.4 | 2021-12-17 | In apusys, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privi… |
CVE-2021-0676 | Medium | 4.4 | 2021-12-17 | In geniezone driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execu… |
CVE-2021-0674 | Medium | 5.5 | 2021-12-17 | In alac decoder, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional ex… |
CVE-2021-39657 | Medium | 4.4 | 2021-12-15 | In ufshcd_eh_device_reset_handler of ufshcd.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information discl… |
CVE-2021-39637 | Medium | 4.4 | 2021-12-15 | In CreateDeviceInfo of trusty_remote_provisioning_context.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local i… |
CVE-2021-1046 | Medium | 4.4 | 2021-12-15 | In lwis_dpm_update_clock of lwis_device_dpm.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information di… |
CVE-2021-1041 | Medium | 5.5 | 2021-12-15 | In (TBD) of (TBD), there is a possible out of bounds read due to memory corruption. This could lead to local information disclosure with no additional executio… |
CVE-2021-1007 | Medium | 4.4 | 2021-12-15 | In btu_hcif_process_event of btu_hcif.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclos… |
CVE-2021-1002 | High | 7.5 | 2021-12-15 | In WT_Interpolate of eas_wtengine.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure wit… |
CVE-2021-1001 | Medium | 5.5 | 2021-12-15 | In PVInitVideoEncoder of mp4enc_api.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure… |
CVE-2021-0998 | Medium | 5.5 | 2021-12-15 | In 'ih264e_find_bskip_params()' of ih264e_me.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disc… |
CVE-2021-0996 | Medium | 4.5 | 2021-12-15 | In nfaHciCallback of HciEventManager.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure… |
CVE-2021-0976 | Medium | 6.5 | 2021-12-15 | In toBARK of floor0.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additiona… |
CVE-2021-0925 | High | 7.5 | 2021-12-15 | In rw_t4t_sm_detect_ndef of rw_t4t.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosur… |
CVE-2021-0924 | High | 7.8 | 2021-12-15 | In xhci_vendor_get_ops of xhci.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with n… |
CVE-2021-0650 | Medium | 6.5 | 2021-12-15 | In WT_InterpolateNoLoop of eas_wtengine.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information discl… |
CVE-2021-44450 | High | 7.8 | 2021-12-14 | A vulnerability has been identified in JT Utilities (All versions < V12.8.1.1), JTTK (All versions < V10.8.1.1). JTTK library in affected products is vulnerabl… |
CVE-2021-44448 | Low | 3.3 | 2021-12-14 | A vulnerability has been identified in JT Utilities (All versions < V13.0.3.0), JTTK (All versions < V11.0.3.0). JTTK library in affected products is vulnerabl… |
CVE-2021-44444 | Low | 3.3 | 2021-12-14 | A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions < V11.1.1.0). JTTK library in affected products is vulnerabl… |
CVE-2021-44439 | High | 7.8 | 2021-12-14 | A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions < V11.1.1.0). JTTK library in affected products is vulnerabl… |
CVE-2021-44436 | Low | 3.3 | 2021-12-14 | A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions < V11.1.1.0). JTTK library in affected products is vulnerabl… |
CVE-2021-44431 | Low | 3.3 | 2021-12-14 | A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions < V11.1.1.0). JTTK library in affected products is vulnerabl… |
CVE-2021-44017 | Medium | 5.5 | 2021-12-14 | A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The Image.dll is vulnerable to an… |
CVE-2021-44015 | Medium | 5.5 | 2021-12-14 | A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The VCRUNTIME140.dll is vulnerabl… |
CVE-2021-44012 | Medium | 5.5 | 2021-12-14 | A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The Jt1001.dll is vulnerable to a… |
CVE-2021-44011 | Medium | 5.5 | 2021-12-14 | A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The Jt1001.dll is vulnerable to a… |
CVE-2021-44010 | Medium | 5.5 | 2021-12-14 | A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The Tiff_Loader.dll is vulnerable… |
CVE-2021-44009 | Medium | 5.5 | 2021-12-14 | A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The Tiff_Loader.dll is vulnerable… |
CVE-2021-44008 | Medium | 5.5 | 2021-12-14 | A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The Tiff_Loader.dll is vulnerable… |
CVE-2021-44004 | Medium | 5.5 | 2021-12-14 | A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The Tiff_Loader.dll is vulnerable… |
CVE-2021-4048 | Critical | 9.1 | 2021-12-08 | An out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in lapack through version 3.10.0, as also used in OpenBLAS before vers… |
CVE-2021-37051 | Critical | 9.1 | 2021-12-08 | There is an Out-of-bounds read vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause out-of-bounds memory access. |
CVE-2021-37090 | High | 7.5 | 2021-12-07 | There is a Out-of-bounds Read vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to process crash. |
CVE-2021-37076 | High | 7.5 | 2021-12-07 | There is a Out-of-bounds Read vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to availability affected. |
CVE-2021-37070 | High | 7.5 | 2021-12-07 | There is a Out-of-bounds Read vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to process crash. |
CVE-2021-37066 | High | 7.5 | 2021-12-07 | There is a Out-of-bounds Read vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to process crash. |
CVE-2021-37042 | Critical | 9.1 | 2021-12-07 | There is an Improper verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause out-of-bounds read. |
CVE-2021-37041 | Critical | 9.1 | 2021-12-07 | There is an Improper verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause out-of-bounds read. |
CVE-2021-44187 | Low | 3.3 | 2021-12-07 | Adobe Bridge version 11.1.2 (and earlier) and version 12.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of s… |
CVE-2021-44186 | Low | 3.3 | 2021-12-07 | Adobe Bridge version 11.1.2 (and earlier) and version 12.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of s… |
CVE-2021-44185 | Low | 3.3 | 2021-12-07 | Adobe Bridge version 11.1.2 (and earlier) and version 12.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of s… |
CVE-2020-36134 | Medium | 6.5 | 2021-12-02 | AOM v2.0.1 was discovered to contain a segmentation violation via the component aom_dsp/x86/obmc_sad_avx2.c. |
CVE-2021-44479 | Medium | 6.1 | 2021-12-01 | NXP Kinetis K82 devices have a buffer over-read via a crafted wlength value in a GET Status-Other request during use of USB In-System Programming (ISP) mode. T… |
CVE-2021-40154 | Medium | 6.1 | 2021-12-01 | NXP LPC55S69 devices before A3 have a buffer over-read via a crafted wlength value in a GET Descriptor Configuration request during use of USB In-System Progra… |
CVE-2021-39995 | Medium | 6.5 | 2021-11-29 | Some Huawei products use the OpenHpi software for hardware management. A function that parses data returned by OpenHpi contains an out-of-bounds read vulnerabi… |
CVE-2021-34424 | High | 7.5 | 2021-11-24 | A vulnerability was discovered in the Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.8.4, Zoom Client for Meetings for… |
CVE-2021-37016 | Critical | 9.1 | 2021-11-23 | There is a Out-of-bounds Read vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause Information Disclosure or Denial of S… |
CVE-2021-37015 | High | 7.5 | 2021-11-23 | There is a Out-of-bounds Read vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause kernel crash. |
CVE-2021-37007 | High | 7.5 | 2021-11-23 | There is a Out-of-bounds Read vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause kernel crash. |
CVE-2021-44144 | Critical | 9.1 | 2021-11-22 | Croatia Control Asterix 2.8.1 has a heap-based buffer over-read, with additional details to be disclosed at a later date. |
CVE-2021-43581 | High | 8.8 | 2021-11-22 | An Out-of-Bounds Read vulnerability exists when reading a U3D file using Open Design Alliance PRC SDK before 2022.11. The specific issue exists within the pars… |
CVE-2021-29328 | High | 7.1 | 2021-11-19 | OpenSource Moddable v10.5.0 was discovered to contain buffer over-read in the fxDebugThrow function at /moddable/xs/sources/xsDebug.c. |
CVE-2021-36003 | Medium | 5.5 | 2021-11-19 | Adobe Audition version 14.2 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a specially crafted file. An unauthenticated attacker… |
CVE-2021-42525 | Low | 3.3 | 2021-11-18 | Acrobat Animate versions 21.0.9 (and earlier)is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker… |
CVE-2021-0666 | Medium | 4.4 | 2021-11-18 | In apusys, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privi… |
CVE-2021-0665 | Medium | 4.4 | 2021-11-18 | In apusys, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privi… |
CVE-2021-0659 | Medium | 4.4 | 2021-11-18 | In apusys, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privi… |
CVE-2021-0624 | Medium | 5.5 | 2021-11-18 | In flv extractor, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional exec… |
CVE-2021-0622 | Medium | 5.5 | 2021-11-18 | In asf extractor, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional exec… |
CVE-2021-0620 | Medium | 5.5 | 2021-11-18 | In asf extractor, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional exec… |
CVE-2021-0619 | Medium | 5.5 | 2021-11-18 | In ape extractor, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional exec… |
CVE-2021-42723 | High | 7.8 | 2021-11-16 | Adobe Bridge version 11.1.1 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted SGI file, which could result in a read past… |
CVE-2021-42374 | Medium | 5.3 | 2021-11-15 | An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This… |
CVE-2020-12905 | Medium | 5.5 | 2021-11-15 | Out of Bounds Read in AMD Graphics Driver for Windows 10 in Escape 0x3004403 may lead to arbitrary information disclosure. |
CVE-2020-12904 | Medium | 5.5 | 2021-11-15 | Out of Bounds Read in AMD Graphics Driver for Windows 10 in Escape 0x3004203 may lead to arbitrary information disclosure. |
CVE-2021-43391 | High | 7.8 | 2021-11-14 | An Out-of-Bounds Read vulnerability exists when reading a DXF file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists within the… |
CVE-2021-43278 | High | 7.8 | 2021-11-14 | An Out-of-bounds Read vulnerability exists in the OBJ file reading procedure in Open Design Alliance Drawings SDK before 2022.11. The lack of validating the in… |
CVE-2021-43277 | High | 7.8 | 2021-11-14 | An out-of-bounds read vulnerability exists in the U3D file reading procedure in Open Design Alliance PRC SDK before 2022.10. Crafted data in a U3D file can tri… |
CVE-2021-43276 | High | 7.8 | 2021-11-14 | An Out-of-bounds Read vulnerability exists in Open Design Alliance ODA Viewer before 2022.8. Crafted data in a DWF file can trigger a read past the end of an a… |
CVE-2021-43273 | Low | 3.3 | 2021-11-14 | An Out-of-bounds Read vulnerability exists in the DGN file reading procedure in Open Design Alliance Drawings SDK before 2022.11. Crafted data in a DGN file an… |
CVE-2021-30259 | High | 7.8 | 2021-11-12 | Possible out of bound access due to improper validation of function table entries in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon C… |
CVE-2021-1981 | High | 7.5 | 2021-11-12 | Possible buffer over read due to improper IE size check of Bearer capability IE in MT setup request from network in Snapdragon Auto, Snapdragon Compute, Snapdr… |
CVE-2021-31881 | High | 7.1 | 2021-11-09 | A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303). When proc… |
CVE-2021-41227 | Medium | 6.6 | 2021-11-05 | TensorFlow is an open source platform for machine learning. In affected versions the `ImmutableConst` operation in TensorFlow can be tricked into reading arbit… |
CVE-2021-41226 | High | 7.1 | 2021-11-05 | TensorFlow is an open source platform for machine learning. In affected versions the implementation of `SparseBinCount` is vulnerable to a heap OOB access. Thi… |
CVE-2021-41224 | High | 7.1 | 2021-11-05 | TensorFlow is an open source platform for machine learning. In affected versions the implementation of `SparseFillEmptyRows` can be made to trigger a heap OOB… |
CVE-2021-41223 | High | 7.1 | 2021-11-05 | TensorFlow is an open source platform for machine learning. In affected versions the implementation of `FusedBatchNorm` kernels is vulnerable to a heap OOB acc… |
CVE-2021-41219 | High | 7.8 | 2021-11-05 | TensorFlow is an open source platform for machine learning. In affected versions the code for sparse matrix multiplication is vulnerable to undefined behavior… |
CVE-2021-41212 | High | 7.1 | 2021-11-05 | TensorFlow is an open source platform for machine learning. In affected versions the shape inference code for `tf.ragged.cross` can trigger a read outside of b… |
CVE-2021-41211 | High | 7.1 | 2021-11-05 | TensorFlow is an open source platform for machine learning. In affected versions the shape inference code for `QuantizeV2` can trigger a read outside of bounds… |
CVE-2021-41205 | High | 7.1 | 2021-11-05 | TensorFlow is an open source platform for machine learning. In affected versions the shape inference functions for the `QuantizeAndDequantizeV*` operations can… |
CVE-2021-41210 | High | 7.1 | 2021-11-05 | TensorFlow is an open source platform for machine learning. In affected versions the shape inference functions for `SparseCountSparseOutput` can trigger a read… |
CVE-2021-43389 | Medium | 5.5 | 2021-11-04 | An issue was discovered in the Linux kernel before 5.14.15. There is an array-index-out-of-bounds flaw in the detach_capi_ctr function in drivers/isdn/capi/kca… |
CVE-2021-40985 | Medium | 5.5 | 2021-11-03 | A stack-based buffer under-read in htmldoc before 1.9.12, allows attackers to cause a denial of service via a crafted BMP image to image_load_bmp. |
CVE-2020-16048 | Medium | 6.5 | 2021-11-02 | Out of bounds read in ANGLE allowed a remote attacker to obtain sensitive data via a crafted HTML page. |
CVE-2021-37992 | High | 8.8 | 2021-11-02 | Out of bounds read in WebAudio in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-22563 | Medium | 4.5 | 2021-11-01 | Invalid JPEG XL images using libjxl can cause an out of bounds access on a std::vector<std::vector<T>> when rendering splines. The OOB read access can either l… |
CVE-2021-30836 | Medium | 5.5 | 2021-10-28 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.8 and iPadOS 14.8, tvOS 15, watchOS 8, iOS 15 and iPadOS 15… |
CVE-2021-30831 | Medium | 5.5 | 2021-10-28 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing a maliciously c… |
CVE-2020-29629 | Medium | 5.5 | 2021-10-28 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1. A malicious application may be able to read re… |
CVE-2021-22487 | High | 7.5 | 2021-10-28 | There is an Out-of-bounds read vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may affect service availability. |
CVE-2021-22474 | Critical | 9.8 | 2021-10-28 | There is an Out-of-bounds memory access in Huawei Smartphone.Successful exploitation of this vulnerability may cause process exceptions. |
CVE-2021-22469 | High | 7.1 | 2021-10-28 | A component of the HarmonyOS has a Out-of-bounds Read vulnerability. Local attackers may exploit this vulnerability to cause kernel out-of-bounds read. |
CVE-2021-22464 | Low | 3.3 | 2021-10-28 | A component of the HarmonyOS has a Out-of-bounds Read vulnerability. Local attackers may exploit this vulnerability to cause system Soft Restart. |
CVE-2021-22458 | High | 7.8 | 2021-10-28 | A component of the HarmonyOS has a Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability. Local attackers may exploit this vuln… |
CVE-2021-22453 | Low | 3.3 | 2021-10-28 | A component of the HarmonyOS has a Improper Input Validation vulnerability. Local attackers may exploit this vulnerability to cause nearby process crash. |
CVE-2021-0941 | Medium | 6.7 | 2021-10-25 | In bpf_skb_change_head of filter.c, there is a possible out of bounds read due to a use after free. This could lead to local escalation of privilege with Syste… |
CVE-2021-0939 | Medium | 4.4 | 2021-10-25 | In set_default_passthru_cfg of passthru.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosur… |
CVE-2021-0632 | Medium | 6.5 | 2021-10-25 | In wifi driver, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure to a proximal attacker u… |
CVE-2021-0631 | High | 7.5 | 2021-10-25 | In wifi driver, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service with no additional execution privil… |