CWE-125 · Out-of-bounds Read (page 55)
Page 55 of 99 — CVEs classified under CWE-125, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-35106 | Medium | 5.5 | 2022-08-16 | SWFTools commit 772e55a2 was discovered to contain a segmentation violation via FoFiTrueType::computeTableChecksum(unsigned char*, int) at /xpdf/FoFiTrueType.c… |
CVE-2022-35100 | Medium | 6.5 | 2022-08-16 | SWFTools commit 772e55a2 was discovered to contain a segmentation violation via gfxline_getbbox at /lib/gfxtools.c. |
CVE-2022-2831 | High | 7.5 | 2022-08-16 | A flaw was found in Blender 3.3.0. An interger overflow in source/blender/blendthumb/src/blendthumb_extract.cc may lead to program crash or memory corruption. |
CVE-2022-2816 | High | 7.8 | 2022-08-15 | Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.0212. |
CVE-2022-2605 | Medium | 6.5 | 2022-08-12 | Out of bounds read in Dawn in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-29118 | Medium | 5.5 | 2022-08-12 | An out-of-bounds read vulnerability exists when parsing a specially crafted file in Esri ArcReader 10.8.1 (and earlier) which allow an unauthenticated attacker… |
CVE-2021-29112 | Medium | 5.5 | 2022-08-12 | An out-of-bounds read vulnerability exists when parsing a specially crafted file in Esri ArcReader 10.8.1 (and earlier) which allow an unauthenticated attacker… |
CVE-2022-35678 | Medium | 5.5 | 2022-08-11 | Adobe Acrobat Reader versions 22.001.20169 (and earlier), 20.005.30362 (and earlier) and 17.012.30249 (and earlier) are affected by an out-of-bounds read vulne… |
CVE-2022-35674 | High | 7.8 | 2022-08-11 | Adobe FrameMaker versions 2019 Update 8 (and earlier) and 2020 Update 4 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafte… |
CVE-2022-35673 | High | 7.8 | 2022-08-11 | Adobe FrameMaker versions 2019 Update 8 (and earlier) and 2020 Update 4 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafte… |
CVE-2022-35671 | Medium | 5.5 | 2022-08-11 | Adobe Acrobat Reader versions 22.001.20169 (and earlier), 20.005.30362 (and earlier) and 17.012.30249 (and earlier) are affected by an out-of-bounds read vulne… |
CVE-2022-34264 | Medium | 5.5 | 2022-08-11 | Adobe FrameMaker versions 2019 Update 8 (and earlier) and 2020 Update 4 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to di… |
CVE-2022-34262 | Medium | 5.5 | 2022-08-11 | Adobe Illustrator versions 26.3.1 (and earlier) and 25.4.6 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of s… |
CVE-2022-34261 | Medium | 5.5 | 2022-08-11 | Adobe Illustrator versions 26.3.1 (and earlier) and 25.4.6 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of s… |
CVE-2022-20401 | High | 7.5 | 2022-08-11 | In SAEMM_RetrievEPLMNList of SAEMM_ContextManagement.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informa… |
CVE-2022-20375 | High | 7.5 | 2022-08-11 | In LteRrcNrProAsnDecode of LteRrcNr_Codec.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service… |
CVE-2022-37007 | High | 7.5 | 2022-08-10 | The chinadrm module has an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may affect the availability. |
CVE-2022-20350 | Medium | 5.5 | 2022-08-10 | In onCreate of NotificationAccessConfirmationActivity.java, there is a possible way to trick the victim to grant notification access to the wrong app due to im… |
CVE-2022-20346 | Medium | 6.5 | 2022-08-10 | In updateAudioTrackInfoFromESDS_MPEG4Audio of MPEG4Extractor.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to r… |
CVE-2021-33644 | High | 8.1 | 2022-08-10 | An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an calling of malloc(0) for a variable gnu_longname, causi… |
CVE-2021-33643 | Critical | 9.1 | 2022-08-10 | An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an calling of malloc(0) for a variable gnu_longlink, causi… |
CVE-2022-20792 | High | 7.8 | 2022-08-10 | A vulnerability in the regex module used by the signature database load module of Clam AntiVirus (ClamAV) versions 0.104.0 through 0.104.2 and LTS version 0.10… |
CVE-2022-33717 | Medium | 4.4 | 2022-08-05 | A missing input validation before memory read in SEM TA prior to SMR Aug-2022 Release 1 allows local attackers to read out of bound memory. |
CVE-2022-35926 | Medium | 5.9 | 2022-08-04 | Contiki-NG is an open-source, cross-platform operating system for IoT devices. Because of insufficient validation of IPv6 neighbor discovery options in Contiki… |
CVE-2022-33968 | Low | 3.7 | 2022-08-04 | In BIG-IP Versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and all versions of 13.1.x, when an LTM moni… |
CVE-2022-2581 | High | 7.8 | 2022-08-01 | Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.0104. |
CVE-2022-26436 | Medium | 4.4 | 2022-08-01 | In emi mpu, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privile… |
CVE-2022-21791 | Medium | 4.4 | 2022-08-01 | In camera isp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution priv… |
CVE-2022-21790 | Medium | 4.4 | 2022-08-01 | In camera isp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution priv… |
CVE-2022-35234 | High | 7.1 | 2022-07-30 | Trend Micro Security 2021 and 2022 (Consumer) is vulnerable to an Out-Of-Bounds Read Information Disclosure Vulnerability that could allow an attacker to read… |
CVE-2022-27866 | High | 7.8 | 2022-07-29 | A maliciously crafted TIFF file when consumed through DesignReview.exe application can be forced to read beyond allocated boundaries when parsing the TIFF file… |
CVE-2022-33881 | High | 7.8 | 2022-07-29 | Parsing a maliciously crafted PRT file can force Autodesk AutoCAD 2023 to read beyond allocated boundaries. This vulnerability in conjunction with other vulner… |
CVE-2021-41556 | Critical | 10.0 | 2022-07-28 | sqclass.cpp in Squirrel through 2.2.5 and 3.x through 3.1 allows an out-of-bounds read (in the core interpreter) that can lead to Code Execution. If a victim e… |
CVE-2022-2010 | Critical | 9.3 | 2022-07-28 | Out of bounds read in compositing in Google Chrome prior to 102.0.5005.115 allowed a remote attacker who had compromised the renderer process to potentially pe… |
CVE-2022-1858 | Medium | 6.5 | 2022-07-27 | Out of bounds read in DevTools in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to perform an out of bounds memory read via specific user inte… |
CVE-2022-35672 | High | 7.8 | 2022-07-27 | Adobe Acrobat Reader version 22.001.20085 (and earlier), 20.005.30314 (and earlier) and 17.012.30205 (and earlier) are affected by an out-of-bounds read vulner… |
CVE-2022-35669 | Medium | 5.5 | 2022-07-27 | Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 20.005.30334 (and earlier) are affected by an out-of-bounds read vulnerabili… |
CVE-2022-34529 | Medium | 5.5 | 2022-07-27 | WASM3 v0.5.0 was discovered to contain a segmentation fault via the component Compile_Memory_CopyFill. |
CVE-2022-34037 | High | 7.5 | 2022-07-22 | An out-of-bounds read in the rewrite function at /modules/caddyhttp/rewrite/rewrite.go in Caddy v2.5.1 allows attackers to cause a Denial of Service (DoS) via… |
CVE-2022-33319 | High | 8.2 | 2022-07-20 | Out-of-bounds Read vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 1… |
CVE-2022-2469 | Low | 3.8 | 2022-07-19 | GNU SASL libgsasl server-side read-out-of-bounds with malicious authenticated GSS-API client |
CVE-2022-34029 | Critical | 9.1 | 2022-07-18 | Nginx NJS v0.7.4 was discovered to contain an out-of-bounds read via njs_scope_value at njs_scope.h. |
CVE-2022-34875 | Low | 3.3 | 2022-07-18 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is re… |
CVE-2022-34874 | Low | 3.3 | 2022-07-18 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.2.53575. User interaction is re… |
CVE-2022-34873 | Low | 3.3 | 2022-07-18 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is re… |
CVE-2022-28682 | High | 7.8 | 2022-07-18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required t… |
CVE-2022-28681 | Medium | 6.1 | 2022-07-18 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is re… |
CVE-2022-28670 | High | 7.8 | 2022-07-18 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is re… |
CVE-2022-34889 | High | 8.2 | 2022-07-18 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 17.1.1 (51537). An attacker must first obtain t… |
CVE-2022-31212 | High | 7.5 | 2022-07-17 | An issue was discovered in dbus-broker before 31. It depends on c-uitl/c-shquote to parse the DBus service's Exec line. c-shquote contains a stack-based buffer… |
CVE-2022-28808 | High | 7.8 | 2022-07-17 | An issue was discovered in Open Design Alliance Drawings SDK before 2023.3. An Out-of-Bounds Read vulnerability exists when reading DWG files in a recovery mod… |
CVE-2022-28807 | High | 7.8 | 2022-07-17 | An issue was discovered in Open Design Alliance Drawings SDK before 2023.2. An Out-of-Bounds Read vulnerability exists when rendering a .dwg file after it's op… |
CVE-2022-35906 | Low | 3.3 | 2022-07-15 | An issue was discovered in Bentley MicroStation before 10.17.0.x and Bentley View before 10.17.0.x. Using an affected version of MicroStation or MicroStation-b… |
CVE-2022-35905 | Low | 3.3 | 2022-07-15 | An issue was discovered in Bentley MicroStation before 10.17.0.x and Bentley View before 10.17.0.x. Using an affected version of MicroStation or MicroStation-b… |
CVE-2022-35904 | Low | 3.3 | 2022-07-15 | An issue was discovered in Bentley MicroStation before 10.17.0.x and Bentley View before 10.17.0.x. Using an affected version of MicroStation or MicroStation-b… |
CVE-2022-35903 | Low | 3.3 | 2022-07-15 | An issue was discovered in Bentley MicroStation before 10.17.0.x and Bentley View before 10.17.0.x. Using an affected version of MicroStation or MicroStation-b… |
CVE-2022-35902 | Low | 3.3 | 2022-07-15 | An issue was discovered in Bentley MicroStation before 10.17.0.x and Bentley View before 10.17.0.x. Using an affected version of MicroStation or MicroStation-b… |
CVE-2022-35901 | Low | 3.3 | 2022-07-15 | An issue was discovered in Bentley MicroStation before 10.17.0.x and Bentley View before 10.17.0.x. Using an affected version of MicroStation or MicroStation-b… |
CVE-2022-35900 | Low | 3.3 | 2022-07-15 | An issue was discovered in Bentley MicroStation before 10.17.0.x and Bentley View before 10.17.0.x. Using an affected version of MicroStation or MicroStation-b… |
CVE-2022-34252 | Medium | 5.5 | 2022-07-15 | Adobe InCopy versions 17.2 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitiv… |
CVE-2022-34248 | Medium | 5.5 | 2022-07-15 | Adobe InDesign versions 17.2.1 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which co… |
CVE-2022-34242 | High | 7.8 | 2022-07-15 | Adobe Character Animator version 4.4.7 (and earlier) and 22.4 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, wh… |
CVE-2022-34239 | Medium | 5.5 | 2022-07-15 | Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are affected by an out-of-bounds read vulne… |
CVE-2022-34236 | Medium | 5.5 | 2022-07-15 | Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are affected by an out-of-bounds read vulne… |
CVE-2022-34226 | High | 7.8 | 2022-07-15 | Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are affected by an out-of-bounds read vulne… |
CVE-2022-34222 | High | 7.8 | 2022-07-15 | Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are affected by an out-of-bounds read vulne… |
CVE-2022-34215 | High | 7.8 | 2022-07-15 | Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are affected by an out-of-bounds read vulne… |
CVE-2022-35409 | Critical | 9.1 | 2022-07-15 | An issue was discovered in Mbed TLS before 2.28.1 and 3.x before 3.2.0. In some configurations, an unauthenticated attacker can send an invalid ClientHello mes… |
CVE-2021-26384 | High | 7.8 | 2022-07-14 | A malformed SMI (System Management Interface) command may allow an attacker to establish a corrupted SMI Trigger Info data structure, potentially leading to ou… |
CVE-2022-2380 | Medium | 5.5 | 2022-07-13 | The Linux kernel was found vulnerable out of bounds memory access in the drivers/video/fbdev/sm712fb.c:smtcfb_read() function. The vulnerability could result i… |
CVE-2022-20227 | Medium | 5.5 | 2022-07-13 | In USB driver, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with User execution privil… |
CVE-2022-20224 | High | 7.5 | 2022-07-13 | In AT_SKIP_REST of bta_hf_client_at.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosu… |
CVE-2022-20221 | Medium | 6.5 | 2022-07-13 | In avrc_ctrl_pars_vendor_cmd of avrc_pars_ct.cc, there is a possible out of bounds read due to improper input validation. This could lead to remote information… |
CVE-2022-34743 | High | 7.5 | 2022-07-12 | The AT commands of the USB port have an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may affect system availability. |
CVE-2022-34742 | High | 7.5 | 2022-07-12 | The system module has a read/write vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-34465 | High | 7.8 | 2022-07-12 | A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.264), Parasolid V34.0 (All versions < V34.0.250), Parasolid V34.1 (All versions <… |
CVE-2022-34288 | Medium | 5.5 | 2022-07-12 | A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application is vulnerable to an out of bounds read past the end o… |
CVE-2022-34285 | Medium | 5.5 | 2022-07-12 | A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application is vulnerable to an out of bounds read past the end o… |
CVE-2022-34283 | Medium | 5.5 | 2022-07-12 | A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application is vulnerable to an out of bounds read past the end o… |
CVE-2022-34282 | Medium | 5.5 | 2022-07-12 | A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application is vulnerable to an out of bounds read past the end o… |
CVE-2022-34281 | High | 7.8 | 2022-07-12 | A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application is vulnerable to an out of bounds read past the end o… |
CVE-2022-34280 | High | 7.8 | 2022-07-12 | A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application is vulnerable to an out of bounds read past the end o… |
CVE-2022-34279 | High | 7.8 | 2022-07-12 | A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application is vulnerable to an out of bounds read past the end o… |
CVE-2022-34278 | High | 7.8 | 2022-07-12 | A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application is vulnerable to an out of bounds read past the end o… |
CVE-2022-34277 | High | 7.8 | 2022-07-12 | A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application is vulnerable to an out of bounds read past the end o… |
CVE-2022-34272 | High | 7.8 | 2022-07-12 | A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application is vulnerable to an out of bounds read past the end o… |
CVE-2022-21769 | Medium | 4.4 | 2022-07-06 | In CCCI, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges… |
CVE-2022-2301 | Medium | 5.5 | 2022-07-04 | Buffer Over-read in GitHub repository hpjansson/chafa prior to 1.10.3. |
CVE-2022-2287 | High | 7.1 | 2022-07-02 | Out-of-bounds Read in GitHub repository vim/vim prior to 9.0. |
CVE-2022-2286 | High | 7.8 | 2022-07-02 | Out-of-bounds Read in GitHub repository vim/vim prior to 9.0. |
CVE-2022-32325 | Medium | 6.5 | 2022-07-01 | JPEGOPTIM v1.4.7 was discovered to contain a segmentation violation which is caused by a READ memory access at jpegoptim.c. |
CVE-2022-2257 | High | 7.8 | 2022-06-30 | Out-of-bounds Read in GitHub repository vim/vim prior to 9.0. |
CVE-2022-33021 | High | 7.5 | 2022-06-29 | CVA6 commit 909d85a accesses invalid memory when reading the value of MHPMCOUNTER30. |
CVE-2021-40606 | Medium | 5.5 | 2022-06-28 | The gf_bs_write_data function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command. |
CVE-2021-33650 | High | 7.5 | 2022-06-27 | When performing the inference shape operation of the SparseToDense operator, if the number of inputs is less than three, it will access data outside of bounds… |
CVE-2021-33649 | High | 7.5 | 2022-06-27 | When performing the inference shape operation of the Transpose operator, if the value in the perm element is greater than or equal to the size of the input_sha… |
CVE-2021-33648 | High | 7.5 | 2022-06-27 | When performing the inference shape operation of Affine, Concat, MatMul, ArgMinMax, EmbeddingLookup, and Gather operators, if the input shape size is 0, it wil… |
CVE-2022-2206 | High | 7.8 | 2022-06-26 | Out-of-bounds Read in GitHub repository vim/vim prior to 8.2. |
CVE-2022-32141 | Medium | 6.5 | 2022-06-24 | Multiple CODESYS Products are prone to a buffer over read. A low privileged remote attacker may craft a request with an invalid offset, which can cause an inte… |
CVE-2022-32139 | Medium | 6.5 | 2022-06-24 | In multiple CODESYS products, a low privileged remote attacker may craft a request, which cause an out-of-bounds read, resulting in a denial-of-service conditi… |