CWE-125 · Out-of-bounds Read (page 59)
Page 59 of 94 — CVEs classified under CWE-125, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-27408 | High | 7.5 | 2021-06-11 | The affected product is vulnerable to an out-of-bounds read, which can cause information leakage leading to arbitrary code execution if chained to the out-of-b… |
CVE-2021-22757 | High | 7.8 | 2021-06-11 | A CWE-125: Out-of-bounds read vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in disclosure of information or remote… |
CVE-2021-22756 | High | 7.8 | 2021-06-11 | A CWE-125: Out-of-bounds read vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in disclosure of information or remote… |
CVE-2021-22753 | High | 7.8 | 2021-06-11 | A CWE-125: Out-of-bounds read vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in loss of data or remote code executi… |
CVE-2021-28801 | Low | 3.1 | 2021-06-11 | An out-of-bounds read vulnerability has been reported to affect certain QNAP switches running QSS. If exploited, this vulnerability allows attackers to read se… |
CVE-2021-3588 | Low | 3.3 | 2021-06-10 | The cli_feat_read_cb() function in src/gatt-database.c does not perform bounds checks on the 'offset' variable before using it as an index into an array for re… |
CVE-2020-24506 | Medium | 4.4 | 2021-06-09 | Out of bound read in a subsystem in the Intel(R) CSME versions before 12.0.81, 13.0.47, 13.30.17, 14.1.53 and 14.5.32 may allow a privileged user to potentiall… |
CVE-2020-12360 | High | 7.8 | 2021-06-09 | Out of bounds read in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via local access. |
CVE-2021-27629 | High | 7.5 | 2021-06-09 | SAP NetWeaver ABAP Server and ABAP Platform (Enqueue Server), versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC - 8.04,7.22,7.22EXT… |
CVE-2021-27606 | High | 7.5 | 2021-06-09 | SAP NetWeaver ABAP Server and ABAP Platform (Enqueue Server), versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC - 8.04,7.22,7.22EXT… |
CVE-2021-27597 | High | 7.5 | 2021-06-09 | SAP NetWeaver AS for ABAP (RFC Gateway), versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC - 8.04,7.22,7.22EXT,7.49,7.53,7.73, KERNE… |
CVE-2020-11304 | High | 7.8 | 2021-06-09 | Possible out of bound read in DRM due to improper buffer length check. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT… |
CVE-2020-11265 | Medium | 5.5 | 2021-06-09 | Information disclosure issue due to lack of validation of pointer arguments passed to TZ BSP in Snapdragon Wired Infrastructure and Networking |
CVE-2020-11241 | High | 7.5 | 2021-06-09 | Out of bound read will happen if EAPOL Key length is less than expected while processing NAN shared key descriptor attribute in Snapdragon Auto, Snapdragon Com… |
CVE-2020-11238 | High | 7.5 | 2021-06-09 | Possible Buffer over-read in ARP/NS parsing due to lack of check of packet length received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Sna… |
CVE-2020-11161 | High | 7.1 | 2021-06-09 | Out-of-bounds memory access can occur while calculating alignment requirements for a negative width from external components in Snapdragon Auto, Snapdragon Com… |
CVE-2020-11159 | Critical | 9.1 | 2021-06-09 | Buffer over-read can happen while processing WPA,RSN IE of beacon and response frames if IE length is less than length of frame pointer being accessed in Snapd… |
CVE-2020-11126 | Critical | 9.1 | 2021-06-09 | Possible out of bound read while WLAN frame parsing due to lack of check for body and header length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connecti… |
CVE-2021-30536 | High | 8.1 | 2021-06-07 | Out of bounds read in V8 in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to potentially exploit stack corruption via a crafted HTML page. |
CVE-2020-36386 | High | 7.1 | 2021-06-07 | An issue was discovered in the Linux kernel before 5.8.1. net/bluetooth/hci_event.c has a slab out-of-bounds read in hci_extended_inquiry_result_evt, aka CID-5… |
CVE-2021-30511 | High | 8.1 | 2021-06-04 | Out of bounds read in Tab Groups in Google Chrome prior to 90.0.4430.212 allowed an attacker who convinced a user to install a malicious extension to perform a… |
CVE-2021-3490 | High | 7.8 | 2021-06-04 | The eBPF ALU32 bounds tracking for bitwise ops (AND, OR and XOR) in the Linux kernel did not properly update 32-bit bounds, which could be turned into out of b… |
CVE-2021-25288 | Critical | 9.1 | 2021-06-02 | An issue was discovered in Pillow before 8.2.0. There is an out-of-bounds read in J2kDecode, in j2ku_gray_i. |
CVE-2021-25287 | Critical | 9.1 | 2021-06-02 | An issue was discovered in Pillow before 8.2.0. There is an out-of-bounds read in J2kDecode, in j2ku_graya_la. |
CVE-2021-3522 | Medium | 5.5 | 2021-06-02 | GStreamer before 1.18.4 may perform an out-of-bounds read when handling certain ID3v2 tags. |
CVE-2020-12403 | Critical | 9.1 | 2021-05-27 | A flaw was found in the way CHACHA20-POLY1305 was implemented in NSS in versions before 3.55. When using multi-part Chacha20, it could cause out-of-bounds read… |
CVE-2021-27490 | High | 7.8 | 2021-05-27 | Datakit Software libraries CatiaV5_3dRead, CatiaV6_3dRead, Step3dRead, Ug3dReadPsr, Jt3dReadPsr modules in KeyShot Versions v10.1 and prior are vulnerable to a… |
CVE-2021-33590 | Critical | 9.8 | 2021-05-27 | GattLib 0.3-rc1 has a stack-based buffer over-read in get_device_path_from_mac in dbus/gattlib.c. |
CVE-2021-32614 | High | 7.1 | 2021-05-26 | A flaw was found in dmg2img through 20170502. fill_mishblk() does not check the length of the read buffer, and copy 0xCC bytes from it. The length of the buffe… |
CVE-2021-3548 | High | 7.1 | 2021-05-26 | A flaw was found in dmg2img through 20170502. dmg2img did not validate the size of the read buffer during memcpy() inside the main() function. This possibly le… |
CVE-2021-20177 | Medium | 4.4 | 2021-05-26 | A flaw was found in the Linux kernel's implementation of string matching within a packet. A privileged user (with root or CAP_NET_ADMIN) when inserting iptable… |
CVE-2020-13601 | Critical | 9.0 | 2021-05-25 | Possible read out of bounds in dns read. Zephyr versions >= 1.14.2, >= 2.3.0 contain Out-of-bounds Read (CWE-125). For more information, see https://github.com… |
CVE-2021-30195 | High | 7.5 | 2021-05-25 | CODESYS V2 runtime system before 2.4.7.55 has Improper Input Validation. |
CVE-2021-30194 | Critical | 9.1 | 2021-05-25 | CODESYS V2 Web-Server before 1.1.9.20 has an Out-of-bounds Read. |
CVE-2021-32629 | High | 7.2 | 2021-05-24 | Cranelift is an open-source code generator maintained by Bytecode Alliance. It translates a target-independent intermediate representation into executable mach… |
CVE-2021-21989 | Medium | 6.5 | 2021-05-24 | VMware Workstation (16.x prior to 16.1.2) and Horizon Client for Windows (5.x prior to 5.5.2) contain out-of-bounds read vulnerability in the Cortado ThinPrint… |
CVE-2021-21988 | Medium | 6.5 | 2021-05-24 | VMware Workstation (16.x prior to 16.1.2) and Horizon Client for Windows (5.x prior to 5.5.2) contain out-of-bounds read vulnerability in the Cortado ThinPrint… |
CVE-2021-21987 | Medium | 6.5 | 2021-05-24 | VMware Workstation (16.x prior to 16.1.2) and Horizon Client for Windows (5.x prior to 5.5.2) contain out-of-bounds read vulnerability in the Cortado ThinPrint… |
CVE-2020-36331 | Critical | 9.1 | 2021-05-21 | A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ChunkAssignData. The highest threat from this vulnerability i… |
CVE-2020-36330 | Critical | 9.1 | 2021-05-21 | A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ChunkVerifyAndAssign. The highest threat from this vulnerabil… |
CVE-2018-25013 | Critical | 9.1 | 2021-05-21 | A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ShiftBytes(). |
CVE-2018-25012 | Critical | 9.1 | 2021-05-21 | A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE24(). |
CVE-2018-25010 | Critical | 9.1 | 2021-05-21 | A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ApplyFilter(). |
CVE-2018-25009 | Critical | 9.1 | 2021-05-21 | A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE16(). |
CVE-2021-3517 | High | 8.6 | 2021-05-19 | There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11. An attacker who is able to supply a crafted file to be processed… |
CVE-2021-22668 | Critical | 9.8 | 2021-05-16 | Delta Industrial Automation CNCSoft ScreenEditor Versions 1.01.28 (with ScreenEditor Version 1.01.2) and prior are vulnerable to an out-of-bounds read while pr… |
CVE-2020-24119 | High | 7.1 | 2021-05-14 | A heap buffer overflow read was discovered in upx 4.0.0, because the check in p_lx_elf.cpp is not perfect. |
CVE-2021-29613 | Medium | 6.3 | 2021-05-14 | TensorFlow is an end-to-end open source platform for machine learning. Incomplete validation in `tf.raw_ops.CTCLoss` allows an attacker to trigger an OOB read… |
CVE-2021-29606 | High | 7.1 | 2021-05-14 | TensorFlow is an end-to-end open source platform for machine learning. A specially crafted TFLite model could trigger an OOB read on heap in the TFLite impleme… |
CVE-2021-29590 | Low | 2.5 | 2021-05-14 | TensorFlow is an end-to-end open source platform for machine learning. The implementations of the `Minimum` and `Maximum` TFLite operators can be used to read… |
CVE-2021-29583 | Low | 2.5 | 2021-05-14 | TensorFlow is an end-to-end open source platform for machine learning. The implementation of `tf.raw_ops.FusedBatchNorm` is vulnerable to a heap buffer overflo… |
CVE-2021-29582 | Low | 2.5 | 2021-05-14 | TensorFlow is an end-to-end open source platform for machine learning. Due to lack of validation in `tf.raw_ops.Dequantize`, an attacker can trigger a read fro… |
CVE-2021-29570 | Low | 2.5 | 2021-05-14 | TensorFlow is an end-to-end open source platform for machine learning. The implementation of `tf.raw_ops.MaxPoolGradWithArgmax` can cause reads outside of boun… |
CVE-2021-29569 | Low | 2.5 | 2021-05-14 | TensorFlow is an end-to-end open source platform for machine learning. The implementation of `tf.raw_ops.MaxPoolGradWithArgmax` can cause reads outside of boun… |
CVE-2021-29560 | Low | 2.5 | 2021-05-14 | TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a heap buffer overflow in `tf.raw_ops.RaggedTensorToTensor`. This… |
CVE-2021-29559 | Low | 2.5 | 2021-05-14 | TensorFlow is an end-to-end open source platform for machine learning. An attacker can access data outside of bounds of heap allocated array in `tf.raw_ops.Uni… |
CVE-2021-29553 | Low | 2.5 | 2021-05-14 | TensorFlow is an end-to-end open source platform for machine learning. An attacker can read data outside of bounds of heap allocated buffer in `tf.raw_ops.Quan… |
CVE-2021-29551 | Low | 2.5 | 2021-05-14 | TensorFlow is an end-to-end open source platform for machine learning. The implementation of `MatrixTriangularSolve`(https://github.com/tensorflow/tensorflow/b… |
CVE-2021-29547 | Low | 2.5 | 2021-05-14 | TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a segfault and denial of service via accessing data outside of bou… |
CVE-2021-29532 | Low | 2.5 | 2021-05-14 | TensorFlow is an end-to-end open source platform for machine learning. An attacker can force accesses outside the bounds of heap allocated arrays by passing in… |
CVE-2021-20221 | Medium | 6.0 | 2021-05-13 | An out-of-bounds heap buffer access issue was found in the ARM Generic Interrupt Controller emulator of QEMU up to and including qemu 4.2.0on aarch64 platform… |
CVE-2020-25713 | Medium | 6.5 | 2021-05-13 | A malformed input file can lead to a segfault due to an out of bounds array access in raptor_xml_writer_start_element_common. |
CVE-2020-27824 | Medium | 5.5 | 2021-05-13 | A flaw was found in OpenJPEG’s encoder in the opj_dwt_calc_explicit_stepsizes() function. This flaw allows an attacker who can supply crafted input to decompos… |
CVE-2020-27840 | High | 7.5 | 2021-05-12 | A flaw was found in samba. Spaces used in a string around a domain name (DN), while supposed to be ignored, can cause invalid DN strings with spaces to instead… |
CVE-2021-20277 | High | 7.5 | 2021-05-12 | A flaw was found in Samba's libldb. Multiple, consecutive leading spaces in an LDAP attribute can lead to an out-of-bounds memory write, leading to a crash of… |
CVE-2021-3504 | Medium | 5.4 | 2021-05-11 | A flaw was found in the hivex library in versions before 1.3.20. It is caused due to a lack of bounds check within the hivex_open function. An attacker could i… |
CVE-2021-31174 | Medium | 5.5 | 2021-05-11 | Microsoft Excel Information Disclosure Vulnerability |
CVE-2021-25848 | Critical | 9.1 | 2021-05-10 | Improper validation of the length field of LLDP-MED TLV in userdisk/vport_lldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, allows information disclosure… |
CVE-2021-25847 | Critical | 9.1 | 2021-05-10 | Improper validation of the length field of LLDP-MED TLV in userdisk/vport_lldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, allows information disclosure… |
CVE-2021-31471 | Medium | 5.5 | 2021-05-07 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.1.37576. User interaction is requir… |
CVE-2021-31469 | Low | 3.3 | 2021-05-07 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.1.37576. User interaction is requir… |
CVE-2021-31468 | High | 7.8 | 2021-05-07 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.3.37598. User interaction is required to ex… |
CVE-2021-31467 | Low | 3.3 | 2021-05-07 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.3.37598. User interaction is requir… |
CVE-2021-31466 | High | 7.8 | 2021-05-07 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.3.37598. User interaction is required to ex… |
CVE-2021-31464 | Low | 3.3 | 2021-05-07 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.3.37598. User interaction is requir… |
CVE-2021-31463 | Low | 3.3 | 2021-05-07 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.3.37598. User interaction is requir… |
CVE-2021-31462 | Low | 3.3 | 2021-05-07 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.3.37598. User interaction is requir… |
CVE-2021-31448 | Low | 3.3 | 2021-05-07 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.1.37576. User interaction is requir… |
CVE-2021-31447 | Low | 3.3 | 2021-05-07 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.1.37576. User interaction is requir… |
CVE-2021-31446 | Low | 3.3 | 2021-05-07 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.1.37576. User interaction is requir… |
CVE-2021-31445 | Low | 3.3 | 2021-05-07 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.1.37576. User interaction is requir… |
CVE-2021-31444 | Low | 3.3 | 2021-05-07 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.1.37576. User interaction is requir… |
CVE-2021-31443 | Low | 3.3 | 2021-05-07 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.1.37576. User interaction is requir… |
CVE-2020-11293 | Medium | 5.1 | 2021-05-07 | Out of bound read can happen in Widevine TA while copying data to buffer from user data due to lack of check of buffer length received in Snapdragon Auto, Snap… |
CVE-2020-11285 | High | 8.2 | 2021-05-07 | Buffer over-read while unpacking the RTCP packet we may read extra byte if wrong length is provided in RTCP packets in Snapdragon Auto, Snapdragon Compute, Sna… |
CVE-2020-35519 | High | 7.8 | 2021-05-06 | An out-of-bounds (OOB) memory access flaw was found in x25_bind in net/x25/af_x25.c in the Linux kernel version v5.12-rc5. A bounds check failure allows a loca… |
CVE-2020-28025 | High | 7.5 | 2021-05-06 | Exim 4 before 4.94.2 allows Out-of-bounds Read because pdkim_finish_bodyhash does not validate the relationship between sig->bodyhash.len and b->bh.len; thus… |
CVE-2020-28023 | High | 7.5 | 2021-05-06 | Exim 4 before 4.94.2 allows Out-of-bounds Read. smtp_setup_msg may disclose sensitive information from process memory to an unauthenticated SMTP client. |
CVE-2021-32055 | Critical | 9.1 | 2021-05-05 | Mutt 1.11.0 through 2.0.x before 2.0.7 (and NeoMutt 2019-10-25 through 2021-05-04) has a $imap_qresync issue in which imap/util.c has an out-of-bounds read in… |
CVE-2021-20254 | Medium | 6.8 | 2021-05-05 | A flaw was found in samba. The Samba smbd file server must map Windows group identities (SIDs) into unix group ids (gids). The code that performs this had a fl… |
CVE-2021-29463 | Low | 3.3 | 2021-04-30 | Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in E… |
CVE-2021-20266 | Medium | 4.9 | 2021-04-30 | A flaw was found in RPM's hdrblobInit() in lib/header.c. This flaw allows an attacker who can modify the rpmdb to cause an out-of-bounds read. The highest thre… |
CVE-2021-31432 | Medium | 6.0 | 2021-04-29 | This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.5-47309. An attacker must first… |
CVE-2021-31431 | Medium | 6.0 | 2021-04-29 | This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.5-47309. An attacker must first… |
CVE-2021-31430 | Medium | 6.0 | 2021-04-29 | This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.5-47309. An attacker must first… |
CVE-2021-25216 | High | 8.1 | 2021-04-29 | In BIND 9.5.0 -> 9.11.29, 9.12.0 -> 9.16.13, and versions BIND 9.11.3-S1 -> 9.11.29-S1 and 9.16.8-S1 -> 9.16.13-S1 of BIND Supported Preview Edition, as well a… |
CVE-2021-2321 | Medium | 6.0 | 2021-04-28 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily… |
CVE-2021-22660 | High | 7.8 | 2021-04-27 | CNCSoft-B Versions 1.0.0.3 and prior is vulnerable to an out-of-bounds read, which may allow an attacker to execute arbitrary code. |
CVE-2021-29473 | Low | 2.5 | 2021-04-26 | Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds read was found in… |
CVE-2020-36325 | High | 7.5 | 2021-04-26 | An issue was discovered in Jansson through 2.13.1. Due to a parsing error in json_loads, there's an out-of-bounds read-access bug. NOTE: the vendor reports tha… |