CWE-125 · Out-of-bounds Read (page 61)
Page 61 of 99 — CVEs classified under CWE-125, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-44144 | Critical | 9.1 | 2021-11-22 | Croatia Control Asterix 2.8.1 has a heap-based buffer over-read, with additional details to be disclosed at a later date. |
CVE-2021-43581 | High | 8.8 | 2021-11-22 | An Out-of-Bounds Read vulnerability exists when reading a U3D file using Open Design Alliance PRC SDK before 2022.11. The specific issue exists within the pars… |
CVE-2021-29328 | High | 7.1 | 2021-11-19 | OpenSource Moddable v10.5.0 was discovered to contain buffer over-read in the fxDebugThrow function at /moddable/xs/sources/xsDebug.c. |
CVE-2021-36003 | Medium | 5.5 | 2021-11-19 | Adobe Audition version 14.2 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a specially crafted file. An unauthenticated attacker… |
CVE-2021-42525 | Low | 3.3 | 2021-11-18 | Acrobat Animate versions 21.0.9 (and earlier)is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker… |
CVE-2021-0666 | Medium | 4.4 | 2021-11-18 | In apusys, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privi… |
CVE-2021-0665 | Medium | 4.4 | 2021-11-18 | In apusys, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privi… |
CVE-2021-0659 | Medium | 4.4 | 2021-11-18 | In apusys, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privi… |
CVE-2021-0624 | Medium | 5.5 | 2021-11-18 | In flv extractor, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional exec… |
CVE-2021-0622 | Medium | 5.5 | 2021-11-18 | In asf extractor, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional exec… |
CVE-2021-0620 | Medium | 5.5 | 2021-11-18 | In asf extractor, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional exec… |
CVE-2021-0619 | Medium | 5.5 | 2021-11-18 | In ape extractor, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional exec… |
CVE-2021-42723 | High | 7.8 | 2021-11-16 | Adobe Bridge version 11.1.1 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted SGI file, which could result in a read past… |
CVE-2021-42374 | Medium | 5.3 | 2021-11-15 | An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This… |
CVE-2020-12905 | Medium | 5.5 | 2021-11-15 | Out of Bounds Read in AMD Graphics Driver for Windows 10 in Escape 0x3004403 may lead to arbitrary information disclosure. |
CVE-2020-12904 | Medium | 5.5 | 2021-11-15 | Out of Bounds Read in AMD Graphics Driver for Windows 10 in Escape 0x3004203 may lead to arbitrary information disclosure. |
CVE-2021-43391 | High | 7.8 | 2021-11-14 | An Out-of-Bounds Read vulnerability exists when reading a DXF file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists within the… |
CVE-2021-43278 | High | 7.8 | 2021-11-14 | An Out-of-bounds Read vulnerability exists in the OBJ file reading procedure in Open Design Alliance Drawings SDK before 2022.11. The lack of validating the in… |
CVE-2021-43277 | High | 7.8 | 2021-11-14 | An out-of-bounds read vulnerability exists in the U3D file reading procedure in Open Design Alliance PRC SDK before 2022.10. Crafted data in a U3D file can tri… |
CVE-2021-43276 | High | 7.8 | 2021-11-14 | An Out-of-bounds Read vulnerability exists in Open Design Alliance ODA Viewer before 2022.8. Crafted data in a DWF file can trigger a read past the end of an a… |
CVE-2021-43273 | Low | 3.3 | 2021-11-14 | An Out-of-bounds Read vulnerability exists in the DGN file reading procedure in Open Design Alliance Drawings SDK before 2022.11. Crafted data in a DGN file an… |
CVE-2021-30259 | High | 7.8 | 2021-11-12 | Possible out of bound access due to improper validation of function table entries in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon C… |
CVE-2021-1981 | High | 7.5 | 2021-11-12 | Possible buffer over read due to improper IE size check of Bearer capability IE in MT setup request from network in Snapdragon Auto, Snapdragon Compute, Snapdr… |
CVE-2021-31881 | High | 7.1 | 2021-11-09 | A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303). When proc… |
CVE-2021-41227 | Medium | 6.6 | 2021-11-05 | TensorFlow is an open source platform for machine learning. In affected versions the `ImmutableConst` operation in TensorFlow can be tricked into reading arbit… |
CVE-2021-41226 | High | 7.1 | 2021-11-05 | TensorFlow is an open source platform for machine learning. In affected versions the implementation of `SparseBinCount` is vulnerable to a heap OOB access. Thi… |
CVE-2021-41224 | High | 7.1 | 2021-11-05 | TensorFlow is an open source platform for machine learning. In affected versions the implementation of `SparseFillEmptyRows` can be made to trigger a heap OOB… |
CVE-2021-41223 | High | 7.1 | 2021-11-05 | TensorFlow is an open source platform for machine learning. In affected versions the implementation of `FusedBatchNorm` kernels is vulnerable to a heap OOB acc… |
CVE-2021-41219 | High | 7.8 | 2021-11-05 | TensorFlow is an open source platform for machine learning. In affected versions the code for sparse matrix multiplication is vulnerable to undefined behavior… |
CVE-2021-41212 | High | 7.1 | 2021-11-05 | TensorFlow is an open source platform for machine learning. In affected versions the shape inference code for `tf.ragged.cross` can trigger a read outside of b… |
CVE-2021-41211 | High | 7.1 | 2021-11-05 | TensorFlow is an open source platform for machine learning. In affected versions the shape inference code for `QuantizeV2` can trigger a read outside of bounds… |
CVE-2021-41205 | High | 7.1 | 2021-11-05 | TensorFlow is an open source platform for machine learning. In affected versions the shape inference functions for the `QuantizeAndDequantizeV*` operations can… |
CVE-2021-41210 | High | 7.1 | 2021-11-05 | TensorFlow is an open source platform for machine learning. In affected versions the shape inference functions for `SparseCountSparseOutput` can trigger a read… |
CVE-2021-43389 | Medium | 5.5 | 2021-11-04 | An issue was discovered in the Linux kernel before 5.14.15. There is an array-index-out-of-bounds flaw in the detach_capi_ctr function in drivers/isdn/capi/kca… |
CVE-2021-40985 | Medium | 5.5 | 2021-11-03 | A stack-based buffer under-read in htmldoc before 1.9.12, allows attackers to cause a denial of service via a crafted BMP image to image_load_bmp. |
CVE-2020-16048 | Medium | 6.5 | 2021-11-02 | Out of bounds read in ANGLE allowed a remote attacker to obtain sensitive data via a crafted HTML page. |
CVE-2021-37992 | High | 8.8 | 2021-11-02 | Out of bounds read in WebAudio in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-22563 | Medium | 4.5 | 2021-11-01 | Invalid JPEG XL images using libjxl can cause an out of bounds access on a std::vector<std::vector<T>> when rendering splines. The OOB read access can either l… |
CVE-2021-30836 | Medium | 5.5 | 2021-10-28 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.8 and iPadOS 14.8, tvOS 15, watchOS 8, iOS 15 and iPadOS 15… |
CVE-2021-30831 | Medium | 5.5 | 2021-10-28 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing a maliciously c… |
CVE-2020-29629 | Medium | 5.5 | 2021-10-28 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1. A malicious application may be able to read re… |
CVE-2021-22487 | High | 7.5 | 2021-10-28 | There is an Out-of-bounds read vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may affect service availability. |
CVE-2021-22474 | Critical | 9.8 | 2021-10-28 | There is an Out-of-bounds memory access in Huawei Smartphone.Successful exploitation of this vulnerability may cause process exceptions. |
CVE-2021-22469 | High | 7.1 | 2021-10-28 | A component of the HarmonyOS has a Out-of-bounds Read vulnerability. Local attackers may exploit this vulnerability to cause kernel out-of-bounds read. |
CVE-2021-22464 | Low | 3.3 | 2021-10-28 | A component of the HarmonyOS has a Out-of-bounds Read vulnerability. Local attackers may exploit this vulnerability to cause system Soft Restart. |
CVE-2021-22458 | High | 7.8 | 2021-10-28 | A component of the HarmonyOS has a Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability. Local attackers may exploit this vuln… |
CVE-2021-22453 | Low | 3.3 | 2021-10-28 | A component of the HarmonyOS has a Improper Input Validation vulnerability. Local attackers may exploit this vulnerability to cause nearby process crash. |
CVE-2021-0941 | Medium | 6.7 | 2021-10-25 | In bpf_skb_change_head of filter.c, there is a possible out of bounds read due to a use after free. This could lead to local escalation of privilege with Syste… |
CVE-2021-0939 | Medium | 4.4 | 2021-10-25 | In set_default_passthru_cfg of passthru.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosur… |
CVE-2021-0632 | Medium | 6.5 | 2021-10-25 | In wifi driver, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure to a proximal attacker u… |
CVE-2021-0631 | High | 7.5 | 2021-10-25 | In wifi driver, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service with no additional execution privil… |
CVE-2021-0618 | Medium | 5.5 | 2021-10-25 | In ape extractor, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional exec… |
CVE-2021-0617 | Medium | 5.5 | 2021-10-25 | In ape extractor, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional exec… |
CVE-2021-0616 | Medium | 5.5 | 2021-10-25 | In ape extractor, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional exec… |
CVE-2021-0615 | Medium | 5.5 | 2021-10-25 | In flv extractor, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with no additional executi… |
CVE-2021-0614 | Medium | 5.5 | 2021-10-25 | In asf extractor, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional e… |
CVE-2021-0613 | Medium | 5.5 | 2021-10-25 | In asf extractor, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional e… |
CVE-2021-0414 | Medium | 5.5 | 2021-10-25 | In flv extractor, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional exec… |
CVE-2021-0413 | Medium | 5.5 | 2021-10-25 | In flv extractor, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional exec… |
CVE-2021-0412 | Medium | 5.5 | 2021-10-25 | In flv extractor, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional exec… |
CVE-2021-0411 | Medium | 5.5 | 2021-10-25 | In flv extractor, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with no additional executi… |
CVE-2021-0410 | Medium | 5.5 | 2021-10-25 | In flv extractor, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional e… |
CVE-2021-0409 | Medium | 5.5 | 2021-10-25 | In flv extractor, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional e… |
CVE-2021-38451 | Medium | 4.8 | 2021-10-22 | The affected product’s proprietary protocol CSC allows for calling numerous function codes. In order to call those function codes, the user must supply paramet… |
CVE-2021-30306 | High | 8.4 | 2021-10-20 | Possible buffer over read due to improper buffer allocation for file length passed from user space in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Indu… |
CVE-2021-30304 | High | 7.5 | 2021-10-20 | Possible buffer out of bound read can occur due to improper validation of TBTT count and length while parsing the beacon response in Snapdragon Compute, Snapdr… |
CVE-2021-30257 | High | 8.4 | 2021-10-20 | Possible out of bound read or write in VR service due to lack of validation of DSP selection values in Snapdragon Compute, Snapdragon Connectivity, Snapdragon… |
CVE-2021-1985 | High | 8.4 | 2021-10-20 | Possible buffer over read due to lack of data length check in QVR Service configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdr… |
CVE-2021-1980 | High | 7.5 | 2021-10-20 | Possible buffer over read due to lack of length check while parsing beacon IE response in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdra… |
CVE-2021-1977 | High | 7.5 | 2021-10-20 | Possible buffer over read due to improper validation of frame length while processing AEAD decryption during ASSOC response in Snapdragon Auto, Snapdragon Comp… |
CVE-2021-31354 | High | 7.1 | 2021-10-19 | An Out Of Bounds (OOB) access vulnerability in the handling of responses by a Juniper Agile License (JAL) Client in Juniper Networks Junos OS and Junos OS Evol… |
CVE-2020-12141 | Critical | 9.1 | 2021-10-19 | An out-of-bounds read in the SNMP stack in Contiki-NG 4.4 and earlier allows an attacker to cause a denial of service and potentially disclose information via… |
CVE-2021-30845 | Medium | 5.5 | 2021-10-19 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.6. A local user may be able to read kernel memory. |
CVE-2021-30819 | Medium | 5.5 | 2021-10-19 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 15 and iPadOS 15. Processing a maliciously crafted USD file may… |
CVE-2021-20836 | Medium | 6.5 | 2021-10-19 | Out-of-bounds read vulnerability in CX-Supervisor v4.0.0.13 and v4.0.0.16 allows an attacker with administrative privileges to cause information disclosure and… |
CVE-2021-38440 | Low | 3.3 | 2021-10-18 | FATEK Automation WinProladder versions 3.30 and prior is vulnerable to an out-of-bounds read, which may allow an attacker to read unauthorized information. |
CVE-2021-40729 | Low | 3.3 | 2021-10-15 | Adobe Acrobat Reader DC version 21.007.20095 (and earlier), 21.007.20096 (and earlier), 20.004.30015 (and earlier), and 17.011.30202 (and earlier) is affected… |
CVE-2021-3881 | Critical | 9.8 | 2021-10-15 | libmobi is vulnerable to Out-of-bounds Read |
CVE-2021-37972 | High | 8.8 | 2021-10-08 | Out of bounds read in libjpeg-turbo in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… |
CVE-2021-32029 | Medium | 6.5 | 2021-10-08 | A flaw was found in postgresql. Using an UPDATE ... RETURNING command on a purpose-crafted table, an authenticated database user could read arbitrary bytes of… |
CVE-2021-42054 | High | 7.5 | 2021-10-07 | ACCEL-PPP 1.12.0 has an out-of-bounds read in triton_context_schedule if the client exits after authentication. |
CVE-2021-25494 | Medium | 4.0 | 2021-10-06 | A possible buffer overflow vulnerability in libSPenBase library of Samsung Notes prior to Samsung Note version 4.3.02.61 allows arbitrary code execution. |
CVE-2021-25493 | Medium | 4.0 | 2021-10-06 | Lack of boundary checking of a buffer in libSPenBase library of Samsung Notes prior to Samsung Note version 4.3.02.61 allows OOB read |
CVE-2021-25492 | High | 7.3 | 2021-10-06 | Lack of boundary checking of a buffer in libSPenBase library of Samsung Notes prior to Samsung Note version 4.3.02.61 allows OOB read. |
CVE-2021-25488 | Medium | 5.5 | 2021-10-06 | Lack of boundary checking of a buffer in recv_data() of modem interface driver prior to SMR Oct-2021 Release 1 allows OOB read. |
CVE-2021-25487 | High | 7.3 | 2021-10-06 | Lack of boundary checking of a buffer in set_skb_priv() of modem interface driver prior to SMR Oct-2021 Release 1 allows OOB read and it results in arbitrary c… |
CVE-2021-25483 | Medium | 4.0 | 2021-10-06 | Lack of boundary checking of a buffer in livfivextractor library prior to SMR Oct-2021 Release 1 allows OOB read. |
CVE-2021-0689 | Medium | 5.5 | 2021-10-06 | In RGB_to_BGR1_portable of SkSwizzler_opts.h, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclo… |
CVE-2021-42006 | High | 8.8 | 2021-10-04 | An out-of-bounds access in GffLine::GffLine in gff.cpp in GCLib 0.12.7 allows an attacker to cause a segmentation fault or possibly have unspecified other impa… |
CVE-2021-32672 | Medium | 5.3 | 2021-10-04 | Redis is an open source, in-memory database that persists on disk. When using the Redis Lua Debugger, users can send malformed requests that cause the debugger… |
CVE-2021-21704 | Medium | 5.0 | 2021-10-04 | In PHP versions 7.3.x below 7.3.29, 7.4.x below 7.4.21 and 8.0.x below 8.0.8, when using Firebird PDO driver extension, a malicious database server could cause… |
CVE-2021-38109 | Medium | 5.5 | 2021-10-02 | Corel DrawStandard 2020 22.0.0.474 is affected by an Out-of-bounds Read vulnerability when parsing a crafted file. An unauthenticated attacker could leverage t… |
CVE-2021-38108 | Medium | 5.5 | 2021-10-02 | Word97Import200.dll in Corel WordPerfect 2020 20.0.0.200 is affected by an Out-of-bounds Read vulnerability when parsing a crafted file. An unauthenticated att… |
CVE-2021-38107 | Medium | 5.5 | 2021-10-02 | CdrCore.dll in Corel DrawStandard 2020 22.0.0.474 is affected by an Out-of-bounds Read vulnerability when parsing a crafted file. An unauthenticated attacker c… |
CVE-2021-38106 | Medium | 5.5 | 2021-10-01 | UAX200.dll in Corel Presentations 2020 20.0.0.200 is affected by an Out-of-bounds Read vulnerability when parsing a crafted file. An unauthenticated attacker c… |
CVE-2021-38105 | Medium | 5.5 | 2021-10-01 | IPPP82.FLT in Corel Presentations 2020 20.0.0.200 is affected by an Out-of-bounds Read vulnerability when parsing a crafted file. An unauthenticated attacker c… |
CVE-2021-38102 | Medium | 5.5 | 2021-10-01 | IPPP82.FLT in Corel Presentations 2020 20.0.0.200 is affected by an Out-of-bounds Read vulnerability when parsing a crafted file. An unauthenticated attacker c… |
CVE-2021-38104 | Medium | 5.5 | 2021-10-01 | IPPP72.FLT in Corel Presentations 2020 20.0.0.200 is affected by an Out-of-bounds Read vulnerability when parsing a crafted file. An unauthenticated attacker c… |
CVE-2021-21089 | Low | 3.3 | 2021-09-30 | Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by an out-of-bound… |
CVE-2021-40716 | Medium | 5.5 | 2021-09-29 | XMP Toolkit SDK versions 2021.07 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attack… |