CWE-125 · Out-of-bounds Read (page 62)
Page 62 of 99 — CVEs classified under CWE-125, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-40697 | Low | 3.3 | 2021-09-29 | Adobe Framemaker versions 2019 Update 8 (and earlier) and 2020 Release Update 2 (and earlier) are affected by an out-of-bounds read vulnerability that could le… |
CVE-2021-39865 | Low | 3.3 | 2021-09-29 | Adobe Framemaker versions 2019 Update 8 (and earlier) and 2020 Release Update 2 (and earlier) are affected by an out-of-bounds read vulnerability that could le… |
CVE-2021-39862 | Low | 3.3 | 2021-09-29 | Adobe Framemaker versions 2019 Update 8 (and earlier) and 2020 Release Update 2 (and earlier) are affected by an out-of-bounds read vulnerability that could le… |
CVE-2021-39861 | Medium | 5.5 | 2021-09-29 | Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by an out-of-bounds read vu… |
CVE-2021-39858 | Low | 3.3 | 2021-09-29 | Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by an out-of-bounds read vu… |
CVE-2021-39844 | Low | 3.3 | 2021-09-29 | Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by an out-of-bounds read vu… |
CVE-2021-39834 | Low | 3.3 | 2021-09-29 | Adobe Framemaker versions 2019 Update 8 (and earlier) and 2020 Release Update 2 (and earlier) are affected by an out-of-bounds read vulnerability that could le… |
CVE-2021-39833 | Low | 3.3 | 2021-09-29 | Adobe Framemaker versions 2019 Update 8 (and earlier) and 2020 Release Update 2 (and earlier) are affected by an out-of-bounds read vulnerability that could le… |
CVE-2021-39821 | High | 7.8 | 2021-09-29 | Adobe InDesign versions 16.3 (and earlier), and 16.3.1 (and earlier) are affected by an out-of-bounds read vulnerability that could result in arbitrary code ex… |
CVE-2021-29358 | Medium | 5.5 | 2021-09-28 | A buffer overflow vulnerability in FORMATS!ReadPVR_W+0xfa of Irfanview 4.57 allows attackers to cause a denial of service (DOS) via a crafted PVR file. |
CVE-2021-41534 | Low | 3.3 | 2021-09-28 | A vulnerability has been identified in NX 1980 Series (All versions < V1984), Solid Edge SE2021 (All versions < SE2021MP8). The affected application is vulnera… |
CVE-2021-41533 | Low | 3.3 | 2021-09-28 | A vulnerability has been identified in NX 1980 Series (All versions < V1984), Solid Edge SE2021 (All versions < SE2021MP8). The affected application is vulnera… |
CVE-2021-0660 | Medium | 4.9 | 2021-09-27 | In ccu, there is a possible out of bounds read due to incorrect error handling. This could lead to information disclosure with System execution privileges need… |
CVE-2021-41581 | Medium | 5.5 | 2021-09-24 | x509_constraints_parse_mailbox in lib/libcrypto/x509/x509_constraints.c in LibreSSL through 3.4.0 has a stack-based buffer over-read. When the input exceeds DO… |
CVE-2020-20902 | Medium | 6.5 | 2021-09-20 | A CWE-125: Out-of-bounds read vulnerability exists in long_term_filter function in g729postfilter.c in FFmpeg 4.2.1 during computation of the denominator of ps… |
CVE-2021-39218 | Medium | 6.3 | 2021-09-17 | Wasmtime is an open source runtime for WebAssembly & WASI. In Wasmtime from version 0.26.0 and before version 0.30.0 is affected by a memory unsoundness vulner… |
CVE-2020-21535 | Medium | 5.5 | 2021-09-16 | fig2dev 3.2.7b contains a segmentation fault in the gencgm_start function in gencgm.c. |
CVE-2021-36160 | High | 7.5 | 2021-09-16 | A carefully crafted request uri-path can cause mod_proxy_uwsgi to read above the allocated memory and crash (DoS). This issue affects Apache HTTP Server versio… |
CVE-2021-40155 | High | 7.8 | 2021-09-15 | A maliciously crafted DWG file in Autodesk Navisworks 2019, 2020, 2021, 2022 can be forced to read beyond allocated boundaries when parsing the DWG files. This… |
CVE-2021-27045 | High | 7.8 | 2021-09-15 | A maliciously crafted PDF file in Autodesk Navisworks 2019, 2020, 2021, 2022 can be forced to read beyond allocated boundaries when parsing the PDF file. This… |
CVE-2021-27044 | High | 7.8 | 2021-09-15 | A Out-Of-Bounds Read/Write Vulnerability in Autodesk FBX Review version 1.4.0 may lead to remote code execution through maliciously crafted DLL files or inform… |
CVE-2020-3960 | High | 8.4 | 2021-09-15 | VMware ESXi (6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.5), and Fusion (11.x before 11.5.5) contain an… |
CVE-2020-21049 | Medium | 6.5 | 2021-09-14 | An invalid read in the stb_image.h component of libsixel prior to v1.8.5 allows attackers to cause a denial of service (DOS) via a crafted PSD file. |
CVE-2021-37203 | High | 7.1 | 2021-09-14 | A vulnerability has been identified in NX 1980 Series (All versions < V1984), Solid Edge SE2021 (All versions < SE2021MP8). The plmxmlAdapterIFC.dll contains a… |
CVE-2021-37176 | Low | 3.3 | 2021-09-14 | A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). The femap.exe application lacks proper v… |
CVE-2021-25456 | Medium | 5.5 | 2021-09-09 | OOB read vulnerability in libswmfextractor.so library prior to SMR Sep-2021 Release 1 allows attackers to execute memcpy at arbitrary address via forged wmf fi… |
CVE-2021-25455 | Low | 3.3 | 2021-09-09 | OOB read vulnerability in libsaviextractor.so library prior to SMR Sep-2021 Release 1 allows attackers to access arbitrary address through pointer via forged a… |
CVE-2021-25454 | Low | 3.1 | 2021-09-09 | OOB read vulnerability in libsaacextractor.so library prior to SMR Sep-2021 Release 1 allows attackers to execute remote DoS via forged aac file. |
CVE-2021-1974 | High | 7.5 | 2021-09-09 | Possible buffer over read due to lack of alignment between map or unmap length of IPA SMMU and WLAN SMMU in Snapdragon Auto, Snapdragon Compute, Snapdragon Con… |
CVE-2021-1952 | High | 7.8 | 2021-09-09 | Possible buffer over read occurs due to lack of length check of request buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Cons… |
CVE-2021-1948 | High | 7.5 | 2021-09-09 | Possible out of bound read due to lack of length check of data while parsing the beacon or probe response in Snapdragon Auto, Snapdragon Compute, Snapdragon Co… |
CVE-2021-1941 | High | 7.5 | 2021-09-09 | Possible buffer over read issue due to improper length check on WPA IE string sent by peer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Sna… |
CVE-2021-40812 | Medium | 6.5 | 2021-09-08 | The GD Graphics Library (aka LibGD) through 2.3.2 has an out-of-bounds read because of the lack of certain gdGetBuf and gdPutBuf return value checks. |
CVE-2021-28569 | Medium | 4.3 | 2021-09-08 | Adobe Media Encoder version 15.1 (and earlier) is affected by an Out-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated att… |
CVE-2021-30719 | High | 7.1 | 2021-09-08 | A local user may be able to cause unexpected system termination or read kernel memory. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Cata… |
CVE-2021-30708 | High | 7.8 | 2021-09-08 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Upda… |
CVE-2021-30706 | Medium | 5.5 | 2021-09-08 | Processing a maliciously crafted image may lead to disclosure of user information. This issue is fixed in macOS Big Sur 11.4, tvOS 14.6, watchOS 7.5, iOS 14.6… |
CVE-2021-30695 | Medium | 5.5 | 2021-09-08 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Updat… |
CVE-2021-30687 | Medium | 5.5 | 2021-09-08 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in tvOS 14.6, Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6… |
CVE-2021-30686 | Medium | 5.5 | 2021-09-08 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Security Update 2021-003 Catalin… |
CVE-2021-30660 | High | 7.5 | 2021-09-08 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5… |
CVE-2021-1885 | High | 7.8 | 2021-09-08 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5… |
CVE-2021-1881 | High | 7.8 | 2021-09-08 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave… |
CVE-2021-1877 | Medium | 5.5 | 2021-09-08 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.5 and iPadOS 14.5. A local user may be able to read kernel me… |
CVE-2021-1867 | High | 8.8 | 2021-09-08 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.5 and iPadOS 14.5, macOS Big Sur 11.3. A malicious applicatio… |
CVE-2021-1852 | Medium | 5.5 | 2021-09-08 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.5 and iPadOS 14.5. A local user may be able to read kernel me… |
CVE-2021-1846 | Medium | 5.5 | 2021-09-08 | Processing a maliciously crafted audio file may disclose restricted memory. This issue is fixed in Security Update 2021-002 Catalina, iOS 14.5 and iPadOS 14.5… |
CVE-2021-1830 | Medium | 5.5 | 2021-09-08 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.5 and iPadOS 14.5. A local user may be able to read kernel me… |
CVE-2021-30791 | Medium | 5.5 | 2021-09-08 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 14.7, macOS Big Sur 11.5. Processing a maliciously crafted file m… |
CVE-2021-30789 | High | 7.8 | 2021-09-08 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security Updat… |
CVE-2021-30755 | Medium | 6.5 | 2021-09-08 | Processing a maliciously crafted font may result in the disclosure of process memory. This issue is fixed in macOS Big Sur 11.4, tvOS 14.6, watchOS 7.5. An out… |
CVE-2021-30753 | Medium | 5.5 | 2021-09-08 | Processing a maliciously crafted font may result in the disclosure of process memory. This issue is fixed in macOS Big Sur 11.4, tvOS 14.6, watchOS 7.5, iOS 14… |
CVE-2021-30752 | High | 7.8 | 2021-09-08 | Processing a maliciously crafted image may lead to arbitrary code execution. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4… |
CVE-2021-30746 | Medium | 5.5 | 2021-09-08 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Upda… |
CVE-2021-30733 | Medium | 5.5 | 2021-09-08 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Security Update 2021-004 Catali… |
CVE-2021-1930 | Medium | 5.5 | 2021-09-08 | Possible out of bounds read due to incorrect validation of incoming buffer length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon C… |
CVE-2021-1928 | Medium | 4.6 | 2021-09-08 | Buffer over read could occur due to incorrect check of buffer size while flashing emmc devices in Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… |
CVE-2020-19751 | Critical | 9.1 | 2021-09-07 | An issue was discovered in gpac 0.8.0. The gf_odf_del_ipmp_tool function in odf_code.c has a heap-based buffer over-read. |
CVE-2020-19750 | High | 7.5 | 2021-09-07 | An issue was discovered in gpac 0.8.0. The strdup function in box_code_base.c has a heap-based buffer over-read. |
CVE-2021-39258 | High | 7.8 | 2021-09-07 | A crafted NTFS image can cause out-of-bounds reads in ntfs_attr_find and ntfs_external_attr_find in NTFS-3G < 2021.8.22. |
CVE-2021-39255 | High | 7.8 | 2021-09-07 | A crafted NTFS image can trigger an out-of-bounds read, caused by an invalid attribute in ntfs_attr_find_in_attrdef, in NTFS-3G < 2021.8.22. |
CVE-2021-39253 | High | 7.8 | 2021-09-07 | A crafted NTFS image can cause an out-of-bounds read in ntfs_runlists_merge_i in NTFS-3G < 2021.8.22. |
CVE-2021-39252 | High | 7.8 | 2021-09-07 | A crafted NTFS image can cause an out-of-bounds read in ntfs_ie_lookup in NTFS-3G < 2021.8.22. |
CVE-2021-40516 | High | 7.5 | 2021-09-05 | WeeChat before 3.2.1 allows remote attackers to cause a denial of service (crash) via a crafted WebSocket frame that trigger an out-of-bounds read in plugins/r… |
CVE-2021-23437 | High | 7.5 | 2021-09-03 | The package pillow 5.2.0 and before 8.3.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the getrgb function. |
CVE-2021-36019 | Low | 3.3 | 2021-09-02 | Adobe After Effects version 18.2.1 (and earlier) is affected by an Out-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated a… |
CVE-2021-36018 | Low | 3.3 | 2021-09-02 | Adobe After Effects version 18.2.1 (and earlier) is affected by an Out-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated a… |
CVE-2021-28565 | Medium | 4.3 | 2021-09-02 | Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by an Out-of-bound… |
CVE-2021-28557 | Medium | 4.3 | 2021-09-02 | Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by an Out-of-bound… |
CVE-2021-28555 | Medium | 6.5 | 2021-09-02 | Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by an Out-of-bound… |
CVE-2021-22790 | Medium | 6.5 | 2021-09-02 | A CWE-125: Out-of-bounds Read vulnerability that could cause a Denial of Service on the Modicon PLC controller / simulator when updating the controller applica… |
CVE-2021-36079 | High | 7.8 | 2021-09-01 | Adobe Bridge version 11.1 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted .SGI file, which could result in a read past… |
CVE-2021-36074 | Low | 3.3 | 2021-09-01 | Adobe Bridge versions 11.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of arbitrary memory. An attacker cou… |
CVE-2021-36071 | Low | 3.3 | 2021-09-01 | Adobe Bridge versions 11.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of arbitrary memory. An attacker cou… |
CVE-2021-36053 | Low | 3.3 | 2021-09-01 | XMP Toolkit SDK versions 2020.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of arbitrary memory. An attacke… |
CVE-2021-36045 | Low | 3.3 | 2021-09-01 | XMP Toolkit SDK versions 2020.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of arbitrary memory. An attacke… |
CVE-2021-30593 | High | 8.1 | 2021-08-26 | Out of bounds read in Tab Strip in Google Chrome prior to 92.0.4515.131 allowed an attacker who convinced a user to install a malicious extension to perform an… |
CVE-2021-1588 | High | 8.6 | 2021-08-25 | A vulnerability in the MPLS Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to… |
CVE-2021-3605 | Medium | 5.5 | 2021-08-25 | There's a flaw in OpenEXR's rleUncompress functionality in versions prior to 3.0.5. An attacker who is able to submit a crafted file to an application linked w… |
CVE-2021-32975 | High | 7.8 | 2021-08-25 | Cscape (All Versions prior to 9.90 SP5) lacks proper validation of user-supplied data when parsing project files. This could lead to an out-of-bounds read. An… |
CVE-2021-31013 | Medium | 5.5 | 2021-08-24 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.1, iOS 15.2 and iPadOS 15.2, macOS Big Sur 11.6.2… |
CVE-2021-31002 | High | 7.8 | 2021-08-24 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Monterey 12.0.1, macOS Big Sur 11.6.2. A malicious application… |
CVE-2021-30991 | High | 7.8 | 2021-08-24 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 15.2 and iPadOS 15.2. A malicious application may be able to exec… |
CVE-2021-30973 | Medium | 5.5 | 2021-08-24 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Monterey 12.1, iOS 15.2 and iPadOS 15.2, macOS Big Sur 11.6.2… |
CVE-2021-30958 | High | 7.8 | 2021-08-24 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.6.2, tvOS 15.2, macOS Monterey 12.1, Security Updat… |
CVE-2021-30953 | High | 8.8 | 2021-08-24 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2… |
CVE-2021-30939 | High | 7.8 | 2021-08-24 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.6.2, tvOS 15.2, macOS Monterey 12.1, Security Update… |
CVE-2021-30911 | Medium | 5.5 | 2021-08-24 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.0.1, Security Update 2021-007 Catalina, iOS 15.1 an… |
CVE-2021-30910 | Medium | 5.5 | 2021-08-24 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 15.1 and iPadOS 15.1, macOS Monterey 12.0.1, tvOS 15.1, Security… |
CVE-2021-30905 | Medium | 5.5 | 2021-08-24 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 15.1 and iPadOS 15.1, macOS Monterey 12.0.1, tvOS 15.1, watchOS 8… |
CVE-2021-30880 | High | 7.1 | 2021-08-24 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.0.1, Security Update 2021-007 Catalina, macOS Big S… |
CVE-2021-30879 | High | 7.1 | 2021-08-24 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.0.1, Security Update 2021-007 Catalina, macOS Big S… |
CVE-2021-30877 | High | 7.1 | 2021-08-24 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.0.1, Security Update 2021-007 Catalina, macOS Big S… |
CVE-2021-30876 | High | 7.1 | 2021-08-24 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.0.1, Security Update 2021-007 Catalina, macOS Big S… |
CVE-2021-30865 | High | 7.8 | 2021-08-24 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.6, Security Update 2021-005 Catalina. A malicious a… |
CVE-2021-28630 | Low | 3.3 | 2021-08-24 | Adobe Animate version 21.0.6 (and earlier) is affected by an Out-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacke… |
CVE-2021-28621 | High | 7.8 | 2021-08-24 | Adobe Animate version 21.0.6 (and earlier) is affected by an Out-of-bounds Read vulnerability. An unauthenticated attacker could leverage this vulnerability to… |
CVE-2021-28619 | Medium | 5.5 | 2021-08-24 | Adobe Animate version 21.0.6 (and earlier) is affected by an Out-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacke… |
CVE-2021-28618 | Medium | 5.5 | 2021-08-24 | Adobe Animate version 21.0.6 (and earlier) is affected by an Out-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacke… |
CVE-2021-28617 | Medium | 5.5 | 2021-08-24 | Adobe Animate version 21.0.6 (and earlier) is affected by an Out-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacke… |