CWE-125 · Out-of-bounds Read (page 63)
Page 63 of 99 — CVEs classified under CWE-125, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-28612 | Medium | 6.1 | 2021-08-24 | Adobe After Effects version 18.2 (and earlier) is affected by an Our-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated att… |
CVE-2021-28616 | Medium | 6.1 | 2021-08-24 | Adobe After Effects version 18.2 (and earlier) is affected by an Our-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated att… |
CVE-2021-28615 | Medium | 5.5 | 2021-08-24 | Adobe After Effects version 18.2 (and earlier) is affected by an Our-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated att… |
CVE-2021-28611 | Medium | 6.1 | 2021-08-24 | Adobe After Effects version 18.2 (and earlier) is affected by an Our-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated att… |
CVE-2021-28609 | Medium | 5.5 | 2021-08-24 | Adobe After Effects version 18.2 (and earlier) is affected by an Out-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated att… |
CVE-2021-28600 | Medium | 5.5 | 2021-08-24 | Adobe After Effects version 18.2 (and earlier) is affected by an Out-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated att… |
CVE-2021-28554 | High | 7.8 | 2021-08-24 | Acrobat Reader DC versions versions 2021.001.20155 (and earlier), 2020.001.30025 (and earlier) and 2017.011.30196 (and earlier) are affected by an Out-of-bound… |
CVE-2021-28551 | High | 7.8 | 2021-08-24 | Acrobat Reader DC versions versions 2021.001.20155 (and earlier), 2020.001.30025 (and earlier) and 2017.011.30196 (and earlier) are affected by an Out-of-bound… |
CVE-2021-3712 | High | 7.4 | 2021-08-24 | ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buf… |
CVE-2021-36013 | Low | 3.3 | 2021-08-23 | Adobe Media Encoder version 15.2 (and earlier) is affected by an Out-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated att… |
CVE-2020-18778 | Medium | 6.5 | 2021-08-23 | In Libav 12.3, there is a heap-based buffer over-read in vc1_decode_p_mb_intfi in vc1_block.c that allows an attacker to cause denial-of-service via a crafted… |
CVE-2020-18776 | Medium | 6.5 | 2021-08-23 | In Libav 12.3, there is a segmentation fault in vc1_decode_b_mb_intfr in vc1_block.c that allows an attacker to cause denial-of-service via a crafted file. |
CVE-2020-18775 | Medium | 6.5 | 2021-08-23 | In Libav 12.3, there is a heap-based buffer over-read in vc1_decode_b_mb_intfi in vc1_block.c that allows an attacker to cause denial-of-service via a crafted… |
CVE-2020-18771 | High | 8.1 | 2021-08-23 | Exiv2 0.27.99.0 has a global buffer over-read in Exiv2::Internal::Nikon1MakerNote::print0x0088 in nikonmn_int.cpp which can result in an information leak. |
CVE-2021-35940 | High | 7.1 | 2021-08-23 | An out-of-bounds array read in the apr_time_exp*() functions was fixed in the Apache Portable Runtime 1.6.3 release (CVE-2017-12613). The fix for this issue wa… |
CVE-2021-36016 | Low | 3.3 | 2021-08-20 | Adobe Media Encoder version 15.2 (and earlier) is affected by an Out-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated att… |
CVE-2021-36010 | Low | 3.3 | 2021-08-20 | Adobe Illustrator version 25.2.3 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of memory. An attacker could le… |
CVE-2021-36001 | Low | 3.3 | 2021-08-20 | Adobe Character Animator version 4.2 (and earlier) is affected by an out-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated… |
CVE-2021-35992 | Low | 3.3 | 2021-08-20 | Adobe Bridge version 11.0.2 (and earlier) is affected by an Out-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacker… |
CVE-2021-35988 | Low | 3.3 | 2021-08-20 | Acrobat Reader DC versions 2021.005.20054 (and earlier), 2020.004.30005 (and earlier) and 2017.011.30197 (and earlier) are affected by an Out-of-bounds Read vu… |
CVE-2021-35987 | Low | 3.3 | 2021-08-20 | Acrobat Reader DC versions 2021.005.20054 (and earlier), 2020.004.30005 (and earlier) and 2017.011.30197 (and earlier) are affected by an out-of-bounds Read vu… |
CVE-2021-28637 | High | 7.8 | 2021-08-20 | Acrobat Reader DC versions 2021.005.20054 (and earlier), 2020.004.30005 (and earlier) and 2017.011.30197 (and earlier) are affected by an out-of-bounds read vu… |
CVE-2021-28590 | Low | 3.3 | 2021-08-20 | Adobe Media Encoder version 15.2 (and earlier) is affected by an Out-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated att… |
CVE-2021-28589 | Low | 3.3 | 2021-08-20 | Adobe Media Encoder version 15.2 (and earlier) is affected by an Out-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated att… |
CVE-2020-35683 | High | 7.5 | 2021-08-19 | An issue was discovered in HCC Nichestack 3.0. The code that parses ICMP packets relies on an unchecked value of the IP payload size (extracted from the IP hea… |
CVE-2020-25928 | Critical | 9.8 | 2021-08-18 | The DNS feature in InterNiche NicheStack TCP/IP 4.0.1 is affected by: Buffer Overflow. The impact is: execute arbitrary code (remote). The component is: DNS re… |
CVE-2020-25927 | High | 7.5 | 2021-08-18 | The DNS feature in InterNiche NicheStack TCP/IP 4.0.1 is affected by: Out-of-bounds Read. The impact is: a denial of service (remote). The component is: DNS re… |
CVE-2020-25767 | High | 7.5 | 2021-08-18 | An issue was discovered in HCC Embedded NicheStack IPv4 4.1. The dnc_copy_in routine for parsing DNS domain names does not check whether a domain name compress… |
CVE-2021-0408 | Medium | 5.5 | 2021-08-18 | In asf extractor, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional e… |
CVE-2021-39247 | Medium | 6.5 | 2021-08-17 | Zint Barcode Generator before 2.10.0 has a one-byte buffer over-read, related to is_last_single_ascii in code1.c, and rs_encode_uint in reedsol.c. |
CVE-2021-29988 | High | 8.8 | 2021-08-17 | Firefox incorrectly treated an inline list-item element as a block element, resulting in an out of bounds read or memory corruption, and a potentially exploita… |
CVE-2021-0584 | Medium | 5.5 | 2021-08-17 | In verifyBufferObject of Parcel.cpp, there is a possible out of bounds read due to an improper input validation. This could lead to local information disclosur… |
CVE-2021-0582 | Medium | 6.5 | 2021-08-17 | In wifi driver, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure to a proximal attacker w… |
CVE-2021-0581 | Medium | 6.5 | 2021-08-17 | In wifi driver, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure to a proximal attacker w… |
CVE-2021-0580 | Medium | 6.5 | 2021-08-17 | In wifi driver, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure to a proximal attacker w… |
CVE-2021-0579 | Medium | 6.5 | 2021-08-17 | In wifi driver, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure to a proximal attacker w… |
CVE-2021-0578 | Medium | 6.5 | 2021-08-17 | In wifi driver, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure to a proximal attacker w… |
CVE-2020-18756 | High | 7.5 | 2021-08-13 | An arbitrary memory access vulnerability in the EPA protocol of Dut Computer Control Engineering Co.'s PLC MAC1100 allows attackers to read the contents of any… |
CVE-2021-37687 | Medium | 5.5 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions TFLite's [`GatherNd` implementation](https://github.com/tensorflow/… |
CVE-2021-37685 | Medium | 5.5 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions TFLite's [`expand_dims.cc`](https://github.com/tensorflow/tensorflo… |
CVE-2021-37679 | High | 7.1 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions it is possible to nest a `tf.map_fn` within another `tf.map_fn` cal… |
CVE-2021-37672 | Medium | 5.5 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can read from outside of bounds of heap allocated data… |
CVE-2021-37670 | Medium | 5.5 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can read from outside of bounds of heap allocated data… |
CVE-2021-37664 | High | 7.3 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can read from outside of bounds of heap allocated data… |
CVE-2021-37659 | High | 7.3 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause undefined behavior via binding a reference to… |
CVE-2021-37655 | High | 7.3 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can trigger a read from outside of bounds of heap alloc… |
CVE-2021-37654 | High | 7.3 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can trigger a crash via a `CHECK`-fail in debug builds… |
CVE-2021-37651 | High | 7.1 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation for `tf.raw_ops.FractionalAvgPoolGrad` can be tr… |
CVE-2021-37641 | High | 7.3 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions if the arguments to `tf.raw_ops.RaggedGather` don't determine a val… |
CVE-2021-37635 | High | 7.3 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of sparse reduction operations in TensorFlow can… |
CVE-2021-37639 | High | 8.4 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. When restoring tensors via raw APIs, if the tensor name is not provided, TensorFlow can… |
CVE-2021-27791 | Medium | 5.4 | 2021-08-12 | The function that is used to parse the Authentication header in Brocade Fabric OS Web application service before Brocade Fabric OS v9.0.1a and v8.2.3a fails to… |
CVE-2021-38564 | Critical | 9.1 | 2021-08-11 | An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It allows an out-of-bounds read via util.scand. |
CVE-2021-1111 | Medium | 6.7 | 2021-08-11 | Bootloader contains a vulnerability in the NV3P server where any user with physical access through USB can trigger an incorrect bounds check, which may lead to… |
CVE-2021-0009 | Medium | 6.5 | 2021-08-11 | Out-of-bounds read in the firmware for Intel(R) Ethernet Adapters 800 Series Controllers and associated adapters before version 1.5.3.0 may allow an unauthenti… |
CVE-2021-38517 | Medium | 6.9 | 2021-08-11 | Certain NETGEAR devices are affected by out-of-bounds reads and writes. This affects R6400 before 1.0.1.70, RAX75 before 1.0.4.120, RAX80 before 1.0.4.120, and… |
CVE-2021-38380 | High | 7.5 | 2021-08-10 | Live555 through 1.08 mishandles huge requests for the same MP3 stream, leading to recursion and s stack-based buffer over-read. An attacker can leverage this t… |
CVE-2021-33738 | Low | 3.3 | 2021-08-10 | A vulnerability has been identified in JT2Go (All versions < V13.2.0.2), Teamcenter Visualization (All versions < V13.2.0.2). The plmxmlAdapterSE70.dll library… |
CVE-2021-37620 | Medium | 4.7 | 2021-08-09 | Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in E… |
CVE-2021-37619 | Medium | 4.7 | 2021-08-09 | Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in E… |
CVE-2021-37618 | Medium | 4.7 | 2021-08-09 | Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in E… |
CVE-2021-38202 | High | 7.5 | 2021-08-08 | fs/nfsd/trace.h in the Linux kernel before 5.13.4 might allow remote attackers to cause a denial of service (out-of-bounds read in strlen) by sending NFS traff… |
CVE-2021-38115 | Medium | 6.5 | 2021-08-04 | read_header_tga in gd_tga.c in the GD Graphics Library (aka LibGD) through 2.3.2 allows remote attackers to cause a denial of service (out-of-bounds read) via… |
CVE-2021-36159 | Critical | 9.1 | 2021-08-03 | libfetch before 2021-07-26, as used in apk-tools, xbps, and other products, mishandles numeric strings for the FTP and HTTP protocols. The FTP passive mode imp… |
CVE-2021-22552 | Medium | 5.3 | 2021-08-02 | An untrusted memory read vulnerability in Asylo versions up to 0.6.1 allows an untrusted attacker to pass a syscall number in MessageReader that is then used b… |
CVE-2021-25802 | High | 7.1 | 2021-07-26 | A buffer overflow vulnerability in the AVI_ExtractSubtitle component of VideoLAN VLC Media Player 3.0.11 allows attackers to cause an out-of-bounds read via a… |
CVE-2021-25801 | High | 7.1 | 2021-07-26 | A buffer overflow vulnerability in the __Parse_indx component of VideoLAN VLC Media Player 3.0.11 allows attackers to cause an out-of-bounds read via a crafted… |
CVE-2021-1094 | Medium | 6.1 | 2021-07-22 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where an out of boun… |
CVE-2021-32761 | High | 7.5 | 2021-07-21 | Redis is an in-memory database that persists on disk. A vulnerability involving out-of-bounds read and integer overflow to buffer overflow exists starting with… |
CVE-2020-19499 | High | 8.8 | 2021-07-21 | An issue was discovered in heif::Box_iref::get_references in libheif 1.4.0, allows attackers to cause a Denial of Service or possibly other unspecified impact… |
CVE-2020-19481 | Medium | 5.5 | 2021-07-21 | An issue was discovered in GPAC before 0.8.0, as demonstrated by MP4Box. It contains an invalid memory read in gf_m2ts_process_pmt in media_tools/mpegts.c that… |
CVE-2020-19472 | Medium | 5.5 | 2021-07-21 | An issue has been found in function DCTStream::readHuffSym in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid read of size 2… |
CVE-2020-19471 | Medium | 5.5 | 2021-07-21 | An issue has been found in function DCTStream::decodeImage in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid read of size 4… |
CVE-2020-19466 | Medium | 5.5 | 2021-07-21 | An issue has been found in function DCTStream::transformDataUnit in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid read of… |
CVE-2020-19465 | Medium | 5.5 | 2021-07-21 | An issue has been found in function ObjectStream::getObject in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid read of size… |
CVE-2020-36426 | High | 7.5 | 2021-07-19 | An issue was discovered in Arm Mbed TLS before 2.24.0. mbedtls_x509_crl_parse_der has a buffer over-read (of one byte). |
CVE-2021-0277 | High | 8.8 | 2021-07-15 | An Out-of-bounds Read vulnerability in the processing of specially crafted LLDP frames by the Layer 2 Control Protocol Daemon (l2cpd) of Juniper Networks Junos… |
CVE-2021-0596 | High | 7.5 | 2021-07-14 | In phNciNfc_RecvMfResp of phNxpExtns_MifareStd.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information… |
CVE-2021-21995 | High | 7.5 | 2021-07-13 | OpenSLP as used in ESXi has a denial-of-service vulnerability due a heap out-of-bounds read issue. A malicious actor with network access to port 427 on ESXi ma… |
CVE-2021-34325 | Medium | 5.5 | 2021-07-13 | A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The Jt981.dll library in affected applica… |
CVE-2021-34322 | Medium | 5.5 | 2021-07-13 | A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The JPEG2K_Loader.dll library in affected… |
CVE-2021-34321 | Medium | 5.5 | 2021-07-13 | A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The VisDraw.dll library in affected appli… |
CVE-2021-34320 | Medium | 5.5 | 2021-07-13 | A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The Jt981.dll library in affected applica… |
CVE-2021-34315 | High | 7.8 | 2021-07-13 | A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The BMP_loader.dll library in affected ap… |
CVE-2021-34308 | Medium | 5.5 | 2021-07-13 | A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The BMP_Loader.dll library in affected ap… |
CVE-2021-34307 | Medium | 5.5 | 2021-07-13 | A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The Tiff_Loader.dll library in affected a… |
CVE-2021-34304 | Medium | 5.5 | 2021-07-13 | A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The Tiff_Loader.dll library in affected a… |
CVE-2021-34303 | Medium | 5.5 | 2021-07-13 | A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The Tiff_Loader.dll library in affected a… |
CVE-2021-34302 | Medium | 5.5 | 2021-07-13 | A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The BMP_Loader.dll library in affected ap… |
CVE-2021-34299 | Medium | 5.5 | 2021-07-13 | A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The Tiff_loader.dll library in affected a… |
CVE-2021-34296 | High | 7.8 | 2021-07-13 | A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The BMP_Loader.dll library in affected ap… |
CVE-2021-34294 | High | 7.8 | 2021-07-13 | A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The Gif_loader.dll library in affected ap… |
CVE-2021-34292 | High | 7.8 | 2021-07-13 | A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The Tiff_loader.dll library in affected a… |
CVE-2021-1970 | High | 7.5 | 2021-07-13 | Possible out of bound read due to lack of length check of FT sub-elements in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… |
CVE-2021-1964 | High | 7.5 | 2021-07-13 | Possible buffer over read due to improper validation of IE size while parsing beacon from peer device in Snapdragon Auto, Snapdragon Compute, Snapdragon Connec… |
CVE-2021-1954 | High | 7.5 | 2021-07-13 | Possible buffer over read due to improper validation of data pointer while parsing FILS indication IE in Snapdragon Auto, Snapdragon Compute, Snapdragon Connec… |
CVE-2021-1945 | High | 7.5 | 2021-07-13 | Possible out of bound read due to lack of length check of Bandwidth-NSS IE in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… |
CVE-2021-1943 | High | 7.5 | 2021-07-13 | Possible buffer out of bound read can occur due to improper validation of TBTT count and length while parsing the beacon response in Snapdragon Auto, Snapdrago… |
CVE-2021-1901 | Medium | 4.6 | 2021-07-13 | Possible buffer over-read due to lack of length check while flashing meta images in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snap… |
CVE-2021-1899 | Medium | 4.6 | 2021-07-13 | Possible buffer over read due to lack of length check while flashing meta images in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snap… |