CWE-125 · Out-of-bounds Read (page 63)
Page 63 of 94 — CVEs classified under CWE-125, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-8036 | High | 7.5 | 2020-11-04 | The tok2strbuf() function in tcpdump 4.10.0-PRE-GIT was used by the SOME/IP dissector in an unsafe way. |
CVE-2020-15981 | Medium | 6.5 | 2020-11-03 | Out of bounds read in audio in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to obtain potentially sensitive information from process memory vi… |
CVE-2020-3703 | Critical | 9.8 | 2020-11-02 | u'Buffer over-read issue in Bluetooth peripheral firmware due to lack of check for invalid opcode and length of opcode received from central device(This CVE is… |
CVE-2020-3670 | Critical | 9.1 | 2020-11-02 | u'Potential out of bounds read while processing downlink NAS transport message due to improper length check of Information Element(IEI) NAS message container'… |
CVE-2020-11169 | Critical | 9.1 | 2020-11-02 | u'Buffer over-read while processing received L2CAP packet due to lack of integer overflow check' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivit… |
CVE-2020-11156 | High | 8.1 | 2020-11-02 | u'Buffer over-read issue in Bluetooth estack due to lack of check for invalid length of L2cap packet received from peer device.' in Snapdragon Auto, Snapdragon… |
CVE-2020-11141 | High | 8.1 | 2020-11-02 | u'Buffer over-read issue in Bluetooth estack due to lack of check for invalid length of L2cap configuration request received from peer device.' in Snapdragon A… |
CVE-2020-11114 | High | 8.8 | 2020-11-02 | u'Bluetooth devices does not properly restrict the L2CAP payload length allowing users in radio range to cause a buffer overflow via a crafted Link Layer packe… |
CVE-2020-5991 | High | 7.8 | 2020-10-30 | NVIDIA CUDA Toolkit, all versions prior to 11.1.1, contains a vulnerability in the NVJPEG library in which an out-of-bounds read or write operation may lead to… |
CVE-2020-4767 | High | 7.5 | 2020-10-28 | IBM Sterling Connect Direct for Microsoft Windows 4.7, 4.8, 6.0, and 6.1 could allow a remote attacker to cause a denial of service, caused by a buffer over-re… |
CVE-2020-9973 | High | 7.8 | 2020-10-27 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15.7, Security Update 2020-005 High Sierra, Securit… |
CVE-2020-9961 | High | 7.8 | 2020-10-27 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.7, Security Update 2020-005 High Sierra, Securi… |
CVE-2020-3880 | High | 7.8 | 2020-10-27 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 6.1.2, iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, macOS Cata… |
CVE-2019-8850 | Medium | 5.5 | 2020-10-27 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15, iOS 13.1 and iPadOS 13.1, tvOS 13, macOS Catal… |
CVE-2019-8840 | High | 8.8 | 2020-10-27 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 11.3. Compiling with untrusted sources may lead to arbitrary co… |
CVE-2019-8830 | High | 8.8 | 2020-10-27 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in tvOS 13.3, watchOS 6.1.1, macOS Catalina 10.15.2, Security Update 20… |
CVE-2019-8759 | High | 7.1 | 2020-10-27 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15.1, Security Update 2019-001, and Security Update… |
CVE-2019-8746 | Critical | 9.8 | 2020-10-27 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15, iOS 13, iCloud for Windows 7.14, iCloud for Wi… |
CVE-2019-8582 | Medium | 5.5 | 2020-10-27 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iCloud for Windows 7.12, tvOS 12.3, iTunes 12.9.5 for Windows, macOS… |
CVE-2019-8581 | Critical | 9.8 | 2020-10-27 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in AirPort Base Station Firmware Update 7.8.1, AirPort Base Station Fir… |
CVE-2019-8547 | Critical | 9.8 | 2020-10-27 | An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in macO… |
CVE-2020-1915 | High | 7.5 | 2020-10-26 | An out-of-bounds read in the JavaScript Interpreter in Facebook Hermes prior to commit 8cb935cd3b2321c46aa6b7ed8454d95c75a7fca0 allows attackers to cause a den… |
CVE-2020-26566 | High | 7.5 | 2020-10-26 | A Denial of Service condition in Motion-Project Motion 3.2 through 4.3.1 allows remote unauthenticated users to cause a webu.c segmentation fault and kill the… |
CVE-2020-9984 | High | 7.8 | 2020-10-22 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watch… |
CVE-2020-9938 | High | 7.8 | 2020-10-22 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watch… |
CVE-2020-9908 | High | 7.1 | 2020-10-22 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.6. A local user may be able to cause unexpected… |
CVE-2020-9902 | Medium | 5.5 | 2020-10-22 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchO… |
CVE-2020-9877 | High | 7.8 | 2020-10-22 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchO… |
CVE-2020-9873 | High | 7.8 | 2020-10-22 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watch… |
CVE-2020-9828 | High | 7.5 | 2020-10-22 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.4. A remote attacker may be able to leak sensit… |
CVE-2020-9779 | High | 7.1 | 2020-10-22 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.4. A local user may be able to cause unexpected… |
CVE-2020-24418 | High | 7.8 | 2020-10-21 | Adobe After Effects version 17.1.1 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted .aepx file, which could result in a… |
CVE-2020-15265 | Medium | 5.9 | 2020-10-21 | In Tensorflow before version 2.4.0, an attacker can pass an invalid `axis` value to `tf.quantization.quantize_and_dequantize`. This results in accessing a dime… |
CVE-2020-9750 | High | 7.8 | 2020-10-21 | Adobe Animate version 20.5 (and earlier) is affected by an out-of-bounds read vulnerability, which could result in arbitrary code execution in the context of t… |
CVE-2020-9749 | High | 7.8 | 2020-10-21 | Adobe Animate version 20.5 (and earlier) is affected by an out-of-bounds read vulnerability that could result in arbitrary code execution in the context of the… |
CVE-2020-24410 | High | 7.8 | 2020-10-20 | Adobe Illustrator version 24.2 (and earlier) is affected by an out-of-bounds read vulnerability when parsing crafted PDF files. This could result in a read pas… |
CVE-2020-24409 | High | 7.8 | 2020-10-20 | Adobe Illustrator version 24.2 (and earlier) is affected by an out-of-bounds read vulnerability when parsing crafted PDF files. This could result in a read pas… |
CVE-2020-3981 | Medium | 5.8 | 2020-10-20 | VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202008101-SG, 6.5 before ESXi650-202007101-SG), Workstation (15.x), Fusion (11.x before 11… |
CVE-2020-24387 | High | 7.5 | 2020-10-19 | An issue was discovered in the yh_create_session() function of yubihsm-shell through 2.0.2. The function does not explicitly check the returned session id from… |
CVE-2020-16159 | Critical | 9.1 | 2020-10-19 | GoPro gpmf-parser 1.5 has a heap out-of-bounds read and segfault in GPMF_ScaledData(). Parsing malicious input can result in a crash or information disclosure. |
CVE-2020-16947 | High | 7.5 | 2020-10-16 | <p>A remote code execution vulnerability exists in Microsoft Outlook software when the software fails to properly handle objects in memory. An attacker who suc… |
CVE-2020-1671 | High | 7.5 | 2020-10-16 | On Juniper Networks Junos OS platforms configured as DHCPv6 local server or DHCPv6 Relay Agent, Juniper Networks Dynamic Host Configuration Protocol Daemon (JD… |
CVE-2020-9918 | Critical | 9.8 | 2020-10-16 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8. A remote attacke… |
CVE-2020-9909 | Medium | 5.9 | 2020-10-16 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8. An attacker tha… |
CVE-2020-9894 | Medium | 4.3 | 2020-10-16 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2… |
CVE-2020-9891 | High | 7.8 | 2020-10-16 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchO… |
CVE-2020-9890 | High | 7.8 | 2020-10-16 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchO… |
CVE-2020-9888 | High | 7.8 | 2020-10-16 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchO… |
CVE-2020-9799 | High | 7.8 | 2020-10-16 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15.6. A malicious application may be able to execut… |
CVE-2019-18795 | Medium | 6.5 | 2020-10-16 | The BASS Audio Library 2.4.14 under Windows is prone to a BASS_StreamCreateFile out of bounds read vulnerability via a crafted .wav file. An attacker can explo… |
CVE-2020-24352 | Medium | 5.5 | 2020-10-16 | An issue was discovered in QEMU through 5.1.0. An out-of-bounds memory access was found in the ATI VGA device implementation. This flaw occurs in the ati_2d_bl… |
CVE-2020-6107 | Medium | 5.5 | 2020-10-15 | An exploitable information disclosure vulnerability exists in the dev_read functionality of F2fs-Tools F2fs.Fsck 1.13. A specially crafted f2fs filesystem can… |
CVE-2020-6106 | Medium | 5.5 | 2020-10-15 | An exploitable information disclosure vulnerability exists in the init_node_manager functionality of F2fs-Tools F2fs.Fsck 1.12 and 1.13. A specially crafted fi… |
CVE-2020-6104 | Medium | 5.5 | 2020-10-15 | An exploitable information disclosure vulnerability exists in the get_dnode_of_data functionality of F2fs-Tools F2fs.Fsck 1.13. A specially crafted f2fs filesy… |
CVE-2020-6374 | High | 7.8 | 2020-10-15 | SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated Jupiter Tessallation(.jt) file received from untrusted sources which results in… |
CVE-2020-0413 | High | 7.5 | 2020-10-14 | In gatt_process_read_by_type_rsp of gatt_cl.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information dis… |
CVE-2020-0377 | High | 7.5 | 2020-10-14 | In gatt_process_read_by_type_rsp of gatt_cl.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information dis… |
CVE-2020-0376 | Critical | 9.1 | 2020-10-14 | There is a possible out of bounds read due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-163003156 |
CVE-2020-0371 | Critical | 9.1 | 2020-10-14 | There is a possible out of bounds read due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-163008256 |
CVE-2020-0339 | Critical | 9.1 | 2020-10-14 | There is a possible out of bounds read due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-162980705 |
CVE-2020-25188 | High | 7.8 | 2020-10-14 | An attacker who convinces a valid user to open a specially crafted project file to exploit could execute code under the privileges of the application due to an… |
CVE-2020-12933 | Medium | 5.5 | 2020-10-13 | A denial of service vulnerability exists in the D3DKMTEscape handler functionality of AMD ATIKMDAG.SYS (e.g. version 26.20.15029.27017). A specially crafted D3… |
CVE-2020-12911 | Medium | 5.5 | 2020-10-13 | A denial of service vulnerability exists in the D3DKMTCreateAllocation handler functionality of AMD ATIKMDAG.SYS (e.g. version 26.20.15029.27017). A specially… |
CVE-2020-17411 | Low | 3.3 | 2020-10-13 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 10.0.0.35798. User interaction is re… |
CVE-2020-9108 | Medium | 5.5 | 2020-10-12 | HUAWEI P30 Pro versions earlier than 10.1.0.160(C00E160R2P8) have an out-of-bounds read and write vulnerability. An unauthenticated attacker crafts malformed m… |
CVE-2020-9107 | Medium | 5.5 | 2020-10-12 | HUAWEI P30 Pro versions earlier than 10.1.0.160(C00E160R2P8) have an out-of-bounds read and write vulnerability. An unauthenticated attacker crafts malformed m… |
CVE-2020-9091 | Medium | 5.5 | 2020-10-12 | Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have an out-of-bounds read and write vulnerability. Some functions do not verify inputs sufficiently… |
CVE-2020-9087 | Medium | 5.5 | 2020-10-12 | Taurus-AL00A version 10.0.0.1(C00E1R1P1) has an out-of-bounds read vulnerability in XFRM module. An authenticated, local attacker may perform a specific operat… |
CVE-2020-5140 | High | 7.5 | 2020-10-12 | A vulnerability in SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS) on the firewall SSLVPN service by sending a malicious HTTP… |
CVE-2020-5134 | Medium | 6.5 | 2020-10-12 | A vulnerability in SonicOS allows an authenticated attacker to cause out-of-bound invalid file reference leads to a firewall crash. This vulnerability affected… |
CVE-2020-7466 | High | 7.5 | 2020-10-06 | The PPP implementation of MPD before 5.9 allows a remote attacker who can send specifically crafted PPP authentication message to cause the daemon to read beyo… |
CVE-2020-14377 | High | 7.1 | 2020-09-30 | A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A complete lack of validation of attacker-controlled parameters can lead to a buffer o… |
CVE-2020-25774 | Medium | 4.3 | 2020-09-29 | A vulnerability in the Trend Micro Apex One ServerMigrationTool component could allow an attacker to trigger an out-of-bounds red information disclosure which… |
CVE-2020-25772 | Medium | 5.5 | 2020-09-29 | An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to disclose sensitive information to an unprivi… |
CVE-2020-25771 | Medium | 5.5 | 2020-09-29 | An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to disclose sensitive information to an unprivi… |
CVE-2020-25770 | Medium | 5.5 | 2020-09-29 | An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to disclose sensitive information to an unprivi… |
CVE-2020-24565 | Medium | 5.5 | 2020-09-29 | An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to disclose sensitive information to an unprivi… |
CVE-2020-24564 | Medium | 5.5 | 2020-09-29 | An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to disclose sensitive information to an unprivi… |
CVE-2020-15211 | Medium | 4.8 | 2020-09-25 | In TensorFlow Lite before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, saved models in the flatbuffer format use a double indexing scheme: a model has a set… |
CVE-2020-15208 | High | 7.4 | 2020-09-25 | In tensorflow-lite before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, when determining the common dimension size of two tensors, TFLite uses a `DCHECK` whi… |
CVE-2020-15196 | High | 8.5 | 2020-09-25 | In Tensorflow version 2.3.0, the `SparseCountSparseOutput` and `RaggedCountSparseOutput` implementations don't validate that the `weights` tensor has the same… |
CVE-2020-3399 | High | 8.6 | 2020-09-24 | A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Software for Cisco Catalyst 9800 Series… |
CVE-2020-6555 | High | 7.6 | 2020-09-21 | Out of bounds read in WebGL in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to obtain potentially sensitive information from process memory v… |
CVE-2020-0365 | Medium | 5.5 | 2020-09-18 | In netd, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution privile… |
CVE-2020-0349 | Medium | 4.4 | 2020-09-18 | In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges… |
CVE-2020-0348 | Medium | 4.9 | 2020-09-18 | In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure over NFC with System execution p… |
CVE-2020-0300 | High | 7.5 | 2020-09-18 | In NFC, there is a possible out of bounds read due to uninitialized data. This could lead to remote information disclosure with no additional execution privile… |
CVE-2020-0292 | Medium | 4.4 | 2020-09-18 | In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privi… |
CVE-2020-0291 | Medium | 4.4 | 2020-09-18 | In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privi… |
CVE-2020-0282 | Medium | 4.5 | 2020-09-18 | In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure. System execution privileges, a… |
CVE-2020-0281 | Medium | 4.5 | 2020-09-18 | In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure. System execution privileges, a… |
CVE-2020-9745 | Medium | 6.1 | 2020-09-18 | Adobe Media Encoder version 14.3.2 (and earlier versions) has an out-of-bounds read vulnerability that could be exploited to read past the end of an allocated… |
CVE-2020-9744 | Medium | 6.1 | 2020-09-18 | Adobe Media Encoder version 14.3.2 (and earlier versions) has an out-of-bounds read vulnerability that could be exploited to read past the end of an allocated… |
CVE-2020-9739 | Medium | 6.1 | 2020-09-18 | Adobe Media Encoder version 14.3.2 (and earlier versions) has an out-of-bounds read vulnerability that could be exploited to read past the end of an allocated… |
CVE-2020-0373 | Medium | 4.7 | 2020-09-17 | In SoundTriggerHwService, there is a possible out of bounds read due to a race condition. This could lead to local information disclosure with no additional ex… |
CVE-2020-0370 | Medium | 6.5 | 2020-09-17 | In libAACdec, there is a possible out of bounds read due to missing bounds check. This could lead to remote information disclosure with no additional execution… |
CVE-2020-0364 | Medium | 6.5 | 2020-09-17 | In libDRCdec, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional executi… |
CVE-2020-0359 | Medium | 5.5 | 2020-09-17 | In GLESRenderEngine, there is a possible out of bounds read due to a buffer overflow. This could lead to local information disclosure with no additional execut… |
CVE-2020-0355 | Medium | 6.5 | 2020-09-17 | In libFraunhoferAAC, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional… |
CVE-2020-0329 | Medium | 5.5 | 2020-09-17 | In the OMX encoder, there is a possible out of bounds read due to invalid input validation. This could lead to local information disclosure with no additional… |