CWE-125 · Out-of-bounds Read (page 67)
Page 67 of 99 — CVEs classified under CWE-125, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-22302 | High | 7.1 | 2021-02-06 | There is an out-of-bound read vulnerability in Taurus-AL00A 10.0.0.1(C00E1R1P1). A module does not verify the some input. Attackers can exploit this vulnerabil… |
CVE-2021-22306 | Medium | 4.6 | 2021-02-06 | There is an out-of-bound read vulnerability in Mate 30 10.0.0.182(C00E180R6P2). A module does not verify the some input when dealing with messages. Attackers c… |
CVE-2021-25248 | Medium | 5.5 | 2021-02-04 | An out-of-bounds read information disclosure vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security (10… |
CVE-2021-0347 | Medium | 4.4 | 2021-02-04 | In ccu, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges… |
CVE-2020-25853 | High | 7.5 | 2021-02-03 | The function CheckMic() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 (up to and excluding 2.08) does not validate the size par… |
CVE-2021-0361 | Medium | 6.7 | 2021-02-03 | In kisd, there is a possible out of bounds read due to improper input validation. This could lead to local escalation of privilege with System execution privil… |
CVE-2020-8672 | High | 7.8 | 2021-02-02 | Out of bound read in BIOS firmware for 8th, 9th Generation Intel(R) Core(TM), Intel(R) Celeron(R) Processor 4000 Series Processors may allow an unauthenticated… |
CVE-2020-24335 | High | 7.5 | 2021-02-02 | An issue was discovered in uIP through 1.0, as used in Contiki and Contiki-NG. Domain name parsing lacks bounds checks, allowing an attacker to corrupt memory… |
CVE-2021-22655 | High | 7.8 | 2021-01-27 | Multiple out-of-bounds read issues have been identified in the way the application processes project files, allowing an attacker to craft a special project fil… |
CVE-2021-3272 | Medium | 5.5 | 2021-01-27 | jp2_decode in jp2/jp2_dec.c in libjasper in JasPer 2.0.24 has a heap-based buffer over-read when there is an invalid relationship between the number of channel… |
CVE-2020-27299 | Critical | 9.1 | 2021-01-26 | The affected product is vulnerable to an out-of-bounds read, which may allow an attacker to obtain and disclose sensitive data information or cause the device… |
CVE-2021-25901 | Medium | 5.3 | 2021-01-26 | An issue was discovered in the lazy-init crate through 2021-01-17 for Rust. Lazy lacks a Send bound, leading to a data race. |
CVE-2020-36223 | High | 7.5 | 2021-01-26 | A flaw was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Values Return Filter control handling, resulting in denial of service (double f… |
CVE-2020-29443 | Low | 3.9 | 2021-01-26 | ide_atapi_cmd_reply_end in hw/ide/atapi.c in QEMU 5.1.0 allows out-of-bounds read access because a buffer index is not validated. |
CVE-2020-16236 | High | 7.8 | 2021-01-26 | FPWIN Pro is vulnerable to an out-of-bounds read vulnerability when a user opens a maliciously crafted project file, which may allow an attacker to remotely ex… |
CVE-2020-0236 | High | 7.5 | 2021-01-26 | In A2DP_GetCodecType of a2dp_codec_config, there is a possible out-of-bounds read due to improper input validation. This could lead to remote information discl… |
CVE-2020-11216 | Critical | 9.8 | 2021-01-21 | Buffer over read can happen in video driver when playing clip with atomsize having value UINT32_MAX in Snapdragon Auto, Snapdragon Compute, Snapdragon Connecti… |
CVE-2020-11215 | Critical | 9.1 | 2021-01-21 | An out of bounds read can happen when processing VSA attribute due to improper minimum required length check in Snapdragon Auto, Snapdragon Compute, Snapdragon… |
CVE-2020-11214 | High | 7.5 | 2021-01-21 | Buffer over-read while processing NDL attribute if attribute length is larger than expected and then FW is treating it as more number of immutable schedules in… |
CVE-2020-11213 | Critical | 9.8 | 2021-01-21 | Out of bound reads might occur in while processing Service descriptor due to improper validation of length of fields in Snapdragon Auto, Snapdragon Compute, Sn… |
CVE-2020-11212 | Critical | 9.8 | 2021-01-21 | Out of bounds reads while parsing NAN beacons attributes and OUIs due to improper length of field check in Snapdragon Auto, Snapdragon Compute, Snapdragon Conn… |
CVE-2020-11200 | High | 7.5 | 2021-01-21 | Buffer over-read while parsing RPS due to lack of check of input validation on values received from user side. in Snapdragon Auto, Snapdragon Compute, Snapdrag… |
CVE-2020-11179 | High | 7.0 | 2021-01-21 | Arbitrary read and write to kernel addresses by temporarily overwriting ring buffer pointer and creating a race condition. in Snapdragon Auto, Snapdragon Compu… |
CVE-2020-11144 | Critical | 9.1 | 2021-01-21 | Buffer over-read while UE process invalid DL ROHC packet for decompression due to lack of check of size of compresses packet in Snapdragon Auto, Snapdragon Com… |
CVE-2020-11136 | Critical | 9.8 | 2021-01-21 | Buffer Over-read in audio driver while using malloc management function due to not returning NULL for zero sized memory requirement in Snapdragon Auto, Snapdra… |
CVE-2020-11119 | High | 7.5 | 2021-01-21 | Buffer over-read can happen when the buffer length received from response handlers is more than the size of the payload in Snapdragon Auto, Snapdragon Compute… |
CVE-2021-1068 | High | 7.8 | 2021-01-20 | NVIDIA SHIELD TV, all versions prior to 8.2.2, contains a vulnerability in the NVDEC component, in which an attacker can read from or write to a memory locatio… |
CVE-2020-14410 | Medium | 5.4 | 2021-01-19 | SDL (Simple DirectMedia Layer) through 2.0.12 has a heap-based buffer over-read in Blit_3or4_to_3or4__inversed_rgb in video/SDL_blit_N.c via a crafted .BMP fil… |
CVE-2020-1866 | Medium | 6.5 | 2021-01-13 | There is an out-of-bounds read vulnerability in several products. The software reads data past the end of the intended buffer when parsing certain crafted DHCP… |
CVE-2020-1865 | Medium | 6.5 | 2021-01-13 | There is an out-of-bounds read vulnerability in Huawei CloudEngine products. The software reads data past the end of the intended buffer when parsing certain P… |
CVE-2020-26996 | High | 8.8 | 2021-01-12 | A vulnerability has been identified in JT2Go (All versions < V13.1.0), Teamcenter Visualization (All versions < V13.1.0). Affected applications lack proper val… |
CVE-2021-21463 | High | 8.8 | 2021-01-12 | SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources which results in crashing of the appli… |
CVE-2020-35655 | Medium | 5.4 | 2021-01-12 | In Pillow before 8.1.0, SGIRleDecode has a 4-byte buffer over-read when decoding crafted SGI RLE image files because offsets and length tables are mishandled. |
CVE-2020-35653 | High | 7.1 | 2021-01-12 | In Pillow before 8.1.0, PcxDecode has a buffer over-read when decoding a crafted PCX file because the user-supplied stride value is trusted for buffer calculat… |
CVE-2020-27291 | High | 7.8 | 2021-01-11 | Delta Electronics CNCSoft-B Versions 1.0.0.2 and prior is vulnerable to an out-of-bounds read while processing project files, which may allow an attacker to ex… |
CVE-2018-11005 | Medium | 5.5 | 2021-01-11 | A Memory Leak issue was discovered in K7Computing K7AntiVirus Premium 15.01.00.53. |
CVE-2020-16041 | High | 8.1 | 2021-01-08 | Out of bounds read in networking in Google Chrome prior to 87.0.4280.88 allowed a remote attacker who had compromised the renderer process to obtain potentiall… |
CVE-2021-1063 | High | 7.8 | 2021-01-08 | NVIDIA vGPU manager contains a vulnerability in the vGPU plugin, in which an input offset is not validated, which may lead to a buffer overread, which in turn… |
CVE-2020-6655 | Medium | 5.8 | 2021-01-07 | The Eaton's easySoft software v7.xx prior to v7.22 are susceptible to Out-of-bounds remote code execution vulnerability. A malicious entity can execute a malic… |
CVE-2018-20316 | High | 8.1 | 2021-01-07 | Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyDoAction race condition that can cause a stack-based buffer overflow or an… |
CVE-2018-20314 | High | 8.1 | 2021-01-07 | Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyCheckLicence race condition that can cause a stack-based buffer overflow o… |
CVE-2018-20313 | High | 8.1 | 2021-01-07 | Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyPreviewAction race condition that can cause a stack-based buffer overflow… |
CVE-2018-20312 | High | 8.1 | 2021-01-07 | Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyDoAction race condition that can cause a stack-based buffer overflow or an… |
CVE-2018-20311 | High | 8.1 | 2021-01-07 | Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyCPDFAction race condition that can cause a stack-based buffer overflow or… |
CVE-2018-20310 | High | 8.1 | 2021-01-07 | Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyDoAction race condition that can cause a stack-based buffer overflow or an… |
CVE-2018-20309 | High | 8.1 | 2021-01-07 | Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyGetAppEdition race condition that can cause a stack-based buffer overflow… |
CVE-2020-27845 | Medium | 5.5 | 2021-01-05 | There's a flaw in src/lib/openjp2/pi.c of openjpeg in versions prior to 2.4.0. If an attacker is able to provide untrusted input to openjpeg's conversion/encod… |
CVE-2020-27843 | Medium | 5.5 | 2021-01-05 | A flaw was found in OpenJPEG in versions prior to 2.4.0. This flaw allows an attacker to provide specially crafted input to the conversion or encoding function… |
CVE-2020-27842 | Medium | 5.5 | 2021-01-05 | There's a flaw in openjpeg's t2 encoder in versions prior to 2.4.0. An attacker who is able to provide crafted input to be processed by openjpeg could cause a… |
CVE-2019-25013 | Medium | 5.9 | 2021-01-04 | The iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing invalid multi-byte input sequences in the EUC-KR encoding, may have a… |
CVE-2020-35892 | Critical | 9.1 | 2020-12-31 | An issue was discovered in the simple-slab crate before 0.3.3 for Rust. index() allows an out-of-bounds read. |
CVE-2020-35890 | High | 7.5 | 2020-12-31 | An issue was discovered in the ordnung crate through 2020-09-03 for Rust. compact::Vec violates memory safety via out-of-bounds access for large capacity. |
CVE-2020-35861 | High | 7.5 | 2020-12-31 | An issue was discovered in the bumpalo crate before 3.2.1 for Rust. The realloc feature allows the reading of unknown memory. Attackers can potentially read cr… |
CVE-2020-35859 | Critical | 9.1 | 2020-12-31 | An issue was discovered in the lucet-runtime-internals crate before 0.5.1 for Rust. It mishandles sigstack allocation. Guest programs may be able to obtain sen… |
CVE-2020-11947 | Low | 3.8 | 2020-12-31 | iscsi_aio_ioctl_cb in block/iscsi.c in QEMU 4.1.0 has a heap-based buffer over-read that may disclose unrelated information from process memory to an attacker. |
CVE-2019-20808 | Medium | 6.5 | 2020-12-31 | In QEMU 4.1.0, an out-of-bounds read flaw was found in the ATI VGA implementation. It occurs in the ati_cursor_define() routine while handling MMIO write opera… |
CVE-2020-9125 | Medium | 6.7 | 2020-12-29 | There is an out-of-bound read vulnerability in huawei smartphone Mate 30 versions earlier than 10.1.0.156 (C00E155R7P2). An attacker with specific permission c… |
CVE-2020-9094 | High | 7.5 | 2020-12-29 | There is an out of bound read vulnerability in some verisons of Huawei CloudEngine product. A module does not deal with specific message properly. Attackers ca… |
CVE-2020-35448 | Low | 3.3 | 2020-12-27 | An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.35.1. A heap-based buffer over-read can occu… |
CVE-2020-9201 | Medium | 6.5 | 2020-12-24 | There is an out-of-bounds read vulnerability in some versions of NIP6800, Secospace USG6600 and USG9500. The software reads data past the end of the intended b… |
CVE-2020-27338 | Medium | 5.9 | 2020-12-22 | An issue was discovered in Treck IPv6 before 6.0.1.68. Improper Input Validation in the DHCPv6 client component allows an unauthenticated remote attacker to ca… |
CVE-2020-27336 | Low | 3.7 | 2020-12-22 | An issue was discovered in Treck IPv6 before 6.0.1.68. Improper input validation in the IPv6 component when handling a packet sent by an unauthenticated remote… |
CVE-2020-5360 | High | 7.5 | 2020-12-16 | Dell BSAFE Micro Edition Suite, versions prior to 4.5, are vulnerable to a Buffer Under-Read Vulnerability. An unauthenticated remote attacker could potentiall… |
CVE-2020-29362 | Medium | 5.3 | 2020-12-16 | An issue was discovered in p11-kit 0.21.1 through 0.23.21. A heap-based buffer over-read has been discovered in the RPC protocol used by thep11-kit server/remo… |
CVE-2020-27047 | Medium | 5.5 | 2020-12-15 | In ce_t4t_update_binary of ce_t4t.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure wit… |
CVE-2020-27046 | Medium | 4.4 | 2020-12-15 | In nfc_ncif_proc_ee_action of nfc_ncif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosur… |
CVE-2020-27043 | Medium | 4.4 | 2020-12-15 | In nfc_enabled of nfc_main.cc, there is a possible out of bounds read due to an incorrect increment. This could lead to local information disclosure via firmwa… |
CVE-2020-27040 | Medium | 4.4 | 2020-12-15 | In phNxpNciHal_core_initialized of phNxpNciHal.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information d… |
CVE-2020-27037 | Medium | 4.4 | 2020-12-15 | In phNxpNciHal_core_initialized of phNxpNciHal.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information d… |
CVE-2020-27036 | Medium | 6.7 | 2020-12-15 | In phNxpNciHal_send_ext_cmd of phNxpNciHal_ext.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation o… |
CVE-2020-27033 | Medium | 4.4 | 2020-12-15 | In nfc_ncif_proc_get_routing of nfc_ncif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclos… |
CVE-2020-27031 | Medium | 4.4 | 2020-12-15 | In nfc_data_event of nfc_ncif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with Sy… |
CVE-2020-27028 | Medium | 4.4 | 2020-12-15 | In filter_incoming_event of hci_layer.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure… |
CVE-2020-27027 | Medium | 5.5 | 2020-12-15 | In nfc_ncif_proc_get_routing of nfc_ncif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclos… |
CVE-2020-27024 | High | 7.5 | 2020-12-15 | In smp_br_state_machine_event of smp_br_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information di… |
CVE-2020-27021 | Medium | 4.4 | 2020-12-15 | In avrc_ctrl_pars_vendor_cmd of avrc_pars_tg.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information dis… |
CVE-2020-0499 | Medium | 4.3 | 2020-12-15 | In FLAC__bitreader_read_rice_signed_block of bitreader.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote infor… |
CVE-2020-0498 | Medium | 5.5 | 2020-12-15 | In decode_packed_entry_number of codebook.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclo… |
CVE-2020-0494 | Medium | 6.5 | 2020-12-15 | In ih264d_parse_ave of ih264d_sei.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure wit… |
CVE-2020-0493 | Medium | 5.5 | 2020-12-15 | In CPDF_SampledFunc::v_Call of cpdf_sampledfunc.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local informat… |
CVE-2020-0492 | Medium | 6.5 | 2020-12-15 | In BitstreamFillCache of bitstream.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure… |
CVE-2020-0490 | Medium | 6.5 | 2020-12-15 | In floor1_info_unpack of floor1.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with… |
CVE-2020-0482 | Medium | 4.4 | 2020-12-15 | In command of IncidentService.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure wit… |
CVE-2020-0280 | Medium | 5.5 | 2020-12-15 | In nci_proc_ee_management_rsp of nci_hrcv.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclo… |
CVE-2020-0244 | Medium | 5.5 | 2020-12-15 | In writeBurstBufferBytes of SPDIFEncoder.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information dis… |
CVE-2020-8943 | Medium | 5.3 | 2020-12-15 | An arbitrary memory read vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to enc_untrusted_recvfrom whose return size wa… |
CVE-2020-8942 | Medium | 5.3 | 2020-12-15 | An arbitrary memory read vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to enc_untrusted_read whose return size was no… |
CVE-2020-8941 | Medium | 5.3 | 2020-12-15 | An arbitrary memory read vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to enc_untrusted_inet_pton using an attacker c… |
CVE-2020-8940 | Medium | 5.3 | 2020-12-15 | An arbitrary memory read vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to enc_untrusted_recvmsg using an attacker con… |
CVE-2020-8939 | Medium | 5.3 | 2020-12-15 | An out of bounds read on the enc_untrusted_inet_ntop function allows an attack to extend the result size that is used by memcpy() to read memory from within th… |
CVE-2020-8936 | Medium | 5.3 | 2020-12-15 | An arbitrary memory overwrite vulnerability in Asylo versions up to 0.6.0 allows an attacker to make a host call to UntrustedCall. UntrustedCall failed to vali… |
CVE-2020-0463 | High | 7.5 | 2020-12-14 | In sdp_server_handle_client_req of sdp_server.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information d… |
CVE-2020-25110 | Critical | 9.8 | 2020-12-11 | An issue was discovered in the DNS implementation in Ethernut in Nut/OS 5.1. The length byte of a domain name in a DNS query/response is not checked, and is us… |
CVE-2020-25109 | Critical | 9.8 | 2020-12-11 | An issue was discovered in the DNS implementation in Ethernut in Nut/OS 5.1. The number of DNS queries/responses (set in a DNS header) is not checked against t… |
CVE-2020-25107 | Critical | 9.8 | 2020-12-11 | An issue was discovered in the DNS implementation in Ethernut in Nut/OS 5.1. There is no check on whether a domain name has '\0' termination. This may lead to… |
CVE-2020-24383 | Critical | 9.1 | 2020-12-11 | An issue was discovered in FNET through 4.6.4. The code for processing resource records in mDNS queries doesn't check for proper '\0' termination of the resour… |
CVE-2020-24341 | Critical | 9.1 | 2020-12-11 | An issue was discovered in picoTCP and picoTCP-NG through 1.7.0. The TCP input data processing function in pico_tcp.c does not validate the length of incoming… |
CVE-2020-24340 | High | 7.5 | 2020-12-11 | An issue was discovered in picoTCP and picoTCP-NG through 1.7.0. The code that processes DNS responses in pico_mdns_handle_data_as_answers_generic() in pico_md… |
CVE-2020-24339 | High | 7.5 | 2020-12-11 | An issue was discovered in picoTCP and picoTCP-NG through 1.7.0. The DNS domain name record decompression functionality in pico_dns_decompress_name() in pico_d… |
CVE-2020-24334 | High | 8.2 | 2020-12-11 | The code that processes DNS responses in uIP through 1.0, as used in Contiki and Contiki-NG, does not check whether the number of responses specified in the DN… |