Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

CVEs (9,119)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2025-21168 1Adobe 1Substance 3d Designer Jun 17, 2026 Jul 8, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Substance3D - Designer versions 14.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations...Show more Substance3D - Designer versions 14.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2025-21167 1Adobe 1Substance 3d Designer Jun 17, 2026 Jul 8, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Substance3D - Designer versions 14.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations...Show more Substance3D - Designer versions 14.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2025-27057 1Qualcomm 210Ar8035 Firmware Csr8811 FirmwareFastconnect 6700 Firmware+207 more Jun 17, 2026 Jul 8, 2025 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while handling beacon frames with invalid IE header length.
CVE-2025-27055 1Qualcomm 40Aqt1000 Firmware Fastconnect 6200 FirmwareFastconnect 6700 Firmware+37 more Jun 17, 2026 Jul 8, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption during the image encoding process.
CVE-2025-21454 1Qualcomm 185315 5g Iot Modem Firmware 9206 Lte Modem FirmwareApq8017 Firmware+182 more Jun 17, 2026 Jul 8, 2025 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS while processing received beacon frame.
CVE-2025-21449 1Qualcomm 180315 5g Iot Firmware Apq8017 FirmwareApq8064au Firmware+177 more Jun 17, 2026 Jul 8, 2025 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS may occur while processing malformed length field in SSID IEs.
CVE-2025-21446 1Qualcomm 235Ar8035 Firmware Ar9380 FirmwareCsr8811 Firmware+232 more Jun 17, 2026 Jul 8, 2025 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS may occur when processing vendor-specific information elements while parsing a WLAN frame for BTM requests.
CVE-2025-21427 1Qualcomm 173205 Mobile Firmware 215 Mobile FirmwareApq8064au Firmware+170 more Jun 17, 2026 Jul 8, 2025 N/A· v4 8.2 HIGH· v3 N/A· v2 Information disclosure while decoding this RTP packet Payload when UE receives the RTP packet from the network.
CVE-2025-40740 1Siemens 1Solid Edge Jun 17, 2026 Jul 8, 2025 7.3 HIGH· v4 7.8 HIGH· v3 N/A· v2 A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 5). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PA...Show more A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 5). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process.Show less
CVE-2025-40739 1Siemens 1Solid Edge Jun 17, 2026 Jul 8, 2025 7.3 HIGH· v4 7.8 HIGH· v3 N/A· v2 A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 5). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PA...Show more A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 5). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process.Show less
CVE-2025-21009 1Samsung 1Android Jun 17, 2026 Jul 8, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Out-of-bounds read in decoding malformed frame header in libsavsvc.so prior to Android 15 allows local attackers to cause memory corruption.
CVE-2025-21008 1Samsung 1Android Jun 17, 2026 Jul 8, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Out-of-bounds read in decoding frame header in libsavsvc.so prior to Android 15 allows local attackers to cause memory corruption.
CVE-2025-20693 4Google LinuxfoundationMediatek+1 more 4Android OpenwrtSoftware Development Kit+1 more Jun 17, 2026 Jul 8, 2025 N/A· v4 6.5 MEDIUM· v3 N/A· v2 In wlan STA driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote (proximal/adjacent) information disclosure with no additional execution privileges needed. User inter...Show more In wlan STA driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote (proximal/adjacent) information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09812521; Issue ID: MSV-3421.Show less
CVE-2025-20692 2Mediatek Openwrt 2Openwrt Software Development Kit Jun 17, 2026 Jul 8, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploi...Show more In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418040; Issue ID: MSV-3476.Show less
CVE-2025-20691 2Mediatek Openwrt 2Openwrt Software Development Kit Jun 17, 2026 Jul 8, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploi...Show more In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418039; Issue ID: MSV-3477.Show less
CVE-2025-20690 2Mediatek Openwrt 2Openwrt Software Development Kit Jun 17, 2026 Jul 8, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploi...Show more In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418038; Issue ID: MSV-3478.Show less
CVE-2025-20689 2Mediatek Openwrt 2Openwrt Software Development Kit Jun 17, 2026 Jul 8, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploi...Show more In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418048; Issue ID: MSV-3479.Show less
CVE-2025-20688 2Mediatek Openwrt 2Openwrt Software Development Kit Jun 17, 2026 Jul 8, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploi...Show more In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418047; Issue ID: MSV-3480.Show less
CVE-2025-20687 1Mediatek 1Nbiot Sdk Jun 17, 2026 Jul 8, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 In Bluetooth driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitat...Show more In Bluetooth driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418045; Issue ID: MSV-3481.Show less
CVE-2024-25178 1Luajit 1Luajit Jun 17, 2026 Jul 7, 2025 N/A· v4 9.1 CRITICAL· v3 N/A· v2 LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an out-of-bounds read in the stack-overflow handler in lj_state.c.

Previous 1...787980...456 Next