Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

CVEs (9,119)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2025-2884 - - Jun 17, 2026 Jun 10, 2025 N/A· v4 6.6 MEDIUM· v3 N/A· v2 TCG TPM2.0 Reference implementation's CryptHmacSign helper function is vulnerable to Out-of-Bounds read due to the lack of validation the signature scheme with the signature key's algorithm. See Errata Revision 1.83 and...Show more TCG TPM2.0 Reference implementation's CryptHmacSign helper function is vulnerable to Out-of-Bounds read due to the lack of validation the signature scheme with the signature key's algorithm. See Errata Revision 1.83 and advisory TCGVRT0009 for TCG standard TPM2.0Show less
CVE-2025-47105 1Adobe 1Indesign Jun 17, 2026 Jun 10, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 InDesign Desktop versions ID20.2, ID19.5.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitiga...Show more InDesign Desktop versions ID20.2, ID19.5.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2025-47104 1Adobe 1Indesign Jun 17, 2026 Jun 10, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 InDesign Desktop versions ID20.2, ID19.5.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitiga...Show more InDesign Desktop versions ID20.2, ID19.5.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2025-33065 1Microsoft 13Windows 10 1507 Windows 10 1607Windows 10 1809+10 more Jun 17, 2026 Jun 10, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.
CVE-2025-33063 1Microsoft 11Windows 10 1809 Windows 10 21h2Windows 10 22h2+8 more Jun 17, 2026 Jun 10, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.
CVE-2025-33062 1Microsoft 12Windows 10 1607 Windows 10 1809Windows 10 21h2+9 more Jun 17, 2026 Jun 10, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.
CVE-2025-33061 1Microsoft 12Windows 10 1607 Windows 10 1809Windows 10 21h2+9 more Jun 17, 2026 Jun 10, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.
CVE-2025-33060 1Microsoft 14Windows 10 1507 Windows 10 1607Windows 10 1809+11 more Jun 17, 2026 Jun 10, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.
CVE-2025-33059 1Microsoft 13Windows 10 1507 Windows 10 1607Windows 10 1809+10 more Jun 17, 2026 Jun 10, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.
CVE-2025-33058 1Microsoft 13Windows 10 1507 Windows 10 1607Windows 10 1809+10 more Jun 17, 2026 Jun 10, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.
CVE-2025-33055 1Microsoft 13Windows 10 1507 Windows 10 1607Windows 10 1809+10 more Jun 17, 2026 Jun 10, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.
CVE-2025-32720 1Microsoft 14Windows 10 1507 Windows 10 1607Windows 10 1809+11 more Jun 17, 2026 Jun 10, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.
CVE-2025-32719 1Microsoft 13Windows 10 1507 Windows 10 1607Windows 10 1809+10 more Jun 17, 2026 Jun 10, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.
CVE-2025-32716 1Microsoft 13Windows 10 1507 Windows 10 1607Windows 10 1809+10 more Jun 17, 2026 Jun 10, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Out-of-bounds read in Windows Media allows an authorized attacker to elevate privileges locally.
CVE-2025-32715 1Microsoft 17Remote Desktop Client Windows 10 1507Windows 10 1607+14 more Jun 17, 2026 Jun 10, 2025 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.
CVE-2025-24069 1Microsoft 13Windows 10 1507 Windows 10 1607Windows 10 1809+10 more Jun 17, 2026 Jun 10, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.
CVE-2025-24065 1Microsoft 10Windows 10 1507 Windows 10 22h2Windows 11 22h2+7 more Jun 17, 2026 Jun 10, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.
CVE-2025-5918 2Libarchive Redhat 3Enterprise Linux LibarchiveOpenshift Container Platform Jun 30, 2026 Jun 9, 2025 N/A· v4 6.6 MEDIUM· v3 N/A· v2 A vulnerability has been identified in the libarchive library. This flaw can be triggered when file streams are piped into bsdtar, potentially allowing for reading past the end of the file. This out-of-bounds read can le...Show more A vulnerability has been identified in the libarchive library. This flaw can be triggered when file streams are piped into bsdtar, potentially allowing for reading past the end of the file. This out-of-bounds read can lead to unintended consequences, including unpredictable program behavior, memory corruption, or a denial-of-service condition.Show less
CVE-2025-23235 1Openatom 1Openharmony Jun 17, 2026 Jun 8, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 in OpenHarmony v5.0.3 and prior versions allow a local attacker cause DOS through out-of-bounds read.
CVE-2025-38004 2Debian Linux 2Debian Linux Linux Kernel Jun 17, 2026 Jun 8, 2025 N/A· v4 7.1 HIGH· v3 N/A· v2 In the Linux kernel, the following vulnerability has been resolved: can: bcm: add locking for bcm_op runtime updates The CAN broadcast manager (CAN BCM) can send a sequence of CAN frames via hrtimer. The content and al...Show more In the Linux kernel, the following vulnerability has been resolved: can: bcm: add locking for bcm_op runtime updates The CAN broadcast manager (CAN BCM) can send a sequence of CAN frames via hrtimer. The content and also the length of the sequence can be changed resp reduced at runtime where the 'currframe' counter is then set to zero. Although this appeared to be a safe operation the updates of 'currframe' can be triggered from user space and hrtimer context in bcm_can_tx(). Anderson Nascimento created a proof of concept that triggered a KASAN slab-out-of-bounds read access which can be prevented with a spin_lock_bh. At the rework of bcm_can_tx() the 'count' variable has been moved into the protected section as this variable can be modified from both contexts too.Show less

Previous 1...828384...456 Next