Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

CVEs (9,119)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2025-32776 - - Jun 17, 2026 Apr 15, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 OpenRazer is an open source driver and user-space daemon to control Razer device lighting and other features on GNU/Linux. By writing specially crafted data to the `matrix_custom_frame` file, an attacker can cause the cu...Show more OpenRazer is an open source driver and user-space daemon to control Razer device lighting and other features on GNU/Linux. By writing specially crafted data to the `matrix_custom_frame` file, an attacker can cause the custom kernel driver to read more bytes than provided by user space. This data will be written into the RGB arguments which will be sent to the USB device. This issue has been patched in v3.10.2.Show less
CVE-2025-32914 - - Jun 30, 2026 Apr 14, 2025 N/A· v4 7.4 HIGH· v3 N/A· v2 A flaw was found in libsoup, where the soup_multipart_new_from_message() function is vulnerable to an out-of-bounds read. This flaw allows a malicious HTTP client to induce the libsoup server to read out of bounds.
CVE-2025-32906 - - Jun 29, 2026 Apr 14, 2025 N/A· v4 7.5 HIGH· v3 N/A· v2 A flaw was found in libsoup, where the soup_headers_parse_request() function may be vulnerable to an out-of-bound read. This flaw allows a malicious user to use a specially crafted HTTP request to crash the HTTP server.
CVE-2025-29834 1Microsoft 1Edge Chromium Jun 17, 2026 Apr 12, 2025 N/A· v4 7.5 HIGH· v3 N/A· v2 Out-of-bounds read in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
CVE-2024-11679 - - Jun 17, 2026 Apr 11, 2025 6.7 MEDIUM· v4 4.4 MEDIUM· v3 N/A· v2 An input validation weakness was reported in the TpmSetup module for some legacy System x server products that could allow a local attacker with elevated privileges to read the contents of memory.
CVE-2025-31354 - - Jun 17, 2026 Apr 11, 2025 5.3 MEDIUM· v4 4.3 MEDIUM· v3 N/A· v2 Subnet Solutions PowerSYSTEM Center's SMTPS notification service can be affected by importing an EC certificate with crafted F2m parameters, which can lead to excessive CPU consumption during the evaluation of the curve...Show more Subnet Solutions PowerSYSTEM Center's SMTPS notification service can be affected by importing an EC certificate with crafted F2m parameters, which can lead to excessive CPU consumption during the evaluation of the curve parameters.Show less
CVE-2023-42982 1Apple 1Macos Jun 17, 2026 Apr 11, 2025 N/A· v4 6.4 MEDIUM· v3 N/A· v2 Processing a file may lead to a denial-of-service or potentially disclose memory contents. This issue is fixed in macOS 14. The issue was addressed with improved checks.
CVE-2025-32460 1Graphicsmagick 1Graphicsmagick Jun 17, 2026 Apr 9, 2025 N/A· v4 9.1 CRITICAL· v3 N/A· v2 GraphicsMagick before 8e56520 has a heap-based buffer over-read in ReadJXLImage in coders/jxl.c, related to an ImportViewPixelArea call.
CVE-2025-30309 1Adobe 1Xmp Toolkit Software Development Kit Jun 17, 2026 Apr 8, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 XMP Toolkit versions 2023.12 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as...Show more XMP Toolkit versions 2023.12 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2025-30308 1Adobe 1Xmp Toolkit Software Development Kit Jun 17, 2026 Apr 8, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 XMP Toolkit versions 2023.12 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as...Show more XMP Toolkit versions 2023.12 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2025-30307 1Adobe 1Xmp Toolkit Software Development Kit Jun 17, 2026 Apr 8, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 XMP Toolkit versions 2023.12 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as...Show more XMP Toolkit versions 2023.12 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2025-30306 1Adobe 1Xmp Toolkit Software Development Kit Jun 17, 2026 Apr 8, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 XMP Toolkit versions 2023.12 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as...Show more XMP Toolkit versions 2023.12 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2025-30305 1Adobe 1Xmp Toolkit Software Development Kit Jun 17, 2026 Apr 8, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 XMP Toolkit versions 2023.12 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as...Show more XMP Toolkit versions 2023.12 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2025-30303 1Adobe 1Framemaker Jun 17, 2026 Apr 8, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigati...Show more Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2025-30302 1Adobe 1Framemaker Jun 17, 2026 Apr 8, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigati...Show more Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2025-29811 1Microsoft 5Windows 11 22h2 Windows 11 23h2Windows 11 24h2+2 more Jun 17, 2026 Apr 8, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Improper input validation in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally.
CVE-2025-27742 1Microsoft 15Windows 10 1507 Windows 10 1607Windows 10 1809+12 more Jun 17, 2026 Apr 8, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Out-of-bounds read in Windows NTFS allows an unauthorized attacker to disclose information locally.
CVE-2025-27741 1Microsoft 7Windows 10 1507 Windows 10 1607Windows 10 1809+4 more Jun 17, 2026 Apr 8, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.
CVE-2025-27733 1Microsoft 7Windows 10 1507 Windows 10 1607Windows 10 1809+4 more Jun 17, 2026 Apr 8, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.
CVE-2025-27728 1Microsoft 2Windows 11 24h2 Windows Server 2025 Jun 17, 2026 Apr 8, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Out-of-bounds read in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

Previous 1...899091...456 Next