Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

CVEs (10,494)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2025-31354 - - Jun 17, 2026 Apr 11, 2025 5.3 MEDIUM· v4 4.3 MEDIUM· v3 N/A· v2 Subnet Solutions PowerSYSTEM Center's SMTPS notification service can be affected by importing an EC certificate with crafted F2m parameters, which can lead to excessive CPU consumption during the evaluation of the curve...Show more Subnet Solutions PowerSYSTEM Center's SMTPS notification service can be affected by importing an EC certificate with crafted F2m parameters, which can lead to excessive CPU consumption during the evaluation of the curve parameters.Show less
CVE-2023-42982 1Apple 1Macos Jun 17, 2026 Apr 11, 2025 N/A· v4 6.4 MEDIUM· v3 N/A· v2 Processing a file may lead to a denial-of-service or potentially disclose memory contents. This issue is fixed in macOS 14. The issue was addressed with improved checks.
CVE-2025-32460 1Graphicsmagick 1Graphicsmagick Jun 17, 2026 Apr 9, 2025 N/A· v4 9.1 CRITICAL· v3 N/A· v2 GraphicsMagick before 8e56520 has a heap-based buffer over-read in ReadJXLImage in coders/jxl.c, related to an ImportViewPixelArea call.
CVE-2025-30309 1Adobe 1Xmp Toolkit Software Development Kit Jun 17, 2026 Apr 8, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 XMP Toolkit versions 2023.12 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as...Show more XMP Toolkit versions 2023.12 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2025-30308 1Adobe 1Xmp Toolkit Software Development Kit Jun 17, 2026 Apr 8, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 XMP Toolkit versions 2023.12 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as...Show more XMP Toolkit versions 2023.12 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2025-30307 1Adobe 1Xmp Toolkit Software Development Kit Jun 17, 2026 Apr 8, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 XMP Toolkit versions 2023.12 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as...Show more XMP Toolkit versions 2023.12 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2025-30306 1Adobe 1Xmp Toolkit Software Development Kit Jun 17, 2026 Apr 8, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 XMP Toolkit versions 2023.12 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as...Show more XMP Toolkit versions 2023.12 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2025-30305 1Adobe 1Xmp Toolkit Software Development Kit Jun 17, 2026 Apr 8, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 XMP Toolkit versions 2023.12 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as...Show more XMP Toolkit versions 2023.12 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2025-30303 1Adobe 1Framemaker Jun 17, 2026 Apr 8, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigati...Show more Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2025-30302 1Adobe 1Framemaker Jun 17, 2026 Apr 8, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigati...Show more Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2025-29811 1Microsoft 5Windows 11 22h2 Windows 11 23h2Windows 11 24h2+2 more Jun 17, 2026 Apr 8, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Improper input validation in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally.
CVE-2025-27742 1Microsoft 15Windows 10 1507 Windows 10 1607Windows 10 1809+12 more Jun 17, 2026 Apr 8, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Out-of-bounds read in Windows NTFS allows an unauthorized attacker to disclose information locally.
CVE-2025-27741 1Microsoft 7Windows 10 1507 Windows 10 1607Windows 10 1809+4 more Jun 17, 2026 Apr 8, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.
CVE-2025-27733 1Microsoft 7Windows 10 1507 Windows 10 1607Windows 10 1809+4 more Jun 17, 2026 Apr 8, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.
CVE-2025-27728 1Microsoft 2Windows 11 24h2 Windows Server 2025 Jun 17, 2026 Apr 8, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Out-of-bounds read in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
CVE-2025-27490 1Microsoft 8Windows 10 21h2 Windows 10 22h2Windows 11 22h2+5 more Jun 17, 2026 Apr 8, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Heap-based buffer overflow in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.
CVE-2025-27483 1Microsoft 6Windows 10 1507 Windows 10 1607Windows 10 1809+3 more Jun 17, 2026 Apr 8, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.
CVE-2025-27204 1Adobe 1After Effects Jun 17, 2026 Apr 8, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 After Effects versions 25.1, 24.6.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations s...Show more After Effects versions 25.1, 24.6.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2025-27202 1Adobe 1Animate Jun 17, 2026 Apr 8, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Animate versions 24.0.7, 23.0.10 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such...Show more Animate versions 24.0.7, 23.0.10 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2025-27201 1Adobe 1Animate Jun 17, 2026 Apr 8, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Animate versions 24.0.7, 23.0.10 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such...Show more Animate versions 24.0.7, 23.0.10 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less

Previous 1...158159160...525 Next