Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

CVEs (9,140)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-42862 1Apple 5Ipados Iphone OsMacos+2 more Jun 17, 2026 Jan 10, 2024 N/A· v4 6.5 MEDIUM· v3 N/A· v2 An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3, tvOS 16.4, iOS 16.4 and iPadOS 16.4, watchOS 9.4. Processing an image may result in disclosure of process mem...Show more An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3, tvOS 16.4, iOS 16.4 and iPadOS 16.4, watchOS 9.4. Processing an image may result in disclosure of process memory.Show less
CVE-2024-20715 1Adobe 1Substance 3d Stager Jun 17, 2026 Jan 10, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Adobe Substance 3D Stager versions 2.1.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigati...Show more Adobe Substance 3D Stager versions 2.1.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2024-20714 1Adobe 1Substance 3d Stager Jun 17, 2026 Jan 10, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Adobe Substance 3D Stager versions 2.1.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigati...Show more Adobe Substance 3D Stager versions 2.1.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2024-20713 1Adobe 1Substance 3d Stager Jun 17, 2026 Jan 10, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Adobe Substance 3D Stager versions 2.1.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigati...Show more Adobe Substance 3D Stager versions 2.1.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2024-20712 1Adobe 1Substance 3d Stager Jun 17, 2026 Jan 10, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Adobe Substance 3D Stager versions 2.1.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigati...Show more Adobe Substance 3D Stager versions 2.1.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2024-20711 1Adobe 1Substance 3d Stager Jun 17, 2026 Jan 10, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Adobe Substance 3D Stager versions 2.1.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigati...Show more Adobe Substance 3D Stager versions 2.1.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2024-20710 1Adobe 1Substance 3d Stager Jun 17, 2026 Jan 10, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Adobe Substance 3D Stager versions 2.1.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigati...Show more Adobe Substance 3D Stager versions 2.1.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2023-47993 1Freeimage Project 1Freeimage Jun 17, 2026 Jan 9, 2024 N/A· v4 6.5 MEDIUM· v3 N/A· v2 A Buffer out-of-bound read vulnerability in Exif.cpp::ReadInt32 in FreeImage 3.18.0 allows attackers to cause a denial-of-service.
CVE-2024-21314 1Microsoft 14Windows 10 1507 Windows 10 1607Windows 10 1809+11 more Jun 17, 2026 Jan 9, 2024 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Microsoft Message Queuing Information Disclosure Vulnerability
CVE-2024-21311 1Microsoft 14Windows 10 1507 Windows 10 1607Windows 10 1809+11 more Jun 17, 2026 Jan 9, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Windows Cryptographic Services Information Disclosure Vulnerability
CVE-2024-20691 1Microsoft 13Windows 10 1507 Windows 10 1607Windows 10 1809+10 more Jun 17, 2026 Jan 9, 2024 N/A· v4 4.7 MEDIUM· v3 N/A· v2 Windows Themes Information Disclosure Vulnerability
CVE-2024-20687 1Microsoft 11Windows 10 1507 Windows 10 1607Windows 10 1809+8 more Jun 17, 2026 Jan 9, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Microsoft AllJoyn API Denial of Service Vulnerability
CVE-2024-20660 1Microsoft 13Windows 10 1507 Windows 10 1607Windows 10 1809+10 more Jun 17, 2026 Jan 9, 2024 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Microsoft Message Queuing Information Disclosure Vulnerability
CVE-2024-20658 1Microsoft 12Windows 10 1507 Windows 10 1607Windows 10 1809+9 more Jun 17, 2026 Jan 9, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability
CVE-2024-20653 1Microsoft 13Windows 10 1507 Windows 10 1607Windows 10 1809+10 more Jun 17, 2026 Jan 9, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Microsoft Common Log File System Elevation of Privilege Vulnerability
CVE-2023-51439 1Siemens 2Jt2go Teamcenter Visualization Jun 17, 2026 Jan 9, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 A vulnerability has been identified in JT2Go (All versions < V14.3.0.6), Teamcenter Visualization V13.3 (All versions < V13.3.0.13), Teamcenter Visualization V14.1 (All versions < V14.1.0.12), Teamcenter Visualization V1...Show more A vulnerability has been identified in JT2Go (All versions < V14.3.0.6), Teamcenter Visualization V13.3 (All versions < V13.3.0.13), Teamcenter Visualization V14.1 (All versions < V14.1.0.12), Teamcenter Visualization V14.2 (All versions < V14.2.0.9), Teamcenter Visualization V14.3 (All versions < V14.3.0.6). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted CGM files. This could allow an attacker to execute code in the context of the current process.Show less
CVE-2023-49127 1Siemens 1Solid Edge Se2023 Jun 17, 2026 Jan 9, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted P...Show more A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process.Show less
CVE-2023-49126 1Siemens 1Solid Edge Se2023 Jun 17, 2026 Jan 9, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted P...Show more A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process.Show less
CVE-2023-49124 1Siemens 1Solid Edge Se2023 Jun 17, 2026 Jan 9, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted P...Show more A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process.Show less
CVE-2023-36629 1St 1St54 Android Packages Apps Nfc Jun 17, 2026 Jan 9, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 The ST ST54-android-packages-apps-Nfc package before 130-20230215-23W07p0 for Android has an out-of-bounds read.

Previous 1...165166167...457 Next