Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

CVEs (9,161)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2020-23909 1Advancemame 1Advancemame Jun 17, 2026 Jul 18, 2023 N/A· v4 7.1 HIGH· v3 N/A· v2 Heap-based buffer over-read in function png_convert_4 in file pngex.cc in AdvanceMAME through 2.1.
CVE-2023-38432 2Linux Netapp 7H300s H410sH500s+4 more Jun 17, 2026 Jul 18, 2023 N/A· v4 9.1 CRITICAL· v3 N/A· v2 An issue was discovered in the Linux kernel before 6.3.10. fs/smb/server/smb2misc.c in ksmbd does not validate the relationship between the command payload size and the RFC1002 length specification, leading to an out-of-...Show more An issue was discovered in the Linux kernel before 6.3.10. fs/smb/server/smb2misc.c in ksmbd does not validate the relationship between the command payload size and the RFC1002 length specification, leading to an out-of-bounds read.Show less
CVE-2023-38431 2Linux Netapp 6H300s H410sH500s+3 more Jun 17, 2026 Jul 18, 2023 N/A· v4 9.1 CRITICAL· v3 N/A· v2 An issue was discovered in the Linux kernel before 6.3.8. fs/smb/server/connection.c in ksmbd does not validate the relationship between the NetBIOS header's length field and the SMB header sizes, via pdu_size in ksmbd_c...Show more An issue was discovered in the Linux kernel before 6.3.8. fs/smb/server/connection.c in ksmbd does not validate the relationship between the NetBIOS header's length field and the SMB header sizes, via pdu_size in ksmbd_conn_handler_loop, leading to an out-of-bounds read.Show less
CVE-2023-38430 2Linux Netapp 6H300s H410sH500s+3 more Jun 17, 2026 Jul 18, 2023 N/A· v4 9.1 CRITICAL· v3 N/A· v2 An issue was discovered in the Linux kernel before 6.3.9. ksmbd does not validate the SMB request protocol ID, leading to an out-of-bounds read.
CVE-2023-38428 2Linux Netapp 7H300s H410sH500s+4 more Jun 17, 2026 Jul 18, 2023 N/A· v4 9.1 CRITICAL· v3 N/A· v2 An issue was discovered in the Linux kernel before 6.3.4. fs/ksmbd/smb2pdu.c in ksmbd does not properly check the UserName value because it does not consider the address of security buffer, leading to an out-of-bounds re...Show more An issue was discovered in the Linux kernel before 6.3.4. fs/ksmbd/smb2pdu.c in ksmbd does not properly check the UserName value because it does not consider the address of security buffer, leading to an out-of-bounds read.Show less
CVE-2023-38427 2Linux Netapp 5H300s H410sH500s+2 more Jun 17, 2026 Jul 18, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 An issue was discovered in the Linux kernel before 6.3.8. fs/smb/server/smb2pdu.c in ksmbd has an integer underflow and out-of-bounds read in deassemble_neg_contexts.
CVE-2023-38426 2Linux Netapp 7H300s H410sH500s+4 more Jun 17, 2026 Jul 18, 2023 N/A· v4 9.1 CRITICAL· v3 N/A· v2 An issue was discovered in the Linux kernel before 6.3.4. ksmbd has an out-of-bounds read in smb2_find_context_vals when create_context's name_len is larger than the tag length.
CVE-2023-38253 3Fedoraproject RedhatTats 4Enterprise Linux Extra Packages For Enterprise LinuxFedora+1 more Jun 17, 2026 Jul 14, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 An out-of-bounds read flaw was found in w3m, in the growbuf_to_Str function in indep.c. This issue may allow an attacker to cause a denial of service through a crafted HTML file.
CVE-2023-38252 3Fedoraproject RedhatTats 4Enterprise Linux Extra Packages For Enterprise LinuxFedora+1 more Jun 17, 2026 Jul 14, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 An out-of-bounds read flaw was found in w3m, in the Strnew_size function in Str.c. This issue may allow an attacker to cause a denial of service through a crafted HTML file.
CVE-2023-36838 1Juniper 1Junos Jun 17, 2026 Jul 14, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 An Out-of-bounds Read vulnerability in the flow processing daemon (flowd) of Juniper Networks Junos OS on SRX Series allows a local, authenticated attacker with low privileges, to cause a Denial of Service (DoS). If a l...Show more An Out-of-bounds Read vulnerability in the flow processing daemon (flowd) of Juniper Networks Junos OS on SRX Series allows a local, authenticated attacker with low privileges, to cause a Denial of Service (DoS). If a low privileged user executes a specific CLI command, flowd which is responsible for traffic forwarding in SRX crashes and generates a core dump. This will cause temporary traffic interruption until the flowd process is restarted automatically. Continued execution of this command will lead to a sustained DoS. This issue affects Juniper Networks Junos OS on SRX Series: All versions prior to 20.2R3-S7; 20.3 version 20.3R1 and later versions; 20.4 versions prior to 20.4R3-S6; 21.1 versions prior to 21.1R3-S5; 21.2 versions prior to 21.2R3-S4; 21.3 versions prior to 21.3R3-S4; 21.4 versions prior to 21.4R3-S3; 22.1 versions prior to 22.1R3-S1; 22.2 versions prior to 22.2R3; 22.3 versions prior to 22.3R2; 22.4 versions prior to 22.4R1-S1, 22.4R2. Show less
CVE-2023-3649 1Wireshark 1Wireshark Jun 17, 2026 Jul 14, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 iSCSI dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file
CVE-2023-35694 1Google 1Android Jun 17, 2026 Jul 13, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 In DMPixelLogger_ProcessDmCommand of DMPixelLogger.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges neede...Show more In DMPixelLogger_ProcessDmCommand of DMPixelLogger.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Show less
CVE-2023-35691 1Google 1Android Jun 17, 2026 Jul 13, 2023 N/A· v4 7.2 HIGH· v3 N/A· v2 there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2023-29319 1Adobe 1Indesign Jun 17, 2026 Jul 12, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability...Show more Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2023-29318 1Adobe 1Indesign Jun 17, 2026 Jul 12, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability...Show more Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2023-29317 1Adobe 1Indesign Jun 17, 2026 Jul 12, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability...Show more Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2023-29316 1Adobe 1Indesign Jun 17, 2026 Jul 12, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability...Show more Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2023-29315 1Adobe 1Indesign Jun 17, 2026 Jul 12, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability...Show more Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2023-29314 1Adobe 1Indesign Jun 17, 2026 Jul 12, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability...Show more Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2023-29313 1Adobe 1Indesign Jun 17, 2026 Jul 12, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability...Show more Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less

Previous 1...185186187...459 Next