Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

CVEs (9,162)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-32403 1Apple 5Ipados Iphone OsMacos+2 more Jun 17, 2026 Jun 23, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 This issue was addressed with improved redaction of sensitive information. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iO...Show more This issue was addressed with improved redaction of sensitive information. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iOS 16.5 and iPadOS 16.5. An app may be able to read sensitive location information.Show less
CVE-2023-32402 1Apple 6Ipados Iphone OsMacos+3 more Jun 17, 2026 Jun 23, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, Safari 16.5, iOS 16.5 and iPadOS 16.5. Processing web content may disclose sensitive...Show more An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, Safari 16.5, iOS 16.5 and iPadOS 16.5. Processing web content may disclose sensitive information.Show less
CVE-2023-32391 1Apple 4Ipados Iphone OsMacos+1 more Jun 17, 2026 Jun 23, 2023 N/A· v4 4.6 MEDIUM· v3 N/A· v2 The issue was addressed with improved checks. This issue is fixed in iOS 15.7.6 and iPadOS 15.7.6, watchOS 9.5, iOS 16.5 and iPadOS 16.5, macOS Ventura 13.4. A shortcut may be able to use sensitive data with certain acti...Show more The issue was addressed with improved checks. This issue is fixed in iOS 15.7.6 and iPadOS 15.7.6, watchOS 9.5, iOS 16.5 and iPadOS 16.5, macOS Ventura 13.4. A shortcut may be able to use sensitive data with certain actions without prompting the user.Show less
CVE-2023-32390 1Apple 4Ipados Iphone OsMacos+1 more Jun 17, 2026 Jun 23, 2023 N/A· v4 2.4 LOW· v3 N/A· v2 The issue was addressed with improved checks. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, macOS Ventura 13.4. Photos belonging to the Hidden Photos Album could be viewed without authentication through V...Show more The issue was addressed with improved checks. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, macOS Ventura 13.4. Photos belonging to the Hidden Photos Album could be viewed without authentication through Visual Lookup.Show less
CVE-2023-32389 1Apple 5Ipados Iphone OsMacos+2 more Jun 17, 2026 Jun 23, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, tvOS 16.5, macOS Ventura 13.4. An app may be able to disclose kernel memory.
CVE-2023-32386 1Apple 1Macos Jun 17, 2026 Jun 23, 2023 N/A· v4 3.3 LOW· v3 N/A· v2 A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey 12.6.6, macOS Ventura 13.4. An app may be able to observe unprotected user data.
CVE-2023-32382 1Apple 1Macos Jun 17, 2026 Jun 23, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey 12.6.6, macOS Ventura 13.4. Processing a 3D model may result in disclosure of process memory...Show more An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey 12.6.6, macOS Ventura 13.4. Processing a 3D model may result in disclosure of process memory.Show less
CVE-2023-32375 1Apple 1Macos Jun 17, 2026 Jun 23, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Monterey 12.6.6, macOS Ventura 13.4. Processing a 3D model may result in disclosure of process memory.
CVE-2023-32372 1Apple 5Ipados Iphone OsMacos+2 more Jun 17, 2026 Jun 23, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, tvOS 16.5, macOS Ventura 13.4. Processing an image may result in disclosure of process mem...Show more An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, tvOS 16.5, macOS Ventura 13.4. Processing an image may result in disclosure of process memory.Show less
CVE-2023-32368 1Apple 5Ipados Iphone OsMacos+2 more Jun 17, 2026 Jun 23, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, macOS Monterey 12.6.6, iOS 16.5 and iPadOS 16.5. Processing a 3D model may result in...Show more An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, macOS Monterey 12.6.6, iOS 16.5 and iPadOS 16.5. Processing a 3D model may result in disclosure of process memory.Show less
CVE-2023-32363 1Apple 1Macos Jun 17, 2026 Jun 23, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 A permissions issue was addressed by removing vulnerable code and adding additional checks. This issue is fixed in macOS Ventura 13.4. An app may be able to bypass Privacy preferences.
CVE-2023-32360 1Apple 1Macos Jun 17, 2026 Jun 23, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 An authentication issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey 12.6.6, macOS Ventura 13.4. An unauthenticated user may be able to access recently printed...Show more An authentication issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey 12.6.6, macOS Ventura 13.4. An unauthenticated user may be able to access recently printed documents.Show less
CVE-2023-32357 1Apple 5Ipados Iphone OsMacos+2 more Jun 17, 2026 Jun 23, 2023 N/A· v4 7.1 HIGH· v3 N/A· v2 An authorization issue was addressed with improved state management. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iOS 16.5 and iPadOS 16.5. An app may be...Show more An authorization issue was addressed with improved state management. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iOS 16.5 and iPadOS 16.5. An app may be able to retain access to system configuration files even after its permission is revoked.Show less
CVE-2023-32354 1Apple 4Ipados Iphone OsTvos+1 more Jun 17, 2026 Jun 23, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9.5, tvOS 16.5, iOS 16.5 and iPadOS 16.5. An app may be able to disclose kernel memory.
CVE-2023-28204 2Apple Webkitgtk 7Ipados Iphone OsMacos+4 more Jun 17, 2026 Jun 23, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, Safari 16.5, iOS 16.5 and iPadOS 16.5. Processing web c...Show more An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, Safari 16.5, iOS 16.5 and iPadOS 16.5. Processing web content may disclose sensitive information. Apple is aware of a report that this issue may have been actively exploited.Show less
CVE-2023-30362 1Libcoap 1Libcoap Jun 17, 2026 Jun 23, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Buffer Overflow vulnerability in coap_send function in libcoap library 4.3.1-103-g52cfd56 fixed in 4.3.1-120-ge242200 allows attackers to obtain sensitive information via malformed pdu.
CVE-2023-36356 1Tp Link 4Tl Wr740n Firmware Tl Wr841n FirmwareTl Wr940n Firmware+1 more Jun 17, 2026 Jun 22, 2023 N/A· v4 7.7 HIGH· v3 N/A· v2 TP-Link TL-WR940N V2/V4/V6, TL-WR841N V8, TL-WR941ND V5, and TL-WR740N V1/V2 were discovered to contain a buffer read out-of-bounds via the component /userRpm/VirtualServerRpm. This vulnerability allows attackers to caus...Show more TP-Link TL-WR940N V2/V4/V6, TL-WR841N V8, TL-WR941ND V5, and TL-WR740N V1/V2 were discovered to contain a buffer read out-of-bounds via the component /userRpm/VirtualServerRpm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted GET request.Show less
CVE-2023-2989 1Globalscape 1Eft Server Jun 17, 2026 Jun 22, 2023 N/A· v4 9.1 CRITICAL· v3 N/A· v2 Fortra Globalscape EFT versions before 8.1.0.16 suffer from an out of bounds memory read in their administration server, which can allow an attacker to crash the service or bypass authentication if successfully exploited...Show more Fortra Globalscape EFT versions before 8.1.0.16 suffer from an out of bounds memory read in their administration server, which can allow an attacker to crash the service or bypass authentication if successfully exploited Show less
CVE-2023-20896 1Vmware 1Vcenter Server Jun 17, 2026 Jun 22, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 The VMware vCenter Server contains an out-of-bounds read vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger an out-of-bounds read by sending a...Show more The VMware vCenter Server contains an out-of-bounds read vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger an out-of-bounds read by sending a specially crafted packet leading to denial-of-service of certain services (vmcad, vmdird, and vmafdd).Show less
CVE-2023-3110 1Silabs 1Unify Software Development Kit Jun 17, 2026 Jun 21, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Description: A vulnerability in SiLabs Unify Gateway 1.3.1 and earlier allows an unauthenticated attacker within Z-Wave range to overflow a stack buffer, leading to arbitrary code execution.

Previous 1...190191192...459 Next