Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

CVEs (9,168)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-24475 1Intel 10Server System D50tnp1mhcpac Firmware Server System D50tnp1mhcrac FirmwareServer System D50tnp1mhcrlc Firmware+7 more Jun 17, 2026 May 10, 2023 N/A· v4 4.4 MEDIUM· v3 N/A· v2 Out of bounds read in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable information disclosure via local access.
CVE-2023-23909 1Intel 2Oneapi Hpc Toolkit Trace Analyzer And Collector Jun 17, 2026 May 10, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Out-of-bounds read for some Intel(R) Trace Analyzer and Collector software before version 2021.8.0 published Dec 2022 may allow an authenticated user to potentially enable information disclosure via local access.
CVE-2022-21239 1Intel 1Quickassist Technology Jun 17, 2026 May 10, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Out-of-bounds read in software for the Intel QAT Driver for Windows before version 1.9.0-0008 may allow an authenticated user to potentially enable information disclosure via local access.
CVE-2021-46794 1Amd 56Athlon Gold 3150g Firmware Athlon Gold 3150ge FirmwareAthlon Silver 3050ge Firmware+53 more Jun 17, 2026 May 9, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Insufficient bounds checking in ASP (AMD Secure Processor) may allow for an out of bounds read in SMI (System Management Interface) mailbox checksum calculation triggering a data abort, resulting in a potential denial of...Show more Insufficient bounds checking in ASP (AMD Secure Processor) may allow for an out of bounds read in SMI (System Management Interface) mailbox checksum calculation triggering a data abort, resulting in a potential denial of service. Show less
CVE-2021-46765 1Amd 44Ryzen 3100 Firmware Ryzen 3300x FirmwareRyzen 3500 Firmware+41 more Jun 17, 2026 May 9, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Insufficient input validation in ASP may allow an attacker with a compromised SMM to induce out-of-bounds memory reads within the ASP, potentially leading to a denial of service.
CVE-2021-46749 1Amd 56Athlon Gold 3150g Firmware Athlon Gold 3150ge FirmwareAthlon Silver 3050ge Firmware+53 more Jun 17, 2026 May 9, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Insufficient bounds checking in ASP (AMD Secure Processor) may allow for an out of bounds read in SMI (System Management Interface) mailbox checksum calculation triggering a data abort, resulting in a potential denial of...Show more Insufficient bounds checking in ASP (AMD Secure Processor) may allow for an out of bounds read in SMI (System Management Interface) mailbox checksum calculation triggering a data abort, resulting in a potential denial of service. Show less
CVE-2021-26365 1Amd 54Amd 3015ce Firmware Amd 3015e FirmwareRyzen 3 2200g Firmware+51 more Jun 17, 2026 May 9, 2023 N/A· v4 8.2 HIGH· v3 N/A· v2 Certain size values in firmware binary headers could trigger out of bounds reads during signature validation, leading to denial of service or potentially limited leakage of information about out-of-bounds memory contents...Show more Certain size values in firmware binary headers could trigger out of bounds reads during signature validation, leading to denial of service or potentially limited leakage of information about out-of-bounds memory contents. Show less
CVE-2023-24902 1Microsoft 2Windows 11 21h2 Windows 11 22h2 Jun 17, 2026 May 9, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Win32k Elevation of Privilege Vulnerability
CVE-2023-24900 1Microsoft 13Windows 10 1507 Windows 10 1607Windows 10 1809+10 more Jun 17, 2026 May 9, 2023 N/A· v4 5.9 MEDIUM· v3 N/A· v2 Windows NTLM Security Support Provider Information Disclosure Vulnerability
CVE-2023-30084 1Libming 1Libming Jun 17, 2026 May 9, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 An issue found in libming swftophp v.0.4.8 allows a local attacker to cause a denial of service via the stackVal function in util/decompile.c.
CVE-2023-29461 1Rockwellautomation 1Arena Jun 17, 2026 May 9, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 An arbitrary code execution vulnerability contained in Rockwell Automation's Arena Simulation software was reported that could potentially allow a malicious user to commit unauthorized arbitrary code to the software by u...Show more An arbitrary code execution vulnerability contained in Rockwell Automation's Arena Simulation software was reported that could potentially allow a malicious user to commit unauthorized arbitrary code to the software by using a memory buffer overflow in the heap. potentially resulting in a complete loss of confidentiality, integrity, and availability. Show less
CVE-2023-29460 1Rockwellautomation 1Arena Jun 17, 2026 May 9, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 An arbitrary code execution vulnerability contained in Rockwell Automation's Arena Simulation software was reported that could potentially allow a malicious user to commit unauthorized arbitrary code to the software by u...Show more An arbitrary code execution vulnerability contained in Rockwell Automation's Arena Simulation software was reported that could potentially allow a malicious user to commit unauthorized arbitrary code to the software by using a memory buffer overflow potentially resulting in a complete loss of confidentiality, integrity, and availability. Show less
CVE-2023-30985 1Siemens 1Solid Edge Se2023 Jun 17, 2026 May 9, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 3), Solid Edge SE2023 (All versions < V223.0 Update 2). Affected applications contain an out of bounds read past the end of an alloca...Show more A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 3), Solid Edge SE2023 (All versions < V223.0 Update 2). Affected applications contain an out of bounds read past the end of an allocated buffer while parsing a specially crafted OBJ file. This vulnerability could allow an attacker to disclose sensitive information. (ZDI-CAN-19426)Show less
CVE-2022-48236 1Google 1Android Jun 17, 2026 May 9, 2023 N/A· v4 4.4 MEDIUM· v3 N/A· v2 In MP3 encoder, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
CVE-2022-47334 1Google 1Android Jun 17, 2026 May 9, 2023 N/A· v4 4.4 MEDIUM· v3 N/A· v2 In phasecheck server, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
CVE-2022-39089 1Google 1Android Jun 17, 2026 May 9, 2023 N/A· v4 4.4 MEDIUM· v3 N/A· v2 In mlog service, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
CVE-2021-31239 1Sqlite 1Sqlite Jun 17, 2026 May 9, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 An issue found in SQLite SQLite3 v.3.35.4 that allows a remote attacker to cause a denial of service via the appendvfs.c function.
CVE-2023-27949 1Apple 3Ipados Iphone OsMacos Jun 17, 2026 May 8, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, iOS 15.7.4 and iPadOS 15.7.4. Processing a maliciously crafted file may lead to unexpe...Show more An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, iOS 15.7.4 and iPadOS 15.7.4. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.Show less
CVE-2023-27946 1Apple 3Ipados Iphone OsMacos Jun 17, 2026 May 8, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Ventura 13.3, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. Processing a maliciously crafted fi...Show more An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Ventura 13.3, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.Show less
CVE-2023-27945 1Apple 1Xcode Jun 17, 2026 May 8, 2023 N/A· v4 6.3 MEDIUM· v3 N/A· v2 This issue was addressed with improved entitlements. This issue is fixed in Xcode 14.3, macOS Big Sur 11.7.7, macOS Monterey 12.6.6. A sandboxed app may be able to collect system logs.

Previous 1...195196197...459 Next