Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

CVEs (9,169)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-26409 1Adobe 1Substance 3d Designer Jun 17, 2026 Apr 13, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An atta...Show more Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2023-26398 1Adobe 1Substance 3d Designer Jun 17, 2026 Apr 13, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An atta...Show more Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2022-40503 1Qualcomm 1858905 Firmware 8909 Firmware8953 Firmware+182 more Jun 17, 2026 Apr 13, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Information disclosure due to buffer over-read in Bluetooth Host while A2DP streaming.
CVE-2022-33297 1Qualcomm 10Qca6310 Firmware Qca6320 FirmwareSd835 Firmware+7 more Jun 17, 2026 Apr 13, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Information disclosure due to buffer overread in Linux sensors
CVE-2022-33295 1Qualcomm 12Mdm8207 Firmware Mdm9205 FirmwareMdm9206 Firmware+9 more Jun 17, 2026 Apr 13, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Information disclosure in Modem due to buffer over-read while parsing the wms message received given the buffer and its length.
CVE-2022-33291 1Qualcomm 399205 Lte Modem Firmware 9206 Lte Modem Firmware9207 Lte Modem Firmware+36 more Jun 17, 2026 Apr 13, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Information disclosure in Modem due to buffer over-read while receiving a IP header with malformed length.
CVE-2022-33287 1Qualcomm 399205 Lte Modem Firmware 9206 Lte Modem Firmware9207 Lte Modem Firmware+36 more Jun 17, 2026 Apr 13, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Information disclosure in Modem due to buffer over-read while getting length of Unfragmented headers in an IPv6 packet.
CVE-2022-33258 1Qualcomm 12Mdm8207 Firmware Mdm9205 FirmwareMdm9206 Firmware+9 more Jun 17, 2026 Apr 13, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Information disclosure due to buffer over-read in modem while reading configuration parameters.
CVE-2022-33228 1Qualcomm 12Mdm8207 Firmware Mdm9205 FirmwareMdm9206 Firmware+9 more Jun 17, 2026 Apr 13, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Information disclosure sue to buffer over-read in modem while processing ipv6 packet with hop-by-hop or destination option in header.
CVE-2022-33222 1Qualcomm 13Mdm8207 Firmware Mdm9205 FirmwareMdm9206 Firmware+10 more Jun 17, 2026 Apr 13, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Information disclosure due to buffer over-read while parsing DNS response packets in Modem.
CVE-2022-25747 1Qualcomm 12Mdm8207 Firmware Mdm9205 FirmwareMdm9206 Firmware+9 more Jun 17, 2026 Apr 13, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Information disclosure in modem due to improper input validation during parsing of upcoming CoAP message
CVE-2022-25731 1Qualcomm 13Mdm8207 Firmware Mdm9205 FirmwareMdm9206 Firmware+10 more Jun 17, 2026 Apr 13, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Information disclosure in modem due to buffer over-read while processing packets from DNS server
CVE-2022-25730 1Qualcomm 27Mdm8207 Firmware Mdm9205 FirmwareMdm9206 Firmware+24 more Jun 17, 2026 Apr 13, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Information disclosure in modem due to improper check of IP type while processing DNS server query
CVE-2022-25726 1Qualcomm 26Mdm8207 Firmware Mdm9205 FirmwareMdm9206 Firmware+23 more Jun 17, 2026 Apr 13, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Information disclosure in modem data due to array out of bound access while handling the incoming DNS response packet
CVE-2023-26403 1Adobe 1Substance 3d Stager Jun 17, 2026 Apr 12, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigati...Show more Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2023-26402 1Adobe 1Substance 3d Stager Jun 17, 2026 Apr 12, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacke...Show more Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2023-26393 1Adobe 1Substance 3d Stager Jun 17, 2026 Apr 12, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacke...Show more Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2023-26391 1Adobe 1Substance 3d Stager Jun 17, 2026 Apr 12, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacke...Show more Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2023-26389 1Adobe 1Substance 3d Stager Jun 17, 2026 Apr 12, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacke...Show more Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2023-26385 1Adobe 1Substance 3d Stager Jun 17, 2026 Apr 12, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigati...Show more Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less

Previous 1...198199200...459 Next